Privacy Notice

Last updated:

This Privacy Notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and describes how Braintec di Conforto Andrea processes personal data of users who visit the website www.braintec.it and use its online services, including contact forms, quotation tools, information requests and preliminary assessment tools.

1. Data Controller

Braintec di Conforto Andrea
Registered office: Via E. Guevara, 2 - 06066 Piegaro (PG) - Italy
VAT / Tax ID: IT 02687410544

Dedicated privacy email: available in the contact section of this page

2. Categories of data processed

2.1 Browsing data

During normal operation, the website and related systems may process data whose transmission is implicit in the use of Internet communication protocols, including IP address, device identifiers, browser type, operating system, visited pages, date and time of the request, technical logs and other parameters relating to the user's IT environment.

These data are used to allow the website to function, ensure system security, prevent abuse, diagnose technical issues and obtain aggregated technical information on service usage.

2.2 Data provided through contact or quotation forms

The forms available on the website may collect identification and contact data such as name, surname, company or public body, role, email address, telephone number, subject of the request and any information voluntarily entered by the user.

2.3 Data collected through the online quotation tool

The online quotation tool may collect data relating to requests for ICT services, cybersecurity, consulting, technical support, software development, governance and other professional services.

Depending on the options selected, the form may collect information relating to:

  • ICT assets to be managed, including managed users or accounts, workstations, physical or virtual servers, critical services and operational sites;
  • indicative annual ICT budget assessment;
  • indicative assessment of the cost of an IT outage, including estimated annual value of affected services or processes, number of employees involved, potentially impacted users or citizens and estimated average cost per employee/day;
  • type of requested intervention, priority, delivery method, technical scope and possible need for remote or on-site activities;
  • additional technical, organisational or economic information needed to prepare a preliminary estimate or an eventual quotation.

Data entered in the quotation tool are used to generate an automatic or assisted preliminary estimate, contact the requester, complete the assessment with an operator and prepare an eventual quotation or offer.

2.4 Data relating to email address confirmation

Where the website requires confirmation of the email address, the email address entered, date and time of the request, confirmation status, technical verification token and logs necessary to document the proper functioning of the process may be processed. The confirmation token is used exclusively to verify that the indicated email address is actually available to the requester and to allow completion of the request.

2.5 Data contained in communications

If the user contacts the Controller by email, telephone or other channels, the Controller may process the data contained in the communications received, including any attachments voluntarily sent by the data subject. Users are invited not to transmit unnecessary personal data, credentials, passwords, health data or confidential information not relevant to the request.

3. Purposes of processing

  • to allow browsing and the proper functioning of the website;
  • to manage the technical security of the website, systems and communications;
  • to receive, manage and reply to requests sent through forms, email, telephone or other channels;
  • to prepare preliminary estimates, economic simulations and indicative assessments of ICT budget or IT outage costs;
  • to prepare quotations, commercial proposals, pre-contractual documentation or offers in the context of procedures, negotiations, requests for quotation, direct negotiations or assignments;
  • to verify the email address entered by the user and prevent unauthorised or incorrect requests;
  • to contact the requester in order to complete, verify or clarify the information entered;
  • to manage pre-contractual, contractual, administrative, tax and accounting relationships;
  • to comply with legal, regulatory or authority obligations;
  • to establish, exercise or defend rights in or out of court;
  • to prevent abuse, spam, unauthorised access or improper use of the website.

4. Legal basis for processing

  • performance of pre-contractual or contractual measures requested by the data subject;
  • compliance with legal, tax, accounting or administrative obligations;
  • the Controller's legitimate interest in website security, abuse prevention, organisational management of requests, protection of its rights and retention of supporting documentation;
  • the data subject's consent, where specifically required.

5. Nature of data provision

Providing the data requested in the forms is voluntary, but necessary to allow the Controller to receive the request, prepare a preliminary estimate, issue a quotation or contact the requester. In the fields relating to economic assessments, the user may enter only data known or reasonably estimated. Fields for which information is not available may be left blank, except for those technically marked as mandatory. If the information is insufficient, the assessment may be completed with an operator.

6. Processing methods

Processing is carried out using IT, electronic and, where necessary, paper-based tools, in accordance with the principles of fairness, lawfulness, transparency, minimisation, integrity and confidentiality. The Controller adopts appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction, disclosure, alteration or misuse.

7. Automated decision-making and quotation tool

The online quotation tool may generate an automatic preliminary estimate based on data entered by the user and predefined technical, economic or commercial parameters. The estimate is exclusively preliminary, informative and non-binding. It does not constitute an irrevocable offer, contractual proposal or acceptance of a request for assignment. Any binding offer may be made only after verification by the Controller and, where applicable, within a subsequent official procedure. The quotation tool does not produce automatic legal effects for the user.

8. Recipients of personal data

Personal data may be disclosed, within the limits necessary for the purposes indicated, to:

  • providers of IT services, hosting, maintenance, security, email, website management and digital infrastructure;
  • administrative, tax, legal or technical consultants;
  • persons authorised by the Controller to process personal data;
  • public authorities, bodies or entitled parties, in the cases provided for by law;
  • platforms or tools used to manage requests, quotations or communications.

External parties processing data on behalf of the Controller are appointed, where necessary, as Data Processors pursuant to Article 28 GDPR.

9. Transfers of data outside the European Economic Area

Personal data are preferably processed within the European Economic Area. At present, the main website infrastructure is hosted in the European Union. Where the use of suppliers or technology services makes transfers outside the EEA necessary, such transfers will take place in compliance with Articles 44 et seq. GDPR, on the basis of adequacy decisions, Standard Contractual Clauses or other safeguards provided for by applicable law.

10. Retention period

  • browsing data and technical logs are retained for the time necessary for website security and proper functioning, without prejudice to further retention in case of anomalies, abuse or investigation needs;
  • data entered in contact or quotation forms are retained for the time necessary to manage the request and, if no contractual relationship is established, generally for no longer than 24 months, unless further retention is necessary to protect the Controller's rights;
  • data relating to quotations, offers, negotiations, requests for quotation or contractual relationships are retained for the duration of the relationship and thereafter for the period required by applicable civil, tax and accounting law;
  • data processed on the basis of consent are retained until consent is withdrawn, without prejudice to legal obligations or legitimate interests justifying further retention;
  • data necessary to protect the Controller's rights may be retained for the time necessary to manage disputes or claims.

11. Cookies and tracking tools

The website uses only technical tools necessary for operation, security and browsing, including session mechanisms strictly required to manage protected forms and email confirmation flows. It does not use profiling cookies for advertising purposes.

12. Rights of the data subject

The data subject may exercise, in the cases provided for by the GDPR, the rights of access, rectification, erasure, restriction, objection, portability where applicable, withdrawal of consent and complaint to the supervisory authority by writing to the dedicated privacy email address indicated below.

Privacy Contacts

Send email

13. Complaint to the supervisory authority

A data subject who believes that the processing of personal data is carried out in breach of the GDPR has the right to lodge a complaint with the Italian Data Protection Authority.

14. Changes to this Privacy Notice

The Controller may update this Privacy Notice to reflect legal, technical, organisational or service changes. The updated version will be published on this page with the date of the latest update.