+39 0341 1693087 marketing@brm-extremities.com
Request consulting
EN

Privacy policy

This Privacy Policy (hereinafter the “Policy”) describes the personal data collected or generated (processed) when you use the website of the Data Controller, available at https://brm-extremities.com/ (hereinafter the “Site”). This Policy describes the types of personal data collected when you use our Site and how personal data are collected, shared and protected.

Data Controller

The Data Controller is BRM EXTREMITIES SRL (hereinafter the “Controller”), Tax Code/VAT No. 08683610961, registered office at Via Lorenzo Mascheroni no. 29, 20145 Milan (MI), operational office in Civate (23862 – LC), Via Privata ai Campi, 7, in the person of its legal representative pro tempore. Email: privacy@brm-extremities.com.

Types of data processed

Browsing data

The IT systems and software procedures used to operate this Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified users, but by its nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of messages to the addresses of BRM EXTREMITIES SRL indicated on the Site, and/or private messages sent by users to institutional social media profiles/pages, entails the acquisition of the user’s contact details (such as name and surname, email address, telephone number), of all personal data included in the communication, as well as any further data needed to reply and fulfil the user’s specific requests.

Account management data

Identification and contact information (such as name and surname, date of birth, postal address, contact methods) needed to identify the user when using one of our services. Socio-demographic information (for example age, profession, gender, etc.) when creating an account.

Newsletter or industry mailing list subscription

Data collected when filling in the newsletter subscription form – or to receive specific industry communications relating to mailing lists you have been invited to or have requested to join – such as: name and surname, company, telephone, email address.

Purposes of processing and legal basis

Users’ personal data may be processed for the following purposes:

  • browsing data are processed to enable use of the web services and to obtain statistical information on the use of the services (for example most visited pages, number of visitors by time band or day, geographic areas of origin, etc.) and to check the correct operation of the services. Such data are collected automatically by the Site and do not require any action by the user. The legal basis is the Controller’s legitimate interest in making the Site’s features usable following the user’s access and browsing. Data may be used to ascertain liability in the event of hypothetical computer crimes against the Site and may be disclosed to the Judicial Authority upon explicit request. In that case, the legal basis is compliance with a legal obligation incumbent on the Controller;
  • data collected when the user writes directly to the addresses of BRM EXTREMITIES SRL on the Site will be processed to reply to user requests. Contact data are necessary, as their absence prevents a reply. The legal basis is the need to take pre-contractual and contractual measures at the user’s request, and to fulfil related legal obligations;
  • data collected for account management are created to allow a personal profile to access services made available via the web. Such data are necessary, as their absence prevents account creation. The legal basis is the need to take pre-contractual and contractual measures at the user’s request;
  • data collected for newsletter or industry mailing list subscription will be processed to send informational and promotional communications about BRM EXTREMITIES SRL’s activities, including invitations to events and/or conferences and/or trade fairs organised by BRM EXTREMITIES SRL also in cooperation with third parties. Providing the data is necessary to complete and use the newsletter or specific industry mailing list service: if you refuse or fail to provide the requested data, it will not be possible to receive newsletters or industry communications.

Users may unsubscribe from the newsletter or industry mailing list at any time by following the procedure indicated at the bottom of each newsletter/industry communication or by sending a specific communication to BRM EXTREMITIES SRL at the addresses indicated above. The legal basis for this processing is the need to take pre-contractual and contractual measures at the user’s request.

Processing methods

Data will be processed by manual and IT tools by staff of BRM EXTREMITIES SRL authorised for this purpose and/or by companies expressly appointed as processors pursuant to Art. 28 of Regulation (EU) 2016/679. The full list of processors is kept at the Controller’s registered office and is available on request.

No automated decision-making processes on aggregated data (so-called profiling) are carried out, except for purposes related to better Site management.

Retention period

Personal data collected and processed by BRM EXTREMITIES SRL for the identified purposes may be retained in a form that permits identification of the user for the period necessary to achieve the purposes of processing and, in particular:

  • browsing data do not persist for more than seven days (except where needed for investigation by the judicial authority);
  • data for newsletter subscription and account creation are retained for 12 months from subscription, extendable for further 12-month periods unless the data subject unsubscribes, withdraws consent or deletes the account by writing to BRM EXTREMITIES SRL at the addresses indicated above or, for commercial newsletters, by clicking the link at the bottom of each email;
  • data from spontaneous job applications will be retained for 12 (twelve) months from receipt;
  • data from spontaneous user requests for 12 (twelve) months from the communication.

Data may be retained for longer periods where necessary to comply with legal obligations or to protect the rights of BRM EXTREMITIES SRL, until the relevant limitation period expires.

Transfer of data to a third country

For the services offered by the Site, the Controller uses servers located in Italy/Europe.

Data subject rights and contact details

Pursuant to Arts. 15 et seq. of Regulation (EU) 2016/679, the user may at any time, within the applicable limits: (i) request access to their personal data; (ii) request rectification, erasure or restriction of processing; (iii) object to processing or withdraw consent; (iv) obtain their data in a structured format to enable data portability; (v) object to processing.

Requests to exercise these rights must be sent by email or registered mail to the Controller’s addresses indicated above.

Complaint

Users who believe that the processing of personal data relating to them through this Site infringes Regulation (EU) 2016/679 may lodge a complaint with the Italian Data Protection Authority (Art. 77 Reg. EU 2016/679) or bring proceedings before the competent judicial authority (Art. 79 Reg. EU 2016/679).

Changes to this privacy policy

BRM EXTREMITIES SRL periodically reviews its privacy and security policy and, where appropriate, revises it in light of regulatory, organisational or technological developments. If the policies change, the new version will be published on this page of the Site.

Protection of personal data

Encryption and security: we use a variety of technical and organisational security measures, including encryption and authentication tools, to keep personal data secure. Personal data are held in protected networks and are accessible only to a limited number of people with special access rights to those systems.

Links to social networks

The Site contains links or references to social networks such as LinkedIn and Instagram. By clicking the relevant icons (links) you can visit the Controller’s social pages. The Controller does not control cookies or other monitoring technologies of those websites, to which this Privacy Policy does not apply. For details of cookies and activities carried out by third parties, please consult the individual privacy policies of those websites.

Technical details and tracking tools

The following tools are used on the Site via Google Tag Manager (container GTM-TZSLNQR) (full detail in the Cookie Policy):

  • Google Analytics 4 (GA4) and related events (brochure download, email, contact form, map, phone) — measurement;
  • Google Ads (conversions and calls) and Conversion Linker — marketing;
  • Zoho PageSense — experience/performance;
  • UTM passthrough script / first-party lead_source cookie — functional for lead provenance;
  • technical cookies of the consent banner (cookie preferences) — necessary.