Privacy Policy

Last updated: May 2026

1. Data Controller

GiaNet Media di Francesco Giannetta, based in Otranto (LE), Italy. For privacy requests: support system.

2. Service

JobFlow (https://jobflow.trovido.com) is a job platform that connects workers and businesses, primarily in the tourism and hospitality sector.

3. Data Collected

3.1 Data provided by the user

• Registration: name, email, password (encrypted), account type (worker/company)
• Worker profile: skills, languages, work experience, availability, CV, certificates
• Company profile: company name, sector, description, location
• Applications: cover messages, shared profile data
• Payments: billing data managed by Stripe (we do not store card data)

3.2 Automatically collected data

• IP address, browser type, operating system
• Technical and analytical cookies (see Cookie Policy)
• Access and activity logs

4. Purposes of Processing

• Service provision: account management, worker-company matching, messaging
• Payments: subscription management, billing, withdrawal rights
• Service communications: application notifications, contract updates
• Service improvement: aggregate analysis, usage statistics
• Security: fraud prevention, account protection

5. Legal Basis

• Contract: for service provision and payment management (Art. 6.1.b GDPR)
• Legal obligation: for tax compliance and document retention (Art. 6.1.c GDPR)
• Consent: for analytical and marketing cookies (Art. 6.1.a GDPR)
• Legitimate interest: for security and abuse prevention (Art. 6.1.f GDPR)

6. Data Sharing

Personal data may be shared with:

• Stripe: payment processing (stripe.com/privacy)
• Companies/Workers: profile shared upon application
• Authorities: if required by law

We do not sell personal data to third parties.

7. Data Retention

• Active account: for the duration of the account
• After deletion: up to 30 days for account data
• Tax data: 10 years as per Italian regulations
• Security logs: 12 months

8. Your Rights

Under Articles 15-22 of the GDPR, you have the right to access, rectify, erase, restrict, port, and object to processing of your data. Contact us via the support system.

9. Security

We implement appropriate technical and organizational measures: password encryption, HTTPS, limited data access, regular backups.

10. Complaints

You may file a complaint with the Italian Data Protection Authority (garanteprivacy.it).