PRIVACY AND COOKIE POLICY

The personal data we acquire are processed even automatically for the following reasons:

• to allow you to access our online services;
• to send you the information you asked for.

Data controller
Company name: Brado Spa – a sole-shareholder company
Headquarters: via Cal di Mezzo, 331049 Valdobbiadene (TV)
Tel.: +39 0423 9765
Email: info@brado.it
 
Who processes your personal data
In addition to Brado Spa employees and collaborators, your data may be handled by third parties we entrust with specific activities (or parts of them), which are connected or instrumental to data processing or the provision of the requested services. These people will act as autonomous data controllers or will be appointed as data processors.
 
 Why we ask for your data, and what happens if you refuse to provide them
We process the data we collect through our website after obtaining your consent, as per Article 6, paragraph 1, letter a) of the GDPR. However, if you don’t provide your data, we will be unable to contact you and/or give you the information you asked for.
 
Mandatory personal data
Some data are necessary for the website to work, while others are used solely to obtain anonymous usage statistics and verify whether the website is working correctly. These data are deleted immediately after processing.
 
What data we process
a) DATA PROVIDED BY USERS
Users provide the personal data we collect voluntarily by filling out the contact form or email.
 
b) BROWSING DATA/DATA REQUIRED FOR THE WEBSITE TO WORK, including but not limited to the following:
IP address
The URI (Uniform Resource Identifier) addresses of the requested resources
Time of the request
The status code indicating the server’s response (success, error, etc.)
Domain names of computers used to access this website
Other parameters about the operating system and the user’s IT environment
Information on the user’s browsing behaviour, for example, using cookies
 
c) SOCIAL MEDIA SHARING DATA
Sharing content on social media may enable access to information about your profile if you have authorised data sharing with third-party applications.
 
d) LOCATION DATA
This website may collect location data, masking the IP address (i.e. anonymously)
 
e) RESTRICTED AREA DATA (My Brado registered users)
You can view the latest news and place and track your orders by logging into your personal account
Why we process your personal data
We need to process your data to get back to you when you fill in a contact form and allow you to access our online services (including logging into your “My Brado” account). You can read the related information notices on the website pages dedicated to specific services.
 
 How we process your personal data
Personal data will be processed in paper and electronic form and stored in databases, which can only be accessed by data processors authorised by the data controller. These processors can view, use, process, compare data and perform any other relevant operation (even automatically) in compliance with the standards in force to ensure that the data are secure and confidential, as well as accurate, updated, and relevant for the stated purposes.
 
How long we retain your data

• Data provided through contact forms: 5 years
• Data provided when signing up for a My Brado account: 10 years from the last order/access (and up to an additional 10 years) based on criteria for balancing legitimate business interests (e.g. for tax audits or correspondence regarding disputes, arrears, legal, statistical, or quality aspects)

Retention of personal data processed during a website browsing session

Cookies are short text strings that the website you browse sends to your computer or mobile device to “remember” you and improve your user experience.
Our system uses session cookies and persistent cookies. Session cookies expire as soon as you close your browser, while persistent cookies remain on your device until they expire or you erase them.

Provider (data controller)

Cookie name

Duration

Purpose

First or third-party

Technical, analytics, marketing, and profiling

Anonymous or non-anonymous

Link to the organisation’s privacy/cookie policy

Data location and third-country data transfer
We store the personal data we collect on Brado S.p.A. servers located in ITALY.
They are transferred to third parties only when strictly necessary to fulfil your request.
Brado Spa does not transfer personal data outside of the European Union.
 
 How we protect your data
We design our systems and devices keeping your security and privacy in mind. We use automated means to process personal data according to necessity and proportionality principles. In addition, we avoid processing data when an operation can be performed using anonymous data.
As per the GDPR, we employ physical, electronic and organisational security measures to protect the personal data we collect, store, and transfer from accidental loss, unlawful processing, and access by unauthorised persons.
To this end, we remind you that it is crucial to ensure that your devices are equipped with regularly updated antivirus software and that your internet service provider takes appropriate measures for secure transmissions, such as firewalls and spam filters.
 
 Your rights as the data subject
As the data subject, you have the right to exercise the following rights under the GDPR:
· right of access (Article 15): you have the right to be informed about whether or not your personal data are being processed and to obtain a copy;
· right to rectification (Article 16): you have the right to obtain the rectification of inaccurate personal data concerning you;
· right to erasure/be forgotten (Article 17): you have the right to ask for your personal data to be erased without undue delay;
· right to restrict processing (Article 18): you have the right to restrict the processing of your personal data, for example, when you have contested their accuracy;
· right to data portability (Article 20): you have the right to receive your personal data in a structured format and transfer them to another data controller in the cases under the same article;
· right to object (Article 21): you have the right to object to the processing of your personal data;
· right not to be subject to automated decision-making (Article 22): you have the right not to be subject to a decision based solely on automated processing.
For more information about your rights as the data subject, you can contact your local Data Protection Authority or request the full extract of the articles above from the data controller.
Per the GDPR, you can exercise your rights at all times and free of charge by emailing us at info@brado.it.
Where possible, the data controller will inform all the recipients of your personal data about any rectification, erasure or restriction of processing (Article 19).
In addition, you have the right to withdraw your consent to data processing at all times by emailing us at info@brado.it.
Your withdrawal of consent will not affect the lawfulness of any processing carried out by us before such withdrawal (Article 7).
 
Right to lodge a complaint
If you think your data protection rights have been breached, you have the right to lodge a complaint with your local data protection authority.
Go to the website of your data protection authority for more information on how to lodge a complaint.
 
Updates and amendments
This privacy notice was last updated on 5 October 2022 and will remain valid until its next review.