refit.space
ITEN
Evaluate

Privacy Policy

How we handle personal data collected through this site.

Last updated: 19 May 2026

This policy describes how Refit.space srl collects and processes the personal data of visitors to this site or users of our property valuation services. It complies with EU Regulation 2016/679 (GDPR) and the Italian Legislative Decree 196/2003 (Codice Privacy).

Data controller

The data controller is Refit.space srl, Via Copernico 38, 20125 Milano MI, Italy. VAT no. IT 04081290134. Email: info@refit.space. Phone: +39 02 5656 9824.

As a small company that does not carry out systematic large-scale monitoring nor process special categories of data (art. 9 GDPR), we have not appointed a Data Protection Officer (DPO). For any privacy-related request, please write to us directly at the email address above.

Data we collect

We only collect the data strictly necessary to provide the service you request.

  • Data you give us: property address, characteristics (floor area, room count, condition, energy class, etc.), email — when you fill in the valuation form.
  • Browsing data: IP address, browser and device type, pages visited, date and time — recorded in server logs for security and diagnostics.
  • Cookies and localStorage: see the Cookie Policy for details.
  • Preferences: your "I'm selling" / "I'm buying" selection, if you consented to functional cookies.

Purposes and legal basis

We process your data for the following purposes:

  • Provide the requested property valuation service, compute the estimate and send it to you by email. Legal basis: performance of a contract (art. 6(1)(b) GDPR — pre-contractual measures at the request of the data subject).
  • Communicate updates about the valuation or next steps. Legal basis: performance of a contract.
  • Send newsletters or commercial updates, only if you gave explicit consent by checking the relevant box. Legal basis: consent (art. 6(1)(a) GDPR), revocable at any time.
  • Site security, fraud and abuse prevention, technical maintenance. Legal basis: legitimate interest (art. 6(1)(f) GDPR).
  • Tax and accounting obligations (if a commercial relationship arises). Legal basis: legal obligation (art. 6(1)(c) GDPR).

Data retention

We keep your data only as long as needed for the purposes for which it was collected:

  • Email and valuation data: 24 months from the last interaction, unless you ask for earlier deletion.
  • Server logs: 12 months for security and diagnostics.
  • Cookie consent record: 6 months (then we ask you to renew).
  • Accounting documents (in case of commercial relationship): 10 years, as required by Italian tax law.

Recipients of the data

Your data is not sold or shared for third-party marketing purposes. We may share it with technical service providers acting as data processors under art. 28 GDPR:

  • Hosting and database providers, to host the site and store the data (servers in Italy / European Union).
  • Transactional email provider, to send you the estimate and service communications.
  • Cloud storage provider, if you upload property photos (currently optional, servers in the European Union).
  • In case of accounting or legal obligations, designated professionals (accountant, lawyer) and competent authorities.

International transfers

Our providers are mainly based in the European Union. When certain services (e.g. email provider) may involve a transfer outside the EU, we only use providers that adopt the Standard Contractual Clauses approved by the European Commission (decision 2021/914) or equivalent safeguards under art. 46 GDPR.

Your rights

At any time you can exercise the following rights provided by the GDPR:

  • Access (art. 15): obtain a copy of the data we hold about you.
  • Rectification (art. 16): correct inaccurate or incomplete data.
  • Erasure (art. 17): request deletion of data concerning you ("right to be forgotten").
  • Restriction (art. 18): ask us to suspend processing temporarily.
  • Portability (art. 20): receive your data in a structured, transferable format.
  • Objection (art. 21): object to processing based on legitimate interest.
  • Withdraw consent (art. 7(3)): revoke consent at any time without affecting the lawfulness of processing done before withdrawal.

How to exercise your rights

Write to info@refit.space clearly stating which right you wish to exercise and, if necessary, attaching an ID document so we can verify your identity. We'll respond within 30 days of receiving the request, as required by art. 12(3) GDPR.

Complaint to the supervisory authority

You always have the right to lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). You can also turn to the supervisory authority of the country in which you habitually reside.

Data security

We adopt technical and organisational measures appropriate to protect the data: encryption in transit (HTTPS/TLS), database access controls, activity logging, regular backups. No system is 100% invulnerable, but we are committed to maintaining a level of security appropriate to the risk.

Minors

This site is not intended for users under 16 years of age and we do not knowingly collect personal data from minors. If you believe data of a minor has been processed, please contact us and we will remove it immediately.

Changes to this policy

We may update this Privacy Policy to reflect regulatory changes, new services, or improvements in how we process data. The update date is shown at the top of the page. If the changes are substantial, we will notify you by email (if available) or via a notice on the site.

Contact

For any question about how we handle your personal data, write to info@refit.space.

Refit.space srl Via Copernico 38, 20125 Milano MI, Italy VAT no. IT 04081290134 Phone: +39 02 5656 9824