Back to Home

Privacy Policy

Pursuant to European Regulation No. 2016/679 (“GDPR”)

‍

La preghiamo di leggere attentamente la presente informativa (nel seguito, “Privacy Policy”) che si intende resa nei confronti degli utenti del sito web www.torrerichard.it (nel seguito, il “Sito”), predisposta ai sensi degli artt. 13 e 14 del GDPR, in cui Le indichiamo tutti i dettagli relativi al trattamento dei Suoi dati e al loro utilizzo.

1. Data controller

Savills Investment Management SGR S.p.A., with registered office in Milano, St. San Paolo, n 7, p. IVA 08567741007 (hereinafter “Data Controller” or “Savills”), available through the following e-mail address privacy.italy@savillsim.com.

2. Purpose of the processing

The Data Controller will process the following personal data:

  • Data provided voluntarily by the user: (e.g., name, surname, address, telephone number, e-mail address and any additional personal data voluntarily provided by the user): (hereinafter “Personal Data” or also “Data”): this data is directly provided by you when filling the contact forms or by creating your personal area within the Website.
  • Data collected using cookies or similar technologies: for further information, please refer to the Cookie Policy.
  • Technical data: This category of data includes the IP addresses or domain names of the devices used by users who connect to the website, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used only for statistical information (and is therefore anonymous), to verify the correct functioning of the website and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical cybercrimes occurring against the Website: barring this eventuality, web contact data does not persist for more than 7 days.

3. Ppurpose, legal basis for processingand nature of data provision

Your personal data will be processed for the following purposes:

  1. to follow up on requests made through the contact form on the Website.
    With reference to this purpose, the legal basis for the processing of your personal data is represented by Article 6, paragraph 1, letter b) of the GDPR: “Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.” The provision of data for this purpose is therefore necessary in order to respond to your requests.
  2. to create your personal area within the Website.
    Con riferimento a tale finalità, la base giuridica del trattamento dei Suoi dati personali è rappresentata dell’art. 6, comma 1, lett. b) del GDPR“Il trattamento è necessario all’esecuzione di un contratto di cui l’interessato è parte o all’esecuzione dimisure precontrattuali adottate su richiesta dello stesso”.
    Il conferimento dei Dati per questa finalità è facoltativo, ma in mancanza non sarà possibile per il Titolare finalizzare la creazione della Sua area personale.
  3. to fulfil legal obligations to which the Data Controller is subject.
    Il Titolare potrebbe utilizzare i Suoi dati personali per(i) adempiere ad eventuali obblighi previsti dalle leggi vigenti, da regolamenti o dalla normativa comunitaria, soddisfare richieste provenienti dalle autorità (ii) dare seguito alle richieste di esercizio dei diritti presentate dagli interessati, coinvolgendo, se del caso, anche soggetti terzi nominati quali responsabili del trattamento.
    Con riferimento a tale finalità, la base giuridica del trattamento dei Suoi dati personali è rappresentata dell’art. 6, comma 1, lett.c) del GDPR “Il trattamento è necessario per adempiere un obbligo legale al quale è soggetto il titolare del trattamento”. Il conferimento dei Dati è pertanto necessario, al fine di consentire al Titolare di adempiere ai propri obblighi di legge.
  4.  to pursuit of the legitimate interests of the DataController or third parties
    The Data Controller may use your personal data for the purpose of preventing fraud committed throughthe use of the Website and to allow the Data Controller or third parties to protect themselves in court and/or out of court.
    With reference to this purpose, the legal basis for the processing of your personal data is represented by Article 6, paragraph 1, letter f) of the GDPR: “The Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.” With particular reference to this purpose based on the legitimate interest of the Data Controller or third parties, the legitimate interest of the Data Controller in processing the data shall be fairly balanced with your interests, rights and fundamental freedoms. The processing based on the legitimate interest of the Data Controller is not mandatory and you may object to such processing in the manner set out in this Privacy Policy and, inthis case, the Data Controller shall no longer process personal data for this purpose, unless the Data Controller demonstrates the presence of prevailing legitimate reasons.
  5.  allow the Data Controller to complete extraordinary corporate transactions.
    The Data Controller may use your personal data for a potential merger, transfer of assets, transfer of business or business unit, disclosing and transferring your personal data to the third party or parties involved.
    With reference to this purpose, the legal basis for the processing of your personal data is represented by Article 6, paragraph 1, letter f) of the GDPR: “Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.” Particularly referring to this purpose based on the legitimate interest of the Data Controller or third parties, the legitimate interest ofthe Data Controller in processing the data is equally balanced with your interests, rights and fundamental freedoms. Processing based on the legitimate interest of the Data Controller is not mandatory and you may object to such processing in the manner described in this Privacy Policy and, in this case, the Data Controller may not process your personal data for this purpose, unlessit demonstrates the existence of prevalent legitimate reasons.

Your personal data will be processed by means of the operations set forth Article 4(2) of the GDPR, namely: collection, recording, organization, structuring, storage, adaptation or alteration, extraction, consultation, use, disclosure, dissemination, otherwise making available, confrontation, interconnection, restriction, erasure and destruction of data. Your personal data will be processed both on paper and electronically and/or automatically, in compliance with the rules of confidentiality and security provided for by laws, regulations and internal provisions.

4. Data recipients and data transfer

Your data may be shared with:

  1. entities acting as independent data controllers, data processors and/or sub-processors (e.g., companies responsible for managing the Website, the facility and/or other third parties providing services to the Data Controller);
  2. persons authorized by the Data Controller to process personal data bound to confidentiality obligations or have an adequate legal obligation of confidentiality;
  3. persons delegated and/or appointed by the Data Controller to carry out activities strictly related to the pursuit of the above purposes, duly appointed, where necessary, as data processors;
  4. persons, companies or professional firms that provide assistance and advice to the Data Controller, duly appointed as data processors where necessary.

Outside of the aforementioned hypotheses, your personal data will not be disclosed except to subjects, entities or authorities to whom disclosure is mandatory under the provisions of law or regulations.
Your personal data may be transferred outside the European Economic Area only if requirements set out in Articles 44 et seq. of the GDPR are met.

5. Data retention period

The Data Controller will process Personal Data for the time strictly necessary to fulfil the purposes referred to in point 3 above.
With regards to the purpose referred to in point 3 a), your data will be kept for the time strictly necessary to manage the request you have submitted.
With regards to the purposes referred to in point 3 b), your data will be processed for the time specified by relevant legal obligations or applicable laws.
With regard to personal data processed for the purposes referred to in points 3 c) and 3 d), we inform you that your data will be processed, respectively, for the time strictly necessary to allow the Data Controller to ascertain, exercise or defend a right or interest in court and/or out of court or whenever the judicial authorities exercise their judicial functions, to complete any extraordinary operations involving the Data Controller and their related activities. The pursuit of the Data Controller’s legitimate interest is fairly balanced with the user’s interest, as the processing of personal data is limited to what is strictly necessary for the performance of such activities. Processing for legitimate interest purposes is not mandatory, and the user may object to such processing in accordance with the process described in this Privacy Policy, in which case the Data Controller may not process the Personal Data for that purpose, unless the Data Controller proves the existence of legitimate prevailing reasons.

6. Data protection

Your personal data is processed by the Data Controller in full compliance with current legislation. In particular, to ensure the security of your personal data, taking into account the state of the art and the costs of implementation, and the nature, scope, context and purposes of the processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the Data Controller has adopted technical and organizational measures to ensure a level of security adequate to the risk.

7. Rights of the data subject

In accordance with the provisions of the GDPR, where the legal requirements are met, you have the right to request the Data Controller, at any time, to access your personal data, to rectify or delete it, or to object to its processing. The law also allows you to exercise the right to request the restriction of processing in the cases provided for in Article 18 of the GDPR.
In the cases referred to in Article 20 of the GDPR, the data subject has the right to obtain their data in a structured, commonly used and machine-readable format and, where technically feasible, to transmit it to another controller without hindrances.
Requests relating to your rights and/or aimed at obtaining further clarification can be addressed to the Data Controller at the following email address: privacy.italy@savillsim.com.
Finally, we remind you that you always have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), pursuant to Article 77 of the GDPR, if you believe that the processing of your Data is contrary to the legislation in force.

‍

Date of last update: 10/07/2026