BVLLABack to site

Privacy Policy

Last updated: 22 July 2026 · Version 2.0

1. Data Controller

Niccolò Bresciani — Via Fratelli Beretta 20A, 25080 Padenghe sul Garda (BS), Italia. VAT no. 04089510988 — Tax code BRSNCL97M11B157Y.

For any matter concerning your personal data you may write to protocol@bvlla.com.

No Data Protection Officer (DPO) has been appointed, as the legal conditions requiring one do not apply.

2. Personal data we collect

Through the request form on this website we collect the data you voluntarily provide:

  • Full name
  • Email address
  • Date of the ceremony
  • Venue / hotel of the event
  • Invitation code (optional)
  • Number of participants (size of the Cohors)

2.1 Data collected automatically

When the form is submitted we also record, for security and abuse-prevention purposes, your IP address, browser identifier (user agent), the site language used and the date and time of submission.

This website does not collect special categories of data (Art. 9 GDPR) and is not directed to persons under 16.

3. Purposes and legal basis

Providing the data marked as mandatory is necessary to process your request: without it we cannot assess it or reply to you.

  • To handle and assess your clearance request and send you the resulting communications (including the Official Admission Document) — legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR) and your consent given via the dedicated checkbox (Art. 6.1.a GDPR).
  • To ensure the security of the website and prevent abusive or fraudulent submissions — legal basis: the Controller's legitimate interest (Art. 6.1.f GDPR).

4. How and where we process your data

Data is processed by electronic means with appropriate technical and organisational measures (Art. 32 GDPR): encrypted HTTPS/TLS connection to the website, database reachable only from authorised addresses over an encrypted connection, reserved area protected by authentication with hashed passwords.

Data is stored on servers located within the European Union. No transfer of personal data outside the European Economic Area takes place.

5. Recipients and processors

Your data may be processed on our behalf and under our instructions by the following processors appointed under Art. 28 GDPR:

  • SiteGround — database hosting and email services (European Union)
  • Amazon Web Services (AWS) — web application hosting, Frankfurt region (Germany, European Union)
  • Crazy One Agency — website development and technical maintenance

5.1 Disclosure

Your data is never disclosed, sold or transferred to third parties for marketing purposes. It may be communicated to competent authorities where required by law.

6. Retention period

Data relating to your request is retained for 24 months from the last meaningful contact, after which it is deleted.

Should the request result in a contractual relationship, the necessary data will be retained for the periods required by applicable civil and tax law.

7. Your rights

As a data subject you may exercise at any time the rights granted by Arts. 15-22 GDPR:

  • Access to your personal data
  • Rectification of inaccurate or incomplete data
  • Erasure of your data (right to be forgotten)
  • Restriction of processing
  • Data portability in a structured, machine-readable format
  • Objection to processing based on legitimate interest
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal

7.1 How to exercise them

Simply write to protocol@bvlla.com. We will reply without undue delay and in any case within one month of your request.

8. Complaint to the supervisory authority

If you believe that the processing of your data infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or with the supervisory authority of the Member State where you reside.

9. Cookies

This website uses technical cookies and, subject to your consent, analytics cookies (Google Analytics 4). It does not use profiling or marketing cookies. You may grant or withdraw consent through the banner and the «Cookie preferences» link in the footer. For details, please see the Cookie Policy.

10. Changes to this policy

We reserve the right to update this policy. The version in force is always published on this page together with its update date.