BRG s.a.s. · Tr-entic
Privacy notice
How we process information about people visiting the Tr-entic public website or contacting us. Notice under Articles 12 and 13 of Regulation (EU) 2016/679.
The data controller
BRG s.a.s., VAT number IT02285080038, registered at Via Pedolazzi 161b, 28883 Gravellona Toce (VB), Italia. For information, data rights requests or withdrawal of consent: info@we-gentic.com. This notice covers the public website, rather than processing within customers’ Tr-entic platforms.
Information we collect
Browsing involves technical data such as IP addresses, server requests, dates and times, browser information and information needed to secure and deliver pages.
When you submit an enquiry, we collect your name, email, chosen interest and language. Organisation, profile and message are optional. Do not include health information, confidential documents or other sensitive personal data in your message.
Only with consent for the relevant purpose, Google Analytics 4 and Google Ads may process online identifiers, visited pages, interactions and device information. The website does not send your name, email, organisation or contact form contents to these services.
Purposes and legal bases
Site operation and security: our legitimate interest in providing a reliable site, preventing abuse and diagnosing faults, under Article 6(1)(f) GDPR. Strictly necessary tools are also subject to Article 122 of the Italian Privacy Code.
Answering enquiries and arranging demos: steps requested by the data subject before entering into a contract, Article 6(1)(b) GDPR. If you act for an organisation, processing your professional contact details relies on our legitimate interest in handling the conversation you initiated, Article 6(1)(f). Sending an enquiry does not subscribe you to newsletters or promotional messages unrelated to your request.
Google Analytics 4 statistics and Google Ads marketing: optional, separate consent for each purpose, Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code. Refusing consent does not prevent browsing or sending an enquiry. Marketing cookie consent does not authorise promotional emails.
Handling data rights requests and other applicable duties: compliance with legal obligations, Article 6(1)(c) GDPR. Information needed to establish or defend a legal claim may be processed for that specific legitimate interest.
Retention
Commercial enquiries that do not lead to a relationship are kept for 12 months after the last interaction and then deleted from the active mailbox. If a contract follows, necessary information is handled for that relationship and its legal obligations.
Permanent removal from email systems also follows Zoho’s technical timeframes: deleted messages may remain in Trash for up to 180 days, depending on mailbox settings. After removal from Trash, Zoho retains them on its servers for a further 30 days to allow recovery. The provider retains technical delivery logs for 6 months.
Cookie choices are valid for 6 months. The chosen GA4 retention period for user-level and event-level data is 2 months, without resetting it on new activity. This setting does not apply to standard aggregated Google Analytics reports. Cookie lifetimes are described in the cookie notice.
Vercel manages the site’s technical logs. Runtime log availability in the controller’s dashboard depends on the active plan and services, according to the periods in the Vercel documentation linked below. Any copies kept for an incident or dispute must be limited to necessary data and a justified period. Other technical data processed by the provider follows the retention criteria in its privacy notice.
Data Google processes as an independent controller, including data for its advertising services, is also subject to the retention criteria in Google’s notices.
Who can access the data
The controller’s authorised personnel may access enquiries to handle them. Infrastructure, security, hosting, email delivery and contact management providers may process the information needed for their services, as processors where applicable.
Vercel hosts the public website www.tr-entic.com. Cloudflare manages the domain’s DNS; the Cloudflare HTTP proxy is not enabled for the public site. Contact form enquiries are emailed to info@tr-entic.com using Zoho Mail EU. This website does not keep its own message database. The controller handles enquiries in its mailbox and authorised internal tools.
Google Analytics 4 measures visits only with statistics consent. Google Ads operates only with marketing consent; Google also acts as an independent controller for certain advertising purposes under its terms. Data may be disclosed to authorities when required by law. We do not sell contact form data.
Transfers outside the EEA
Vercel, Cloudflare, Google and email providers may involve processing or access outside the European Economic Area, including in the United States. Selecting a European cloud region or an EU email service does not exclude every international transfer, for example through support or subprocessors.
Transfers are subject to the Chapter V GDPR safeguards provided in the relevant service terms: adequacy decisions, including the EU–US framework for participating organisations and covered processing, or standard contractual clauses and supplementary measures where necessary. You can ask the controller for information and copies of applicable safeguards.
Your rights and how to use them
Where Articles 15–22 GDPR apply, you can request access, rectification, erasure, restriction and portability. You can object to legitimate-interest processing on grounds relating to your particular situation and to direct marketing at any time. Portability applies to automated processing based on consent or a contract where its conditions are met.
Write to info@we-gentic.com, explaining your request and providing the information needed to locate the data. Do not send identity documents unless requested for proportionate verification. The controller normally replies within one month. Any extension of up to two further months, where allowed by GDPR, is explained within the first month.
Withdraw cookie consent using “Withdraw consent”, when shown, or by choosing “Reject all” in cookie preferences. Withdrawal stops future use without affecting the lawfulness of earlier processing. Contact the controller to request deletion of information already collected or to withdraw other consent.
Complaints, choice and automated decisions
You can complain to the Italian data protection authority, Garante per la protezione dei dati personali, or your competent supervisory authority, without first contacting the controller.
Providing form data is your choice. Name, email and interest are needed to identify and handle an enquiry and reply. Other fields are optional. The website does not make solely automated decisions that have legal or similarly significant effects under Article 22 GDPR. Consent-based advertising activities are explained above.