E-commerce

BRT

BRT (also known as Bartolini) is a major Italian parcel courier. Online retailers embed BRT shipment tracking widgets and delivery iframes so customers can follow their parcels. These components load third party scripts and may set cookies or read identifiers, which carries GDPR and ePrivacy obligations.

Overview

What does BRT do?

What BRT is

BRT, historically known as Bartolini, is one of the largest parcel couriers in Italy. Many e-commerce sites embed BRT tracking widgets and delivery iframes so shoppers can follow a parcel from dispatch to doorstep without leaving the store. These embedded components are served from BRT systems and run third party JavaScript inside the retailer page.

What data and cookies it handles

To display tracking, the widget processes a tracking number and the related shipment and recipient data such as delivery address, status events and estimated delivery time. The embedded scripts may set first party or third party cookies for session continuity, load balancing and basic measurement, and they can read browser and device information. The exact cookies depend on the integration mode chosen by the retailer.

GDPR and ePrivacy implications

Shipment and recipient data are personal data under the GDPR, and embedding a third party widget can make BRT a processor or, for its own purposes, an independent controller. Under the ePrivacy Directive, storing or reading any non essential cookie or identifier requires prior consent. Strictly necessary cookies that are needed only to deliver the tracking function the user requested are generally exempt.

Consent requirements

Cookies and scripts that go beyond strict necessity, such as analytics or marketing tags carried by the widget, must wait for freely given, specific and informed opt in consent. A common compliant pattern is to keep the core tracking lookup available under contract performance while gating any measurement or advertising components behind your consent banner.

Data transfers

BRT is an Italian operator and processing is primarily within Italy and the wider EU, so cross border transfer risk is comparatively low. You should still confirm where widget assets are cached, whether any content delivery network or sub processor sits outside the EEA, and ensure Standard Contractual Clauses and a transfer impact assessment cover any such flow.

Practical compliance steps

Map the widget integration, list every cookie it sets, and classify each as necessary or non essential. Load non essential scripts only after consent through your consent management platform, sign a data processing agreement with BRT, name BRT in your privacy and cookie notices, and re test after any integration change so the documentation stays accurate.

Compliance

BRT and the GDPR

BRT is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent under ePrivacy for non essential cookies and tracking, with legitimate interest or contract performance available for the strictly necessary shipment tracking function
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law), Italian Data Protection Code

Impact assessment (DPIA)

A full DPIA is usually not required for basic shipment tracking. Document a balancing test for the necessary tracking function and assess any added analytics or marketing tags. Review parcel data flows, recipient details and any profiling before launch.

Sample text for your banner

We use BRT (Bartolini) delivery and tracking components that may set cookies and read identifiers to show your shipment status. Non essential cookies load only after you accept.
Cookies and trackers

What BRT sets and contacts

Tracking method
Third party JavaScript widget and tracking iframe loaded on retailer pages for parcel tracking and delivery, may set first and third party cookies and read device or browser identifiers
Server location
Italy (EU)

Cookies set (4)

NameTypeDurationPurpose
BRT_SESSIONStrictly necessarySessionMaintains the tracking session so the widget can return the correct shipment status to the user
BRT_LBStrictly necessarySessionLoad balancing cookie that routes the request to the right BRT server for reliable delivery
brt_prefsFunctional6 monthsRemembers display preferences such as language for the tracking interface
_brt_gaAnalyticsUp to 13 monthsAggregated usage measurement for the tracking widget, loaded only after consent

Third-party domains contacted (3)

  • vas.brt.it
  • www.brt.it
  • tracking.brt.it
Questions

Frequently asked questions about BRT

Can't find your question? Write to us, we answer fast.

What cookies does the BRT tracking widget set?

It depends on the integration, but the embedded BRT components can set first party or third party cookies for session continuity, load balancing and basic measurement, and may read browser or device identifiers. Audit your live pages to capture the exact cookies, then classify each as strictly necessary or non essential.

Do I need consent to use the BRT widget?

Yes for anything beyond strict necessity. Cookies and scripts needed only to perform the tracking lookup the user requested can rely on contract or necessity, but any analytics or marketing cookie carried by the widget needs prior opt in consent under the ePrivacy rules.

What is the legal basis for processing?

The strictly necessary tracking function can rest on performance of the delivery contract or legitimate interest. Non essential cookies and any profiling require consent. Document the basis for each purpose in your records of processing.

Does BRT transfer data to the US or other third countries?

BRT is an Italian operator and processing is mainly within Italy and the EU, so US transfers are not a core feature. Still verify any content delivery network or sub processor used to serve widget assets, and apply Standard Contractual Clauses with a transfer impact assessment if data leaves the EEA.

Do I need a DPIA for the BRT widget?

A full DPIA is usually not required for basic shipment tracking. If you combine it with profiling, large scale tracking or additional marketing tags, run a screening assessment and document why a full DPIA is or is not needed.

How do I implement the BRT widget compliantly?

Load non essential scripts only after consent through your consent management platform, sign a data processing agreement with BRT, list the widget cookies in your cookie notice, and retest after any integration change so your records stay accurate.

Are there alternatives to the BRT widget?

You can link out to the BRT tracking page instead of embedding it, use a server side status lookup so no third party script runs in the browser, or choose another carrier integration. Each option changes the cookie and consent profile, so reassess accordingly.

How do I update my cookie policy for BRT?

Add an entry naming BRT, the cookie names and purposes, durations and whether they are first or third party, the legal basis, and how users withdraw consent. Review it whenever the integration or carrier changes.

HelixPay

HelixPay is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. HelixPay enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, HelixPay empowers marketing teams to achieve measurable growth.

Preferences

Sociavore

Sociavore is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Sociavore supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Sociavore enables informed decisions that improve experience and drive results.

Analytics

Solusquare OmniCommerce Cloud

Solusquare OmniCommerce Cloud is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Solusquare OmniCommerce Cloud provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Solusquare OmniCommerce Cloud ensures optimal performance at scale.

Preferences

Yelp Reservations

Yelp Reservations is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Yelp Reservations provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Yelp Reservations helps deliver the right message to the right audience at the right time.

Preferences

Printful

Printful is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Printful provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Printful helps deliver the right message to the right audience at the right time.

Preferences

Ecovium

Ecovium is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Ecovium integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Ecovium helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.