Legal information
Cookies and similar technologies — homacoop.it
What changes in this version: the website may load, only with your consent, tools from Meta, LinkedIn and Google to measure the results of advertising campaigns (section 6); we added the banner for the choice and the "Cookie preferences" link at the bottom of every page (sections 2 and 8).
This page explains which cookies or similar technologies are used on homacoop.it, which are active only with your consent and how third-party content is handled.
1. Data controller
The data controller is HOMA Società Cooperativa per azioni, Via Orsini Ducas 8, 73100 Lecce (LE), Italy, tax code and VAT number 04579080757, email info@homacoop.it, certified email coop.ass@pec.it. The full identification details are set out on the Legal notice page.
For full information about personal data processing, please see the Privacy notice.
2. What is stored on your device
Without your consent, the public pages of homacoop.it:
- do not write or read first-party cookies;
- do not carry out fingerprinting;
- load no advertising tool: HOMA sends no request to the Meta, LinkedIn or Google tools described in section 6.
They store only one technical entry, homa.consenso, in the browser's local storage, when you make a choice in the banner. It records what you accepted or rejected, with which action ("Accept all", "Reject all", closing with the X, or a choice per provider), on which date and with which version of this page. It is used to respect your choice and not to show you the banner on every page; it contains no code identifying you and is not sent to anyone. It stays in the browser until you delete it from the browser settings. It is a technical means necessary to provide a service you requested and does not require consent under Article 122 of the Italian Personal Data Protection Code.
If you accept one or more of the tools in section 6, those tools may write and read cookies on the homacoop.it domain as well (first-party cookies, that is, carrying our website's name but written and used by the provider), in addition to their own domains. Names, domains and durations are listed in section 6.
Pages that contain a virtual tour, a video or a post from the providers listed in section 4 load that content when the page opens, without a click and regardless of the choice made in the banner. From that moment the browser connects to the provider, which may process the IP address and other technical data and may set cookies or local data on the device under its own rules. The other pages load no provider content.
3. Plausible analytics
HOMA uses a self-hosted Plausible Community Edition instance loaded from analytics.cercoalloggio.com, only when the website is visited on homacoop.it or www.homacoop.it. analytics.cercoalloggio.com is a subdomain attributable to HOMA and used to host the instance: its use involves no disclosure of data to anyone other than HOMA.
The current configuration collects page views and aggregate information about traffic sources, device type and approximate geographic area. It also collects four custom events: button clicks, for which only the destination is recorded, form submissions, for which the type of form and the outcome are recorded, referrals to the Cercoalloggio portal, for which the city and the residence of origin are recorded, and the options chosen in the diagnostic on the subsidised student housing page, for which the field and the chosen option are recorded. All remain aggregate data. The configuration uses neither cookies nor storage of information on the visitor's device: to distinguish visits, the tool computes a value derived from the IP address and the browser type through a non-reversible function, with a varying element renewed every day, not retained beyond that day and not traceable to an individual.
The following are not enabled:
- cookies or persistent identifiers;
- collection of the content entered into forms;
- automatic tracking of all outbound links, of downloads, or of interactions other than those described above;
- profiling or reconstruction of an individual visitor's journey.
Why Plausible does not depend on your consent. The absence of cookies alone is not enough: what matters is its purpose and how it works. Plausible is used only to know, in aggregate form, how many people visit the pages and which buttons and forms are used, in order to improve the website; the data stays with HOMA, on a server in the European Union, is not combined with other sources, is not used to show advertisements, does not reconstruct an individual's journey and does not allow you to be recognised from one day to the next. For this reason it stays active even if you reject the tools in section 6.
The legal basis is HOMA's legitimate interest in understanding website use in a proportionate manner and improving its content under Article 6(1)(f) GDPR.
The instance is administered by HOMA on a server provided by OVH in the Netherlands, within the European Union. Analytics data is retained for 24 months from collection. The period is set in the configuration of the instance's database, which automatically deletes data exceeding it, and it is the same period applied to requests received through the website and to the access log referred to in the Privacy notice.
4. Provider content loaded with the page
Some pages contain content hosted by third parties, which loads when the page opens:
- the residences' virtual tours, from CloudPano (
app.cloudpano.com); - the videos on the Media and residence pages, from YouTube in its version without advertising cookies (
www.youtube-nocookie.com) and from Instagram (www.instagram.com); - the video posts of some articles, from LinkedIn (
www.linkedin.com).
The browser connects to the providers of the content present on the page that is open and to the services each provider uses inside its own content, chosen by the provider and not by HOMA: for example the CloudPano tour in turn loads third-party analytics and marketing tools, including Google, Meta, PostHog and Sentry. Each provider processes the technical data it receives and any cookies as an independent controller, under its own privacy notice:
This content does not depend on the banner: rejecting the tools in section 6 does not prevent a tour or a video from loading, and loading a tour or a video is not consent to the tools in section 6. HOMA uses no provider that is not listed on this page: before adding one, it updates this page.
How to manage cookies set by providers
Cookies and local data set by the providers can be viewed, blocked and deleted from the browser settings, in the section on website data; instructions are available on each browser's help pages. Blocking them does not affect browsing on homacoop.it: at most the tour or the video is not shown.
5. Links to external websites and forms
A normal outbound link does not set cookies from the destination website until it is opened. Some residence pages link to Google Forms. When opening the link, the user leaves homacoop.it; subsequent processing takes place in Google's environment under the specific privacy notice displayed in the form and the provider's rules.
Subscribing to the newsletter likewise involves moving to pages belonging to the sending provider. The subscription page on homacoop.it sets no cookies and loads no component from the provider; on submission, and later when opening the confirmation or unsubscribe link contained in the messages, the browser opens a page belonging to the provider, which may use its own cookies under its own privacy notice. That processing is described in section 13 of the Privacy notice.
6. Campaign measurement tools, only with your consent
If you accept, we load the tools listed below to measure the results of our advertising campaigns: how many people reach the website from an advertisement and what they do next. We do not use them to show you personalised advertisements or to build audiences of people who visited the website (remarketing): these functions are switched off. If we ever wanted to use them, it would be a significant change: we would update this page and ask for your consent again.
If you reject or close the banner with the X, no request is sent to these tools and the website works in the same way. You can choose provider by provider with "Customise" and change your mind at any time from Cookie preferences, at the bottom of every page. We will not show you the banner again within six months of your choice, unless there is a significant change (a new provider or a new purpose); an editorial correction of this page does not reopen the choice.
| Provider | Purpose | What it receives | Cookies: name, domain, duration | Provider's privacy notice |
|---|---|---|---|---|
| Meta Platforms Ireland Limited (Meta Pixel) | measuring how many people arrive from our Facebook and Instagram campaigns and what they do next | the full address of the page visited, including the parameters after the "?" (for example campaign parameters), the events listed below, the IP address, technical data about the browser and device, the Meta cookies present in the browser | on the homacoop.it domain: _fbp, 90 days; when arriving from a Meta ad also _fbc, 90 days; on Meta's domains (facebook.com) Meta's cookies under its own rules | facebook.com/privacy/policy |
| LinkedIn Ireland Unlimited Company (Insight Tag) | the same for our LinkedIn campaigns | the full address of the page visited, including the parameters after the "?", the page title, the referring page, the IP address, device and browser data, the time, the events listed below | on the .linkedin.com domain: bcookie, 1 year; li_gc, 180 days; lidc, 1 day; __cf_bm, 30 minutes; when arriving from a LinkedIn ad also li_fat_id, on the homacoop.it domain, 30 days | linkedin.com/legal/privacy-policy |
| Google Ireland Limited (Google Ads conversion tag) | the same for our Google campaigns | the address of the page visited without the parameters after the "?", the page title, the events listed below, the IP address, technical data about the browser, Google ad click identifiers | _gcl_au, domain homacoop.it, 90 days; when arriving from a Google ad also _gcl_aw or _gcl_dc, domain homacoop.it, 90 days; on Google's domains (google.com, doubleclick.net) Google's cookies under its own rules | policies.google.com/privacy |
The durations are those stated by the providers in their documentation; a provider may change them, in which case we update this table.
Google is loaded in Consent Mode, basic mode: its tag is not downloaded until you accept it; when you accept, it receives consent to measurement and the refusal of ad personalisation.
The events we send, never with the content of forms, your name, your email or your phone number, not even in encrypted form:
- page view, on every page, with the page address;
- contact sent, when a contact form is submitted successfully, with only the topic chosen from a closed list (for example "partnership" or "residences"), never the city or the residence;
- click on "Apply" on a residence page, with only the type "residence": we do not say which residence, the city or the call, but the address of the page where the click happens identifies the residence;
- click on "Subscribe" to the newsletter: this is the click on the button, not the completed subscription, which takes place on the sending provider's pages and which the website does not see;
- referral to Cercoalloggio, the click towards
cercoalloggio.com, without the city or the residence of origin.
Pages where these tools are never loaded: the pages of open positions and job applications (/en/work-with-us and every job posting, and the corresponding Italian pages), the residence application procedure, which asks about disability, and the reserved area. For this reason we do not tell providers that a job application or a residence application has been sent. In the residence application procedure, from the first field touched, from the click on "Apply", or when arriving with a half-completed application saved in the browser, the page reloads with no tool in memory.
After sending, each provider processes the data it receives under its own privacy notice. For the collection and transmission of data from our website, the role of HOMA and of each provider is described in section 7 of the Privacy notice.
Data transferred to the United States. The three providers are established in Ireland; data may be transferred to their parent companies in the United States (Meta Platforms, Inc., LinkedIn Corporation, Google LLC). The transfer is based on the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, in which the three companies participate; HOMA verifies their participation on the official list.
7. Area reserved for the editorial team
The /admin area of homacoop.it is not accessible to visitors. To keep the session of the people authorised to publish content active, that area uses the browser's local storage: it is a technical means strictly necessary to provide a service requested by the authenticated user and does not require consent under Article 122 of the Italian Personal Data Protection Code. No information concerning that session relates to visitors of the public pages. The tools in section 6 are never loaded in the reserved area.
8. How to change or withdraw your choice
From Cookie preferences, at the bottom of every page, you can switch one or all of the tools in section 6 on or off at any time, with the same number of steps needed to accept them. When you withdraw, the website removes the tools, deletes the cookies that providers wrote on the homacoop.it domain and reloads the page. Cookies written by providers on their own domains cannot be deleted by our website: they are deleted from the browser settings, in the section dedicated to website data. Withdrawal does not affect the lawfulness of processing carried out before it.
9. Cookie duration and data retention
A cookie's duration (shown in section 6) is how long it stays in your browser. It is different from how long a provider retains the data it has received, set out in section 10 of the Privacy notice.
10. Previous versions
Previous versions of this page are available on request by writing to privacy@homacoop.it.