How we handle your data.
In short: we only collect what we need to get back to you, we never sell it, and you can ask for a copy or have it deleted whenever you like.
1. Data controller
The controller of the personal data collected through this website is Herocasa — VAT no. IT02668020205. For any request: info@herocasa.it.
2. Data we collect
Through the forms on this website we only collect what we need to contact you and assess your property:
- first and last name
- phone number
- email address (optional)
- information about the property (town, type, bedrooms, amenities, free notes)
- any later messages you send us by email, phone or WhatsApp
3. Purposes and legal basis
- contacting you and answering your valuation or call request (pre-contractual steps, Art. 6(1)(b) GDPR)
- sending you, if you gave us your email, an automatic confirmation of your request (Art. 6(1)(b) GDPR)
- managing the contract, should you decide to entrust us with your property (Art. 6(1)(b) GDPR)
- complying with tax and reporting obligations (Art. 6(1)(c) GDPR)
- only if you accepted marketing cookies: informing Meta Platforms Ireland Ltd. that a request was made, with your email and phone in encrypted (hashed) form, to measure the effectiveness of our ads (consent, Art. 6(1)(a) GDPR). Without that consent, no form data is sent to Meta.
We do not use your data to send you promotional messages without your explicit consent.
4. Retention
We keep your data for as long as needed for the purposes above and in any case no longer than 24 months after our last contact, unless the law requires longer (invoicing, tax obligations).
5. Providers and transfers
Your data is never sold or passed on. It is processed only by the technical providers we need, acting as data processors:
- Cloudflare, Inc. — website hosting and form handling
- Resend, Inc. — sending notification and confirmation emails
- Aruba S.p.A. — email mailbox
- Meta Platforms Ireland Ltd. — only with your consent to marketing cookies (see section 3)
Some of these providers are based in the United States: transfers rely on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.
6. Your rights
At any time you can exercise your rights under Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to info@herocasa.it: we reply within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
7. Cookies
For information on the cookies used by this website, see our Cookie Policy.