Privacy & Cookie Policy

Introduction

Pursuant to art. 13 of European Regulation no. 679 of 2016 (the "Privacy Regulation"), as well as Recommendation no. 2 of 2001 adopted pursuant to art. 29 of Directive no. 95/46/EC, BRAINY LABS SRL intends to inform all users and/or visitors of the website www.brainylabs.it (respectively the "Users" and the "Site"), regarding the use of personal data, log files and cookies collected through the Site itself.

1. Data Controller, Data Processors and Data Protection Officer

The controller of the processing of personal data is BRAINY LABS SRL (Tax Code and VAT no. 03946231200), with registered office at Via Claudio Treves, 24, 40135 BOLOGNA (BO), Italy, e-mail info@brainylabs.it (hereinafter the "Controller").

The updated list of designated Data Processors may be provided upon request by the data subjects and/or Users.

The company has not appointed a Data Protection Officer.

2. Information collected automatically by the Site — Cookies

2.a Information collected automatically

Like all websites, our Site also makes use of log files, in which information collected automatically during visits is stored. The computer systems and software procedures responsible for the operation of the Site, in fact, automatically acquire certain information during use, the transmission of which is implicit in the use of Internet communication protocols.

The information collected is as follows:

the Internet Protocol (IP) address or the domain name of the device used;
the type of browser and the parameters of the device used to connect to the Site;
the URI (Uniform Resource Identifier) addresses of the requested resources or the method used to submit the request to the server;
the name of the internet service provider (ISP);
the date and time of the visit;
the User's referral and exit web page;
where applicable, the number of clicks;
the size of the file obtained in response;
the numeric code indicating the status of the response given by the server (successful, error, etc.);
other parameters relating to the operating system and the IT environment of the device.

This information is processed in automated form and collected exclusively in aggregate form in order to verify the correct functioning of the Site.

2.b Cookies

We and our trusted partners use cookies and other technologies in our related services, including when the User visits our Site or accesses our services.

A "cookie" is a small piece of information that a website assigns to the User's device while browsing a website. Cookies are very useful and can be used for various purposes, including the ability to navigate between pages efficiently, enable the automatic activation of certain functions, remember preferences and make the interaction between the User and our services faster and easier. Cookies are also used to ensure that the advertisements displayed are relevant to the User and to their interests and to compile statistical data on the use of our Services.

The Site uses the following types of cookies:

Session cookies: stored only temporarily during a browsing session to allow the normal use of the system, deleted from the device when the browser is closed;
Persistent cookies: read only by the Site, saved on the User's computer for a set period and not deleted when the browser is closed. These cookies are used when it is necessary to know who the User is for repeat visits, for example to allow us to store preferences for subsequent access;
Third-party cookies: set by other online services that track content on the displayed page, for example, by third-party analytics companies that monitor and analyse access to our website.

Cookies do not contain any information that personally identifies the User, but the personal information we store about the User could be linked, by us, to the information stored and obtained from cookies. You can remove cookies by following the instructions in your device preferences; however, if you choose to disable cookies, some features of our Site may not work correctly and your online experience may be limited.

We also use a tool called "Google Analytics" to collect information about the use of the Site. Google Analytics collects information such as how often Users access the Site, which pages they visit, when they do so, etc. We use this information for the sole purpose of improving our Site and our services. Google Analytics collects the IP address assigned to the user on the date they visited the sites instead of the name or other identifying information. We do not combine the information collected through Google Analytics with personally identifiable information. Google's ability to use and share the information it collects about your visit to this Site is limited by the Google Analytics Terms of Use and Google's Privacy Policy.

3. The personal data provided when using the Site: the purposes for which it will be processed

The personal data requested and provided is used to allow you to access the website www.brainylabs.it (hereinafter the "Site") and to use the following services (the "Site Services"):

consult the Catalogue/products/services;
be Contacted;
access the JOBS area.

The data is processed for the following purposes:

to carry out the technical management of the Site; (ALL)
to acquire, through the completion of a specific form, the references of the site users in order to satisfy requests for informational/commercial contact (CONTACT US);
the possible establishment of a working collaboration (WORK WITH US).

The processing of data for the above purposes will be carried out in compliance with the Privacy Code, the Privacy Regulation and all specific sector regulations, including the provisions of the "Rules of the Data Protection Authority for loyalty programmes" of 24 February 2005 and the "Guidelines on the processing of personal data for online profiling" of 19 March 2015.

In compliance with the "Guidelines on promotional activities and the prevention of spam" of 4 July 2013, we point out that any consent given for the sending of commercial, promotional and marketing communications through automated means also extends to traditional means of contact.

The data provided will be processed mainly with IT tools under the authority of the Data Controller, by persons specifically appointed, authorised and instructed to process it pursuant to articles 28 and 29 of the Privacy Regulation. We inform you that appropriate security measures are observed, also pursuant to articles 5 and 32 of the Privacy Regulation, to prevent data loss, illegal or incorrect use and unauthorised access.

It is specified that for the purposes referred to in points (1), (2), (3) of the previous art. 3, the provision of personal data is mandatory since, in its absence, it will not be possible to use the Services offered by the Site.

Please note that, in any case and at any time, you may request the Controller to delete your data by means of a simple communication to be sent, without any particular formality, to the contact details referred to in the previous art. 1.

With reference to the purposes referred to in points (1), (2), (3) of the previous art. 3, the legal basis of the processing is in fact the performance of the services provided through the Site and requested (pursuant to article 6, paragraph 1, letter b of the Regulation).

5. To whom and within what scope we may transfer the data

The data may be communicated, within the EU, in full compliance with the provisions of the Privacy Code and the Privacy Regulation, to the following parties:

to the financial administration and/or other public authorities, where required by law or upon their request;
to the structures, parties and external companies that the Controller uses for the performance of activities connected, instrumental or consequent to the execution of the Site Services — including the cloud computing storage service — to the sending of the Newsletter and to Profiling Activities;
to external consultants (for example, for the management of tax obligations), if not designated in writing as Data Processors;
to credit institutions for purposes instrumental to the possible purchase of goods/services where provided for in any part of the site.

The information collected automatically by the Site, referred to in paragraph 2, as well as certain anonymous data relating to the number and type of interactions on the activities associated with loyalty purposes in the strict sense, may also be transferred to Third-Party cloud servers also located outside the EU, as such processing is necessary for the execution of the requested Site Services. The legal basis of this processing is therefore art. 49, paragraph 1, letter b of the Privacy Regulation.

6. Rights

Please note that at any time you may exercise the rights referred to in articles 15, 16, 17, 18, 20 and 21 of the Privacy Regulation, by sending a written communication to the Controller's contact details referred to in the previous art. 1 and, as a result, obtain:

confirmation of the existence or otherwise of personal data, with indication of its origin, verify its accuracy or request its updating, rectification, integration;
access, rectification, deletion of the data or restriction of processing;
the deletion, transformation into anonymous form or blocking of data processed in violation of the law.

You may also object to the processing of personal data previously provided.

With reference to the Newsletter, we highlight the right to request the cessation of processing carried out through automated means of contact, extended also to traditional ones. Furthermore, the possibility of exercising this right only in part remains, i.e. by requesting the interruption, for example, of the sending of promotional communications carried out through one or some of the contact tools for which consent has been given.

7. Duration of Processing

Without prejudice to legal obligations, personal data will be stored for a determined period, based on criteria founded on the nature of the services provided.

It is specified that data stored for Profiling or Marketing purposes will be kept for a period not exceeding 12 and 24 months respectively from their registration.

8. Security measures

Through the Site, data is processed in compliance with applicable law and using appropriate security measures in accordance with current regulations, also pursuant to articles 5 and 32 of the Privacy Regulation.

In this regard, we confirm, among other things, the adoption of appropriate security measures aimed at preventing unauthorised access, theft, disclosure, modification or unauthorised destruction of the data processed.

9. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. In such case, users will be promptly informed when they next use the Site.

How to contact us

For any general questions about the Site or about the information we collect about the User and how we use it, you can contact us at info@brainylabs.it.

Last updated April 2025