Privacy Policy
Version 1.2026 · Last updated 13 August 2026
The PDF is the authoritative version of this document.
This notice is given under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and, in Italy, under d.lgs. 196/2003 as amended by d.lgs. 101/2018. It explains how personal data is handled in connection with this website.
1. Data controller
The data controller is BROKTRADING GROUP - Società a Responsabilità Limitata, Via Tagliamento 14, 00198 Roma, Italy, Registro Imprese di Roma and tax code 18650661004, REA RM-1798074.
You may write to info@broktrading.group or, by certified email, to btgsrl@pecimprese.it.
The Company has not appointed a Data Protection Officer, as it is not required to do so under Article 37 GDPR.
2. What data is processed
Contact form. This site provides a contact form. The fields are set out below. Only those marked required have to be completed in order to send an enquiry.
| Field | Required | What it is used for |
|---|---|---|
| Name | Yes | To address you correctly in the reply. |
| Surname | Yes | To address you correctly in the reply. |
| Company | Optional | To understand the context of the enquiry. |
| Yes | To send the reply. | |
| Phone number | Optional | To reply by telephone where you prefer that. |
| Message | Yes | The substance of your enquiry. |
Company and phone number may be left blank and the form will still send. The other four fields are needed for the enquiry to reach the Company and to be answered, so the form cannot be submitted without them.
The Company does not ask for special categories of personal data (Article 9 GDPR) through this form, and asks you not to include them, or any confidential information, in a free-text message. Anything you choose to write in the message field is processed as it reaches us.
Correspondence by email. If you write directly to the addresses published on this site, the Company receives your email address and any other personal data contained in your message.
Navigation data. The systems that operate this site acquire, in the course of their normal functioning, certain data whose transmission is implicit in the use of internet protocols: IP addresses, browser and device type, requested pages, times of request and similar technical parameters. This data is not collected in order to identify visitors, but could allow identification through processing and association with data held by third parties.
This site sets no cookies, uses no analytics, has no registration, no newsletter and no user accounts, and carries out no profiling and no automated decision-making. See the Cookie Policy.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Reading and answering an enquiry sent through the contact form, and managing the exchange that follows | Name, surname, company, email, phone number, message | Steps taken at your request before entering into a contract, where the enquiry concerns a possible engagement — Article 6(1)(b) GDPR; and otherwise the legitimate interest of the Company in responding to those who contact it — Article 6(1)(f) GDPR |
| Replying to correspondence sent by email | Email address and the contents of your message | Article 6(1)(b) and (f) GDPR, as above |
| Operating the site, obtaining anonymous statistical information on its use, and checking that it works correctly and securely | Navigation data | Legitimate interest of the Company in the security and proper operation of its site — Article 6(1)(f) GDPR |
| Establishing, exercising or defending a legal claim | Any of the above, to the extent relevant | Legitimate interest of the Company — Article 6(1)(f) GDPR |
Consent is not used as a legal basis for the contact form. The form is not used to send marketing, and submitting it does not subscribe you to anything.
4. Retention
| Data | Retention |
|---|---|
| Contact form submissions and email correspondence | For as long as needed to deal with the enquiry and any relationship arising from it, and thereafter for the period in which a claim connected to it could be brought. Enquiries that lead nowhere are deleted at the Company’s discretion. |
| Navigation data / server logs | Server logs are kept by the hosting provider, Vercel. Please refer to Vercel’s own published information for the applicable log retention period. |
5. Recipients and processors
Personal data may be processed by the Company’s personnel acting under its authority, and by suppliers appointed as data processors under Article 28 GDPR — the hosting provider of this site, the service that transmits the form submission, and the provider of the mailbox that receives it.
| Processor | Service | Place of processing |
|---|---|---|
| Vercel Inc. | Website hosting and server logs | Global edge network; provider established in the United States. Transfers outside the EEA take place under standard contractual clauses. |
| Supabase, Inc. | Receipt and transmission of contact form submissions | Data stored in a European Union region; provider established in the United States. Transfers outside the EEA take place under standard contractual clauses. |
| Microsoft Ireland Operations Ltd (Microsoft 365) | Corporate mailbox receiving enquiries | European Union, within the Microsoft EU Data Boundary. Any transfer outside the EEA takes place under standard contractual clauses. |
Data is not otherwise disclosed or sold to third parties. Where an enquiry concerns a service provided by another company in the group, it is passed to that company so it can answer, and that company is then the controller of what it does with it.
6. Transfers outside the EEA
Where a supplier processes data outside the European Economic Area, the transfer takes place on the basis of an adequacy decision or of appropriate safeguards under Chapter V GDPR, and you may ask the Company for a copy of the safeguards relied on.
7. Your rights
You have the right to obtain access to your personal data and its rectification or erasure, the restriction of processing, and data portability, and to object to processing carried out on the basis of legitimate interest (Articles 15 to 22 GDPR).
Requests may be sent to info@broktrading.group. The Company replies within one month, extendable by two further months where the request is complex, as Article 12(3) GDPR permits.
You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Roma; www.garanteprivacy.it) or with the supervisory authority of your habitual residence.
8. Providing data
There is no statutory obligation to provide any personal data to the Company, and you are free not to use the contact form at all.
If you do use it, name, surname, email address and message are necessary for the enquiry to be sent and answered; the form cannot be submitted without them, and the consequence of not providing them is simply that no enquiry is made. Company and phone number are optional and may be left blank with no consequence.
9. Changes
The Company updates this notice when its processing changes. The version and date at the top show when it last changed.