Choose which cookies you allow. Essential cookies are always active — they keep the site working.
The entity responsible for processing your personal data is:
We are not required to appoint a Data Protection Officer (DPO) under Art. 37 GDPR, given our nature as a small sole-trader business. For any privacy matter, please use the contact details above.
When you contact us via email, WhatsApp, Telegram, or phone, we may collect:
We do not operate accounts, logins, shopping carts, or payment systems on this website.
Our infrastructure and analytics tools automatically collect:
We use cookies as described in Section 7 — Cookie Policy.
| Purpose | Data involved | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to enquiries | Name, contact details, message | Art. 6(1)(b) pre-contractual / Art. 6(1)(f) legitimate interest |
| Website analytics | Anonymised usage data, cookies | Art. 6(1)(a) — consent (cookie banner) |
| Technical site operation | Session data, server logs | Art. 6(1)(f) — legitimate interest |
| Legal compliance | Any relevant data | Art. 6(1)(c) — legal obligation |
We do not use data for automated profiling, targeted advertising, or marketing. We do not sell personal data.
After the applicable retention period, data is securely deleted or permanently anonymised.
| Provider | Service | Data | Location |
|---|---|---|---|
| Tilda Publishing Ltd. | Hosting & CMS | IP, logs, form data (briefly cached) | EU — Amsterdam |
| Google LLC (Analytics) | Analytics | Anonymised IP, usage behaviour | USA (SCCs + DPF) |
| Google LLC (Fonts) | Typography | IP (log level only) | USA (SCCs) |
| WhatsApp / Meta | Direct messaging | Data you send via chat | USA (SCCs) |
| Telegram Messenger | Direct messaging | Data you send via chat | EU/UAE (varies) |
Transfers outside the EEA (mainly Google/USA) are covered by Standard Contractual Clauses (SCCs) and Google's participation in the EU–US Data Privacy Framework. Swiss residents: equivalent safeguards apply under the nFADP.
We never sell, rent, or trade personal data. This applies globally, including under CCPA/CPRA (California), VCDPA (Virginia), and equivalent US state laws.
To exercise any right, write to bengalbest.it@gmail.com. We respond within 30 days.
Request a copy of your data. GDPR Art.15 / CCPA / nFADP Art.25
Correct inaccurate or incomplete data. GDPR Art.16 / nFADP
Request deletion where no legal obligation applies. GDPR Art.17 / CCPA
Limit how we use your data. GDPR Art.18
Receive your data in machine-readable format. GDPR Art.20
Object to processing based on legitimate interest. GDPR Art.21
Withdraw cookie consent at any time. GDPR Art.7
Right to opt out of data sale. We do not sell data. CCPA/CPRA
Swiss residents may contact the FDPIC at edoeb.admin.ch.
Cookies are small text files stored on your device by websites you visit. They ensure core functionality, remember your preferences, and — when you consent — provide anonymous usage statistics to help us improve the site.
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| tilda_session | Tilda | Essential | Maintains your browsing session | Session |
| bb_cookie_prefs | Bengal Best | Essential | Stores your cookie consent choice | 12 months |
| _ga | Google Analytics | Analytics | Distinguishes unique users (anonymised) | 2 years |
| _ga_XXXXXXXX | Google Analytics | Analytics | Persists session state across pages | 2 years |
| _gid | Google Analytics | Analytics | Distinguishes unique users (daily) | 24 hours |
No advertising, profiling, or social media tracking cookies are used.
We use GA4 with IP anonymisation enabled — your IP is truncated before storage. Google acts as a data processor under a signed Data Processing Agreement. To opt out globally: Google Analytics Opt-out Add-on.
You can change your cookie choices at any time:
This website is not directed at children under 16 (or 13 under US COPPA). We do not knowingly collect data from minors. If you believe a child has submitted data without parental consent, contact us at bengalbest.it@gmail.com and we will delete it immediately.
If you discover a security issue, please notify us immediately at bengalbest.it@gmail.com.
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be marked by an updated "Last updated" date at the top of this page. We encourage periodic review.
We aim to respond within 30 days. Unresolved complaints may be escalated to the Garante per la protezione dei dati personali at garanteprivacy.it.