TRANSPARENCY, INCLUDING YOUR DATA
Privacy and cookies.
Last updated: 19 October 2026
This notice covers browsing the Italian Property Manager website and initial enquiries about property assessment, management or professional partnerships, under Article 13 of Regulation (EU) 2016/679 (GDPR).
The form sends your enquiry to AURA’s ITAPM records, shared with the Italian Property Manager app. The website and app use the same enquiries; private records are accessed in the app following authentication and authorisation checks. An enquiry does not subscribe you to a newsletter or create a DOORATO account.
1. Data controller and contact details
The data controller is Aura Immobiliare S.r.l.s., which operates this website under the name Italian Property Manager.
- Correspondence address: Corte Galliani n. 5, 70032 Bitonto (BA), Italy.
- Tax code and VAT number: 09052980720 · EU VAT IT09052980720.
- Email: contattoums@gmail.com.
- Certified email (PEC): auraimmobiliaresrls@notificapostale.it.
- Phone: +39 338 202 6870.
2. Data collected and how it is processed
Browsing
The infrastructure delivering the website may process technical data such as IP address, browser, device, request date and time, and security information. This data is separate from the contents of the form.
Completing the form
The form asks for your name, email, phone number, town or area and, for agencies, organisation name. Property type, floor area and further details are optional. By pressing “Send your enquiry to ITAPM”, you send this information to the ITAPM app, where it is stored in its database together with your acknowledgement of this notice, your language and the enquiry’s source. Campaign parameters included in a link may accompany the enquiry. Authorised AURA staff consult and update the same records for enquiries from both the website and app. The website does not include personal data in links leading to the app.
The separate “Message us on WhatsApp” link opens a conversation with a pre-filled introductory message, without transferring the ITAPM form fields. The text is shared with WhatsApp as soon as you open the link and may appear in your browsing history. Italian Property Manager receives the message only when you press Send in the conversation, together with your phone number and any profile information made available by the service.
Email and phone
The email link opens your email application. You complete and send the message; form fields are not transferred automatically. When we receive an email, we process the sender’s address, content, attachments and technical communication data. If you call, we use the information you provide to handle your enquiry.
Providing information is voluntary, but without the necessary details we may be unable to respond or assess your property. You can use email, certified email or phone without using WhatsApp. Do not send identity documents, health data, bank details or unnecessary information about other people.
3. Purposes and legal bases
- Responding and preparing a proposal: assessment, a possible property visit and pre-contractual steps requested by the data subject, under Article 6(1)(b) GDPR.
- Professional contacts: managing relationships with agency representatives, companies or owners and relevant correspondence, based on the legitimate interest in properly managing those relationships, under Article 6(1)(f).
- Security and protection of rights: preventing abuse and protecting the website and relationships, within the limits of legitimate interest, under Article 6(1)(f).
- Legal obligations: compliance and handling requests to exercise data subject rights, under Article 6(1)(c).
We do not use enquiries for automatic newsletter subscriptions or advertising campaigns. Any future marketing activities will have separate purposes and legal bases, with consent where required.
4. Retention
On the website, unsubmitted fields remain in the page’s state. In the app, property details being completed may be kept in the browser’s session storage so you can resume them; the language is remembered locally. Submitted enquiries are stored in ITAPM records. Processing by the browser and external services remains separate.
For enquiries that do not lead to an appointment, relevant correspondence is retained for as long as necessary for the discussion and no longer than 12 months after the last meaningful exchange, unless deleted earlier when no longer needed. If you appoint us, the contractual relationship’s terms and privacy notices apply. Retention necessary for legal obligations or the protection of rights remains unaffected.
Retention periods for technical infrastructure data and communication services depend on their respective terms and privacy notices.
5. Recipients, infrastructure and transfers
Communication data may be processed by the controller, authorised persons and suppliers needed to handle the enquiry, with roles determined by the service. Where a supplier acts as a processor on behalf of the controller, Article 28 GDPR applies.
The website is hosted on ChatGPT Sites. The ITAPM app and enquiry database are hosted through Floot. Website forms send data to https://itapm-app.floot.app; private dashboards require authentication and authorisation. Automatic AURA dashboard updates send an update signal to authenticated administrators without publicly disclosing customer data. The platform infrastructure may involve processing by the service itself, described in OpenAI’s privacy policy. WhatsApp and email services also apply their own privacy notices.
Suppliers may also process data outside the European Economic Area. We do not claim that data is stored exclusively in Italy or the European Union. Transfers made on behalf of the controller must comply with the safeguards in Articles 44 onwards of the GDPR. You can request information about recipients and applicable safeguards using the contact details above.
6. Cookies and similar technologies
There are no optional cookies to enable in the website code. The “Cookies and preferences” panel summarises this configuration and links to full information; it does not collect consent for tools that are not present. AURA’s aggregate counting and how to opt out are described in the Statistics and privacy section.
This website’s code does not add Google Analytics, Meta Pixel, advertising tools or session recordings. It does not store the form in cookies or local storage. Images and fonts are served with the website and are not loaded from Google Fonts. Social links do not embed feeds or widgets.
Browser caching and technical tools are used to display pages. The hosting platform may use its own tools for authentication, security and operation, separate from the website code; please also see OpenAI’s cookie documentation.
You can manage cookies, cache and local storage in your browser settings. Any optional tools added in future will require an updated privacy notice and, where necessary, consent before activation.
7. ITAPM area, DOORATO and separate services
The website’s “Owner area” and “Agency area” links lead to the same ITAPM application. To view a record, you use an account with the corresponding verified email address, subject to the app’s access controls. Submitting the form alone does not create an account or authorise other users to read the enquiry.
Visiting the website or contacting us does not create a DOORATO account, automatically import data into DOORATO or grant access to apartment or guest information. Processing connected with a management appointment, the owner area and hospitality will be explained in the relevant notices.
The website does not make solely automated decisions about property assessments and does not use an AI assistant to read the form.
7a. AI assistant for property owners
The optional chat uses an AI model to answer questions about ITAPM services. The messages you choose to send, your language and a random session identifier are processed through Floot’s infrastructure and the model provider. Do not send documents, credentials or sensitive details. The assistant cannot access private property files, confirm management agreements or submit a form on your behalf.
The technical session lasts about 30 minutes. ITAPM’s stored copy of the conversation is automatically deleted after 24 hours; you can also select “Delete chat”. Abuse-prevention limits use hashed identifiers, retained for up to 48 hours. Any technical data held by providers are governed by their own terms. Choosing “Request an assessment” copies details into the form for you to review: you must still submit it with the required consents. Answers are for information and are not an offer or a guarantee of returns.
8. Your rights
Where applicable and within the limits of Articles 15–22 GDPR, you may request access, a copy, rectification, erasure, restriction and portability of your data. You may object to processing based on legitimate interest for reasons relating to your situation and withdraw consent without affecting previous processing.
Write to the controller’s email, certified email or postal address. The usual response period is one month from receipt; for complex requests, this may be extended by a further two months, with notice within the first month. Exercising your rights is normally free within the limits of Article 12 GDPR.
You may lodge a complaint with the Italian Data Protection Authority or the competent authority, and seek a judicial remedy.
9. Information about the service
Website enquiries are preliminary contacts: they do not automatically conclude a management appointment, booking or payment. Services, fees, activities and responsibilities are defined in the proposal and contract. Assessments are indicative and do not guarantee returns.
10. Updates
The date at the top identifies this version. This notice will be updated if purposes, channels or tools change. The reference domain is itapm.it.
Statistics and privacy
The AURA counter stores total visits and page views by website, domain and day. Visit continuity exists only in the page’s memory; reloads and new documents begin a new visit. It creates no cookies or visitor identifiers and stores no IP addresses, paths or form contents in its statistics database. You can opt out in the detailed notice; only your choice is stored.