Privacy Notice

1. Data Controller

The Controller of the personal data collected through this website is Kaboom Srl, registered office at Via Castellamonte 1, 10138 Torino (Italy), VAT/Tax Code IT-11178000011, reachable at info@kaboom.cloud.

2. Categories of data collected

• Navigation data: IP address, user agent, pages visited, time spent, referrer. Collected automatically for aggregated statistical purposes and infrastructure security.
• Data provided voluntarily: name, business email, phone number, company name and the content of the message submitted through the Contact form or the Beta invite. Provided by the data subject in order to be contacted back.
• Technical cookies: session cookies necessary for the proper functioning of the website. The handling of any analytics or third-party cookies is detailed in the Cookie Policy.

3. Purposes and legal bases of processing

• Reply to requests received via the contact form or email — legal basis: performance of pre-contractual measures at the data subject's request (art. 6.1.b GDPR).
• Infrastructure security, abuse prevention, access logs — legal basis: legitimate interest of the Controller (art. 6.1.f GDPR).
• Compliance with legal obligations (e.g. tax obligations arising from contractual relationships) — legal basis: art. 6.1.c GDPR.
• Sending of marketing communications (newsletter, product updates) — legal basis: explicit consent of the data subject (art. 6.1.a GDPR), revocable at any time.

4. Methods of processing

Data is processed using electronic tools, hosted on enterprise-grade cloud infrastructure (Microsoft Azure, Europe region). Appropriate technical and organisational measures are in place — at-rest and in-transit encryption, least-privilege access controls, audit logs, managed backups — to ensure a level of security adequate to the risk.

5. Retention period

• Contact form data: kept for 24 months from the last contact, unless a contractual relationship is opened.
• Website access logs: kept for 6 months for security purposes.
• Newsletter subscribers: until the data subject withdraws consent.

6. Data recipients

Data may be disclosed to:

• Authorised personnel of Kaboom Srl, for the purposes described above only.
• Providers of technical services (cloud hosting, email provider, CRM tools, identity provider) appointed as Processors under art. 28 GDPR.
• Competent authorities upon legitimate request.

Data is not disseminated nor transferred to third parties for their own independent commercial purposes.

7. Transfers outside the EU

Data is hosted on infrastructure located in the European Union. Where sub-processors are based in third countries, the transfer is carried out on the basis of Standard Contractual Clauses (SCC) adopted by the European Commission or other adequate mechanisms under Chapter V of the GDPR.

8. Rights of the data subject

As a data subject you may exercise at any time the rights set out in articles 15-22 GDPR:

• Access to your personal data;
• Rectification of inaccurate data or completion of incomplete data;
• Erasure ("right to be forgotten") in the cases provided for by law;
• Restriction of processing;
• Data portability;
• Objection to processing based on legitimate interest;
• Withdrawal of consent, without prejudice to processing carried out beforehand;
• Lodge a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority (garanteprivacy.it).

Requests must be sent by email to info@kaboom.cloud. We will reply within 30 days of receipt, without prejudice to the right to extend the deadline for particularly complex requests, in any case within the limits of the law.

9. Changes to this notice

This notice may be updated to reflect regulatory developments or new processing arrangements. The version in force is always the one published on this page, with an indication of the date of the latest update.

---

For questions or specific requests, write to info@kaboom.cloud.