Privacy

Privacy notice

Last updated: 26 October 2026

This page explains what data we collect on zumbat.it, why, for how long and what your rights are, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

Zumbat Hub S.R.L., Viale Abruzzi 52, 20131 Milan, Italy. VAT 10928040962, REA MI-2567601. Email info@zumbat.it, certified email (PEC) zumbat@pec.it.

What data we process and why

Browsing

When you visit the site, the server hosting it automatically logs some technical data: IP address, date and time, page requested, browser and operating system. We need it to run the site and protect it from abuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We do not use it to profile you.

Contact form

If you write to us, we process your name, email, the type of request and your message, to reply and assess the project. The legal basis is responding to your request before any contract (Art. 6(1)(b) GDPR). We keep this data for as long as needed to handle the request and, if no collaboration follows, for up to 24 months.

Job applications

If you apply, we process your name, email, the area you are interested in, any profile or portfolio links, your message and your CV. We use them only to assess your application and contact you. The legal basis is your request to be considered (Art. 6(1)(b) GDPR). We keep your CV and application data for 24 months, then delete them. Please do not include sensitive data, such as health information, in your CV unless it is necessary.

Email and direct messages

If you write to info@zumbat.it or through our social profiles, we process the data you send for the same purposes and periods as the contact form.

Do you have to give us your data?

No. But without a name and email we cannot reply.

Who sees the data

Only team members authorised to handle requests and applications. The site and our mailboxes are hosted by Hostinger, acting as a data processor on our behalf. We do not sell or share data with third parties for marketing and we do not publish it.

Only if you consent in the cookie banner, browsing data is also processed by Google Ireland Limited for analytics (Google Analytics). Details are in the cookie policy.

If a provider processes data outside the European Economic Area, it does so with the safeguards set out in Articles 44 and following of the GDPR, such as the standard contractual clauses approved by the European Commission.

Social links

The site contains plain links to Instagram, LinkedIn and Facebook. We do not embed buttons or content from these platforms: until you click, they receive no data from us. Once on their site, their own policies apply.

Cookies

The site uses one technical cookie to remember your choices and, only with your consent, analytics tools. Details are in the cookie policy.

Your rights

You can ask us at any time to access, correct or delete your data, restrict its processing, receive it in a readable format or object to its processing (Articles 15–22 GDPR). You can also withdraw the consent given in the form, without affecting what was done before. Just write to info@zumbat.it or to zumbat@pec.it.

If you believe the processing is not lawful, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the authority in your country.

Automated decisions

We do not make decisions based solely on automated processing, including profiling.

Changes

If we change how we process data, we will update this page and the date at the top.