PRIVACY
POLICY

DATA CONTROLLER

The data controller responsible for your personal data is:

This Privacy Policy applies to personal data collected through the Yunibit website (yunibit.com), in particular through the contact form available on the Contacts page. It is issued in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR") and applicable Italian data protection legislation.

DATA WE COLLECT

When you submit the contact form on our website, we collect the following personal data that you voluntarily provide:

• Full name
• Email address
• Your profile category (e.g. investor, energy operator, mining professional)
• Subject of your enquiry
• The content of your message

We do not collect sensitive personal data (special categories under Article 9 GDPR) through this website. We do not request financial information, identity documents, or any data relating to health, political opinions, or other sensitive categories.

We also collect technical data automatically when you visit the website (navigation data). See Section 8 for details on cookies.

PURPOSE & LEGAL BASIS

We process your personal data for the following purposes:

• Responding to your enquiry — to read, assess, and reply to messages submitted via our contact form. Legal basis: Article 6(1)(b) GDPR (processing necessary for the performance of a contract or pre-contractual steps at your request) and Article 6(1)(f) GDPR (legitimate interest in responding to business communications).
• Business relationship management — if you express interest in a potential commercial or investment relationship, we may retain your data to follow up on that relationship. Legal basis: Article 6(1)(f) GDPR (legitimate interest).
• Compliance with legal obligations — where required by applicable law. Legal basis: Article 6(1)(c) GDPR.

We do not use your data for automated profiling or for marketing purposes without your separate and explicit consent.

RETENTION PERIOD

Your personal data is retained only for as long as necessary for the purposes described above:

• Contact form submissions are retained for up to 24 months from the date of receipt, unless a longer retention period is required by law or by an ongoing contractual relationship.
• If a business relationship develops, data may be retained for the duration of that relationship plus an additional period as required by applicable Italian civil and tax law (generally up to 10 years for accounting records).
• Data processed solely to respond to a one-off enquiry with no follow-up activity is deleted or anonymised after 12 months.

DATA RECIPIENTS

Your personal data may be shared with the following categories of recipients, strictly to the extent necessary for the purposes described:

• Email service providers — we use third-party email and form processing services to receive contact form submissions (see Section 6 for details on transfers). These providers act as data processors under Article 28 GDPR and are bound by data processing agreements.
• Internal staff — authorised Yunibit personnel who handle business development, investor relations, and technical operations, on a need-to-know basis.
• Legal and professional advisors — lawyers, accountants, or auditors, where necessary to protect Yunibit's legitimate interests or comply with legal obligations.
• Public authorities — courts, regulators, or other public bodies, when required by law.

We do not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.

INTERNATIONAL TRANSFERS

Our website uses Formspree (Formspree, Inc.) to receive contact form submissions. Formspree processes data on servers located in the United States. The transfer is carried out under appropriate safeguards pursuant to Article 46 GDPR — specifically, Formspree adheres to the EU–US Data Privacy Framework and provides Standard Contractual Clauses (SCCs) as required.

For further information on Formspree's data processing practices, please refer to their Privacy Policy at formspree.io/legal/privacy-policy.

No other international transfers of your personal data take place in connection with this website unless you are separately informed.

YOUR RIGHTS

Under the GDPR, you have the following rights with respect to your personal data. You may exercise any of these rights by contacting us at info@yunibit.com. We will respond within 30 days.

You also have the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.

If you believe your rights have been violated, you have the right to lodge a complaint with the Italian data protection supervisory authority:

COOKIES

This website uses only technical cookies that are strictly necessary for the website to function correctly. These include session management and security-related cookies. We do not use profiling cookies, advertising cookies, or third-party tracking cookies.

We use Google Fonts, which may load fonts from Google's servers. When your browser requests fonts, Google may receive your IP address. This is a standard and widely used service. You can learn more at Google Fonts Privacy FAQ.

No cookie consent banner is required for strictly necessary cookies. If we introduce any optional cookies in the future, we will update this policy and add appropriate consent mechanisms.

SECURITY

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include encryption in transit (HTTPS), access controls, and use of reputable third-party processors with their own security certifications.

However, no method of transmission over the internet is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Your continued use of this website following the posting of changes constitutes your acceptance of those changes.

CONTACT

For any questions, requests, or concerns regarding your personal data or this Privacy Policy, please contact us:

We aim to acknowledge all privacy-related requests within 5 business days and to respond in full within 30 calendar days, as required by GDPR.