Browsing data: IP address, device identifiers, technical and security logs, and information necessary for the functioning of the website. Legal basis: legitimate interest of the Data Controller in the security and functioning of the website (Art. 6.1.f GDPR).
Data provided voluntarily (contact forms – Contact Form 7): first and last name, email address, telephone number, message, any attachments/CVs sent by the user. Legal basis: implementation of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).
Cookies and similar tools: see the Cookie Policy for details on categories, legal bases and timeframes.
Purpose of processing
website provision, security, abuse prevention;
management and confirmation of requests sent via forms;
display of third-party content (e.g. YouTube, Google Maps) subject to consent to non-technical cookies;
legal compliance and legal protection.
Nature of the transfer
The provision of data in the forms is necessary to process the request; refusal prevents the Data Controller from responding. Non-technical/third-party cookies are optional and subject to consent via banners.
Storage
Contact requests: up to 6 months from the closure of the request.
CVs received: 6 months (unless otherwise agreed in writing).
Technical/security logs: according to provider policy (typically 30–180 days).
Cookies: as indicated in the Cookie Policy.
Recipients and categories of recipients
Website hosting and IT maintenance providers;
Related service providers (e.g. YouTube, Google Maps);
Consultants acting on behalf of the Data Controller. These individuals operate, when required, as Data Processors pursuant to Article 28 of the GDPR. The updated list is available upon request.
Transfers outside the EU
The use of third-party services (e.g. YouTube, Google Maps) may involve transfers to countries outside the EU. In such cases, providers apply Standard Contractual Clauses or other appropriate safeguards (Articles 44 et seq. GDPR). Further details can be found in their privacy policies:
You may exercise your rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent by writing to info@zicreative.it. You have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
Minors
The site is intended for persons aged 14 years and older.
Safety measures
Adoption of appropriate technical and organisational measures (TLS/HTTPS encryption, hardening, backup and access control).
