Privacy policy

DATA CONTROLLER The data controller is Pasquale Bruni S.p.A., with registered office in Via Alessandro Manzoni no. 19 - 20121, Milan, e-mail address: info@pasqualebruni.com, PEC: pasqualebrunispa@pec.pasqualebruni.com, VAT number: IT13287880150 (hereinafter, the “Company” or the “Data Controller”).
The Data Controller can be contacted for any information on the processing at the following e-mail address: privacy@pasqualebruni.com 
CATEGORIES OF 
PERSONAL DATA 		For the purposes indicated in this policy, the Data Controller will process the data collected automatically during browsing and the data you voluntarily provide to us.

      a)    Browsing data 

The computer systems and software procedures used to operate the website may acquire, during their regular operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects but, by its very nature, could allow users to be identified through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of the devices used by users who connect to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. 

These data are used for the sole purpose of checking the correct functioning of the website, to allow the correct provision of the web services and functions requested by you, as well as to ascertain any liability in the event of hypothetical computer crimes against the website or third parties. 
With reference to the personal data collected through cookies, we invite you to read our Cookie Policy.

      b)    Personal data that you voluntarily provide to us

We collect the data that you voluntarily provide to us (e.g., name, surname, e-mail address, password, etc.) when (i) you contact us via the “Contact Us” form on the website or write to our contact channels, (ii) you create an account on our website, (iii) you purchase our products, as well as (iv) when you subscribe to our newsletter.
DATA SOURCE Your personal data is collected or will be acquired directly from you.


PURPOSE OF THE PROCESSING
LEGAL BASIS FOR PROCESSING
DATA RETENTION PERIOD
To allow navigation on the website and provide web services.
Execution of pre-contractual measures taken at your request or execution of a contract to which you are a party.
For a period of 7 days, except for any need to ascertain crimes by the judicial authority.
To control the correct functioning of the website and web services, to allow the monitoring of website traffic, and to collect useful information for the performance of statistics through cookies.
The legitimate interest of the Data Controller to verify and guarantee the operation of the website and related web services.
For a period of 7 days, except for any need to ascertain crimes by the judicial authority.
To allow registration on the website by creating an online account.
Execution of pre-contractual measures taken at your request or execution of a contract to which you are a party.
As long as you keep your account active. In the event of your prolonged inactivity, the Company will send you an information notice inviting you to log in to your account.
To manage and respond to your requests for information received through the form on the website or through the Company’s contact channels.
Execution of pre-contractual measures taken at your request or execution of a contract to which you are a party.
For the time necessary to manage and process your request and, in any case, no later than 3 months from collection.
To send, by e-mail, commercial communications, newsletters and invitations to events and initiatives organized by the Company.
Your express consent. 
For 7 years from collection or until you exercise your right to object or withdraw your consent, whichever is earlier.  
To allow you to process the purchase of the Data Controller’s products through the website.
Execution of pre-contractual measures taken at your request or execution of a contract to which you are a party.
- Your payment details will be deleted immediately. 
- The data processed for the purpose of managing the purchase of the product are stored for the entire duration of the contractual relationship.
To allow us to store your credit card information to facilitate further online transactions.
Your express consent.
For as long as your account remains active, and in any case, no longer than 24 months.
To protect rights in the course of judicial and extrajudicial proceedings.
Legitimate interest of the Data Controller in the protection of its rights.
Personal data are stored for the time necessary to ascertain, exercise, and defend rights (i.e., for the entire duration of the pre-litigation phase and litigation until the deadlines for appeals have been exhausted).
 After the expiry of the retention periods indicated above, the data will be deleted or made anonymous.

 

NATURE OF THE PROVISION
  • It is necessary to provide personal data processed for the purpose of allowing correct navigation on the website, as well as checking its proper functioning, allowing the monitoring of website traffic, and collecting useful information for the performance of statistics through cookies. Failure to provide data for this purpose could result in the incorrect functioning of web services and the impossibility of browsing the website correctly.
  • The provision of personal data processed for the purpose of allowing registration on the website by creating an online account is necessary. Failure to provide data for this purpose will make it impossible to create an account on our website.
  • The provision of personal data processed for the purpose of managing and processing requests for information is necessary. Failure to provide data for this purpose will make it impossible for the Data Controller to manage and follow up on the requests received.
  • The provision of personal data processed for the purpose of sending, by e-mail, commercial communications, newsletters, and invitations to events and initiatives organized by the Company is optional. However, the Company cannot send you the aforementioned communications if you do not provide your data.
  • The provision of personal data processed for the purpose of processing the purchase of the Data Controller’s products is necessary. Failure to provide data for these purposes will make it impossible to purchase the Data Controller’s products.
  • The provision of personal data processed for the purpose of storing credit card data is optional. However, if you do not provide your data, you must re-enter the information relating to the payment method used from time to time. 
RECIPIENTS OF PERSONAL DATA To carry out certain processing activities, the data may be communicated to external parties who operate as data controllers or who process personal data on behalf of the Company, as data processors. In particular, personal data may be communicated to the following categories of recipients:
  • companies that provide us with hosting services, IT services, and IT support in connection with the website;
  • the company that provides us with the cookie consent management platform (CMP);
  • consultants and law firms;
  • companies that provide digital marketing and e-mail marketing services;
  • companies that provide website development services;
  • authorities to which the right to access the data is granted by legal provisions or regulations (e.g., public security authorities, police forces).
You can request the complete list of recipients of your personal data by sending an email to privacy@pasqualebruni.com
TRANSFERS OF PERSONAL DATA The Company stores the data on servers located within the European Union. 

Some providers employed by the Data Controller (i) are located in countries outside the European Union that are the recipients of an Adequacy Decision or (ii) have certified their participation in the EU-USA data privacy framework.

If, due to future needs related to the headquarters or processing places of its providers, the Company needs to transfer data outside the European Union to countries for which the European Commission has not issued an Adequacy Decision, the Company undertakes to ensure adequate levels of protection and safeguards, including contractual ones, in accordance with the applicable regulations,  including the stipulation of standard contractual clauses, possibly supplemented by additional technical, legal and organizational measures necessary to ensure that the level of protection of personal data is equivalent to that of the European Union.
RIGHTS OF THE DATA SUBJECTS In the cases envisaged, you may exercise, in relation to the processing of your data, the following privacy rights:
  • the right to receive confirmation as to whether personal data is being processed and the right to know which personal data is being processed and how it is being used (right of access);
  • the right to request the updating, modification and/or rectification of personal data (right to rectification);
  • the right to request the erasure of data (right to be forgotten);
  • the right to request the restriction of processing (right to restriction);
  • the right to withdraw consent (right to withdraw consent);
  • the right to receive a copy of the data in electronic format and to request that such data be transmitted to another controller (right to data portability);
  • the right to object to processing where the processing is based on our legitimate interest or in the case of processing carried out for marketing purposes, including based on profiling (right to object).
If you exercise any of the aforementioned rights, it will be the responsibility of the Data Controller to verify that you are entitled to exercise it and you will be acknowledged, typically, within one month.

To exercise these rights and obtain further information on the processing of your data, you can contact the Company by writing to the following e-mail address: privacy@pasqualebruni.com.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY If you believe that the processing violates the rules relating to the protection of personal data, you have the right to lodge a complaint with the competent Supervisory Authority (in Italy, the Garante per la protezione dei dati personali - www.garanteprivacy.it).

Last updated: May 2025

 The icons reproduced in this policy have been created by the Maastricht European Centre on Privacy and Cybersecurity and have been disseminated by the Italian Data Protection Authority (www.garanteprivacy.it) in the form in which it has received them from the authors. The icons are used here on the basis of the CC BY 4.0 license (whose conditions are incorporated herein) in the form in which they are published on the Garante’s website.

 

***