Privacy, cookies and the value of the data

Who processes your data

The data controller is Stefano Frigerio, impresa individuale (a sole proprietorship), with registered office at via Giov. Targioni Tozzetti 14 int. 11, 57124 Livorno (LI), Italian VAT number (partita IVA) 02007290493. For anything concerning your data, including exercising the rights listed further down, write to admin@lince.casa.

There is no data protection officer (DPO): we are not a public body and we do not carry out large-scale processing of sensitive data, so the law does not require one.

What we collect, and why

The site can be used without saying who you are: the map, the auction pages, the municipality pages and the guides open without an account. What we collect, we collect for a specific reason.

Two things we do not do, and which can be seen from the code: the full IP address is never written anywhere (only the /24 network is kept, which is enough to recognise a scraper and does not identify a person), and the browser string is reduced to a class before being saved.

We do not do advertising, we do not sell data to anyone and there are no third parties following you from here to other sites. The profile of your work is read only by us, and it decides nothing in your place: it does not change prices, it takes nothing away from you, it serves to understand what to build.

On what legal basis

The legal bases, Article 6 of the GDPR:

• The contract for the account, the alerts, the followed auctions, the reports and the certificate requests: these are the things you asked us to do.
• Legitimate interest for the logs, the errors, the measurement of use in aggregate form and the defences against scraping: keeping a service running and knowing whether it works. It is the bare minimum, with the network already truncated when it is written.
• Legitimate interest also for the profile of your work and for the email in which we ask you how it went: understanding who uses the service and for what, using only professional information that is already public. You can object whenever you want, with the link at the bottom of that email or by writing to us: the profile is deleted and we do not write to you again.
• Legal obligation where it exists, for example if a tax document has to be kept.

Cookies, and what is not a cookie

There is no banner because there is nothing to consent to: the two cookies we use serve to make the site work, and for those the law does not require consent.

Your browser also keeps a session identifier for the measurement of use, which sits in localStorage, is renewed every 90 days and does not leave this site, and your theme preference. We keep the aggregate statistics with umami installed on our own server, without cookies.

The heatmaps are collected by the same umami and leave nothing in your browser: what is sent are the coordinates of the click and how far you scrolled. They concern one visit out of seven, picked at random.

In the same one visit out of seven we also record how the page moved while you were using it, for no more than five minutes: what appeared on the screen, where you moved the pointer, what you opened and closed. It serves to see where the site gets stuck, because almost nobody stops to write and tell us. What you type into fields is masked before it leaves. The recording stays on our server, with umami, and nobody else sees it.

If you would rather it did not happen, the switch below turns it off: when you say not to count you, the recording script does not start at all.

If you do not want to be counted even in aggregate form, open lince.casa/?nonmicontare=1: the preference stays on your device. With ?nonmicontare=0 you are counted again.

Who else sees something

The suppliers that process data on our behalf, as processors:

• DigitalOcean, the server where everything runs, in the Frankfurt data centre. The data is in Germany.
• Zoho, the mailbox from which we write to you and where your replies arrive. The data is in Zoho's European data centre.
• Anthropic, the assistant that does the research on your work described above and helps us write the emails: it sees your address, what it finds online and what you write to us. It is a United States company, and the transfer takes place under the standard contractual clauses.
• Resend, which delivers the service emails (address verification, password recovery, alerts). It sees the address we write to and the content of the message, and it is a United States company: the transfer takes place under the standard contractual clauses of the European Commission.
• OpenAPI, the Italian online provider through which we request the documents from the Agenzia delle Entrate. It receives what the request needs: municipality, sheet and parcel, or the tax code or VAT number of the person or company whose document you ask for. It does not receive your name or your email.

Stripe takes card payments: only Stripe sees the card details, and it processes them as an independent controller under its own privacy notice. We receive the outcome of the payment, the amount and the email.

There is also one thing that has to be said because it is true even though it is not one of our suppliers. The map loads some tiles directly from your browser, and those servers see your IP address as they would if you went there yourself: OpenStreetMap for the roads, Esri for the aerial imagery, a public archive on Amazon S3 for the terrain relief, and the map fonts from MapLibre. The cadastral cartography and the regional layers do not: those pass through our server, which acts as an intermediary. We are bringing the rest in-house as well.

We do not use Google Analytics, there are no social network pixels, and the site's fonts are served by us.

Data about other people

When you request a document about someone other than yourself, for example the record or the mortgage search of a parent who has died, the tax code you enter is that person's data. We process it as an independent controller, to perform the contract with you, and we need it for two things only: requesting the document from the source and delivering it to you.

• In the free search of the whole of Italy the code is not saved: we keep a fingerprint that cannot be reversed, the codes of the provinces found and how many properties. The name, surname and date of birth that the source returns are not written anywhere.
• In an order the code stays with the order, like the municipality and parcel of a visura, for as long as the document can be downloaded.
• In mortgage searches the land registry wants the tax code of whoever looks at the registers. It is the controller's, Stefano Frigerio: yours is not sent.

The cadastral and land registers are public, and anyone can ask for a copy. We do not cross-reference this data with anything else, we do not show it to other users and we do not use it to write to you.

How long we keep it

• The account and what is attached to it: for as long as you keep it open. You can delete it yourself from the profile settings, without asking anything of anyone.
• Sessions: 30 days, then they expire on their own.
• Verification and recovery links: hours, not days.
• Usage events: 14 months. They serve to understand whether the service works and to decide what to build, and at 14 months one can compare one July with the July before, which is the question we really ask ourselves. After that period they disappear.
• The profile of your work: 12 months from the last time you sign in to lince, then it is deleted on its own. Immediately, if you tell us no or if you delete the account.
• What you reply when we ask you how it went: for as long as you keep the account. If you delete it, the reply disappears with it.
• Errors: 90 days. Nobody opens a six-month-old stack trace any more, and some fragment coming from the browser can end up in there too.
• Server logs: they rotate on their own with disk space, in the order of a few weeks.
• Auction notices, appraisals and other auction documents, which we republish from the Portale delle Vendite Pubbliche: we publish them until 12 months after the sale. Then they leave the pages and stay only in our archive, where they feed the market statistics (prices, price cuts, time to sell).
• The contact details of an auction's custodian or delegate (name, phone, email, the same as on the Portale): 12 months after the sale, then we delete them.

If you delete the account, what remains in the events can no longer be traced to you: the link to the user is removed and only the fact that the thing happened remains.

When you delete the account, these really disappear: alerts, areas, followed auctions, sessions, certificate requests, the PDF reports you had generated (including the files on disk) and the row with your address. Of the events, the action remains without the name.

Your rights

You can ask to know which data we hold, to correct it, to delete it, to restrict its use, to receive it in a machine-readable format, and to object to the processing we carry out on the basis of legitimate interest. For deletion you do not even need to write: there is the button in your profile.

If you think we are getting it wrong you can turn to the Garante per la protezione dei dati personali (garanteprivacy.it), which is the Italian data protection supervisory authority.

The service is not intended for children under 14, and we do not ask for age because we do not collect data that would make it relevant.

The data you see on the page: what it is worth

This part is not about your data but about ours, and it is the one that matters most if you are about to make a bid.

The cadastral maps come from the Agenzia delle Entrate (Italian Revenue Agency), the zoning from the local plans of Regions and municipalities, the sale notices and the appraisals from the Portale delle Vendite Pubbliche (the public sales portal), the price ranges from the Osservatorio del Mercato Immobiliare (OMI). We republish them and put them together, and when we have inferred a piece of information ourselves (for example by reading a deed) we say so on the page.

Nothing you read here is legally authoritative. The cadastral map does not prove the boundary and does not prove ownership; the zoning layer is a reading of the plan and not a certificate; a piece of data can be as old as its source, which is sometimes years old. Before buying you need the zoning certificate (certificato di destinazione urbanistica) from the municipality, up-to-date cadastral records and, for a lot at auction, the original notice and appraisal. We help you find them, we do not replace them.

If something changes

When the way we process data changes, this page changes and the date below changes. If the change is one that really concerns you, and you have an account, we tell you by email instead of waiting for you to notice.