{"id":3,"date":"2026-03-07T14:02:45","date_gmt":"2026-03-07T13:02:45","guid":{"rendered":"https:\/\/brilove.com\/?page_id=3"},"modified":"2026-03-26T13:34:09","modified_gmt":"2026-03-26T12:34:09","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/brilove.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Privacy and Cookie Notice<\/h1>\n

Last updated: 26 April 2026<\/strong><\/p>\n

\n

Data Controller<\/h2>\n

Pursuant to Regulation (EU) 2016\/679 (GDPR), Italian Legislative Decree No. 196\/2003, as amended, the guidelines of the Italian Data Protection Authority and the opinions issued by the European Data Protection Board (EDPB), the controller of personal data collected through this website is:<\/p>\n

Data Protection Officer (DPO):<\/strong><\/p>\n

Simona Garau
\nVico I Cagliari 5, 09090 Albagiara
\nPhone and WhatsApp: 333 3415838 \/ 347 7659529
\nEmail: info@brilove.com
\nItalian tax code: grasmn74m47b354i<\/p>\n

The Controller ensures that users\u2019 personal data is processed lawfully, fairly, transparently and accurately, with integrity, security and confidentiality, in accordance with the accountability principle under Article 5(2) of the GDPR.<\/p>\n

General Principles of Processing<\/h2>\n

Processing complies with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability. The Controller implements appropriate technical and organisational measures to prevent unauthorised access to, alteration, destruction or disclosure of personal data.<\/p>\n

Important note:<\/strong> Although the Controller does not currently use advanced artificial intelligence tools or intrusive biometric technologies, it reserves the right to use automated tools and emerging technologies in future. These will be covered by a specific supplementary notice and will require explicit consent where applicable law so provides.<\/p>\n

Categories of Data Processed<\/h2>\n

Browsing Data<\/h3>\n

Information automatically collected by IT systems, including IP address, browser type, operating system, system logs, user agent, timestamps, referring and destination URLs, and interaction parameters.<\/p>\n

Data Provided Voluntarily<\/h3>\n

Data submitted by users through contact forms, registration, comments, reviews, email or service subscriptions: first name, surname, email address, contact details, username, messages, preferences and attachments.<\/p>\n

Data Collected by Automated Tools<\/h3>\n

Cookies, tags, pixels, scripts, SDKs, analytics and advertising tools, embedded content, chatbots, CAPTCHAs, behavioural biometric technologies (such as mouse-movement tracking and typing timing), social plugins and automated profiling tools.<\/p>\n

Important note:<\/strong> The website does not currently collect biometric data in the strict sense, such as facial or voice recognition data. However, it may use anonymous behavioural metrics to improve the user experience. Any future development in this area will be preceded by an updated notice and a request for consent.<\/p>\n

Disclaimer for third-party tools:<\/strong> Where plugins or embedded tools involve data processing by third parties outside the Controller\u2019s direct control, such as social networks or external widgets, responsibility for their independent processing rests solely with the respective provider, to the extent permitted by applicable law.<\/p>\n

Data Used for E-commerce<\/h3>\n

Identification, tax and contractual data relating to purchases, deliveries, invoicing, after-sales support, order management and associated enquiries.<\/p>\n

Purposes of Processing<\/h2>\n
    \n
  • Provision of requested services and features<\/li>\n
  • Responding to enquiries and managing communications<\/li>\n
  • Compliance with legal, tax and regulatory obligations<\/li>\n
  • Management of orders, contracts and commercial transactions<\/li>\n
  • Statistical analysis, security and fraud prevention<\/li>\n
  • Direct marketing, newsletters and commercial promotions<\/li>\n
  • Profiling, remarketing and behavioural advertising<\/li>\n
  • Personalisation of content and recommendations<\/li>\n<\/ul>\n

    Algorithmic transparency notice:<\/strong> If AI-based tools or automated decision-making processes producing legal or similarly significant effects are introduced in future, users will be informed in advance about the logic involved, the expected consequences and the possibility of obtaining human intervention.<\/p>\n

    Delisting and the right to be forgotten:<\/strong> In accordance with national and European case law, users have the right to request the removal or delisting of content concerning them where it is outdated, inaccurate or harmful to their personal dignity, including by submitting a request to search engines or the Controller.<\/p>\n

    Legal Basis for Processing<\/h2>\n
      \n
    • Express consent (Article 6, point (a), GDPR)<\/li>\n
    • Performance of contractual or pre-contractual obligations (point (b))<\/li>\n
    • Compliance with a legal obligation (point (c))<\/li>\n
    • Legitimate interests pursued by the Controller or a third party (point (f)), subject to a balancing assessment against the data subject\u2019s fundamental rights and freedoms<\/li>\n
    • Without consent, data will not be processed for additional purposes<\/li>\n<\/ul>\n

      Additional notice:<\/strong> Where consent is required, it cannot validly be given through pre-ticked boxes requiring the user to opt out. The user must take an explicit, freely given and informed affirmative action to opt in.<\/p>\n

      Single Mechanism for Accepting the Notice and Cookies<\/h2>\n

      Under this website\u2019s technical configuration, interacting with the initial banner constitutes full and unconditional acceptance of this entire notice, with no option to make individual selections. Users who browse the website, click links, scroll through pages or access content expressly accept this full notice without reservation, acknowledging that continued browsing amounts to full consent, including for future developments that comply with applicable law. Users who do not wish to accept these conditions are asked to stop browsing immediately.<\/p>\n

      Processing Methods and Security<\/h2>\n

      Data is processed electronically and, where necessary, on paper, using appropriate security measures, including encryption, access controls, backups and intrusion prevention systems. Fully automated decision-making that produces legal or similarly significant effects is not used without prior specific notice and consent.<\/p>\n

      Advance notice:<\/strong> In anticipation of future technologies, the website undertakes to keep its security framework up to date, adopting the latest international standards for personal data protection and compliance audits.<\/p>\n

      Retention Periods<\/h2>\n

      Personal data is retained for a period proportionate to the purposes for which it was collected and, in any event, for as long as necessary to meet legal, tax and contractual obligations. Data processed for promotional purposes is retained for a maximum of 24 months unless consent is renewed. Data processed for contractual or tax purposes may be retained for up to 10 years under Article 2220 of the Italian Civil Code and applicable tax provisions.<\/p>\n

      Recipients of Personal Data<\/h2>\n

      Data may be disclosed to duly authorised third parties, including:<\/p>\n

        \n
      • Providers of digital services, hosting, content management systems and WordPress plugins<\/li>\n
      • Tax, accounting and legal advisers<\/li>\n
      • Payment platforms and banking service providers, such as Stripe and PayPal<\/li>\n
      • Providers of email marketing, CRM and statistical tracking systems<\/li>\n
      • Social media and advertising platforms<\/li>\n
      • Public authorities and judicial bodies, where required by law<\/li>\n<\/ul>\n

        Each third party is bound by a contract or equivalent legal instrument governing its duties as a Processor or Joint Controller, in accordance with Articles 26 and 28 of the GDPR.<\/p>\n

        International Data Transfers<\/h2>\n

        Personal data may be transferred to third countries outside the European Economic Area (EEA) only where the conditions set out in Articles 44\u201349 of the GDPR are met, including:<\/p>\n

          \n
        • An adequacy decision by the European Commission<\/li>\n
        • Standard Contractual Clauses (SCCs)<\/li>\n
        • Binding Corporate Rules (BCRs)<\/li>\n
        • Other appropriate safeguards recognised at European level<\/li>\n<\/ul>\n

          Such transfers will be made only to providers that ensure an adequate level of protection.<\/p>\n

          Data Subject Rights<\/h2>\n

          Users may exercise the rights set out in Articles 15 onwards of the GDPR in relation to their personal data at any time:<\/p>\n

            \n
          • Access to personal data<\/li>\n
          • Rectification and updating<\/li>\n
          • Erasure (the right to be forgotten)<\/li>\n
          • Restriction of processing<\/li>\n
          • Objection to processing, including automated processing<\/li>\n
          • Data portability<\/li>\n
          • Withdrawal of previously given consent, without affecting the lawfulness of processing carried out before withdrawal<\/li>\n
          • Lodging a complaint with the Italian Data Protection Authority<\/li>\n<\/ul>\n

            Jurisdiction and Updates<\/h2>\n

            The courts with jurisdiction over the Controller\u2019s registered office shall have exclusive jurisdiction over any dispute concerning the interpretation or application of this notice or otherwise relating to the processing of personal data. Users residing in the European Union may alternatively bring proceedings before the courts of their country of residence or domicile, pursuant to Regulation (EU) No. 1215\/2012.<\/p>\n

            The Controller reserves the right to amend this notice at any time, particularly to reflect changes in legislation, technology or website functionality. Users will be notified of any substantial changes through a banner, email where relevant, or a public notice. The current version will always be available on this page.<\/p>\n

            \n
            \n<\/div>\n

            This document has been prepared in accordance with the highest national and European regulatory standards, the principle of accountability, and the requirements of prevention, transparency and enhanced security.<\/strong><\/p>","protected":false},"excerpt":{"rendered":"

            Informativa sulla Privacy e sull’Uso dei Cookie Ultimo aggiornamento: 26 aprile 2026 Titolare del trattamento dei dati personali Ai sensi del Regolamento (UE) 2016\/679 (GDPR), del D.Lgs. 196\/2003 e successive modificazioni, nonch\u00e9 delle Linee guida del Garante per la Protezione dei Dati Personali e dei pareri emessi dall\u2019EDPB, si informa che il Titolare del trattamento […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":5,"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":751,"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/751"}],"wp:attachment":[{"href":"https:\/\/brilove.com\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}