refit.space
ITEN
Evaluate

Privacy Policy

How we handle personal data collected through this site.

Last updated: 12 October 2026

This policy describes how Refit.space srl collects and processes the personal data of visitors to this site or users of our property valuation services. It complies with EU Regulation 2016/679 (GDPR) and the Italian Legislative Decree 196/2003 (Codice Privacy).

Data controller

The data controller is Refit.space srl, Via Copernico 38, 20125 Milano MI, Italy. VAT no. IT 04081290134. Email: [email protected]. Phone: +39 02 5656 9824.

As a small company that does not carry out systematic large-scale monitoring nor process special categories of data (art. 9 GDPR), we have not appointed a Data Protection Officer (DPO). For any privacy-related request, please write to us directly at the email address above.

Data we collect

We collect the data needed to provide the service you request and, only with your consent, data to measure the effectiveness of our advertising.

  • Data you give us: property address, characteristics (floor area, room count, condition, energy class, etc.), email — when you fill in the valuation form.
  • Data from the request you send through the seller form: property address, type and condition, floor area, your role (owner, family member or estate agent), your expected selling timeframe, your preferred contact channel, email and phone number.
  • Chat: the messages you write and a random anonymous identifier (cookie refit_anon_id); if you are signed in, the conversation is linked to your account.
  • Only if you accepted marketing cookies: the Meta pixel cookies (_fbp, _fbc), your IP address and browser data at the moment you submit the request.
  • Browsing data: IP address, browser and device type, pages visited, date and time — recorded in server logs for security and diagnostics.
  • Cookies and localStorage: see the Cookie Policy for details.
  • Preferences: your "I'm selling" / "I'm buying" selection, if you consented to functional cookies.

Purposes and legal basis

We process your data for the following purposes:

  • Provide the requested property valuation service, compute the estimate and send it to you by email. Legal basis: performance of a contract (art. 6(1)(b) GDPR — pre-contractual measures at the request of the data subject).
  • Communicate updates about the valuation or next steps. Legal basis: performance of a contract.
  • Answer your questions in the chat and keep the conversation history. Legal basis: pre-contractual measures taken at the request of the data subject (art. 6(1)(b) GDPR).
  • Pass your contact details and request data to our CRM (HubSpot) so that we can get back to you. Legal basis: pre-contractual measures taken at the request of the data subject (art. 6(1)(b) GDPR).
  • Measure the effectiveness of our advertising and send events about your request to Meta and Google, only with your consent. Legal basis: consent (art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.
  • Send newsletters or commercial updates, only if you gave explicit consent by checking the relevant box. Legal basis: consent (art. 6(1)(a) GDPR), revocable at any time.
  • Site security, fraud and abuse prevention, technical maintenance. Legal basis: legitimate interest (art. 6(1)(f) GDPR).
  • Tax and accounting obligations (if a commercial relationship arises). Legal basis: legal obligation (art. 6(1)(c) GDPR).

Data retention

We keep your data only as long as needed for the purposes for which it was collected:

  • Email and valuation data, including requests sent through the seller form: 24 months from the last interaction, unless you ask for earlier deletion.
  • Chat conversations: 24 months from the last message, then deleted automatically; earlier if you ask us to delete them.
  • IP address and browser data intended for Meta: deleted once the events about your request have been sent, and in any case within 7 days of the request.
  • Server logs: 12 months for security and diagnostics.
  • Cookie consent record: 6 months (then we ask you to renew).
  • Accounting documents (in case of commercial relationship): 10 years, as required by Italian tax law.

Recipients of the data

We do not sell your data. Technical providers process it on our behalf as data processors (art. 28 GDPR). Meta and Google, for advertising and measurement, act as independent controllers under their own terms, and only if you accepted the relevant cookies. The recipients of the data are:

  • Hosting and database providers, to host the site and store the data (servers in Italy / European Union).
  • Resend (transactional email), to send you the emails with your verification code and your estimate.
  • Cloud storage provider, if you upload property photos (currently optional, servers in the European Union).
  • HubSpot (CRM): your contact details and request data.
  • Anthropic (the model that answers in the chat): the latest messages of the conversation, without your name, email or identifiers.
  • OpenAI (knowledge base search): the text of the question asked in the chat, without identifiers.
  • Google: Google Maps for address suggestions and recognition; Google Analytics and Google Ads only with your consent.
  • Meta Platforms Ireland Ltd., only if you accepted marketing cookies: events about your request, the pixel cookies, your IP address, browser data, and your email and phone number as a hash (not in plain text).
  • In case of accounting or legal obligations, designated professionals (accountant, lawyer) and competent authorities.

International transfers

Some of our providers (HubSpot, Anthropic, OpenAI, Meta, Google, Resend) are based in the United States. Transfers to third countries take place on the basis of the EU-US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission (decision 2021/914).

Your rights

At any time you can exercise the following rights provided by the GDPR:

  • Access (art. 15): obtain a copy of the data we hold about you.
  • Rectification (art. 16): correct inaccurate or incomplete data.
  • Erasure (art. 17): request deletion of data concerning you ("right to be forgotten").
  • Restriction (art. 18): ask us to suspend processing temporarily.
  • Portability (art. 20): receive your data in a structured, transferable format.
  • Objection (art. 21): object to processing based on legitimate interest.
  • Withdraw consent (art. 7(3)): revoke consent at any time without affecting the lawfulness of processing done before withdrawal.

How to exercise your rights

Write to [email protected] clearly stating which right you wish to exercise and, if necessary, attaching an ID document so we can verify your identity. We'll respond within 30 days of receiving the request, as required by art. 12(3) GDPR.

You can ask at any time for your chat conversations to be deleted by writing to [email protected].

Complaint to the supervisory authority

You always have the right to lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). You can also turn to the supervisory authority of the country in which you habitually reside.

Data security

We adopt technical and organisational measures appropriate to protect the data: encryption in transit (HTTPS/TLS), database access controls, activity logging, regular backups. No system is 100% invulnerable, but we are committed to maintaining a level of security appropriate to the risk.

Minors

This site is not intended for users under 16 years of age and we do not knowingly collect personal data from minors. If you believe data of a minor has been processed, please contact us and we will remove it immediately.

Changes to this policy

We may update this Privacy Policy to reflect regulatory changes, new services, or improvements in how we process data. The update date is shown at the top of the page. If the changes are substantial, we will notify you by email (if available) or via a notice on the site.

Contact

For any question about how we handle your personal data, write to [email protected].

Refit.space srl Via Copernico 38, 20125 Milano MI, Italy VAT no. IT 04081290134 Phone: +39 02 5656 9824