Privacy policy

Data controller

The controller is Ognjen Elia Dolić, natural person and founder of Exploit2Impact (E2I), acting as provisional controller until the company is incorporated, Bassano del Grappa, Veneto, Italia. Contact: exploit2impactcareers@gmail.com. This notice will be updated with the company details once it is incorporated.

Data we process and why

Contact form

Name, email, company and role (optional), topic and message. We use them only to reply to your request.

Application form

Name, email, city (optional), role of interest, type of collaboration, professional links (optional) and message. We use them to evaluate the application and contact you. Please do not enter special categories of personal data in the free text.

Technical browsing data

When you visit the site, Cloudflare's infrastructure processes technical data such as IP address, browser type, requested page and date and time, which are needed to deliver the site, protect it from abuse and attacks and keep it running reliably. We do not use this data to profile you.

Legal bases

• Forms: your consent, given by submitting the form after reading this notice, and pre-contractual steps requested by you.
• Technical data: the legitimate interest in keeping the site available and secure (Article 6(1)(f) GDPR).

Hosting and security on Cloudflare

The site is hosted on Cloudflare Pages and requests pass through the network of Cloudflare, Inc. (USA), which provides hosting, CDN, attack protection and DNS management. Forms are received by a serverless function running on Cloudflare's infrastructure, which forwards the message by email to the team and does not save it in a site database.

Cloudflare processes data on our behalf to deliver the service and, for certain security and network operation purposes, as an independent controller under its own notice: cloudflare.com/privacypolicy (opens in a new tab). Data may also be processed outside the European Economic Area. Transfers rely on the safeguards provided by Cloudflare, including its participation in the EU-US Data Privacy Framework and standard contractual clauses.

Other recipients

To forward form messages we use an email delivery service (Resend, acting as data processor under a data processing agreement and possibly processing data outside the European Economic Area under standard contractual clauses) and the team's mailbox. Besides the Exploit2Impact team and these technical providers, we do not share data with third parties and we do not sell it.

How long we keep data

Requests sent through the contact form are kept for 12 months after the last exchange. Applications are kept for 12 months after the selection process ends and then deleted, unless you consent to a longer period. You can ask for earlier deletion at any time. Technical logs are kept by Cloudflare for the periods stated in its documentation.

Your rights

You can request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to exploit2impactcareers@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Cookies

For the technical cookies set by the infrastructure see the cookie policy.