Privacy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

Last updated: March 11, 2026

This page describes the methods for processing the personal data of users who consult the website named BizJumper, accessible electronically at the address https://bizjumper.it/

This information does not concern other sites, pages, or online services reachable via hypertext links that may be published within the platform but do not refer to BizJumper.

This information notice is drafted in the Italian language, which shall be considered the official version. Any translations into other languages are not to be considered official and are carried out using machine translators solely for the purpose of facilitating reading.

DATA CONTROLLER

BizJumper is a brand of 2MB S.r.l.

The Data Controller is 2MB S.r.l., with registered office in ITALY, 50053 Empoli (FI) via Del Giglio n. 22, VAT number IT07503000486, reachable at the following contact details: privacy@bizjumper.it (hereinafter also referred to as the “Controller”).

TYPES OF DATA PROCESSED

The following data are collected and processed through the site:

• Personal data – name, surname, e-mail, as well as personal and contact details required for registration in the reserved section of the site;
• Navigation data – The computer systems and software applications dedicated to the operation of the website automatically collect and temporarily store certain data whose transmission is implicit in the use of Internet communication protocols. The data collected include: browser type and version; operating system used, IP addresses and domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters regarding the operating system and the computer environment used by the User. These data are processed for the time strictly necessary, solely for the purpose of obtaining anonymous statistical information on the use of the site and to monitor its correct functioning.
• Cookies – Through the site, navigation and behavior data on the site itself are collected and processed via cookies or other tracking systems, including preferences expressed and responses provided during navigation and interaction with the platform. This website uses both so-called “technical” session cookies to allow safe and efficient navigation, and profiling and personalization cookies and/or other tracking tools (which create personalized profiles relating to the user for advertising purposes and are then used to undertake marketing activities, such as retargeting or advertising on social networks, data that are processed and used for activities other than navigation, and for which user consent is required for acquisition), as well as allowing you to interact with third-party tools that may also employ cookies and/or other tracking tools for tracking, profiling, and personalization purposes. For a description of the cookies, their storage time, and their management, please refer to the cookie consent management section in the footer/main page. In any case, it is possible to manage cookies and your privacy and security in general through the features offered by browsers. The main browsers offer various features to protect the privacy of those who browse. For further information on how to deactivate third-party cookies, you can also consult the sites youronlinechoices.com/it/ and www.aboutcookies.org/.
• Data provided voluntarily by the user – The voluntary and explicit sending of e-mail messages to the addresses indicated on the site or through the instant messaging service available on the site involves the subsequent acquisition of the e-mail address and all other personal data included in the communication.

USE OF THIRD-PARTY TOOLS ON THE SITE

WhatsApp

The site uses WhatsApp as a communication tool. Data (e.g., messages, phone number) are processed to provide assistance or respond to your requests. Data may be transferred to WhatsApp/Meta, which processes them in the following ways: https://www.whatsapp.com/legal/privacy-policy-eea

AI Chatbot developed by Purethemes for WordPress

The site uses an intelligent AI virtual assistant with semantic search created for WordPress. When you interact with the chatbot, your messages are sent to OpenAI or Google (depending on the configuration) to generate responses. Chat conversations may be stored temporarily to improve quality. IP addresses are anonymized (last octet removed). Conversations are automatically deleted after 30 days. No personal identifiers are sent to the AI providers. More information regarding Purethemes’ privacy policy can be found at the following link: https://purethemes.net/privacy-policy/

PURPOSES OF PROCESSING

Unless otherwise specified, all data requested for the processing purposes indicated below under a) and b) – pre-contractual and contractual and for the fulfillment of regulatory obligations – are mandatory, and in case of refusal to communicate them, it may be impossible to provide the service.

Provision for purposes c) and d) is optional and subject to consent: failure to provide such data does not affect access to the service.

Your data are processed for the following purposes:

1. Pre-contractual and contractual purposes
   • To provide the requested service;
   • To manage administrative and operational activities for the conclusion of the contract;
   • To communicate data to third parties for this purpose.
2. Fulfillment of regulatory obligations
   • To fulfill obligations provided for by national or EU regulations.
3. Direct marketing by 2MB S.r.l.
   • Sending, via e-mail/SMS/telephone/WhatsApp, promotional communications relating to products or services similar to those requested.
4. Profiling activities
   • Automated analysis of user preferences, habits, behaviors, and characteristics, including through the use of algorithmic systems, in order to send personalized communications, improve the user experience, and propose tailored offers.
   • In no case does profiling involve automated decisions with legal or significant effects pursuant to Art. 22 of the GDPR.

LEGAL BASIS FOR PROCESSING

Your data are processed as one or more of the following conditions apply (Art. 6 GDPR):

1. Pre-contractual and contractual purposes
   • Legal basis: Art. 6, par. 1, point b) GDPR – execution of pre-contractual and contractual measures at the request of the user/data subject.
2. Fulfillment of regulatory obligations
   • Legal basis: Art. 6, par. 1, point c) GDPR – processing is necessary for compliance with a legal obligation to which 2MB S.r.l. is subject.
3. Direct marketing by 2MB S.r.l.
   • Legal basis: Art. 6, par. 1, point a) GDPR – explicit consent and Art. 6, par. 1, point f) GDPR – legitimate interest of 2MB S.r.l.
4. Profiling activities:
   • Legal basis: Art. 6, par. 1, point a) GDPR – explicit consent.

PROCESSING METHODS AND DATA RETENTION PERIOD

Your data will be processed according to principles of correctness, lawfulness, transparency, and minimization. Processing may also take place through automated decision-making processes, including profiling activities, always subject to the user’s prior consent and in compliance with the guarantees provided by the regulations.

We will process your data for the time necessary to fulfill the above purposes for:

• 10 years in case of conclusion of the contract;
• 24 months for promotional and marketing purposes (unless consent is renewed);
• 12 months for profiling purposes (unless consent is renewed);
• 12 months for data collected in the pre-contractual phase without subsequently finalizing the contract.

DATA RECIPIENTS

Your data may be communicated to external parties, including:

• IT and hosting service providers: cloud service providers, hosting, IT infrastructure management, as independent Controllers or Data Processors.
• Advertising platform providers and companies providing digital marketing and remarketing services that may operate, as the case may be, as data processors or independent controllers;
• External consultants and professionals: legal, tax, accounting consultants, cybersecurity experts, as independent Controllers or Data Processors.
• Data analysis platforms: web analytics and business intelligence tools, as independent Controllers or Data Processors.
• Backup and disaster recovery services: providers of solutions for secure data storage, as independent Controllers or Data Processors.

The complete and updated list of external parties is available upon request by writing to 2MB S.r.l. at the following address: privacy@bizjumper.it

TRANSFER OF DATA ABROAD

Your data will be processed by natural and/or legal persons operating on our behalf under specific contractual agreements and based in EU member countries.

Your data may also be transferred to Third Countries for which adequacy is recognized through a decision of the European Commission (Art. 45 of EU Regulation 2016/679), or to Third Countries in compliance with the guarantees provided by Art. 46 et seq. of the GDPR.

The list is available upon request by writing to 2MB S.r.l. at the e-mail address privacy@bizjumper.it

YOUR RIGHTS

You have the right to obtain from us, in the cases provided for (Articles 15–22 GDPR):

1. Right of access (Art. 15)

The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, if so, to access the personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right of the data subject to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the data are not collected from the data subject, any available information as to their origin;
• the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

2. Right to rectification (Art. 16)

The data subject has the right to obtain from the Controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to erasure (“right to be forgotten”) (Art. 17)

The data subject has the right to obtain from the Controller the erasure of personal data concerning them without undue delay, and the Controller has the obligation to erase personal data without undue delay where one of the grounds provided for in Article 17, paragraph 1 of the GDPR applies.

4. Right to restriction of processing (Art. 18)

The data subject has the right to obtain from the Controller restriction of processing where one of the cases provided for in Article 18, paragraph 1 of the GDPR applies.

5. Right to data portability (Art. 20)

The data subject has the right to receive the personal data concerning them, which they have provided to a Controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another Controller without hindrance from the Controller to which the personal data have been provided, if the processing is based on consent or on a contract and the processing is carried out by automated means.

6. Right to object (Art. 21)

The data subject has the right to object at any time, on grounds relating to their particular situation, to processing of personal data concerning them, including profiling, unless the Controller demonstrates compelling legitimate grounds for the processing.

7. Right not to be subject to automated decision-making (Art. 22)

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

The relevant request is submitted by contacting 2MB S.r.l. at the e-mail address: privacy@bizjumper.it

No particular formalities are required, and the form published on the website of the Privacy Guarantor at the link https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali may be used. The deadline for the response is one (1) month, extendable by two (2) months in case of particular complexity. In such a case, the Controller informs the data subject within one (1) month of receipt of the request.
The exercise of rights is, in principle, free of charge, except for the right to request a contribution in the case of manifestly unfounded or excessive (including repetitive) requests.

RIGHT TO LODGE A COMPLAINT

Data subjects who believe that the processing of personal data relating to them carried out through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Art. 77 of the Regulation itself, or to seek judicial remedy (Art. 79 of the Regulation).

CHANGES AND UPDATES

In order to best satisfy any information needs regarding the protection of personal data and to keep pace with regulatory evolution in the sector, we inform you that we may freely update and modify this information notice.

You may exercise your rights by sending an e-mail to 2MB S.r.l. at the e-mail address privacy@bizjumper.it