Who is responsible for your data
Domovita is an independent apartment-search service for people moving to Milan and northern Italy. The service is run by one person, who is the data controller for everything described on this page.
- Operator
- Tax identification
- Registered address
- Contact
- hello@domovita.eu or Telegram · @domovita_eu_bot
What is collected, and why
Only what is needed to answer you and to run a search. Nothing is bought from third parties and nothing is sold.
- The search brief
- Name, destination city, budget, move-in date, chosen package, contact detail and the notes you write. Purpose: replying to you and preparing the shortlist. Legal basis: steps taken at your request before a contract, and performance of that contract once you order a package (Art. 6(1)(b) GDPR).
- The guide request
- Your email address only. Purpose: sending the free guide you asked for. Legal basis: your consent (Art. 6(1)(a) GDPR), withdrawable at any time by replying once.
- Messages on Telegram or email
- Whatever you choose to write, plus the username or address you write from. Purpose: answering. Legal basis: pre-contract steps or legitimate interest in responding to enquiries.
- Documents you send during a search
- Only if you decide to share them. Domovita never asks for scans of passports, permits, payslips or bank statements, and does not need them to work. Please send documents to landlords and agencies, not to Domovita.
- Accounting records
- Invoice details for paid packages, kept because Italian tax law requires it (Art. 6(1)(c) GDPR).
What is not collected
- No advertising or tracking cookies, no advertising pixels, no profiling.
- No third-party fonts or scripts loaded from other servers: fonts and code are served from this domain.
- No newsletter list you did not ask to join.
- No special-category data (health, beliefs, and similar). Please do not send any.
Cookies
This site sets no cookies of its own and uses no analytics cookies. If simple, cookieless visit statistics are added later, this page will say so before they go live, and the tool will be one that does not identify individual visitors.
Who else sees your data
Domovita has no employees. A small number of service providers process data as part of running the site and the conversation:
- Website and form hosting
- The hosting provider serves the pages and delivers the form submissions. It processes data on instruction only.
- Telegram
- If you write on Telegram, Telegram processes that conversation under its own terms. Use email instead if you prefer not to use it.
- Email provider
- Messages you send by email are stored in the mailbox of the email provider. If you ask to be answered by email, the confirmations of your request go out through an email delivery service that acts on instruction only.
- Payment provider
- For paid packages, payment is handled by a bank or payment provider. Domovita never sees or stores your full card details.
Data is not sold, rented or shared for marketing. It is disclosed to public authorities only when the law requires it. Where a provider is outside the European Economic Area, the transfer relies on the safeguards that provider publishes, such as Standard Contractual Clauses.
How long it is kept
- Enquiries that do not become an order: up to 12 months, then deleted.
- Completed searches: up to 24 months, so the work can be reconstructed if you come back with a question.
- Guide subscribers: until you ask to be removed.
- Invoices and accounting records: 10 years, as Italian law requires.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time without affecting what happened before.
Write to hello@domovita.eu and the request will be answered within 30 days. If the answer does not satisfy you, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the authority where you live.
Security
The site is served over HTTPS. Accounts used for the service are protected with two-factor authentication, and access to messages is limited to the one person running Domovita. No system is perfect: if a breach ever affects your rights, you will be told without undue delay.
Children
The service is intended for adults. It is not directed at children and no data is knowingly collected from them.
Changes
If this policy changes, the date at the top changes with it. Material changes will be mentioned in the reply to any open conversation.