Privacy Policy

Last updated: June 1, 2026

Privacy Policy

This Privacy Policy describes how Redbit S.r.l.s. (“we,” “us,” or “our”) collects, uses, and protects personal data of visitors (“you” or “data subjects”) to the website pubengine.ai (the “Website”), in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.

1. Data Controller

The Data Controller responsible for processing your personal data is:

Redbit S.r.l.s.
Italy
Contact: https://pubengine.ai/contact/
Email: [email protected] (general privacy enquiries)
DPO: [email protected] (Data Protection Officer)
Website: www.redbitsrls.com

2. Legal Basis for Processing (GDPR Article 6)

We process personal data only when a valid legal basis exists under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)): For non-essential cookies (analytics, advertising). You can withdraw consent at any time via our cookie preference center or by following the opt-out instructions below.
  • Legitimate Interests (Art. 6(1)(f)): For security logging, fraud prevention, and basic website operation analytics. Our legitimate interests do not override your fundamental rights and freedoms.
  • Contractual necessity (Art. 6(1)(b)): Where applicable, when processing is necessary to respond to your direct inquiries or service requests.

3. Data We Collect

3.1 Data Collected Automatically

When you visit the Website, our servers and third-party services may collect the following data automatically:

  • IP address (anonymized where technically possible)
  • Browser type and version
  • Operating system
  • Referring URL
  • Pages visited and time spent on each page
  • Date and time of access
  • HTTP request/response data (retained in server logs for security purposes)

Server access logs are retained for a maximum of 30 days for security and abuse prevention purposes, then automatically deleted.

3.2 Data Collected via Contact Forms

If you contact us through a form on the Website, we collect:

  • Name
  • Email address
  • Message content

This data is used solely to respond to your inquiry and is not shared with third parties for marketing purposes. It is retained for the duration necessary to address your request, and for a maximum of 12 months thereafter.

3.3 Data Collected via Cookies and Tracking Technologies

We use cookies and similar technologies. Full details are provided in our Cookie Policy. In summary:

  • Essential cookies: Required for basic site functionality. No consent required.
  • Analytics cookies (Google Analytics): Used to understand how visitors use the Website. Requires consent for EU/EEA visitors.
  • Advertising cookies (Google AdSense): Used to display relevant advertisements. Requires consent for EU/EEA visitors.

4. Third-Party Services and Data Processors

We engage the following third-party services that may process personal data on our behalf or as independent controllers:

ServiceProviderPurposePrivacy Policy
Google AnalyticsGoogle LLCWebsite analyticspolicies.google.com/privacy
Google AdSenseGoogle LLCDisplay advertisingpolicies.google.com/privacy
CloudflareCloudflare, Inc.CDN, DDoS protection, DNScloudflare.com/privacypolicy

Google LLC is certified under the EU-US Data Privacy Framework, providing adequate safeguards for the transfer of personal data from the EU to the United States in accordance with GDPR Article 45.

5. Google AdSense and Personalized Advertising

We use Google AdSense to display advertisements on the Website. Google AdSense may use cookies and similar technologies to serve ads based on your prior visits to this Website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

EU/EEA visitors will only receive personalized advertising after providing explicit consent via our cookie consent mechanism. You may opt out of personalized advertising by visiting Google Ads Settings or by visiting aboutads.info/choices.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

  • Server logs: 30 days
  • Contact form submissions: 12 months from last correspondence
  • Analytics data: Per Google Analytics retention settings (configurable, default 14 months)
  • Cookie consent records: 12 months from last consent interaction

7. Your Rights Under GDPR (Articles 15–22)

As a data subject under the GDPR, you have the following rights with respect to your personal data processed by Redbit S.r.l.s.:

  • Right of Access (Art. 15): You may request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
  • Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure / Right to be Forgotten (Art. 17): You may request deletion of your personal data where there is no compelling legal ground for continued processing.
  • Right to Restriction of Processing (Art. 18): You may request that we restrict the processing of your personal data in certain circumstances.
  • Right to Data Portability (Art. 20): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
  • Right to Withdraw Consent (Art. 7(3)): Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Right to Lodge a Complaint (Art. 77): You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at garanteprivacy.it.

To exercise any of these rights, please contact us via our Contact page, or directly by email at [email protected] or [email protected]. We will respond within 30 days of receiving your request, as required by GDPR Article 12.

8. International Data Transfers

Some of our third-party service providers (including Google LLC and Cloudflare, Inc.) are located in the United States. Data transfers to these providers are protected by:

  • The EU-US Data Privacy Framework (for certified providers)
  • Standard Contractual Clauses (SCCs) adopted by the European Commission

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The Website uses TLS encryption (HTTPS) for all data transmission. Access to the underlying systems and database is restricted to authorized personnel only.

10. Children’s Privacy

The Website is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly. Parents or guardians who believe their child has provided personal data to us should contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or business operations. Material changes will be indicated by updating the “Last updated” date at the top of this page. We encourage you to review this Policy regularly. Your continued use of the Website after any changes constitutes acceptance of the updated Policy.

12. Governing Law

This Privacy Policy is governed by the General Data Protection Regulation (EU) 2016/679 and applicable Italian data protection law. Any dispute arising from the interpretation or application of this Policy shall be subject to the jurisdiction of the competent Italian courts, without prejudice to your right to lodge a complaint with the Garante per la Protezione dei Dati Personali.