Privacy Policy
Last Updated: October 26, 2023
This privacy policy explains how Studio Brillante ("we", "us", or "our") collects, uses, shares, and protects personal information collected through our online platform and services. We are committed to protecting the privacy of our users and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Italian privacy laws.
1. Who We Are
The data controller responsible for your personal information is:
Studio Brillante8 Via Monte Napoleone, Floor 3, Milan, Lombardy, 20121, Italy
2. Information We Collect
We collect various types of personal information in connection with our services and our online platform. This may include:
- Information you provide directly: When you contact us, apply for representation, or use certain features on our site, you may provide information such as your name, contact details (postal address), professional background, resume, portfolio, social media links, and any other information you choose to share.
- Information collected automatically: When you visit our site, we may automatically collect certain information about your device and usage. This may include your IP address, browser type, operating system, referring URLs, site navigation paths, and information about your interaction with our platform. This is often collected through cookies and similar technologies.
3. How We Use Your Information
We use the personal information we collect for various purposes, including:
- Providing our talent management, public relations, brand endorsement, event management, media consulting, contract negotiation, and image consulting services.
- Communicating with you, responding to your inquiries, and providing support.
- Evaluating potential talent for representation.
- Facilitating professional relationships and opportunities for our clients.
- Operating, maintaining, and improving our online platform and services.
- Understanding how users interact with our site to enhance user experience.
- Complying with legal obligations and protecting our legal rights.
- For internal administrative purposes.
4. Legal Basis for Processing
We process your personal information based on the following legal grounds under the GDPR:
- Performance of a contract: Processing is necessary to perform services requested by you or to take steps at your request before entering into a contract.
- Legitimate interests: Processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This includes improving our services, managing our business, and communicating with you (where not based on consent or contract).
- Compliance with a legal obligation: Processing is necessary to comply with laws and regulations.
- Consent: In certain cases, we may rely on your explicit consent to collect and use your personal information, particularly for specific marketing activities or when processing sensitive data (if applicable). You have the right to withdraw your consent at any time.
5. Sharing Your Information
We may share your personal information with third parties in the following circumstances:
- Service Providers: We may share information with third-party vendors and service providers who perform services on our behalf, such as website hosting, data analysis, and IT services. These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
- Clients and Business Partners: We may share relevant information with our clients and business partners as necessary to provide our services, such as proposing talent for projects or facilitating endorsements.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.
- With Your Consent: We may share your information with your consent or at your direction.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your information, we will securely delete or anonymize it.
7. Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request confirmation of whether we process your personal data and to access the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data under certain circumstances.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data where we are relying on a legitimate interest or for direct marketing purposes.
- Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to Withdraw Consent: If we process your data based on your consent, you have the right to withdraw your consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or where the alleged infringement occurred. In Italy, the relevant authority is the Garante per la protezione dei dati personali.
To exercise any of these rights, please contact us using the contact information provided in this policy. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
8. Security of Your Information
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, please be aware that no security measures are completely foolproof, and we cannot guarantee the absolute security of your information transmitted over the internet.
9. International Data Transfers
Your personal information may be stored and processed in countries outside of the European Union (EU) or European Economic Area (EEA) where our service providers are located. When we transfer your data outside the EU/EEA, we ensure that appropriate safeguards are in place, such as relying on standard contractual clauses approved by the European Commission or other legally recognized mechanisms to provide adequate protection for your data.
10. Third-Party Links
Our online platform may contain links to websites operated by third parties. This privacy policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this privacy policy or our data practices, or if you wish to exercise your data protection rights, please contact us by writing to:
Studio Brillante8 Via Monte Napoleone, Floor 3, Milan, Lombardy, 20121, Italy