Privacy Notice & Personal Data Protection
This notice describes, with scientific rigour and transparency, how the personal data of users who browse or interact with the services and web infrastructure available on the cloud4job.com domain is collected, managed and protected.
Data Controller
The controller of the data collected through this website is the company:
Cloud4Job Srl
Industrial Research Laboratory & Experimental Development in Artificial Intelligence
65100 Pescara [PE] — Italy
Personal Data Collected
Browsing and any interaction with the pages of the site cloud4job.com may involve the processing of the following categories of data:
A. Browsing Data and System Telemetry
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols:
- IP addresses or domain names of the computing nodes used by users;
- URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources;
- System time of the request and the associated UTC time zone;
- Method used to submit the request to the server (GET, POST, HEAD);
- Size of the response payload exchanged, in kilobytes;
- Numeric code indicating the status of the response given by the server (2xx, 3xx, 4xx, 5xx);
- Parameters relating to the user's operating system and computing environment (User-Agent string).
B. Data Voluntarily Provided by the Data Subject
The explicit, optional and voluntary sending of messages through the mail channels or forms on the site involves the collection of the following contact details needed to prepare a reply:
- First and last name of the contact person;
- Company or institutional email address;
- Institution, university, company or organisation of affiliation;
- Subject and text of the message or technical question submitted;
- Any telephone numbers spontaneously included in the body of the text.
Purposes and Legal Bases of Processing
Each processing operation is based on a specific legal basis governed by Article 6 of Regulation (EU) 2016/679, according to the following taxonomy:
| INSTITUTIONAL PURPOSE | LEGAL BASIS (GDPR) | NATURE OF PROVISION |
|---|---|---|
| Handling of contact requests, technical consulting or preliminary R&D agreements | Art. 6(1)(b): Performance of pre-contractual measures at the request of the data subject | Optional but essential to reply |
| Monitoring of system integrity, detection of DDoS attacks and cyber-security | Art. 6(1)(f): Legitimate interest of the controller in protecting its information perimeter | Automatic and intrinsic to web protocols |
| Legal, accounting and corporate obligations or cooperation with the Judicial Authority | Art. 6(1)(c): Compliance with a legal obligation to which the Controller is subject | Mandatory by law |
Processing Methods & Security Measures
Personal data is processed in accordance with the principles of fairness, lawfulness, transparency and minimisation set out in Article 5 of the GDPR.
In accordance with Article 32 of the Regulation, Cloud4Job adopts rigorous technical and organisational security measures:
- End-to-transit encryption (TLS 1.3): All browsing sessions are transmitted with strong encryption and modern, highly resilient elliptic curves;
- ISO 27001 / SOC 2 Certified Data Centres: The hosting infrastructure operates exclusively on European server nodes compliant with the highest international standards;
- Principle of Least Privilege: Access to system logs and communications is limited to authorised personnel bound by contractual confidentiality agreements;
- No Invasive Profiling: No behavioural or biometric profiling mechanisms or solely automated decisions under Art. 22 GDPR are in place.
Data Retention Period
Personal data is processed and stored only for the time strictly required by the purposes for which it was collected:
Maximum 24 Months
Informational or pre-contractual messages are retained for a maximum of 2 years from the last operational contact, unless a contractual relationship is subsequently established.
Maximum 180 Days
Web server log files are kept for a maximum of six months solely for system security, DDoS anomaly tracking and fraud prevention purposes, and are then destroyed.
Recipients and Transfer of Data
Cloud4Job Srl does not sell, does not transfer for consideration or free of charge, and does not share for advertising purposes the personal data collected.
Personal data may be processed only by:
- Internal personnel appointed and expressly authorised in writing by the Controller;
- Cloud hosting, connectivity and email service providers appointed as Data Processors (Art. 28 GDPR) through a DPA;
- Public authorities or bodies upon an explicit, legally binding request.
The servers are located within the European Economic Area (EEA). Any exceptional transfers to non-EU providers take place exclusively on the basis of Standard Contractual Clauses (SCC) approved by the European Commission or adequacy decisions.
Data Subject Rights (Arts. 15–22 GDPR)
Users may exercise at any time the rights provided for by Regulation (EU) 2016/679:
Right of Access
Obtain confirmation of ongoing processing and a copy of the personal data processed.
Right to Rectification
Immediate rectification of inaccurate data or completion of incomplete data.
Right to Erasure
Permanent erasure (“right to be forgotten”) in the cases provided for by the regulation.
Right to Restriction
Restriction of processing pending verification or objection.
Right to Data Portability
Receive the data in a structured, commonly used and machine-readable format.
Right to Object
Object at any time to processing based on legitimate interest.
Controller Contacts and Exercise of Rights
To exercise any of the rights or for questions about the processing of their personal data, the data subject may send a request that is not subject to any formalities:
♢ Privacy & Data Protection Office
Cloud4Job Srl — Attn. Privacy Office
Via Tirino 227
65100 Pescara [PE] — Italy