Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“ GDPR ”), this notice describes the processing of personal data collected through the website www.expert4house.com/en/ (“Site”), through the Expert4House mobile app for Android and iOS (“App”), and in the context of sales and support activities.

1) Data controller and contact details

GEFA SRLS – Expert4House
Registered office: Via Maria 105/111, 03100 Frosinone (FR) – Italy
CF/ P.IVA : 03139870608 – REA: FR-302230 – Legal form: Srls
PEC/Digital address: [email protected]
Privacy email: [email protected]
DPO: not appointed (for privacy requests, please use the email address above).

2) Types of data processed

Browsing data (IP addresses, technical logs, device ID, user agent, referrer, pages visited, date/time) stored for technical periods (generally up to 5 days, except for security/abuse needs).
Account/order data (name, surname, address, email, telephone number, shipping/billing addresses, order contents, notes, P.IVA/SDI).
Payments are managed by third-party gateways (e.g., cards, PayPal) that operate as independent owners or processors; the Site does not store complete card details.
Assistance/returns/warranty (contents of communications, technical photos/videos — e.g., wiring, connection diagram — order number, RMA).
Marketing (newsletter, preferences, interactions, opt-in/opt-out).
App usage data (screenshots viewed, searches, products added to cart, completed purchases, technical installation identifier and, on Android, Google advertising ID), collected only with express consent in the App: see point 6.
Cookies and similar technologies : see Cookie Policy .

3) Purposes and legal bases

a) Online sales and contract management (shopping cart, orders, payments, invoicing, delivery, returns/warranty, assistance), both from the Site and the App: art. 6.1.b GDPR .
b) Legal obligations (tax/accounting, product safety/WEEE): art. 6.1.c GDPR .
c) IT security and fraud/abuse prevention : art. 6.1.f GDPR (legitimate interest).
d) Service communications (order status, delivery, changes to conditions, user-activated App push notifications): art. 6.1.b GDPR .
e) Marketing (newsletter/promotions) with consent : Art. 6.1.a GDPR . For existing customers, sending offers on similar products/services (“soft spam”) based on legitimate interest with opt-out: Art. 6.1.f GDPR .
f) Analytics and advertising via cookies/online IDs (GA4, Google Ads/remarketing) and App usage statistics (Google Analytics for Firebase) only with consent : art. 6.1.a GDPR .
g) Technical assistance (fault diagnosis, RMA, photo/video connections): art. 6.1.b and 6.1.f GDPR .

4) Cookies/Consent

Upon first access, the banner allows you to accept , reject , or manage non-technical cookies (analysis/profiling, including third-party cookies) in a granular manner. Without consent, these cookies are not installed and the tags operate in Consent Mode with limited signals. You can change your settings at any time from the " Cookie Settings " link. Details (types, duration, third-party cookies) are in the Cookie Policy .

5) Analytics, Advertising & Google (GA4/Ads, Consent Mode v2)

Google Analytics 4 (GA4) : used to measure site usage; GA4 does not record or store IP addresses . The legal basis is consent for analytics cookies via banners.
Google Ads/Remarketing : We may use tags for conversion tracking/remarketing; these are only active with consent to advertising cookies.
Consent Mode v2 : Implemented for EU/EEA/UK traffic; in the absence of consent, tags operate in restricted mode (statistical estimation, no personalization).

6) Expert4House mobile app — usage statistics and campaign measurement

The Expert4House App (Android and iOS) allows you to browse the catalog, manage your account, and make purchases for the same purposes and legal bases described in point 3; the account and order data are the same as those on the Site.
The App also uses Google Analytics for Firebase , a service of Google Ireland Ltd, to collect statistics on the use of the App: screens viewed, searches performed, products added to the cart and purchases completed (amount and currency), together with a technical installation identifier and, on Android, the Google Advertising ID . This data helps us understand how the App is used and measure the effectiveness of our advertising campaigns on Google Ads (for example, how many installations and how many purchases result from an ad).
Data collection occurs only with your consent , which is required when you first launch the App; you can grant or revoke it at any time from the App menu or from Account → Settings → "Usage Statistics" . Without consent, no usage data is sent to Google. The data is not sold or used to build advertising profiles on other sites or apps, and Google Analytics retains it for 14 months . Legal basis: consent ( Article 6.1.a GDPR ).
The account created in the App can be deleted directly from Account → Delete Account , or by writing to [email protected] . Google's privacy policy: policies.google.com/privacy .

7) Provision of data

Data marked as mandatory is necessary to provide the requested services (contract execution, support). Failure to provide it may prevent the conclusion or proper execution of the relationship. Consent to marketing, cookies, and app usage statistics is not mandatory and can be freely revoked.

8) Recipients and categories of recipients

IT/hosting providers (e-commerce platform maintenance).
Google Ireland Limited (Analytics/Ads on the Site, Google Analytics for Firebase and push notifications in the App: independent owner or manager, depending on configuration).
Payment gateway (cards/PayPal).
Couriers (SDA/Poste, UPS, DHL) with only the data necessary for shipping/tracking.
Consultants and professionals (accountants/lawyers).
The subjects are designated as Processors pursuant to art. 28 GDPR where required, or operate as independent Data Controllers .

9) Transfers outside the EU

Some providers (e.g., Google, cloud services/email marketing) may involve data transfers to countries outside the EEA. In such cases, we apply the tools set out in Chapter V of the GDPR (adequacy decisions and/or Standard Contractual Clauses ) with any additional measures.

10) Conservation

Accounts/Orders : For the life of the account and, after closure, for legal obligations (e.g., up to 10 years for tax/accounting purposes).
Assistance/RMA : for the time necessary to manage the case and fulfill warranty obligations.
Marketing : until revoked/opted out.
Security logs : technical periods (typically up to 5 days, barring incidents).
App usage statistics : 14 months in Google Analytics, or until you withdraw your consent for further collections.
Cookie/Online ID : according to the Cookie Policy .

11) Rights of the interested party

The user can exercise the rights set forth in Articles 15–22 of the GDPR at any time: access , rectification , erasure , restriction , portability , objection (including to soft spam), and withdrawal of consent (without prejudice to the lawfulness of processing based on consent before its withdrawal). Requests should be sent to [email protected] . The interested party can lodge a complaint with the Italian Data Protection Authority .

12) Minors

The Site and App services are intended for users aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us to have it removed and for any blocking measures.

13) Links to third-party sites/apps

Links to third-party websites/apps are provided for informational purposes only. We do not control these resources or their privacy/cookie policies, which we encourage you to consult separately. Use of external resources is at your own risk.

14) Multilingual (prevalent version)

The Site and App are available in multiple languages. In the event of any discrepancies between the translated versions and the Italian version, the Italian version will prevail . Some features, availability, prices, and taxes may vary depending on the country/language selected.

15) Updates to this information

The Data Controller may modify this Privacy Policy at any time; changes will take effect upon publication on the Site. We encourage you to consult this page periodically.