Privacy and Cookie Policy
Information pursuant to EU Reg. 2016/679 (GDPR) - Updated on 1 January 2026
Part I — Privacy Policy
1. Data Controller
BM Luxury by Bagni Monica
Via Aldo Moro n. 32 — 25010 Borgosatollo (BS), Italy
P.IVA: IT 04489620981 | C.F.: BGNMNC71P68B157Z
SDI Code: M5UXCR1
Email: info@contractbm.net
Tel: 030 7777714
2. Types of Data Collected
The site collects the following categories of personal data:
- Browsing data — IP address, browser type, operating system, pages visited, access times. They are collected automatically by the site's computer systems and are not associated with identifiable users.
- Data provided voluntarily — name, email, telephone number, and message submitted via the contact or quote request forms on the site.
- Third-party data — aggregate and anonymized data provided by analytics services (Google Analytics) and social media platforms (Facebook, Instagram, YouTube, TikTok, LinkedIn) through their pixels or SDKs.
3. Purpose and Legal Basis of the Processing
| Purpose | Legal basis |
|---|---|
| Respond to contact requests and quotes | Execution of pre-contractual measures (art. 6 c. 1 letter b GDPR) |
| Technical management and site security | Legitimate interest of the Data Controller (art. 6 c. 1 letter f GDPR) |
| Statistical analysis of visits (Google Analytics) | User consent (Art. 6(1)(a) GDPR) |
| Social media marketing and remarketing | User consent (Art. 6(1)(a) GDPR) |
4. Treatment and Storage Methods
The data is processed electronically, with adequate security measures to prevent unauthorized access, loss or illicit disclosure. Browsing data is stored for the time strictly necessary for security purposes (max 12 months). The data sent via forms are kept for the time necessary to manage the request and, in the case of a contractual relationship, for the applicable legal obligations (normally 10 years).
5. Disclosure to Third Parties
Personal data is not sold or transferred to third parties for their own purposes. They can be communicated exclusively to:
- Technical service providers (hosting, email, CRM) who act as Data Controllers pursuant to art. 28 GDPR;
- Public authorities, when required by law.
Analytics and social media providers (Google LLC, Meta Platforms, ByteDance/TikTok, LinkedIn Corporation) act as independent data controllers for the data they collect through their tools. Please refer to the respective privacy policies for details.
6. Transfer of Data Outside the EU
Some providers (e.g. Google, Meta) are established in the United States. The transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission or other guarantee mechanisms provided for by the GDPR (articles 46–49).
7. Data Subject Rights
Pursuant to Articles 15–22 GDPR, you have the right to:
- Access your personal data (Art. 15);
- Rectify inaccurate data (Art. 16);
- Request erasure ("right to be forgotten") (Art. 17);
- Restrict processing (Art. 18);
- Receive your data in a portable format (Art. 20);
- Object to processing (Art. 21);
- Revoke consent at any time, without prejudice to the lawfulness of the processing based on consent prior to revocation (art. 7 c. 3).
Requests may be sent to: info@contractbm.net. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Part II — Cookie Policy
8. What Cookies Are
Cookies are small text files that the websites visited by the user send to his device (computer, smartphone, tablet), where they are stored to be re-transmitted to the same site on the next visit. The site uses technical, analytical and profiling/marketing cookies, described below.
9. Technical Cookies (always active)
Technical cookies are necessary for the functioning of the site and do not require consent. They include:
| Name | Purpose | Duration |
|---|---|---|
| cookieConsent | Stores the user's cookie preferences | 12 months |
| sessionId | Keeps the browsing session active | Session |
10. Analytical Cookies (with consent)
Used to collect aggregate information on the use of the site. They are activated only with the user's consent.
| Provider | Cookie | Purpose | Duration |
|---|---|---|---|
| Google Analytics | _ga, _ga_* | Statistical analysis of visits (anonymous data) | 2 years / 13 months |
| Google Analytics | _gid | Distinguishes users across sessions | 24 hours |
For information about how Google Analytics uses data, see: policies.google.com/privacy. You can deactivate Google Analytics via the browser add-on: tools.google.com/dlpage/gaoptout.
11. Marketing/Profiling Cookies (with consent)
Used to show personalized ads on social platforms. They are activated only with the user's consent.
| Provider | Purpose | Policy |
|---|---|---|
| Meta (Facebook/Instagram) | Remarketing, conversion measurement | Cookie Policy Meta |
| Google (YouTube) | Video embedded, remarketing | Cookie Policy Google |
| TikTok | Remarketing, campaign analytics | Cookie Policy TikTok |
| B2B remarketing, campaign analytics | Cookie Policy LinkedIn |
12. Management and Revocation of Consent
When you first access the site, a banner is shown that allows you to accept, reject or customize preferences on non-technical cookies. You can change your choices at any time:
- Via your browser settings — each browser allows you to delete saved cookies, block third-party cookies or disable all cookies. Please consult your browser help for specific instructions.
- Via provider opt-out tools — the links to the information of the individual providers are indicated in the table above.
Disabling technical cookies could compromise the correct functioning of the site. Disabling analytical and marketing cookies does not affect navigation.
13. Changes to This Policy
The Data Controller reserves the right to update this notice at any time. In the event of material changes, a prominent notice will be published on the site. The updated version fully replaces previous versions.
Last revised: 1 January 2026 — BM Luxury by Bagni Monica, Borgosatollo (BS), Italy