This notice explains how Brainstar S.r.l. processes the personal data of visitors to www.brainstar.it and of people who contact us through the form, under Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003. The Italian version prevails in case of discrepancy.
1. Data controller
Brainstar S.r.l., Via Nazionale 300, 98049 Villafranca Tirrena (ME), Italy — VAT IT03474150830 — certified email mail@pec.brainstar.it — email [EMAIL].
2. Data we process
- Data you submit through the contact form: full name, email, company or organisation, country, message and page language.
- Browsing data: our servers record technical data (IP address, date and time, requested page, browser) in log files, to operate and secure the website.
- Language preference: if you choose a language, your browser stores it locally (localStorage). It stays on your device and is not sent to our servers.
- Visit statistics (Brainstar Analytics): [TO BE COMPLETED: data collected, e.g. page, referrer, device type, country; state whether the IP address is truncated or anonymised].
We do not process special categories of data (Art. 9 GDPR): please do not include them in your message.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to requests and preparing proposals or quotes | Pre-contractual steps at your request (Art. 6(1)(b)) |
| Website security and abuse prevention | Our legitimate interest (Art. 6(1)(f)) |
| Aggregate statistics on website use | [TO BE VERIFIED: legitimate interest (Art. 6(1)(f)) if data is minimised, otherwise consent (Art. 6(1)(a))] |
| Legal obligations and defence of legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
We do not carry out profiling, we do not take decisions based solely on automated processing, and we do not use your data for marketing without specific consent.
4. Provision of data
Filling in the form is optional, but your name, email and message are needed to answer your request.
5. Processing methods
Data is processed electronically, over an encrypted connection (HTTPS), by authorised staff and with security measures appropriate to the risk. The website loads no third-party resources: fonts, scripts and images are served from our own servers.
6. Recipients
Data may be processed, as processors under Art. 28 GDPR, by the providers of services the website needs: the hosting provider (Namecheap, Inc.) and the email provider [TO BE COMPLETED]. Data is never published or sold.
7. Transfers outside the European Union
[TO BE VERIFIED: state where the hosting and email servers are located. If data is processed outside the European Economic Area, transfers rely on the safeguards of Chapter V GDPR, such as an adequacy decision (the EU-U.S. Data Privacy Framework, if the provider participates) or the European Commission’s Standard Contractual Clauses.]
8. Retention
- Contact requests: as long as needed to handle them and no longer than 24 months, unless a contract follows.
- Technical logs: [TO BE VERIFIED with the hosting provider].
- Language preference: until you clear it from your browser.
9. Your rights
At any time you may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR). Where processing is based on consent, you may withdraw it without affecting prior processing. To exercise your rights, write to mail@pec.brainstar.it or [EMAIL].
10. Complaints
If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country of residence.
Any changes to this notice will be published on this page with the date of the update.