1. Data Controller

This information notice is provided by: SAN BARTOLOMEO DI CASELLE SOCIETÀ A RESPONSABILITÀ LIMITATA (SBC Real Estate) Registered Office: Via di San Bartolomeo 22, 53045 Montepulciano (SI), Italy VAT Number and Tax Code: 01460450529 EU VAT: IT01460450529 REA (Economic Administrative Index): 149560 Certified Email (PEC): info@pec.sanbartolomeodicaselle.it

The Data Controller of personal data is SAN BARTOLOMEO DI CASELLE S.r.l., hereinafter also referred to as the “Company” or “Controller.”

2. Types of Data Collected

The Company collects and processes the following categories of personal data:

• Personal and contact details (name, surname, email, telephone, address);

• Contractual and fiscal data, in the case of commercial relationships;

• Browsing data automatically acquired via the website (IP address, browser type, access data, technical cookies);

• Data provided voluntarily by the user via contact forms or newsletter subscriptions.

3. Purposes of Processing

Personal data is processed for the following purposes:

• a. Provision of requested services (information requests, commercial contacts, quotes);

• b. Fulfillment of contractual and legal obligations arising from commercial or fiscal relationships;

• c. Administrative and accounting management;

• d. Direct marketing activities (sending promotional or informative communications) only with the explicit consent of the data subject;

• e. Improvement of the user experience on the site and traffic analysis through cookies and analytical tools.

4. Legal Basis for Processing

Data processing is based on one or more of the following conditions:

• Performance of a contract or pre-contractual measures (Art. 6, para. 1, lett. b GDPR);

• Compliance with legal obligations (Art. 6, para. 1, lett. c GDPR);

• Legitimate interest of the Controller (Art. 6, para. 1, lett. f GDPR), for purposes of IT security or abuse prevention;

• Explicit consent of the data subject (Art. 6, para. 1, lett. a GDPR), for marketing or profiling activities.

5. Processing Methods

Data is processed using electronic and manual tools, in full compliance with the principles of lawfulness, fairness, transparency, and data minimization as set out in the GDPR. Technical and organizational measures have been adopted to ensure data security and confidentiality.

6. Data Retention

Personal data is stored for periods no longer than necessary to achieve the purposes for which it was collected:

• Contractual and fiscal data: 10 years;

• Data collected for marketing purposes: until consent is withdrawn;

• Technical browsing data: up to 12 months.

7. Communication and Disclosure of Data

Personal data may be shared with:

• External professionals or consultants (legal, accounting, IT technicians);

• Partner companies or providers of IT and hosting services;

• Competent authorities, in compliance with legal obligations.

Data will not be disseminated or transferred to third parties for purposes other than those indicated, except with the explicit consent of the data subject.

8. Rights of the Data Subject

Pursuant to Articles 15-22 of the GDPR, the data subject may exercise the following rights:

• Access to their personal data;

• Rectification or updating;

• Erasure (“right to be forgotten”);

• Restriction of processing;

• Objection to processing;

• Data portability.

Requests should be sent to the Data Controller via PEC: info@pec.sanbartolomeodicaselle.it The data subject also has the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).

9. Data Transfer Abroad

Personal data is not transferred outside the European Union. Any future transfers to third countries will be carried out in compliance with Art. 44 et seq. of the GDPR.

10. Cookie Policy

10.1 Types of Cookies Used

The site uses:

• Technical cookies (necessary for the correct functioning of the site);

• Anonymous analytical cookies (for aggregate statistical analysis of site usage);

• Profiling and marketing cookies (used only with prior consent to personalize content or advertisements).

10.2 Management of Cookies

Users can manage or disable cookies through their browser settings or withdraw consent at any time via the cookie management banner on the site.

10.3 Third-Party Cookies

The site may use third-party services (e.g., Google Analytics, Meta Pixel) that collect browsing data in anonymous or aggregate form, according to their respective policies:

• Google Privacy Policy

• Meta Privacy Policy

11. Updates

This information notice may be subject to changes. Any updates will be published on this page with an updated revision date. Last updated: October 07, 2025