Privacy policy

Information on the processing of personal data under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: July 2026.

1. Data controller

The hyper8.ai website (the “Site”) and the Hyper8 brand are a project of NumbersDigital S.r.l., which acts as the data controller for personal data collected through the Site and in connection with the services offered.

2. Sources and categories of data processed

Personal data may be collected:

• while browsing the Site: technical data whose transmission is inherent in internet protocols (IP addresses, access times, pages visited and browser information), processed by the hosting provider to operate and secure the service;
• when data subjects provide it voluntarily: for example, by writing to the contact details shown on the Site, taking part in assessment or training activities under a contractual relationship, or submitting a job application.

3. Purposes and legal bases

• Responding to requests and taking pre-contractual and contractual steps (Article 6(1)(b) GDPR): responding to contact requests, preparing proposals and providing services.
• Administrative and accounting activities and compliance with legal obligations (Article 6(1)(c) GDPR): invoicing, tax obligations and regulatory requirements.
• Operating and securing the Site (Article 6(1)(f) GDPR, legitimate interests): technical logs and prevention of abuse.

Providing data for these purposes is necessary. Without it, we cannot respond to requests or provide services.

4. Marketing communications

Any marketing or promotional communications (by email or telephone) are sent only with the data subject's explicit consent (Article 6(1)(a) GDPR). Consent is optional and may be withdrawn at any time without affecting access to services.

5. Recipients of data

Data may be processed by:

• the controller's personnel and collaborators, who are authorized and instructed to process it;
• providers acting as data processors under Article 28 GDPR (IT and hosting services, administrative and legal advisers). The Site is hosted on Vercel infrastructure. Any transfers of data to third countries are based on the safeguards provided for in Chapter V of the GDPR (standard contractual clauses).

Data is not publicly disclosed.

6. Data subject rights

Under Articles 15–22 GDPR, data subjects may exercise their rights at any time to:

• access their personal data and information about its processing;
• rectify or erase data, or restrict its processing;
• object to processing;
• data portability;
• withdraw consent without affecting the lawfulness of earlier processing;
• lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it).

Requests may be sent to the controller at Viale Antonio Gramsci 15, 80122 Napoli (NA), Italy.

7. Retention period

Data is kept for as long as necessary for the purposes for which it was collected, in accordance with the data minimization principle (Article 5(1)(c) GDPR): technical logs for short periods related to security; contractual data for the duration of the relationship and for the document retention and limitation periods required by law; and data processed on the basis of consent until consent is withdrawn.

8. Job applications

Data in CVs received is processed solely to assess the application and, where applicable, establish an employment relationship. It is processed by authorized personnel and erased within 12 months if the application does not proceed. Applicants are asked not to include special categories of personal data in their CVs (health, religious beliefs, political opinions or sexual orientation).

9. Methods of processing

Processing is carried out using IT tools and, to a limited extent, manually, in ways closely related to the stated purposes and with appropriate technical and organizational measures to ensure security and confidentiality.

10. Cookies

The Site does not use profiling cookies, whether first-party or third-party, or analytics tools that track users. Only technical cookies strictly necessary for operation may be used, for which consent is not required. Users can manage or block cookies through their browser settings.

11. Data Protection Officer (DPO)

The controller has appointed a Data Protection Officer under Article 37 GDPR: Paola Sabatano, who can be contacted at dpo@nsone.it. Data subjects may contact the DPO with any questions about the processing of their data or the exercise of their rights.

12. Updates

This policy may be updated to reflect changes in law or developments to the Site and its services. The version published on this page is the current version.