BridgeRent Rentals portal privacy notice

Version 1.0 · art. 13 and 14 of Regulation (EU) 2016/679 · supplements the general notice of bridgerent.it · the Italian text prevails

Controller

Lakes Region Real Estate Srl, Viale Certosa 218, 20156 Milan, VAT 13783730966, email info@bridgerent.it, PEC lakesregion@pecimprese.it. No data protection officer is appointed.

Which data and why

Account: email, access codes, date and time of sign-ins, IP address. Basis: performance of the service contract (art. 6.1.b).

Application and proposal: identity details, tax code, residence, contacts, nationality and residence permit, employment and income, temporary need with supporting documents, identity documents, selfie with document, guarantor or company documents, card data only through Stripe (we do not see it), signature evidence (IP, date, time, text fingerprint). Basis: pre-contractual measures and contract (art. 6.1.b); legal obligations on anti-money-laundering, leases and tax (art. 6.1.c); legitimate interest in fraud prevention and legal defence (art. 6.1.f).

Owners and spaces: identity details, tax code or VAT, IBAN (encrypted; masked publicly and in contracts), property documents, cadastral data, linked external calendars. Basis: contract (art. 6.1.b) and legal obligations (art. 6.1.c).

Portal messages: text, attachments, date and time. Basis: contract (art. 6.1.b). Contact details inside messages stay hidden from the other party until the file is confirmed, on the controller’s legitimate interest in protecting the agency service (art. 6.1.f).

Ongoing tenancy: rent, collections, requests with photos, works, statements, check-in and check-out reports. Basis: contract (art. 6.1.b) and accounting obligations (art. 6.1.c).

“How did you find us?” source, portal usage statistics without profiling cookies. Basis: legitimate interest in improving the service (art. 6.1.f).

Recipients

The other party of the file, within what is necessary: the owner sees the applicant’s name, job, need and the outcome of the checks, never the documents; the tenant sees the owner’s data that enters the contract. Guarantors see only their file; suppliers see only the assigned job, without the tenant’s contacts.

Processors under art. 28 contracts: Cloudflare (hosting, database and encrypted storage; EU data with possible US transfers under the Data Privacy Framework); Stripe (card payments; Stripe Payments Europe Ltd, Ireland); Dropbox Sign (electronic signature; Dropbox International Unlimited Company, Ireland, with US transfers under standard contractual clauses); Resend (transactional email); the Arcanis CRM for contact records; the e-invoicing system and the accountant for tax obligations.

Authorities, where the law requires: the Revenue Agency for contract registration, the Police for notices on non-EU guests, judicial and supervisory authorities.

Retention

Unsuccessful applications: documents deleted 30 days after closure; essential file data (status, dates, amounts) 24 months for defence and statistics. Files with a contract: 10 years from closure, for civil and tax obligations. Signature evidence and payment data: 13 months for dispute handling, then with the file. Messages: with the file. Accounts inactive for 24 months: deleted with email notice.

Your rights

Access, rectification, erasure, restriction, portability, objection: write to info@bridgerent.it. You can download from your area the documents and contracts concerning you. You can withdraw optional consents at any time without affecting what was already done. Complaint to the Italian data protection authority (garanteprivacy.it).

Obligation to provide data

Data requested in the application, in the property listing and in contracts is necessary: without it the file cannot proceed. The “How did you find us?” field measures sources and is required for the service; it is not used for profiling.

Cookies

The portal uses only a technical session cookie, needed to sign in. No third-party cookies; site statistics are cookieless. On bridgerent.it any analytics tools activate only after consent, under the general notice.

Version 1.0. Changes are published with a new version and date.