Privacy Policy

This Privacy Policy explains how IMMOBILIARI DI CASTELFALFI ETS (“APIC”, “we”, “us”) processes personal data when you use the APIC Owners Community website. Registered details: Largo Don Pino Puglisi, 6, 56028 San Miniato PI; Tax Code (Codice Fiscale) 90073880503; National Register of the Third Sector (RUNTS) Registration No. 146236.

The members area is invitation-only and is intended for Castelfalfi property owners and authorised community members. Public pages (such as the home page, About, and blog) are not used for usage analytics or product insights.

Purposes. APIC ETS processes personal data of its members solely for membership administration, communication, and the operation of this members-only area — including invitations, authentication, the Attendance Calendar, directory and place tools, and related community features.

What we process. We process account and membership information such as your name, email address, profile details (for example a profile colour), role (member or admin), and invitation or account status. If you use community features, we also process information you choose to share with other members — for example attendance or stay dates and optional notes on the Attendance Calendar, directory-related details, and content you interact with in the members area. We keep operational records needed for invitations, authentication, and administration (including an admin audit log of certain administrative actions). Please do not upload sensitive personal data beyond what is needed for community coordination.

Hosting and core processors. The website is hosted on our infrastructure providers. Authentication and member database services are provided by Supabase. Content for public and editorial pages may be managed with TinaCMS / TinaCloud. These processors act on our behalf so we can deliver accounts, the members area, and site content.

Optional usage analytics and product insights. With your consent, we use PostHog (Cloud EU) for two optional, independent settings. Both default to off until you choose. There is no public visitor tracking and no cookie banner for anonymous browsing.

Usage analytics helps us understand which pages and features are most useful. When enabled, we may collect events such as page views and feature use (for example opening the calendar or directory filters). Event properties are limited to non-identifying details where possible. We identify analytics profiles with your account UUID only — not your email, name, or phone number.

Product insights provides optional insights into how you use the site so we can improve it. When enabled, this may include signed-in page visits (including community calendar and member content) so we can find friction and fix problems. Password and similar credential fields are masked. Auth credential routes (sign-in, accept invite, forgot/reset password) are excluded.

Community administrators may be invited to the PostHog project externally to review aggregate insights. There is no in-app analytics dashboard. Declining or turning off these options does not reduce your access to community features.

Essential error monitoring. To keep the service reliable we use Sentry for essential technical error monitoring. This runs for signed-in use of the application independently of PostHog consent: declining optional analytics does not turn off error monitoring. Sentry is configured to minimise personal data (for example we do not send default PII, and we scrub cookies, auth headers, tokens, passwords, and similar sensitive fields from error reports where practicable). Sentry is used by developers for troubleshooting; production alerts may be routed to an internal operations channel without member contact details.

Consent and your choices. When you accept an invitation you must agree to the Terms & Conditions. Separately, you are asked to choose optional usage analytics and product insights. Agreeing to the Terms is required to join; these optional choices are not. After joining, you can change usage analytics and product insights at any time under Account → Privacy. Turning a preference off stops further capture as soon as the preference is applied. Essential error monitoring remains on. Returning members are not shown a soft consent banner; preferences are managed from Account → Privacy.

Data minimisation and retention. We aim to process only what is needed to run the community, invitations, and the features you use. Analytics events are designed to avoid unnecessary personal content (for example search text is not sent as a raw query). Account and membership data are retained while your membership is active and as needed for administration, security, and legal obligations. Optional usage analytics and product insights data are processed according to your preferences and the retention settings of our PostHog EU project. Error reports are retained according to our Sentry project settings for diagnosing and fixing issues.

Cookies and similar technologies. This website uses technically necessary cookies (and similar storage) required for login and core site functionality. Optional usage analytics and product insights run only if you consent; when enabled, PostHog may use cookies or local storage for those purposes. Declining them means those optional technologies are not used for you.

Sharing and access. Membership information you share in community features (such as attendance dates) is visible to other authorised members as part of how those features work. Administrative staff and systems administrators may access data as needed to operate and secure the service. We do not sell your personal data. Processors listed above receive data only to provide their services to us. Personal data is only disclosed externally where required by law or necessary for association operations.

Your rights and contact. Depending on applicable law (including EU/EEA data protection rules), you may have rights to access, rectify, erase, or restrict certain processing, to object to certain processing, and to data portability. You may also lodge a complaint with a supervisory authority. For inquiries regarding your personal data, contact us at associazioneproprietaricastelfalfi@pec.it, or see the association details on the Legal Information page. You can update many profile and privacy settings yourself in Account.

We may update this Privacy Policy from time to time. The version published on this page is the current one.