Privacy Policy
This Privacy Policy is provided pursuant to Art. 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the Website. This Privacy Policy is subject to updates that will be promptly published on the Website. This Privacy Policy establishes the basis on which the User's Personal Data will be processed.
Data Controller
The Data Controller of the Data collected by this Website is Brightside Capital SA
Via Serafino Balestra 11, 6900 Lugano, Switzerland. email: info@brightside-capital.com
Methods of Processing Personal Data
Personal Data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of confidentiality pursuant to current regulations. The Controller processes Users' Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the stated purposes.
Purposes of Processing Personal Data and Legal Basis
Personal Data may be collected independently by the Controller or through third parties. In this case, the computer systems and software procedures used for the operation of this Website acquire certain Personal Data of Users, of a technical-computer nature (e.g. IP address, browser type, operating system, domain name and website addresses from which access or exit was made, etc.), the transmission of which is inherent in the normal functioning of the internet. Such Data may be processed solely for the purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.
Data that the User chooses to provide voluntarily is collected to enable the Website to provide its services, as well as for the following Purposes:
- to fulfill any type of obligation contemplated and provided for by current laws, regulations, related standards, commercial practices and tax/fiscal matters. This processing is mandatory to fulfill a legal obligation to which the Data Controller is subject;
- for other ancillary or related purposes to those indicated above and in any case falling within the scope of the Website's activities;
- to follow up on specific requests addressed to the Controller by the User for informational communications relating to the Controller's Services, via email messages or completion of the Contact Form. This processing is optional and based on the User's consent, however failure to communicate one or more Data will make it impossible to respond to the information request and to use the services offered by the Controller;
- to allow the submission of an application for a job offer by completing the appropriate Form on the Website. This processing is optional and based on the User's consent, however failure to communicate one or more Data will make it impossible to respond regarding the application;
- for sending promotional and commercial information and offers including through the newsletter service. This processing is based on consent freely expressed by the User;
- to carry out statistical analyses on aggregated and anonymous data to analyze User behavior to improve the products and services provided by the Controller and to meet the User's expectations;
- for profiling activities for marketing purposes. This Processing is based on consent freely expressed by the User.
Categories of Personal Data Processed
Among the Personal Data processed by this Website, independently or through third parties, are: Cookies, Usage Data, Email and Name. Personal Data may be collected independently by the Controller or through third parties. Personal Data may be voluntarily provided by the User when using the Website, by completing the Site's Forms, when communicating with the Controller by email. The optional, explicit and voluntary sending of email through the Contact Form or through the addresses indicated on this Website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other Personal Data included in the email.
Data Sharing
In addition to the Controller, in some cases, the following may have access to the Data:
- categories of persons specifically trained and involved in the organization of the Website (administrative, commercial, marketing, legal personnel, system administrators);
- external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Controller pursuant to Art. 28 GDPR;
- public or private entities that may access the Data in compliance with legal obligations;
- entities that perform ancillary and instrumental tasks with respect to the Controller's activities;
Data Retention Period
As expressly provided by Art. 5, para. 1, letter e) of the GDPR, Data is retained for the time necessary for its Processing in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
- Data collected for contractual obligations will be retained for the time necessary to fulfill the aforementioned purposes and as required by law;
- Data collected for tax/administrative obligations will be retained for the time necessary to fulfill the aforementioned purposes and as required by law;
- Data collected for Purposes attributable to the legitimate interest of the Controller will be retained until such interest is satisfied; The User may obtain further information regarding the legitimate interest pursued by the Controller by contacting the Controller.
- Data collected based on the User's Consent may be retained until such Consent is revoked;
Data may be retained by the Controller for a longer period in compliance with legal obligations or by order of an authority.
At the end of the retention period, Personal Data will be deleted and therefore the rights of access, deletion, rectification and portability of Data can no longer be exercised.
Cookies
This Website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and advertisements, provide social network functions and analyze traffic.
Place of Processing and Transfer of Data Abroad
Data is processed at the Controller's operational headquarters. For further information, you may contact the Data Controller. Data may be processed by natural persons and/or legal entities operating on behalf of the Controller under specific contractual obligations and based in EU or non-EU member countries. In the event that Data is transferred outside the EEA, the Controller will adopt all appropriate contractual measures to ensure adequate protection of the Data.
Tools Used for Processing Personal Data
Contact Form
The User, by completing the Contact Form with their Data, consents to its use to respond to information requests, or for any other purpose indicated by the form header. Personal Data collected through the Contact Form: Email, First Name and Last Name.
Contact Form 7 (Rock Lobster LLC) is a form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Place of Processing: Japan.
Email Address Management
These services allow the management of a database of email contacts, phone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of Data relating to the date and time of message viewing by the User, as well as the User's interaction with them, such as information on clicks on links included in messages.
By registering for the newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including of a commercial and promotional nature, relating to this Website may be transmitted.
Mailchimp (The Rocket Science Group) is a service that organizes and analyzes newsletter distribution. Personal Data collected: email and name. Place of Processing: USA.
Content Comments
Comment services allow Users to formulate and make public their own comments regarding the blog. Users, depending on the settings decided by the Controller, may leave comments anonymously. Users are responsible for the content of their own comments.
Statistics
Statistical services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track User behavior. This Website uses the following services:
Google Analytics (Google Ireland Limited)
Google Analytics is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. This site has the IP address anonymization function active. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland.
Facebook Pixel (Facebook Ireland Ltd.)
Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel monitors conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage Data. Place of processing: Ireland.
Social Network Interaction
These services allow interaction with social networks directly from the pages of this Website. Interactions and information acquired by this Website are in any case subject to the User's privacy settings for each social network.
Facebook (Facebook Ireland Ltd.) — Facebook buttons are interaction services with the Facebook social network. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland.
LinkedIn (LinkedIn Ireland Unlimited Company) — LinkedIn buttons are interaction services with the LinkedIn social network. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland.
Twitter (Twitter International Company) — Twitter buttons are interaction services with the Twitter social network. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland.
Remarketing and Retargeting
These services allow this Website to communicate, optimize and serve advertisements based on the User's past use of this Website. This activity is carried out through the tracking of Usage Data and the use of Cookies.
Facebook Remarketing (Facebook Ireland Ltd) — Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network.
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) — This Website uses a script called "LinkedIn Insight Tag". The LinkedIn Insight Tag adds a cookie to Users' browsers each time they visit this Website. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland.
Twitter ADS (Twitter International Company) — Twitter Ads is an advertising service offered by Twitter International Company. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland.
Content on External Platforms
These services allow the display of content hosted on external platforms directly from the pages of this Website and to interact with them.
Youtube (Google Ireland Limited) — Youtube is a video content viewing service managed by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland.
Exercise of Data Subject Rights
The Data Subject has the right to exercise the rights provided for in Articles 7, 15-22 of European Regulation 679/2016. In particular, they have the right to revoke their consent at any time and, upon simple request to the Data Controller, may request access to Personal Data, receive Personal Data provided to the Controller and where possible transmit them to another Controller without impediment (portability), obtain updating, limitation of processing, rectification of Data and deletion of Data processed in violation of current regulations. The Data Subject may exercise their rights by contacting the Controller by email at: info@brightside-capital.com
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by publicizing them to Users on this page. Please consult this page often, using the date of last modification indicated at the bottom as a reference.
Privacy Policy updated January 2026