Privacy Notice

1. Data Controller

The Data Controller is Adimensio S.r.l.s.-  Contact email: hello@tatallo.com

2. Types of processed data

• Registration data: first name, last name, email, password (encrypted), user type (host / merchant / believer).
• Profile data: company name, VAT number, address, phone numbers, bank details (IBAN) for Believers.
• Uploaded content: descriptions, photos, and videos of properties or businesses, commercial offers.
• Technical data: IP address, access logs, technical and session cookies necessary for service operation.

3. Purposes and legal basis

• Platform service provision and user account management — legal basis: contract performance (Art. 6.1.b GDPR).
• Fulfillment of legal, accounting, and tax obligations — legal basis: legal obligation (Art. 6.1.c GDPR).
• Platform security, fraud, and abuse prevention — legal basis: legitimate interest (Art. 6.1.f GDPR).
• Service communications and optional promotional communications — legal basis: user consent, revocable at any time (Art. 6.1.a GDPR).

4. Processing methods

Data is processed using IT tools, adopting appropriate technical and organizational measures to ensure security, confidentiality, and integrity. Access is permitted only to authorized personnel and providers designated as data processors.

5. Data retention

Data is retained for the time strictly necessary for the above purposes and, in any case, no more than 10 years from the end of the relationship for tax and legal defense purposes.

6. Communication and recipients

Data may be communicated to: technology service providers (hosting, database, email), tax and legal consultants, public authorities as required by law. Data will not be disclosed or sold to third parties for commercial purposes without consent.

7. Non-EU transfer

Some technology providers may process data outside the EU. In such cases, transfers occur based on European Commission adequacy decisions or Standard Contractual Clauses (SCC).

8. Data subject rights

The data subject may exercise their rights under Articles 15-22 of the GDPR (access, rectification, erasure, restriction, portability, objection) at any time by writing to hello@tatallo.com. You may also lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).

9. Cookie Policy

This section describes the cookies and similar technologies used on the Tatallo site, in compliance with the Privacy Guarantor Provision of June 10, 2021, and Directive 2002/58/EC ("ePrivacy"). Cookies are small text files stored on the user's device during navigation, used to make the site work, improve performance, and provide functionality.

Types of cookies used:

• Technical cookies (necessary): indispensable for site operation, session management, and authentication. Do not require consent.
• Functional cookies: store user preferences (e.g., theme, language).
• Analytical cookies: used exclusively in anonymized form for aggregated statistics, if enabled.

Currently, the Platform does not use profiling or third-party marketing cookies. Any future activations will be subject to the user's prior consent via a compliant banner. Users can manage or disable cookies through their browser settings at any time; disabling technical cookies may compromise use of the Platform.

10. Changes to this notice

The Data Controller reserves the right to update this notice. Changes will be published on this page, indicating the date of the last update.