Privacy Policy
Note: this document is a draft pending legal review and must be validated by legal counsel before publication. Last updated: 29 June 2026.
This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to users interacting with the website www.brownenterprises.it.
1. Data Controller
Brown Enterprises Srl Semplificata (Srls)
Via Fattori 10, 60019 Senigallia (AN), Italy
VAT no. 02870950421
E-mail: info@brownenterprises.it • PEC: brownsrls@pec.it
Website: www.brownenterprises.it
Brown Enterprises, founded in 2020, operates in the fields of science and cultural communication and outreach, edutainment and training.
2. Types of data processed
- Navigation data: IP addresses, browser and device type, operating system, pages visited, date and time of access and other technical parameters collected automatically during use of the site.
- Aggregated usage data: statistical information collected through the Google Analytics 4 analytics tool, subject to consent.
- Data provided voluntarily: contact data (such as name and e-mail) that the user may communicate by writing to the Controller's e-mail addresses.
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Provision and operation of the website and IT security | Legitimate interest of the Controller (Art. 6.1.f GDPR) |
| Responding to requests sent by e-mail or PEC | Pre-contractual or contractual measures (Art. 6.1.b GDPR) |
| Aggregated statistical analysis of site use (Google Analytics 4) | Consent of the data subject (Art. 6.1.a GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
4. Analytics tools and cookies
The website uses exclusively Google Analytics 4 (property ID G-C9Q1EXYC7Q), loaded via gtag.js / Google Tag Manager, for aggregated statistical purposes. The tool is activated only after the user's consent, given through the dedicated banner; without consent, analytics storage remains disabled. No other tracking tools or advertising profiling cookies are present. For details on cookies, please refer to the Cookie Policy.
5. Processing methods
Data is processed using IT and electronic tools, adopting technical and organisational measures appropriate to ensure its security, integrity and confidentiality and to prevent unauthorised access.
6. Recipients and disclosure of data to third parties
Data may be processed by parties acting as data processors on behalf of the Controller, including:
- Google Ireland Limited – statistical analysis service (Google Analytics 4);
- hosting and website infrastructure service providers.
Some of these providers may involve the transfer of data to third countries (for example the United States); in such cases the transfer takes place on the basis of adequate safeguards provided for in Articles 44 et seq. of the GDPR (for example standard contractual clauses or adequacy decisions of the European Commission). Data is neither disseminated nor sold to third parties for their own commercial purposes.
7. Retention period
Data is retained for the time strictly necessary for the purposes for which it was collected. In particular: Google Analytics statistical data is retained according to the platform's retention settings and in any case for a maximum of 14 months; contact data provided by e-mail is retained for the time needed to handle the request and for any related legal obligations.
8. Data subject rights
Within the limits provided by the GDPR, the data subject has the right to:
- access their personal data (Art. 15);
- obtain rectification (Art. 16);
- obtain erasure (Art. 17);
- obtain restriction of processing (Art. 18);
- receive the data in a structured format and port it to another controller (Art. 20);
- object to the processing (Art. 21);
- withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7).
To exercise these rights, the user may write to info@brownenterprises.it or to the PEC address brownsrls@pec.it. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Changes to this notice
The Controller reserves the right to amend or update this notice. Any changes will be published on this page together with the date of the last update.