Information on the processing of personal data

Last updated: 28 May 2026

This Privacy Policy describes how Easyliving Toscana Srl processes the personal data of users who visit the EasyLiving Toskana website, complete forms available on the website, request information about properties for sale or rent, submit properties for sale or rental, request appointments, valuations, quotes or choose to receive commercial and promotional communications.

This Privacy Policy is provided pursuant to Articles 13 and 14 of Regulation EU 2016/679, the “GDPR”.

1. Data Controller

The Data Controller is:

Easyliving Toscana Srl
Via Tripoli 30
58100 Grosseto, Italy
VAT No.: IT01782080533
Email: info@easylivingtuscany.com

For any request concerning the processing of personal data, users may contact the Data Controller at the email address indicated above.

2. Categories of personal data processed

The Data Controller may process different categories of personal data, depending on the type of interaction between the user, the website and the services offered.

2.1 Browsing data

During website navigation, technical data necessary for the operation of the website may be collected, including IP address, browser type, operating system, device information, pages visited, date and time of access and other technical information.

These data are processed to ensure the proper functioning of the website, system security, prevention of misuse and the processing of technical statistics.

2.2 Data entered in contact forms

When the user completes a form on the website, the following data may be collected:

• name and surname;
• email address;
• telephone number;
• country or place of origin;
• message sent;
• property preferences;
• indicative budget;
• areas of interest;
• type of property requested;
• period of interest for rentals or stays;
• number of people or guests;
• any other information voluntarily entered by the user.

2.3 Data relating to properties for sale or rent

When the user submits a property, requests a valuation or sends information relating to a property, the Data Controller may process data such as:

• address or location of the property;
• type of property;
• surface area;
• number of bedrooms, bathrooms, rooms and appurtenances;
• presence of garden, land, swimming pool or other features;
• condition of the property;
• asking price or indicative value;
• availability for sale or rental;
• photographs, floor plans or descriptive documentation possibly submitted;
• data of the owner, contact person or appointed representative;
• other information useful for the valuation, promotion or management of the property.

Users are invited not to enter unnecessary data, special categories of data or information relating to third parties in the forms, unless they are authorised to communicate such data.

2.4 Data collected for marketing purposes

If the user provides specific consent, the Data Controller may process data such as name, email, telephone number, property preferences, expressed interests and interactions with communications received, in order to send promotional communications, newsletters, property updates, offers and commercial proposals.

2.5 Data collected through cookies and tracking tools

The website uses a plugin to manage cookies and user consent. Through this system, technical, functional, statistical, analytics and marketing cookies may be managed.

The use of non-technical cookies takes place according to the preferences expressed by the user through the cookie banner or consent management panel.

For further information, please refer to the website Cookie Policy.

3. Purposes and legal bases of processing

Personal data are processed for the following purposes.

3.1 Technical operation and security of the website

Browsing data are processed to enable the website to function, ensure its security, prevent unauthorised access, misuse, fraud or malfunctions.

Legal basis: legitimate interest of the Data Controller in the security and proper functioning of the website.

3.2 Responding to requests submitted through forms

Data entered in forms are processed to respond to requests for information, appointments, visits, availability, valuations, quotes or communications relating to properties and services offered.

Legal basis: performance of pre-contractual measures requested by the data subject.

3.3 Management of requests relating to properties for sale or rent

Data relating to properties are processed to evaluate the property, organise contacts, manage negotiations, offer property sale, rental, promotion or real estate brokerage services.

Legal basis: performance of pre-contractual or contractual measures.

3.4 Operational management through CRM and organisational tools

Data collected through the website, email, telephone, WhatsApp or other channels may be recorded and organised through management tools and CRM systems, including Monday.com, in order to manage requests, properties, contacts, negotiations, appointments, follow-ups and commercial activities.

Legal basis: performance of pre-contractual or contractual measures; legitimate interest of the Data Controller in the organised management of business activities.

3.5 Communications by email and Microsoft 365

The Data Controller uses Microsoft 365 / Office 365 for email management, business communications and operational storage of messages.

Legal basis: performance of pre-contractual or contractual measures; legitimate interest in managing business communications; legal obligation where applicable.

3.6 Communications via WhatsApp

The Data Controller may use WhatsApp oder WhatsApp Business for operational communications relating to requests submitted by the user, appointments, visits, property information, documentation, updates or ongoing relationships.

The use of WhatsApp for promotional communications will take place only with the user’s specific consent, where required.

Legal basis: performance of pre-contractual or contractual measures for operational communications; consent for marketing communications.

3.7 Sending marketing communications

Subject to specific consent, the Data Controller may send promotional communications, newsletters, updates on available properties, new sale or rental proposals, offers, informational content and commercial communications.

Communications may be sent by email, telephone, WhatsApp or other channels indicated by the user.

Legal basis: consent of the data subject.

Consent is optional and may be withdrawn at any time.

3.8 Online advertising, analytics, remarketing and campaign measurement

Subject to consent through the cookie banner or equivalent tools, the website may use tools such as Google Analytics, Google Ads, Meta Pixel, Facebook Marketing and other similar tools to:

• analyse website traffic;
• measure conversions;
• evaluate the effectiveness of advertising campaigns;
• display relevant ads;
• carry out remarketing activities;
• create custom or similar audiences, where permitted;
• improve the Data Controller’s promotional activities.

Legal basis: consent of the data subject, where required by applicable law.

4. Nature of data provision

The provision of data requested in the forms is necessary to allow the Data Controller to respond to the user’s requests and manage related activities.

Failure to provide mandatory data may make it impossible to submit the form or manage the request.

The provision of data for marketing purposes is optional. Failure to consent to marketing does not prevent website navigation, submission of requests or the management of any pre-contractual or contractual relationships.

5. Methods of processing

Personal data are processed using electronic, telematic and, where necessary, paper-based tools.

Processing is carried out in compliance with the principles of lawfulness, fairness, transparency, minimisation, accuracy, storage limitation, integrity and confidentiality.

The Data Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or misuse.

6. Tools and service providers used

For the management of the website, requests, communications and promotional activities, the Data Controller may use the following tools and providers:

• WordPress / Elementor, for website and form management;
• Monday.com, for CRM, organisational and commercial management of requests;
• Microsoft 365 / Office 365, for email, communications and operational storage;
• WhatsApp / WhatsApp Business, for operational communications and, only with consent, promotional communications;
• Google Analytics, for statistical analysis of website usage;
• Google Ads, for online advertising, remarketing and conversion measurement;
• Meta / Facebook Marketing, for advertising activities, pixel, campaigns, remarketing and measurement;
• cookie consent management plugin, for the collection and management of consent preferences;
• hosting, technical maintenance, security and IT support providers;
• administrative, tax, legal or professional consultants.

These parties may process personal data as data processors, independent controllers or joint controllers, depending on the service used and the applicable contractual terms.

7. Recipients of personal data

Personal data may be communicated or made accessible, within the limits necessary for the purposes indicated, to:

• personnel and collaborators authorised by Easyliving Toscana Srl;
• technical website providers;
• hosting, maintenance, security and IT support providers;
• email and cloud service providers, including Microsoft 365 / Office 365;
• CRM and project management service providers, including Monday.com;
• advertising and analytics service providers, including Google and Meta/Facebook;
• messaging services, including WhatsApp / WhatsApp Business;
• tax, administrative, legal and professional consultants;
• agents, collaborators, partners or parties involved in the management of real estate requests;
• real estate portals or promotional channels, where used;
• public authorities or authorised parties, when required by law.

Providers that process personal data on behalf of the Data Controller will be appointed as Data Processors, where required under Article 28 GDPR.

8. Transfer of data outside the European Economic Area

Some services used by the Data Controller, including Monday.com, Microsoft 365, Google, Meta/Facebook and WhatsApp, may involve the processing or transfer of personal data to countries outside the European Economic Area.

In such cases, the transfer will take place in compliance with the safeguards provided for by Articles 44 et seq. of the GDPR, including adequacy decisions, Standard Contractual Clauses approved by the European Commission, Data Processing Addenda and additional technical, contractual and organisational measures adopted by the providers.

For more information on the processing carried out by individual providers, users may consult the respective privacy policies and data processing terms.

9. Data retention period

Personal data are retained for the time necessary to achieve the purposes for which they were collected.

By way of indication:

• data submitted through contact forms: up to 24 months from the request;
• data relating to real estate negotiations: for the time necessary to manage the negotiation and subsequently for the period necessary to protect the Data Controller’s rights;
• data relating to properties submitted for sale or rental: for the duration of the relationship, negotiation, mandate or promotion of the property;
• email communications and operational documentation: for the time necessary to manage the request and, where connected to contractual, administrative or tax relationships, for the periods required by law;
• data processed for marketing purposes: until consent is withdrawn or, in the absence of interactions, for an indicative maximum period of 24 months;
• data collected through cookies and tracking tools: according to the periods indicated in the Cookie Policy and in the consent management panel.

At the end of the retention periods, the data will be deleted, anonymised or aggregated, unless further retention is necessary to comply with legal obligations or protect rights.

10. Rights of the data subject

The data subject may exercise, within the limits provided for by applicable law, the following rights:

• right of access to personal data;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent;
• right to lodge a complaint with the Italian Data Protection Authority.

Requests may be sent to:

info@easylivingtuscany.com

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11. Marketing communications and withdrawal of consent

The user may withdraw consent to marketing communications at any time:

• by clicking the unsubscribe link in the communications received, where available;
• by sending a request to info@easylivingtuscany.com;
• by using any preference management tools made available by the Data Controller.

Following withdrawal, the Data Controller will stop sending promotional communications, without prejudice to any communications necessary for the management of contractual or pre-contractual relationships or legal obligations.

12. Cookies and tracking tools

The website uses cookies and similar technologies for technical, functional, statistical, analytics and marketing purposes.

The website uses a cookie consent management plugin, through which the user can accept, reject or change their preferences.

Technical cookies are necessary for the operation of the website and do not require the user’s consent.

Analytics, marketing, profiling, remarketing and conversion measurement cookies are used only with prior consent, where required by applicable law.

For further information on cookie categories, providers involved, retention periods and how to change consent, please refer to the website Cookie Policy.

13. Third-party data entered in forms

If the user enters personal data relating to third parties in the forms, the user declares that they are entitled to communicate such data to the Data Controller and undertakes, where necessary, to inform those parties about the processing of their personal data.

The Data Controller invites users not to enter excessive, irrelevant or special category data, such as data relating to health, religious beliefs, political opinions or other special categories of personal data.

14. Automated decision-making

The Data Controller does not use personal data collected through the website for fully automated decision-making processes that produce legal effects concerning the data subject or similarly significantly affect them.

15. Changes to this Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time, including as a result of regulatory, technical, organisational or service-related changes.

Users are invited to consult this page periodically.