Privacy Policy for Newsletter Subscription
Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)
1. Data Controller
The data controller is Daniele Blanco, operating under the brand name Tiny Brush, with headquarters at Via Lemonia 43/A, Bologna, VAT No. IT05384140876, registered in the Bologna Business Register (REA) under No. 574659.
Contact for privacy matters: info@tinybrush.it
2. What Data Do We Process?
When you subscribe to the newsletter, we process your email address and, if you provide them, your first and last name. We also record the date and time of your subscription and the IP address from which it was made, in order to demonstrate your consent.
If the mailing service allows it, we also track email opens and clicks on links to understand which content is of most interest.
3. Why we process them and on what basis
- Newsletter delivery: updates on products and brands, blog posts, promotions, and discounts from Tiny Brush. Legal basis: your consent (Art. 6.1.a of the GDPR).
- Statistics on opens and clicks: to improve the content we send you. Legal basis: your consent.
- Demonstrating consent and handling any objections: legal basis: the data controller’s legitimate interest (Art. 6.1.f of the GDPR) and legal obligations.
4. Data Provision
Providing this information is optional. However, without at least an email address, we cannot send you the newsletter. You do not need to subscribe to make a purchase on tinybrush.it.
5. Who We Share Data With
The data is processed using computer systems by vendors acting as data processors:
- the email service, Mailchimp, The Rocket Science Group LLC;
- the website's hosting provider, Netsons;
- any technical or IT consultants, who are bound by confidentiality obligations.
Your personal information is not sold or shared.
6. Transfers Outside the European Economic Area
The email service provider is based in the United States. The data transfer is based on [the Adequacy Decision / the Data Privacy Framework and the European Commission’s Standard Contractual Clauses], which you can request by writing to us.
7. How long do we retain the data?
We retain newsletter data until you unsubscribe or revoke your consent. After you unsubscribe, we retain only the data necessary to demonstrate that consent was given, for 0 years.
8. Your Rights
You may request access to your data, its correction, erasure, restriction, objection to processing, and data portability at any time (Articles 15–22 of the GDPR). You can write to info@tinybrush.it.
You may withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of each email or by writing to us. Withdrawal does not affect the lawfulness of processing carried out prior to such withdrawal.
You also have the right to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Changes
We may update this privacy policy. The latest version is always posted on this page.
Last updated: [11/10/2026]
