Information on the processing of personal data
Last updated: October 29, 2026
This notice describes the processing of personal data carried out through Majeli Vassart Properties, accessible at https://majelivassart.com/.
Data controller
Majeli Vassart Properties
Piazza Guido Grimoldi 13, 22100, Como, CO, Italy
Email: info@majelivassart.com
Data processed and purposes
The site processes the data provided by the interested party and those generated by the use of the services, to the extent necessary for the purposes described below.
Navigation and technical logs
Purpose: To enable the operation and security of the website.
Data processed: Browsing data, IP address, technical logs.
Legal basis: legitimate interest of the Data Controller (Article 6, paragraph 1, letter f) GDPR).
Pursued interest: To ensure the proper functioning of the website, ensure the security of IT systems and infrastructure, prevent unauthorized access, and identify any anomalies or fraudulent activity.
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: Generally up to 30 days, except for security reasons or to detect illegal activities.
Contact requests
Purpose: Respond to requests sent by the user.
Data processed: Identification data, Contact data, Message content.
Legal basis: Implementation of pre-contractual measures requested by the data subject (Article 6, paragraph 1, letter b) GDPR).
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: For the time necessary to manage the request and any resulting relationships.
Requests for quotes
Purpose: Prepare and follow up on a quote.
Data processed: Identification data, Contact details, Information on the request.
Legal basis: Implementation of pre-contractual measures requested by the data subject (Article 6, paragraph 1, letter b) of the GDPR).
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: For the time necessary for the evaluation and any resulting relationships.
Newsletter
Purpose: Sending requested updates and communications.
Data processed: Email, Preferences, Proof of consent.
Legal basis: Consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).
Revocation: Via the link or contact indicated in the privacy policy.
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: Until consent is revoked, unless the necessary proof is retained.
Direct marketing
Purpose: Sending promotional communications.
Data processed: Contact details, Preferences, Proof of consent.
Legal basis: Consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).
Revocation: Via the link or contact indicated in the privacy policy.
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: Until consent is revoked or until the deadline established by the data controller.
Email Marketing and Open Tracking
Purpose: Send commercial and informational communications via email (newsletters, property updates, promotional communications) to users who have provided their consent.
Data processed: As part of this activity, the following data are processed: email address, name (if provided during registration), and data related to interactions with received communications (opening emails, clicking on links contained therein). The purposes are: to send informational and promotional communications regarding the services and real estate properties managed by the Data Controller; to measure the effectiveness of the communications; and to personalize content based on the recipient’s expressed interests.
Open tracking (tracking pixels): Emails sent may contain a tracking pixel: a very small image, invisible to the recipient, that allows us to detect if and when the email was opened. Through this tool, the following information is collected: whether the email was opened, the date and time, the number of times it was opened, and technical information about the device and email client used.
Legal basis: The processing of data for email marketing purposes, including the tracking of email opens, is based on the free, specific, and informed consent of the data subject (Art. 6, para. 1, subpar. a, of Regulation (EU) 2016/679 “GDPR”; Art. 122 of the Personal Data Protection Code). Consent is obtained at the time of subscription to the newsletter or promotional communications, in a clear and understandable manner. If consent to tracking is not provided, communications are still sent, but without tracking pixels.
Retention: Data regarding email opens are retained for 24 months from the date of collection and are deleted in any case if consent to tracking is withdrawn.
Third Parties and Data Transfer: The sending of communications and the tracking of opens are carried out via the GetResponse platform, which has been designated as a data processor pursuant to Article 28 of the GDPR. The relevant Data Processing Agreement is an integral part of GetResponse’s Terms of Service, which the Data Controller accepts electronically upon account activation.
Rights and consent revocation: The data subject may withdraw their consent at any time, in a simple and granular manner. Each email contains, at the bottom, a link to a preferences management area where the recipient can choose between two distinct options: to stop receiving communications entirely, or to continue receiving them without tracking of opens. Withdrawal does not affect the lawfulness of processing carried out prior to such withdrawal. To exercise the other rights provided for in Articles 15–22 of the GDPR, please refer to the “Data Subject Rights” section of this privacy notice.
Statistical analysis
Purpose: Measure website usage and performance.
Data processed: Browsing data, online identifiers, usage events.
Legal basis: consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).
Revocation: Via the link or contact indicated in the privacy policy.
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: According to the tool’s configuration and provider settings.
Advertising and remarketing
Purpose: Measure campaigns and deliver personalized communications.
Data processed: Online identifiers, Events, Interactions, Preferences.
Legal basis: Consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).
Revocation: Via the link or contact information indicated in the privacy policy.
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: According to the platform configuration and until consent is revoked.
Embedded content
Purpose: Displaying videos, maps, fonts, or content from external platforms.
Data processed: IP address, Device data, Interactions.
Legal basis: Consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR).
Revocation: Via the link or contact indicated in the privacy policy.
Provision: Necessary. The requested service may not be available.
Recipients: Authorized personnel.
Retention: According to the provider’s terms and conditions and the configuration adopted.
Treatment methods and security
Processing is carried out primarily using computerized tools, in accordance with the principles of lawfulness, fairness, transparency, data minimization, and storage limitation. The Data Controller adopts technical and organizational measures appropriate to the risk; however, no system can guarantee absolute security.
Recipients and suppliers
The data may be processed by authorized personnel and disclosed to suppliers who provide technical, organizational, or professional services. These entities act, depending on the specific case, as data processors, independent controllers, or recipients. The data is not disclosed unless publication is required by the user or required by law.
| Supplier | Service | Role | Place | Transfer |
|---|---|---|---|---|
| Google Analytics 4 | Statistical analysis | Data controller | United States / Global Network | EU-US Data Privacy Framework, membership verified |
| Google Ads | Conversions and remarketing | Self-employed owner | United States / Global Network | EU-US Data Privacy Framework, membership verified |
| Meta Platforms | Meta Pixel and campaigns | Co-owner | United States / Global Network | EU-US Data Privacy Framework, membership verified |
Cookies and other tracking tools
The site may use cookies and similar tools. Non-essential tools are activated based on the choices expressed through the consent management system. Preferences can be changed by reopening the cookie banner preferences panel.
Declared services: Google Analytics.
International transfers
Some providers may process data outside the European Economic Area. In such cases, the transfer occurs based on the mechanism indicated for the relevant provider and any applicable guarantees.
Rights of the interested party
Where applicable, the data subject may request access, rectification, erasure, restriction of processing, and data portability, as well as object to processing. When processing is based on consent, this may be revoked at any time without affecting the lawfulness of processing carried out before its revocation. The exercise of certain rights may be limited by the conditions and exceptions established by law.
Requests can be sent to info@majelivassart.com.
The interested party may also lodge a complaint with the Data Protection Authority , according to the methods indicated by the Authority.
Information updates
This policy may be updated as our treatments, services, or applicable legislation change. The updated version is published on this page, indicating the update date.