info@luxurypropertystatus.com Napoli, Italia
Client Onboarding

Privacy Policy / Informativa sulla Privacy

Last updated: October 12, 2026

Luxury Property Status places particular importance on the confidentiality and protection of personal data, property documentation and information entrusted to us by users, clients and professional contacts.

This Privacy Policy explains how personal data is processed through the website luxurypropertystatus.com, the contact and professional assessment request forms, and the LPS Client Portal (hereinafter, the “Client Portal”).

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Italian data protection legislation.

1. Data Controller

The Data Controller is:

Ruggiero Agostino
Via Iommella Piccola No. 24
80062 Sant'Agnello (NA), Italy
Email: privacy@luxurypropertystatus.com
Certified email (PEC): geomagostinoruggiero@pec.it

For any enquiry concerning the processing of personal data or the exercise of data protection rights, the Data Controller may be contacted using the details above.

2. Personal Data We Collect

Depending on the services used and the nature of the request, we may process the following categories of personal data.

Contact form data

  • First and last name;
  • Email address;
  • Telephone number, where provided;
  • The content of the message and any subsequent correspondence.

Data submitted through the “Start a Professional Relationship” form

To assess a request and prepare a professional proposal, we may collect:

  • First and last name;
  • Professional role or position;
  • Company or organisation;
  • Country of residence or business location;
  • Main contact person, where applicable;
  • Email address and telephone number;
  • Information concerning the property;
  • Property location and municipality;
  • Characteristics of the building and land;
  • Information concerning known restrictions, discrepancies or previous regularisation procedures;
  • The purpose of the requested assessment;
  • Any additional information voluntarily provided by the applicant.

The provision of information marked as mandatory is necessary for us to assess and respond to the request. Failure to provide such information may prevent us from proceeding.

Technical and website data

When the website or Client Portal is accessed, technical information may be generated or collected by the relevant infrastructure, including IP addresses, access timestamps, browser or device information, and security or system logs, where actually collected by the services in use.

Such information may be processed for technical operation, security, troubleshooting and the protection of the systems.

3. Client Portal Data

Where a professional relationship is established or access to the Client Portal is otherwise arranged, we may also process:

  • User identification details;
  • The email address associated with the account;
  • Username or account identifier;
  • Information necessary to manage authentication and account access;
  • Access records and account security information;
  • Documents, files and information uploaded to or shared through the Portal in connection with a specific assignment;
  • Communications and other information exchanged through the Portal.

Authentication credentials are managed using appropriate security measures. Passwords should not be shared with other users.

4. Purposes and Legal Bases of Processing

Personal data may be processed for the following purposes:

  1. To manage and respond to enquiries;
  2. To carry out a preliminary assessment of requests for professional services;
  3. To prepare professional proposals, including the proposed scope of work, fees and terms of engagement;
  4. To establish, manage and perform a professional engagement;
  5. To create and administer Client Portal accounts;
  6. To facilitate the secure exchange and management of documents relating to an assignment;
  7. To communicate with clients and professional contacts;
  8. To comply with applicable legal and regulatory obligations;
  9. To maintain the security and proper functioning of the website, Portal and related systems, and to prevent unauthorised access;
  10. To establish, exercise or defend legal claims.

Depending on the purpose, the legal basis for processing may include:

  • Pre-contractual measures at the request of the data subject, including responding to enquiries and preparing a professional proposal;
  • Performance of a contract, where processing is necessary to provide agreed professional services;
  • Compliance with a legal obligation, where applicable;
  • The legitimate interests of the Data Controller, such as protecting the security of systems, managing the service and establishing, exercising or defending legal claims, provided that such interests do not override the rights and freedoms of the data subject.

Where consent is legally required, processing will be based on consent. Consent will not be requested where another applicable legal basis is sufficient.

5. Confidentiality and Protection of Information

Confidentiality is a fundamental principle of the work carried out by Luxury Property Status.

Information entrusted to us in connection with a property, a client, a potential transaction or a professional assignment is handled with due care and confidentiality, in accordance with applicable law and the nature of the professional relationship.

This includes, where applicable:

  • Property documents, plans, drawings and technical reports;
  • Planning, building, cadastral and property-register documentation;
  • Information concerning ownership, property rights, restrictions and discrepancies;
  • Photographs, videos and other material relating to a property;
  • Information concerning a client's investment plans, commercial interests or proposed transaction;
  • Correspondence and documents exchanged during the assessment or performance of an assignment.

We do not disclose a client's documents or confidential information to other clients, nor do we use such information to benefit other clients or third parties or to compromise a client's commercial opportunities. Information is not made available to other clients simply because they are interested in the same property, area or transaction.

Access to information is restricted to persons who need it for legitimate and defined purposes connected with the requested services, the management of the professional relationship, technical operation or compliance with legal obligations.

Information may be disclosed where necessary to provide the requested services, to authorised professionals or service providers bound by appropriate confidentiality and data protection obligations, or where disclosure is required or permitted by law. It may also be processed where necessary to establish, exercise or defend legal claims.

We take appropriate technical and organisational measures to protect information against unauthorised access, loss, alteration, disclosure or use. However, no electronic transmission or storage system can be guaranteed to be completely secure in every circumstance.

Confidentiality is maintained within the limits of applicable law and does not prevent disclosures that are legally required or necessary for the proper performance of the services.

6. Client Portal and Document Management

The LPS Client Portal is intended to provide a reserved digital environment for the exchange, organisation and management of documents and communications relating to specific professional assignments.

Access is intended for authorised users. Documents and information are handled according to the access permissions and security arrangements applicable to the Portal.

The Portal is used to facilitate the secure management of assignment-related material, which may include technical documentation, photographs, videos, reports and correspondence.

The following principles apply:

  • Access to the Portal is restricted to authorised accounts;
  • Documents are managed for the purposes of the relevant assignment and related professional activities;
  • Information is not shared with other clients or unrelated third parties for their commercial benefit;
  • Access may be granted to authorised collaborators or technical service providers where necessary for the assignment or operation of the Portal;
  • Information may be disclosed where required by law or necessary to establish, exercise or defend legal claims.

Users are responsible for keeping their login credentials confidential and for notifying us if they suspect unauthorised access to their account.

Deactivation of a Portal account does not necessarily result in the immediate deletion of all documents associated with an assignment. Certain records may need to be retained for legal, tax, professional, security or claims-management purposes, in accordance with the retention criteria set out below.

7. Nature of the Provision of Data

The provision of certain information is necessary to respond to an enquiry, assess a request, prepare a professional proposal or manage an engagement.

Failure to provide the information required for these purposes may prevent us from:

  • Responding adequately to the enquiry;
  • Assessing the requested activities;
  • Preparing a professional proposal;
  • Establishing or managing a professional relationship;
  • Arranging access to the Client Portal where required.

Any additional information that is not mandatory is provided voluntarily.

8. Processing Methods and Security Measures

Personal data may be processed using electronic systems and, where necessary, paper records.

Processing is carried out in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality.

Appropriate technical and organisational measures are adopted, taking into account the nature of the information and the risks involved, to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

9. Recipients of Personal Data

Personal data may be processed, only to the extent necessary for the purposes described in this Policy, by service providers and other authorised parties involved in the operation of Luxury Property Status, including, where applicable:

  • Website hosting and IT infrastructure providers;
  • Email service providers;
  • Providers or administrators of the Client Portal infrastructure;
  • Authorised professionals and collaborators;
  • Technical, administrative, accounting or legal advisers, where necessary;
  • Public bodies or authorities where required by law.

Where a service provider processes personal data on behalf of the Data Controller, it will be appointed as a Data Processor under Article 28 GDPR where required.

Personal data is not sold to third parties.

10. Transfers Outside the European Economic Area

Personal data is intended to be processed primarily within the European Economic Area.

If the use of a particular provider involves the transfer of personal data to a country outside the European Economic Area, the transfer will be carried out in accordance with the GDPR, on the basis of an applicable transfer mechanism and appropriate safeguards where required.

The actual locations of the relevant hosting, email, Portal and backup services should be considered when assessing whether international transfers take place.

11. Data Retention

Personal data is retained for as long as necessary for the purposes for which it was collected and, where applicable, for any additional period required by law or necessary to establish, exercise or defend legal claims.

The following retention periods apply, subject to verification against the actual operational arrangements and applicable legal requirements.

Contact enquiries and preliminary requests

Data submitted through the contact form or through a request for a professional proposal that is not accepted is retained for the time necessary to handle the request and, in any event, for a maximum of 24 months from collection, unless a longer period is necessary for specific legal or claims-management purposes.

Data relating to professional engagements

Data relating to clients who accept a proposal and enter into a professional engagement is retained for 10 years from completion of the service or termination of the professional relationship, where necessary to comply with applicable civil, tax and professional record-keeping obligations or to protect the rights of the Data Controller.

Client Portal accounts

Account profile and authentication data are retained for the duration of the professional relationship and for as long as continued retention is justified by legitimate and defined purposes, subject to applicable legal requirements. Requests to deactivate an account will be handled promptly. Deactivation does not automatically require the deletion of records that must be retained for legal, tax, professional, security or claims-management purposes.

Documentation relating to completed assignments may be retained for 10 years, where justified by applicable legal, tax, accounting or professional obligations. The applicable retention period may vary according to the nature of the document and the relevant legal requirement.

Technical and security logs

System logs and access records generated by the website or Client Portal infrastructure are intended to be retained for a maximum of 12 months from their creation, where this reflects the actual configuration of the relevant systems, for purposes such as security, fraud prevention and proper system operation. Longer retention may be necessary where required by law or for the establishment, exercise or defence of legal claims.

12. Rights of Data Subjects

Under the conditions set out in the GDPR, data subjects may exercise the rights provided for in Articles 15–22, including the right to:

  • Obtain confirmation as to whether personal data concerning them is being processed;
  • Access their personal data;
  • Request the rectification of inaccurate data;
  • Request erasure of personal data where the legal conditions are met;
  • Request restriction of processing;
  • Object to processing where applicable;
  • Request data portability where applicable;
  • Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Requests may be sent to:

privacy@luxurypropertystatus.com

The exercise of these rights is subject to the conditions and exceptions established by applicable law.

13. Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect legal, organisational or technical changes.

The current version will be published on this page together with the date of its latest update.