GDPR Policy

Last updated: July 2026

1. Data Controller

The Data Controller is Giuseppe Crisci, based in Zanica (BG), Italy.

For any communication regarding privacy and personal data protection, you can contact us at:

info@genhub-animal-match.com

2. Data Collected

Through the contact forms (Pre-Sale and information form), we collect the following personal data:

• First and last name — to identify you and address personalized communications
• Email address — to contact you regarding the platform and access conditions
• Federation affiliation (optional) — to understand whether you are already registered with an ornithological federation (FOI, AOB, other, none) and provide targeted information
• Phone number (optional) — for direct contact should you prefer it
• Plan of interest — to understand your needs and offer the most suitable plan
• Personal message (optional) — to collect any requests or questions
• IP address — recorded at the time of consent as proof of your intent (legal basis: Art. 7, par. 1 GDPR)
• Date and time of consent — recorded to document the moment you gave consent

3. Purposes of Processing

Your personal data is processed exclusively for the following purposes:

• Recording your interest in the GenHub platform
• Contacting you for communications regarding access methods and terms of use
• Sending you updates on the platform's development status (only if you have given explicit and separate consent for the newsletter)
• Improving our offering based on expressed preferences (chosen plan, message)

4. Legal Basis

The processing of your data is based on your explicit consent (Art. 6, par. 1, lett. a GDPR). Consent is obtained through the dedicated checkbox in the pre-sale form and can be revoked at any time.

Newsletter consent is separate and optional: you can request to be contacted for the pre-sale without subscribing to the newsletter.

We process the IP address and date/time of consent based on the obligation to document the consent given (Art. 7, par. 1 GDPR in conjunction with Art. 6, par. 1, lett. c).

5. Processing Methods

Personal data is processed using electronic tools and stored on secure servers with the following security measures:

• SSL/TLS encryption for all communications
• Data access limited to authorized personnel only
• Regular backups to prevent accidental loss
• Firewall and intrusion detection systems
• Prepared statements to prevent SQL injection
• Rate limiting on API endpoints to prevent abuse

6. Retention Period

Your data will be stored for the time necessary for the purposes indicated above and in any case no longer than:

• 24 months from collection, unless you request early deletion
• If you become a platform user, data will be processed according to the application's privacy policy

After this period, the data will be permanently deleted or anonymized.

7. Data Disclosure

Your personal data will not be sold to third parties. It may be disclosed exclusively for:

• Complying with legal obligations
• Technical service providers (hosting, email) strictly necessary for the platform's operation

Extra-EU transfer: The site uses Google Fonts and CDNs (Cloudflare, Google) for loading fonts and technical libraries. These services involve transferring your IP address to servers in the United States. Google LLC adheres to the EU-US Data Privacy Framework, recognized by the European Commission as adequate protection under Art. 45 GDPR. For more details on third-party services used, see our Cookie Policy.

8. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, you have the right to:

• Access — obtain confirmation of the existence of your data and know its content
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data (right to be forgotten)
• Restriction — restrict processing in certain circumstances
• Portability — receive your data in a structured, readable format
• Objection — object to processing on legitimate grounds
• Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

To exercise your rights, write to: info@genhub-animal-match.com. We will respond within 30 days of receiving the request, as required by the GDPR.

9. Complaint to the Supervisory Authority

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

10. Nature of Data Provision

The provision of data marked with an asterisk (*) in the pre-sale form is mandatory for registering your request. Refusal to provide such data will prevent participation in the pre-sale phase. Optional data (phone, message, newsletter consent) is voluntary and does not affect registration.

11. Cookies and Tracking Technologies

The GenHub platform does not use profiling cookies. Only technical cookies and CDN resources necessary for the site's operation are used. For the complete and detailed list, see our Cookie Policy.

12. Changes to the Privacy Policy

This privacy policy may be subject to updates. We invite you to periodically check this page for any changes. The date of the last update is indicated at the beginning of the document.