Platform privacy

Who the controller is

Controller

Italfrigo Service S.r.l., Via Serviliano Lattuada 26, 20135 Milano · VAT no. and tax code 06825390153 · REA MI 1120586

Contact

[email protected] · certified email (PEC) [email protected]

Brigaplan is a project of Italfrigo Service S.r.l.

What data we process

• Account: email, name, account type (private or professional) and profile, country, city and language. For professionals, also company name and VAT number. We also keep the date and version of the privacy notice you accepted and the date of your last login.
• Password: we only store it encrypted (Argon2), so not even we can read it.
• Sign in with Google: if you choose "Sign in with Google", Google sends us your name, your email and a code that identifies your Google account. We do not receive your Google password.
• Projects: project name, type of venue, city, covers, what you ask us for and the floor plans and files you upload.
• Conversation with the assistant: the messages you write to the assistant, its replies and the previews it prepares (floor plan, 3D, checks).
• Technical data: to limit login attempts we use your IP address only in memory, for a few minutes, without saving it. The service that hosts the platform records the technical data of visits as described in the site privacy notice.

Floor plans may contain other people's data, for example the designer's name in the title block. Only upload them if you have the right to do so: we use them only for your project.

Why, and on what legal basis

• Providing the service (account, projects, previews, confirmation and notification emails): this is needed to perform the contract you accept when you sign up (Article 6(1)(b) of the Regulation). Without email, password and account type we cannot open the account.
• Protecting the platform from abuse and unauthorised access: the controller's legitimate interest (Article 6(1)(f)).
• Complying with the law, for example with requests from the authorities or, once there are payments, with tax obligations: legal obligation (Article 6(1)(c)).

We do not use your data for advertising, we do not sell it and we do not send you newsletters without a separate consent.

The AI assistant and review by a designer

The preview is prepared by an artificial intelligence assistant (Claude models by Anthropic) together with our design engine, which checks dimensions and rules.

Before you see it, every preview is checked by a designer on our staff, who can see the project, the uploaded files and the conversation with the assistant. The preview is indicative: we do not make automated decisions that have legal effects on you.

Who processes the data for us

We use these providers as processors, under a contract that requires them to use the data only on our behalf:

• DigitalOcean LLC: servers, database and files of the platform, in the Frankfurt region (Germany).
• Anthropic: receives the messages of the conversation with the assistant and the project data needed to prepare the preview. Under its terms, it normally deletes this data within 30 days, except in the cases provided for (for example breaches of its usage policies or legal obligations), and it may not use it to train its models.
• Email sending service: [DA DEFINIRE: nome del servizio e paese dei server].
• Google: only if you choose "Sign in with Google", to confirm who you are. For that part, Google's privacy policy also applies.
• Zoho Corporation: manages the [email protected] mailbox, with servers in the European Union, if you write to us.

Some of these providers are based in the United States or process data there: transfers outside the European Union are covered by the safeguards provided for by the Regulation, such as standard contractual clauses.

We share your project with installers, dealers or other partners only if you ask us to, and only with the ones you choose.

For how long

• Account, projects, files and conversations: as long as the account is open. When you close it, we delete them within 30 days. Database backups are overwritten within a further 7 days.
• Accounts never confirmed: we delete them after 30 days.
• Inactive accounts: after 24 months without logins we write to you; if you do not reply within 30 days, we delete the account.
• Data the law requires us to keep, such as invoices: for the period required by law, usually 10 years.

Cookies

The platform only uses two technical cookies, needed for it to work, so no consent is required:

• bp_sessione: keeps you logged in to your account. It lasts 30 days.
• lingua: remembers the language you chose. It lasts 1 year.

No analytics, advertising or profiling cookies.

How we protect the data

Encrypted connection (HTTPS), encrypted passwords, files and floor plans visible only to you and to authorised staff, a limit on login attempts, and your other sessions closed when you change your password.

Your rights

You can ask at any time to access your data, to have it corrected or erased, to restrict its processing or to object to it, and to receive it in a readable format (portability), as provided for by Articles 15 to 22 of the Regulation. You can do this from your dashboard or by writing to [email protected]. We reply within one month.

If you think the processing is not lawful, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Other things to know

• The platform is for adults who work in the sector or are opening a business in it.
• If we change this notice in a significant way, we will email you first. The version you accepted stays recorded in your account.