We are the controller and responsible for your personal data:

zukunvt GmbH/S.r.l.
Via dei Campi della Rienza 30
39031 Brunico (BZ)
Alto Adige / Italia
E-mail: info@zukunvt.com
PEC: zukunvt@pec.it

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

“Identity Data” includes information that directly identifies a person, such as first name and last name.

“Identifiers” means data that may indirectly identify a person, such as usernames, device IDs or third-party IDs.

“Contact Data” includes email address and telephone numbers.

“Content Data” includes any personal data you send us (e.g. personal data included in a request you send us via our website contact form).

“Technical Data” includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.

“Profile Data” includes [your interests, preferences, feedback and survey responses].

“Usage Data” includes information about how you interact with and use our website, products and services.

“Marketing and Communications Data” includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

We use different methods to collect data from and about you including through:

3.1 Your interactions with us

You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

(a) apply for our products or services;

(b) create an account on our website;

(c) subscribe to our service or publications;

(d) request marketing to be sent to you;

(e) enter a competition, promotion or survey; or

(f) give us feedback or contact us.

3.2 Automated technologies or interactions

As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using server logs, cookies and other similar technologies. Please see our cookie policy for further details.

4.1 Legal basis

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

(a) Consent (Article 6(1)(a) GDPR): We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

(b) Performance of a contract with you (Article 6(1)(b) GDPR): Where we need to perform the contract we are about to enter into or have entered into with you.

(c) Legal obligation (Article 6(1)(c) GDPR): We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.

(d) Legitimate interests (Article 6(1)(f) GDPR): We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

4.2 Purposes for which we will use your personal data

We have set out below, in table form, a description of all the ways in which we intend to use the different categories of your personal data, the legal bases on which we rely to do so and who the potential recipients of that personal data are. We have also indicated, where appropriate, what our legitimate interests are.

Details of recipients of your personal data are set out in the table below

We have no interest in transferring your data outside of the European Economic Area (EEA). However, the use of certain IT services providers, such as Squarespace, Mailchimp, Calendly, LinkedIn, Google and Meta, may imply the transfer of your personal data outside the EEA, in particular to the United States. Any such transfer is based on the EU-US Data Privacy Framework.

This Website is protected by appropriate security measures. Technical Data is transmitted in encrypted form (currently using TLS 1.2).

Details of retention periods for different aspects of your personal data are set out in the table below.

You have the following rights under the GDPR in relation to your personal data:

(a) right of access (Article 15 GDPR);

(b) right of rectification (Article 16 GDPR);

(c) right to erasure (Article 17 GDPR);

(d) right to restriction of processing (Article 18 GDPR);

(e) right to object (Article 21 GDPR).

WITH REGARD TO YOUR RIGHT TO OBJECT, PLEASE NOTE THAT IF YOUR PERSONAL DATA IS PROCESSED ON THE BASIS OF OUR LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

If you wish to exercise any of these rights, please contact us (see contact details under point 1 above).

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of personal data relating to you is in breach of applicable data protection laws. 

In particular, you may lodge a complaint with the supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement. In Italy, the supervisory authority is the Garante per la protezione dei dati personali (GPDP).

We keep our privacy policy under regular review.

zukunvt GmbH/S.r.l. uses artificial intelligence (AI) tools in its internal working processes in order to improve operational efficiency and the quality of the services we provide. You may find the full list of the tools we use in the table below, together with tool description, purpose, and legal basis on which such processing rests.

• Claude (Provider: Anthropic, PBC): used for drafting, strategy, content creation, analysis, internal process support

• n8n (Provider: n8n GmbH): used for internal workflow automation, data integration between systems

• Gemini (Provider: Google Ireland Limited): used for image generation in support of creative processes.

• Exactly AI (Provider: Exactly AI): used for AI image generation trained on brand-consistent visual assets.

Client data policy

By default, zukunvt does not input personal data of third parties or confidential client data into the AI tools listed above. Where a specific project requires personal data to be processed via AI tools, this is done exclusively on a separate contractual basis and with a dedicated notice to the data subject.

Automated decision-making

zukunvt does not make automated decisions producing legal or similarly significant effects on data subjects within the meaning of Art. 22 GDPR. AI tools support the decision-making processes of our team; final decisions always rest with individual members of staff.