Privacy Policy

Last updated: 15 June 2026

1. Data Controller

Hallberg Real Estate S.r.l., with its registered office in Milan, Italy (hereinafter “Hallberg” or the “Controller”), is the data controller for the personal data collected through the website www.hallbergrealestate.it (the “Website”).

To exercise the rights described in this policy or for any inquiry regarding your personal data, please contact us at: [email protected]

2. Personal Data Collected

We collect the following categories of personal data, voluntarily provided by users through the forms available on the Website:

  • Contact form: full name, email address, phone number, message.
  • Property valuation form: full name, email address, phone number, property address, floor area (m²), additional information.
  • Newsletter subscription: email address.
  • Browsing data: IP address, browser type, pages visited, date and time of access, collected automatically via technical cookies.

3. Purposes and Legal Basis for Processing

We process personal data for the following purposes:

  • Responding to contact requests— legal basis: performance of pre-contractual measures at the data subject’s request (Art. 6(1)(b) of EU Regulation 2016/679 “GDPR”).
  • Property valuation — legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR).
  • Newsletter delivery — legal basis: consent of the data subject (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Technical operation of the Website — legal basis: legitimate interests of the Controller (Art. 6(1)(f) GDPR).

4. Disclosure to Third Parties

Personal data are not sold or transferred to third parties for marketing purposes. Data may be shared exclusively with:

  • Technical and IT service providers (hosting, transactional email) acting as data processors under a written agreement.
  • Professional collaborators (notaries, lawyers, tax advisors, architects) in connection with the delivery of our real estate services.
  • Competent authorities, where required by law.

5. International Data Transfers

Personal data are processed within the European Union. Should a transfer to a third country become necessary, it will take place solely in the presence of appropriate safeguards under the GDPR (adequacy decision, standard contractual clauses or equivalent measures).

6. Retention Periods

We retain personal data only for as long as necessary for the purposes for which they were collected:

  • Contact requests: 24 months from receipt of the request, unless a contractual relationship is established.
  • Property valuation requests: 36 months from receipt of the request, unless a contractual relationship is established.
  • Newsletter: until consent is withdrawn by the data subject.
  • Browsing data: 12 months from collection.

Where data are required to fulfil legal obligations or to defend our rights in court, they will be retained for the period prescribed by applicable law.

7. Your Rights

Under Articles 15–22 of the GDPR, you have the right to:

  • Access (Art. 15): obtain confirmation that your data are being processed and access to relevant information.
  • Rectification (Art. 16): request correction of inaccurate or incomplete data.
  • Erasure(Art. 17): obtain deletion of your data (“right to be forgotten”) where applicable.
  • Restriction of processing (Art. 18): request suspension of processing in certain circumstances.
  • Objection (Art. 21): object to processing based on the legitimate interests of the Controller.
  • Data portability (Art. 20): receive your data in a structured, commonly used format.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, send a request to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

8. Cookies

The Website uses only technical cookies strictly necessary for its correct operation (e.g. session management). We do not use profiling cookies, advertising cookies, or behavioural tracking tools that would require prior consent.

Users may disable cookies in their browser settings, bearing in mind that doing so may affect certain Website features.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, accidental disclosure or destruction, in accordance with Art. 32 GDPR.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time, for example following regulatory changes or the introduction of new services. Any amendments will be published on this page with an updated date. We encourage you to review this page periodically.