Controller
- Controller
- Markus Fischnaller, private owner of the offered property.
- Contact
- fisch192markus@gmail.com
Data processed
- Contact form and email: name, email address, phone number, planned use, buying stage, message and enquiry time.
- WhatsApp contact: phone number, profile information, message text, communication metadata and voluntarily shared content if you use this channel.
- Visit counter: visited page, page language, country from Cloudflare headers and time. IP addresses are not stored in the visit statistics.
- Technical delivery: technically necessary logs may be processed by the hosting/CDN provider to deliver and secure the site.
Purposes and legal bases
- Answering enquiries
- Handling property enquiries, arranging viewings and pre-contract communication; legal basis: Article 6(1)(b) GDPR.
- Providing contact channels
- Providing email, form and WhatsApp as communication channels; legal basis: Article 6(1)(f) GDPR and, for concrete purchase enquiries, Article 6(1)(b) GDPR.
- Operating and securing the site
- Hosting, delivery, abuse prevention and technical stability; legal basis: Article 6(1)(f) GDPR.
- Visit statistics
- Simple statistics by country, language and page to understand reach; legal basis: Article 6(1)(f) GDPR. Do-Not-Track is respected.
- Legal obligations and claims
- Retention, evidence and defence of claims where required; legal bases: Article 6(1)(c) and (f) GDPR.
Recipients and services
- Cloudflare: hosting, CDN, Pages Functions, KV storage and country detection via request headers.
- Telegram: sending internal daily reports with aggregated visits, countries, languages and top pages.
- Email provider: sending and receiving enquiries by email or mailto fallback.
- WhatsApp/Meta: processing communication if you actively use WhatsApp.
- Form or hosting provider: if an external form endpoint is configured, that service technically processes the form submission.
Third-country transfers
Cloudflare, Telegram, WhatsApp/Meta and email providers may also process data outside the EU/EEA. According to their respective terms, providers rely on adequacy decisions, standard contractual clauses or other appropriate safeguards.
Retention
- Visit data in Cloudflare KV is stored as daily statistics and automatically deleted after 120 days.
- Contact enquiries are stored to handle the enquiry and follow-up communication and deleted when no longer needed, no later than 12 months after the last contact unless legal retention or evidence obligations apply.
- Telegram daily reports contain aggregated visit data and are kept in the private report chat only as long as needed for reach analysis.
- Technical logs at hosting or communication providers follow the providers' respective deletion periods.
Your rights
- Request access to stored personal data.
- Request rectification of inaccurate data.
- Request erasure or restriction of processing.
- Request data portability where the legal requirements are met.
- Object to processing based on legitimate interests.
- Lodge a complaint with a data protection authority, in particular the Italian Garante per la protezione dei dati personali.
Required data and automated decisions
Providing contact data is voluntary. Without the necessary contact details, an enquiry cannot be answered. Automated decision-making or profiling under Article 22 GDPR does not take place.