Privacy policy

1. Controller and scope

The controller is ImmoBo S.r.l., Italian VAT number 04181061203. For website and privacy correspondence, contact our office at Via San Felice 26, Bologna, Italy, info@immobo.it, or +39 334 9425699.

This notice is provided under Articles 12 and 13 of Regulation (EU) 2016/679 (GDPR). It covers www.immobo.it and its English pages. Bookings and payments on booking.immobo.it and external platforms are also subject to the notices displayed by those services. Separate notices apply to contractual relationships with owners and guests.

2. Contact details, purposes and legal bases

The form requires your name, email and property area. Phone number, approximate floor area, the option of interest and your message are optional. Required fields are marked *. The privacy checkbox records that you have read the notice; it is not consent to advertising or newsletters.

We use these details to respond, assess the enquiry and discuss appropriate next steps. The legal basis for service or contractual enquiries is taking steps at your request before entering a contract (Article 6(1)(b) GDPR). General correspondence is handled on the basis of our legitimate interest in answering communications to our business (Article 6(1)(f)), taking account of your rights. Legal obligations and the defence of legal claims may justify further processing where necessary.

The same principles apply when you email or phone us. Do not send identity documents, payment card details, passwords, health information or other special-category data through this form. It does not accept attachments. If you act for someone else, provide only the information needed and ensure you are entitled to do so.

Selecting student lets or traditional letting helps us understand your enquiry. Membership of a corporate group does not automatically result in data sharing with Casetorri or T Immobiliare. Any involvement of another company will be explained during the conversation, identifying the recipient, purpose and applicable legal basis.

3. Website operation and security

Hosting and network providers process technical information needed to deliver and protect the website, such as IP address, requests, timestamps, browser information and technical logs. The basis is the legitimate interest in operating a secure service (Article 6(1)(f)).

Before confirmation, enquiries are stored in the hosting platform’s private application database, including the form fields, a random reference, timestamp and email-forwarding status. This allows authorised staff to recover an enquiry during an email outage. No public endpoint lists these records. Database copies are retained for up to 30 days and removed during the next application cleanup. Receipt by the site and email forwarding are recorded separately.

4. Optional statistics

Google Analytics 4 loads only after you select “Accept statistics”. The purposes are understanding website usage and measuring interactions. The legal basis is consent (Article 6(1)(a) GDPR and the rules on storing or accessing information on your device, including Article 122 of the Italian Privacy Code). Refusing does not prevent browsing or contacting us.

Events include page views, starting the form, a submission confirmed by the delivery service, errors, and clicks on phone, email and apartment catalogue links. A phone click is not a completed call; a catalogue click is not a booking; acceptance by the delivery service does not guarantee final delivery to every mailbox. Statistics may be incomplete if consent is refused or measurement is blocked.

Our code does not include form entries in Analytics events and removes query parameters from reported page addresses. Google Signals and advertising personalisation are disabled. This website does not currently load Google Ads or remarketing tags, use advertising profiling or offer marketing subscriptions. Google may process pseudonymous identifiers, device information and usage data according to its documentation.

You can review or withdraw consent at any time through Cookie preferences. The Cookie policy describes tools and durations. Preference receipts record the notice version, choice, random identifier and timestamp, without form entries.

5. Recipients and providers

Data is accessible to people authorised by ImmoBo and technical providers where needed for their tasks. The principal categories are:

• Hosting and network: OpenAI’s Sites platform and Cloudflare infrastructure, including application hosting and the technical database.
• Form delivery: FormSubmit, operated by Devro LABS, receives the necessary fields after the website’s validation and forwards the message to info@immobo.it. Its public documentation states that submissions may be archived for up to 30 days. See the FormSubmit privacy notice. You can instead email or phone us directly.
• Email: providers used for the info@immobo.it mailbox and team email tools, to handle correspondence.
• Statistics, with consent only: Google Analytics, provided in the European area by Google Ireland Limited, with possible processing by Google LLC and other group entities. See Google’s privacy policy and data processing terms.
• Authorities and professional advisers: where necessary to meet legal obligations or protect legal rights.

Partner logos do not mean that form entries are sent to every displayed partner. Maps, social media and booking services are external links, opened when you select them. This website does not embed a chat, third-party video, map or payment form.

6. International processing

Some providers may process data outside the European Economic Area. Transfers must comply with Chapter V GDPR, using an adequacy decision applicable to the recipient or other safeguards under Article 46 and following. Cookie consent does not replace these safeguards. Contact info@immobo.it for information about safeguards applicable to the services used, or to request a copy where available.

7. Retention

• Enquiries without a subsequent contract: the website retention criterion is up to 12 months after the last useful communication, unless documented needs or applicable legal obligations justify otherwise. The team manages correspondence against this criterion.
• Contracts and legal records: governed by the relevant relationship notice and statutory requirements, rather than automatically deleted with the form.
• Abuse-prevention records and technical form receipts: expire within 24 hours; expired rows are removed by subsequent application cleanup cycles.
• Cookie preferences and receipts: up to six months, subject to changes or withdrawal. New choices replace previous ones.
• Aggregated daily outcome counters: up to 400 days, without form fields or visitor lists.
• Analytics cookies: configured by the website for a maximum of 180 days, potentially shortened by browser restrictions. Google system retention also depends on property settings and provider terms.

Infrastructure logs, backups and provider systems follow their applicable service settings and agreements; their periods do not necessarily match the website’s technical session storage.

8. Your rights

Subject to the conditions in Articles 15–22 GDPR, you may request access, correction, erasure, restriction, portability and object to processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. The website does not make decisions with legal effects based solely on automated processing.

Write to info@immobo.it, providing enough information to identify the request. Where there is reasonable doubt about identity, we may request proportionate additional information. We normally reply within one month, subject to any justified extensions permitted by law. You may complain to the Italian Data Protection Authority or another competent authority.

9. Updates

We update this notice when the website or processing changes. Material changes to tracking purposes or providers require a new choice where necessary. Contact info@immobo.it for privacy questions or technical concerns.