Privacy Policy

The data controller of the personal data collected through the website brandcreativelab.com is:

Through the website we may process:

• identification and contact data, such as name, surname, company, email and phone number;
• information voluntarily provided in contact or quote request forms;
• technical navigation data, such as IP address, device type, browser, operating system, date and time of access;
• data relating to the use of the site collected through analytics tools, only when consent is given;
• data relating to interactions with advertising campaigns, only when consent is given.

We do not intentionally request special categories of personal data. We invite you not to enter unnecessary sensitive information in the forms.

We process data for:

Consent may be withdrawn at any time through the cookie preferences panel without affecting the lawfulness of processing prior to withdrawal.

Data is processed using electronic tools and with technical and organisational measures adequate to protect it from unauthorised access, loss, modification or disclosure.

• contact and quote requests: for the time necessary to manage the request and, unless a contractual relationship is established, approximately up to 24 months;
• data relating to clients and administrative documentation: for the periods provided by applicable tax and civil regulations;
• technical and security logs: for the period strictly necessary for security and functionality purposes;
• analytics and advertising data: according to the retention settings of the respective providers and in any case in compliance with the consent expressed by the user.

Data may be processed by providers that support BRAND. CREATIVE LAB in managing the site and the business, for example:

• hosting and website building platforms;
• email and productivity services;
• analytics systems;
• advertising platforms;
• administrative, tax or technical consultants when necessary.

These parties act, depending on the case, as data processors, independent controllers or authorised parties.

Some technology providers may process data also outside the European Economic Area. In such cases, the transfer takes place on the basis of instruments recognised by the GDPR, such as adequacy decisions, the Data Privacy Framework where applicable, or Standard Contractual Clauses and further safeguard measures.

Pursuant to Arts. 15–22 GDPR, you may, where applicable:

• obtain confirmation of the existence of your data and access it;
• request rectification or updating;
• request erasure;
• request restriction of processing;
• object to processing based on legitimate interest;
• obtain data portability;
• withdraw consent at any time.

To exercise your rights you can write to hello@brandcreativelab.com.

You also have the right to lodge a complaint with the competent supervisory authority for the protection of personal data.

This notice may be updated over time to reflect regulatory, technical or service changes. The updated version will always be available on this page.