NOTICE ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of Regulation (EU) 2016/679 (the “Privacy Policy”)

This notice is provided pursuant to Regulation (EU) 2016/679 (hereinafter the “Regulation” or “GDPR”) and describes how the personal data of users who consult and use this website, accessible at https://searchbridge.ai/ (hereinafter also the “Website”), or who make use of the services offered through the Website, are processed.

Under the applicable European Regulation on the protection of personal data no. 679/2016 (“GDPR”), collection and processing will always follow the principles of lawfulness, fairness and transparency.

When the Website is consulted, data relating to the user accessing the site may be processed (the user being the “data subject”, i.e. an identified or identifiable natural person).

A. DATA CONTROLLER

The Data Controller is Search Bridge S.r.l. SB, in the person of its pro tempore legal representative, Tax Code and VAT No. 04313431209, with registered office in Bologna, Via Del Giacinto 32, e-mail privacy@searchbridge.ai (hereinafter the “Controller”).

The Controller has not appointed a Data Protection Officer (DPO), as the conditions set out in Article 37 GDPR are not met.

B. TYPES OF DATA COLLECTED, PURPOSES, LEGAL BASIS AND RETENTION PERIODS

1. Browsing Data

Personal Data may be collected autonomously by the Controller or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire certain Personal Data of Users of a technical nature (e.g. IP address, browser type, operating system, domain name, and the addresses of websites from which access to or exit from the site was made, etc.), the transmission of which is inherent to the normal functioning of the internet.

Purpose: such Data may be processed solely to derive anonymous statistical information on the use of the site and/or to check that it is functioning correctly.

Retention: such Data will be deleted immediately after processing.

Legal Basis: processing is carried out on the basis of the Controller's legitimate interest in making the Website available and safe to browse (Art. 6(1)(f)). Solely for the specific activity of profiling, the legal basis is the data subject's express consent (Art. 6(1)(a)).

2. Contact by the user via e-mail, telephone, or the contact form

The voluntary, explicit sending of communications by e-mail to the addresses indicated on the site entails the subsequent acquisition of the data communicated by the user, including their e-mail address, as well as consent to receive any reply messages to their requests.

In this case, providing the e-mail address and any other data indicated is optional, but necessary in order to use the service and receive a response to your request; without it, we will not be able to process your request.

Purpose: the personal data provided in this way are used solely to fulfil or respond to the requests submitted, and are disclosed to third parties only where necessary for that purpose.

Retention: data are kept for the period necessary to complete the request and in accordance with applicable law.

Legal Basis: processing is carried out for the performance of a contractual or pre-contractual obligation undertaken by the Controller in connection with the service (Art. 6(1)(b)).

3. Links to other websites

The Website may include hyperlinks to other websites. By clicking on one of these links, the user may be redirected to another website or another internet resource that may collect information about the user through cookies or other technologies.

The Controller assumes no responsibility or control over such other websites or internet resources, or over their collection, use and disclosure of the user's personal data. Users should check the privacy statements of these other websites and internet resources to assess whether they comply with applicable privacy legislation.

4. Integration of social media plug-ins

We have integrated the LinkedIn social media plug-in on the site. This means that when you click or tap the relevant button, certain information is shared with the social media service provider.

If you are logged into your social media account when you click or tap one of these buttons, the social media provider may link this information to your social media account. Depending on your settings, they may also display these actions on your social media profile, which will then be visible to other users in your network.

5. Cookies

This site uses technical, tracking and profiling cookies. Please refer to the dedicated Cookie Policy for further details.

C. RECIPIENTS OF THE DATA

The personal data collected are processed by the Controller's staff, who act under specific authorisation, on the basis of specific instructions given as to the purposes and methods of the processing.

In addition, parties appointed as data processors pursuant to Art. 28 GDPR, or sub-processors, engaged by the Controller for the provision of services and the performance of its own activities, may be recipients of the data collected as a result of consulting the Website or using the services, within the limits of their respective mandate. The related list may be requested from the Controller using the contact details set out in Section A.

Where, through the services offered by the site, a data processor is appointed pursuant to Art. 28 GDPR, or a sub-processor, the data will be communicated to their own controller and/or their own processor.

D. DATA TRANSFERS

No transfer of the personal data provided outside Italy/abroad is envisaged.

E. RIGHTS OF DATA SUBJECTS

Data subjects — i.e. the identified or identifiable natural persons to whom the data relate — may exercise the specific data protection rights listed below:

a) right of access: the right to obtain confirmation from the Controller as to whether or not personal data concerning the data subject is being processed and, if so, to obtain access to the personal data and detailed information regarding its origin, the purposes and categories of data processed, the recipients of any disclosure and/or transfer of the data, and other information;

b) right to rectification: the right to obtain from the Controller, without undue delay, the rectification of inaccurate personal data, as well as the completion of incomplete personal data, including by means of a supplementary statement;

c) right to erasure (“right to be forgotten”): the right to obtain from the Controller the erasure of personal data without undue delay where: i. the data are no longer necessary for the purposes for which they were processed; ii. the consent on which the processing is based is withdrawn and there is no other legal ground for the processing; iii. the personal data have been unlawfully processed; iv. the personal data must be erased for compliance with a legal obligation;

d) right to object to processing: the right to object at any time to the processing of personal data based on the Controller's legitimate interest;

e) right to restriction of processing: the right to obtain from the Controller the restriction of processing where the accuracy of the personal data is contested (for the period necessary for the Controller to verify the accuracy of the data), where the processing is unlawful, and/or where the data subject has objected to the processing;

f) right to data portability: the right to receive personal data in a structured, commonly used and machine-readable format and to transmit such data to another controller, where technically feasible, only where the processing is based on consent or on a contract and only for data processed by automated means;

g) right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, a data subject who considers that the processing concerning them infringes the Regulation has the right to lodge a complaint with the supervisory authority of the Member State of their habitual residence or place of work, or of the State in which the alleged infringement occurred.

The rights listed above may be exercised by contacting the Controller using the contact details indicated in Section A of this notice.

F. TRANSPARENCY ON CONTENT GENERATED USING ARTIFICIAL INTELLIGENCE SYSTEMS

The Website may contain, for illustrative and demonstrative purposes showing how the service offered works, images and examples of output produced by the Controller's artificial-intelligence sentiment-analysis system. Such images are produced from aggregated, anonymised data relating to third parties (companies and brands monitored through publicly available sources), and do not contain data referable to identified or identifiable natural persons.

Pursuant to Article 50 of Regulation (EU) 2024/1689 (the “AI Act”), users are informed that the content described above is generated or processed by means of an artificial intelligence system. Where the data represented have been anonymised or otherwise altered compared with the original data (e.g. brand name, URL, other identifying elements), this is expressly indicated alongside the image itself (e.g. the caption “Anonymised data, for illustrative purposes”).

The processing described in this section does not concern personal data of Website users, but aggregated data relating to third parties, rendered anonymous prior to publication; it is included in this notice for completeness and transparency towards the user.

For further information on how the Controller's artificial intelligence system works, the Controller may be contacted using the details indicated in Section A of this notice.

This notice was last updated on 02/09/2026.