Privacy Policy of Le Case di Dorrie
Version: February 24, 2026
1. Data controller
Le Case di Dorrie, email: info@lecasedidorrie.com. Address: not applicable. Phone: not applicable. Registration no.: not applicable. Optional DPO: not applicable.
2. What data do we process?
- Identity and contact data: first name, last name, email, phone.
- Address data: street, ZIP/postcode, city, province/region, country.
- Intake content: property preferences, budget, financing and notes.
- Administrative metadata: submission date/time, language, consent records.
- ID uploads: front and back of ID card (PDF/JPG/PNG).
3. Purposes and legal bases (GDPR Art. 6)
- Consent (where applicable).
- Performance of a contract / pre-contractual steps.
- Legal obligations (e.g. accounting/tax).
4. Retention and deletion
We do not retain personal data longer than necessary. Intake data without a contract is retained up to 24 months after last contact. Data subject to legal obligations is retained for the required statutory period.
ID files: are automatically deleted from the server after successful download by an authorized admin. Download audit logs (who/when/which file) are retained for 24 months for security and accountability.
5. Sharing with third parties
We only share data when necessary with processors such as hosting/security providers and professional advisors. We use data processing agreements where required. We never sell personal data.
6. Transfers outside EU/EEA
Processing is generally within the EU/EEA. If international transfer is needed, we apply appropriate safeguards (e.g. adequacy decisions or SCCs).
7. Security
- Role-based access control and restricted admin access.
- Encrypted transport (TLS/HTTPS).
- Password hashing and optional admin 2FA/TOTP.
- Server-side upload validation and storage outside web root.
- Logging of sensitive file downloads.
8. GDPR rights (EU residents)
You have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent (where applicable). Requests can be sent to info@lecasedidorrie.com. We generally respond within one month.
You also have the right to lodge a complaint with your EU supervisory authority (in NL: Autoriteit Persoonsgegevens).
9. Automated decision-making
We do not perform solely automated decision-making with legal or similarly significant effects based on intake data.
10. Changes
We may update this Privacy Policy. The latest version will remain available on this website.