Skip to content

Tombari Franco

Privacy policy

Last updated: 21 October 2026

Who is responsible for your data

The data controller for the data collected through this site is Tombari Franco, with registered office at Località Pino 4, 51016 Montecatini Terme (PT), VAT no. 01291030474, PEC tombari.franco@cert.cna.it. This is the company behind the Domus Sapientes trademark and the Bosco Orizzontale project.

This notice is provided under articles 13 and 14 of Regulation (EU) 2016/679, the GDPR, and the Italian Personal Data Protection Code (Legislative Decree 196/2003 as amended). It covers the Domus Sapientes site and enquiries about the Bosco Orizzontale villas. If you have any question about how we handle your data, write to the address above. We answer in English or Italian.

What data we collect

When you fill in the enquiry form we collect your name, your email address, your phone number if you choose to give it, the version of the villa you are interested in, how you would use it, your timing and anything you write in the message field.

When you write to us on WhatsApp or call, we receive the number and the content of the conversation.

If you book a call through the online calendar, the appointment data (name, email, chosen date and time) is processed by the booking service listed below.

When you browse the site, we receive technical data such as IP address, browser and device, pages viewed, date and time of access and language. This data keeps the site working and secure. Only with your consent is it also used for the statistics and advertising described in the cookie policy.

Why we use it and on what legal basis

To reply to your enquiry, send you the reserved price list and the specification, and arrange calls and visits. The legal basis is the performance of pre-contractual measures taken at your request (GDPR art. 6.1.b). No separate consent is needed for this, which is why the form has no checkbox.

To send you occasional news about the project, only if you ask for it. The legal basis is your consent (GDPR art. 6.1.a), which you can withdraw at any time by replying to any message.

To measure how the site is used and how our advertising performs. The legal basis is your consent to statistics and marketing cookies (GDPR art. 6.1.a and art. 122 of the Italian Privacy Code), given through the cookie banner, which you can change at any time from the Cookie preferences link in the footer.

To protect the site against abuse, for instance by limiting how many times a form can be sent from one connection. The legal basis is our legitimate interest in keeping the service working (GDPR art. 6.1.f).

Whether you have to provide your data

Your name and email address are needed to answer your enquiry. Without them we cannot send the specification. Your phone number, the message and the other choices in the form are optional and help us reply more precisely.

Who processes your data for us

Your data is handled by the controller's staff and by the staff of the builder, Tombari Costruzioni, who follow up commercial enquiries. To run the site and answer enquiries we use a small number of service providers, each acting as a processor under a data processing agreement pursuant to GDPR art. 28:

Vercel Inc. (hosting of the site and the form, servers in the USA and the EU), Resend (delivery of the emails you send us and we send you), Upstash (a technical log of enquiries received, used to prevent abuse and to make sure no request is lost), Google Ireland Ltd (Google Analytics for statistics and Google Ads for campaigns, with consent only), Meta Platforms Ireland Ltd (Meta Pixel for campaigns on Facebook and Instagram, with consent only) and Cal.com Inc. (booking of calls, only if you book one).

We do not sell your data and we do not share it with anyone else, except the professionals you ask us to involve in a purchase, or authorities when the law requires it.

Transfers outside the European Union

Some providers are based in the United States or process data there. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses, as each provider documents.

How long we keep it

Enquiries and the correspondence that follows are kept for 24 months from the last contact, then deleted, unless a purchase goes ahead, in which case the data becomes part of the contract file and follows the retention rules that apply to it.

Data processed for marketing communications is kept until you withdraw consent. Browsing data and cookies follow the retention periods set in the cookie policy. The technical log of enquiries is kept for the same 24 months.

Your rights

Under GDPR articles 15 to 22 you can ask to access the data we hold about you, correct it, have it deleted, restrict how we use it, receive it in a portable format, and object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what was done before.

To exercise any of these rights, write to the PEC address tombari.franco@cert.cna.it or to the registered office. We reply within one month.

If you believe we have handled your data unlawfully, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the authority of the EU country where you live.

Minors

The site and the enquiry form are meant for adults. We do not knowingly collect data from anyone under 18. If we learn that we hold a minor's data, we delete it.

Cookies

The site uses necessary cookies to work and, with your consent, statistics and marketing cookies. The cookie policy explains each category and how to change your choice.

Changes to this policy

If we change how we use your data, we update this page and the date at the top. Substantial changes are also announced on the site.