Privacy Policy

CASA IN ORDINE may process the following Personal Data:

• Personal Data: name, address, other contact details (e.g. email address and telephone number), gender, date and place of birth.
• Marketing Data: information regarding the consent granted or denied by the data subject to receive marketing communications from the controller.

Personal data is processed for:

• The provision of Decluttering and Home Organizing services.
• Sending the services catalogue: when you request the catalogue, we use your email address to send it to you. This does not require your consent, because it is what you asked for; any consent to receive other communications is separate, optional, and can be withdrawn at any time.

Direct marketing purposes, subject to the specific consent of the Data Subject:

• to send, via email, post and/or SMS and/or telephone, push notifications, commercial communications and/or advertising material concerning products or services offered by the Controller, including remotely, through registration and access to the customer area on the website https://casainordine.com/it
• to send, via email, post and/or SMS and/or telephone, commercial and/or promotional communications from CASA IN ORDINE.

Personal data may be made accessible, for the purposes set out in this notice, to:

• employees and collaborators of CASA IN ORDINE, in their capacity as internal processors and/or persons in charge of processing. The up-to-date list of Processors and persons in charge of processing is kept at the registered office of CASA IN ORDINE, indicated above.
• parties to whom the communication of data is required by law, such as, by way of example: the local health authority (ASL), the Italian Revenue Agency, the Judiciary, and Law Enforcement bodies.

In addition, we rely on the following providers to run the site. Each is appointed as a data processor under art. 28 GDPR and handles data only for the stated purpose and on our instructions:

• Vercel Inc. — website hosting and page delivery (United States, with infrastructure also in the European Union)
• Railway Corp. — the database holding reviews and catalogue requests (servers in the European Union, Amsterdam)
• Brevo (Sendinblue SAS) — sending transactional email: form replies, the catalogue, internal notifications (France)
• Cloudflare, Inc. — protecting the forms from automated submissions via Turnstile (United States)
• Anthropic PBC — the site's virtual assistant and automated screening of incoming messages (United States)
• Google Ireland Ltd. — browsing statistics via Google Analytics, enabled only after cookie consent (Ireland)
• Umami Software, Inc. — aggregate, cookie-free browsing statistics (United States)

Some of these providers are established outside the European Economic Area. Where that is the case, the transfer relies on the safeguards set out in art. 44 and following of the GDPR, such as the standard contractual clauses adopted by the European Commission or an adequacy decision.

The data subject has the rights set out in Art. 7 of the Italian Privacy Code and Art. 15 of the GDPR, namely the right to:

• obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and the communication of such data in intelligible form;
• obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the assistance of electronic tools; d) the identifying details of the data controller, processors and designated representative pursuant to Art. 5, paragraph 2 of the Italian Privacy Code and Art. 3, paragraph 1 of the GDPR; e) the parties or categories of parties to whom personal data may be communicated, or who may become aware of it as a designated representative in the State, processors or persons in charge;
• obtain: a) the updating, rectification or, where there is an interest, integration of the data; b) the erasure, anonymization or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which they were collected or subsequently processed; confirmation that the operations referred to in points a) and b) have been notified, also with regard to their content, to those to whom the data have been communicated or disclosed, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right;
• object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of collection; b) to the processing of personal data concerning them for the purpose of sending advertising material or commercial communications, by means of email and/or by means of traditional marketing methods such as telephone and/or postal mail.

Where applicable, the data subject also has the rights set out in Arts. 16-21 of the GDPR (right of rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Italian Data Protection Authority (Public Relations Office, Piazza di Monte Citorio n. 121 – 00186 Rome. Telephone: (+39) 06.69677.2917 – Email: urp@gpdp.it).

We publish some clients' words on the site. This deserves spelling out, because it involves data that becomes public:

• Legal basis: your consent, given when you submit the review through a box that is not ticked by default. We keep the exact wording of the notice shown to you, along with the date and time of consent.
• What we publish: the name you chose to be credited under, the city, the rating and the text of the review. We never publish your email address, which we use only to recognise you and to reply.
• Verification: before publishing we check that the name matches an actually invoiced job. Published reviews are selected by us and are not the complete list of what people write to us.
• Withdrawal: you may ask for your review to be removed at any time by writing to info@casainordine.com. We take it off the site and delete the text and your email address; we keep only the record that a review existed and was withdrawn at your request.