Privacy policy

How we handle the data of people who visit this site and people who write to us. The site uses no cookies and does not track its visitors.

This is an English translation provided for convenience. In case of any difference, the Italian version prevails.

Data controller

HR Strategy S.r.l., trading under the BravoTime brand, with registered office at Via dell'Artigianato 14, 12038 Savigliano (CN), VAT number and tax code 04230450043, registered with the Cuneo Companies Register (Registro delle Imprese), REA CN-345537. For any matter concerning data: info@bravotime.it, PEC hrstrategy@legalmail.it.

We have not appointed a data protection officer (DPO): every request about data goes to info@bravotime.it and is handled by a person.

If you have sent us a CV or spoken to us as a professional, the privacy notice for candidates applies. It is more specific and prevails over this one.

People who visit the site

This site is made of static pages. It uses no cookies, no analytics or profiling tools, and does not embed third-party social buttons, videos or maps. Nothing follows visitors from one page to the next. That is why you see no banner: there is nothing to accept.

The fonts are also hosted on our own domain: the pages make no calls to third-party servers.

The site is hosted by Netlify, Inc. (San Francisco, United States), which delivers it through a network of servers in several countries. Like any hosting service, Netlify records the technical data of each connection, including the IP address, in its own system logs. These logs are needed to run the service and to protect it from abuse and attacks; we process them on the basis of our legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR). We do not use them for anything else and we do not combine them with other data.

People who write to us through the contact form

What data. First name and surname, company, your role, email address, phone number if you leave it, and what you write in the request field. The phone number is optional; the other fields are needed to reply to you.

Why. To reply to your request and, if a relationship follows, to manage it: Art. 6(1)(b) GDPR, pre-contractual measures taken at your request.

Where it goes. The form is handled by Netlify's forms service, which collects the submissions and delivers them to us. Netlify acts as our data processor under Art. 28 GDPR, on the basis of the data processing agreement that forms part of the service terms.

The form contains a hidden field whose only purpose is to stop automated submissions. If you fill it in, your request does not reach us.

People who write to us by email

The same criteria as for the form apply. Email for info@bravotime.it is managed with Google Workspace: Google acts as our data processor on the basis of its own data processing agreement.

How long we keep data

Requests that do not lead to a relationship: twenty-four months from the last contact, then we delete them. The criterion is the time within which a business conversation can reasonably resume.

Requests that lead to a relationship: for the duration of the relationship and, afterwards, for the statutory periods that apply to contracts, invoices and tax obligations — ten years from the last entry for accounting records (Art. 2220 of the Italian Civil Code).

Site system logs: Netlify keeps them for as long as is needed for the security of the service, in line with its own privacy policy. We do not keep a copy.

Who data may be disclosed to

To the suppliers we need in order to work, appointed as data processors under Art. 28 GDPR:

• Netlify, Inc. (United States) — site hosting and contact form;
• Google (Google Workspace) — email and office tools;
• our accountant and tax adviser, for the part that concerns them;
• legal advisers, when needed.

None of them may use the data for their own purposes.

Transfers outside the European Economic Area. Netlify and Google also process data in the United States. Both participate in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023, and their data processing agreements also include the standard contractual clauses approved by the Commission.

We may also disclose data to judicial authorities or supervisory authorities when the law requires us to.

We do not sell, transfer or exchange data with anyone for commercial purposes.

Your rights

Access, rectification, erasure, restriction, portability and objection (Arts. 15-22 GDPR). Requests should be sent to info@bravotime.it and we reply within one month; if the request is complex we will tell you within that month, explaining why more time is needed.

Anyone who believes that the processing infringes the Regulation may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it) or bring proceedings before the judicial authorities.

Updates

Every substantial change to this page is dated, and the previous version remains available on request. Version of 1 October 2026.