Privacy Policy

1. Overview of Data Protection

1.1 Introduction

This Privacy Policy provides a clear and immediate overview of how your personal data is processed when you browse the Cyber Funded website.
Personal data means any information that can identify you, directly or indirectly.
For more detailed information, please refer to the following sections of this policy.

1.2 Data Collection

Your data is collected mainly in two ways:

Data provided by you: for example, when you fill in a contact form, register, or contact us directly.
Data collected automatically: technical information about the device and browser you use (e.g. operating system, browser type, IP address, access time). This data is collected automatically by our IT systems as soon as you visit the website.

1.3 Purpose of Data Processing

To ensure the proper technical functioning of the website
To analyse user behaviour on the website in order to improve its features and performance

1.4 Data Subject Rights

You always have the right to:

Obtain information about your personal data, its origin and the recipients
Request correction or deletion of your data
Withdraw your consent at any time
Request restriction of processing in certain circumstances
Lodge a complaint with a supervisory authority, such as the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

For any privacy-related request, you may contact us using the details provided below.

2. General and Mandatory Information

2.1 Data Controller

The data controller is:
Cyber Funded S.r.l.
Via Domenico Berra 8, Crescenzago (MI), 20132 – Italy

Email: service@cyberfunded.com
Phone: +39 340 720 7575

The data controller is the legal entity that determines the purposes and means of processing personal data collected through this website.

2.2 Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.
Where legal obligations apply (e.g. tax, administrative or commercial requirements), data may be retained for the period required by applicable law.

2.3 Legal Basis for Processing

In accordance with the GDPR, we process your data on the basis of:

Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR)
Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
Compliance with legal obligations (Art. 6(1)(c) GDPR)
Legitimate interest (Art. 6(1)(f) GDPR), for example to ensure security, prevent abuse or improve our services

2.4 Transfer of Data to Third Countries

Some of our service providers may be located outside the European Economic Area.
In such cases, we adopt appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to ensure data protection in compliance with the GDPR.

3. Data Security

Our website uses SSL/TLS encryption protocols to protect the transmission of sensitive data (e.g. contact form submissions).
You can recognise a secure connection by the “https://” prefix and the padlock icon in your browser.

4. Data Collection and Use on This Website

4.1 Server Log Files

Our hosting provider automatically collects certain technical information (browser type/version, operating system, IP address, access time).
This data is required for security and proper website operation and is processed on the basis of legitimate interest (Art. 6(1)(f) GDPR).

4.2 Contact Forms

Data submitted through contact forms is used exclusively to handle your request.
The legal basis is:

performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or
legitimate interest (Art. 6(1)(f) GDPR), or
consent (Art. 6(1)(a) GDPR).

4.3 Communications via Email or Phone

Emails or phone calls received are processed in order to respond to your enquiries.
The same legal basis as for contact forms applies.

4.4 Communications via WhatsApp

We offer the possibility to contact us via WhatsApp.
Using this channel involves the processing of personal data (name, phone number, conversation content).
The legal basis is voluntary consent (Art. 6(1)(a) GDPR).
Note: WhatsApp is a US-based service, therefore data may be processed outside the EU.

5. Analytics and Third-Party Tools

Hosting and Web Service Providers

The Cyber Funded website is developed using Webflow, Inc. (based in the USA).
Actual hosting and data storage take place within the European Union, on servers managed by Aruba S.p.A. in Italy.

Hosting: all personal data collected (e.g. contact forms or registrations) is stored on servers located in Italy, ensuring data remains within the EU.
CMS Platform (Webflow): Webflow acts as a technology provider. In some cases, data transfers to third countries (e.g. USA) may occur for technical support purposes, always in compliance with Chapter V of the GDPR, using Standard Contractual Clauses and appropriate security measures.
Role of Providers: Aruba S.p.A. and Webflow, Inc. act as Data Processors pursuant to Art. 28 GDPR, based on agreements entered into with Cyber Funded.

6. Plugins and Tools

Google Web Fonts (Local Hosting)

To ensure a consistent appearance of fonts, we use Google Fonts installed locally.
No connection to Google servers is established.

7. Rights of Data Subjects

Pursuant to the GDPR, you have the right to:

Access your data
Request rectification or deletion
Restrict processing in specific cases
Object to processing based on legitimate interest or direct marketing (Art. 21 GDPR)
Request data portability in a machine-readable format
Withdraw consent at any time without affecting the lawfulness of prior processing
Lodge a complaint with the Italian Data Protection Authority or other competent supervisory authorities

8. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy in order to comply with legal changes or updates to our services.
We encourage you to review it periodically.