1. Who is responsible
The controller for the processing described here, under the Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR), is:
Davide Alejandro Castejon, trading as Future Bitsc/o Optinet SA, Lugano, Switzerland
info@futurebits.org
Future Bits is run as a business branch administered by Optinet SA (Lugano, Switzerland, UID CHE-132.969.331). The data belongs to Future Bits, not to Optinet SA, which handles it only as our processor (see section 4).
2. What we collect, and why
Job applications
When you apply through a form on our careers pages we store the answers you give. Usually that means your name, email address, links to your portfolio or CV and whatever you choose to tell us about yourself, plus the role and the time you applied. We use this only to assess your application and to contact you about it.
Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). Please don't send us sensitive data such as health information or religious beliefs; we don't need it.
Spam protection
Application forms are protected by Cloudflare Turnstile, which processes your IP address and technical browser signals to tell people from bots. Legal basis: our legitimate interest in keeping the forms free of abuse (GDPR Art. 6(1)(f)).
Server logs
Like any website, our servers briefly log technical request data (IP address, time, requested page, browser type) to keep the site running and secure.
Embedded videos
Some devlog posts embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com). YouTube receives your IP address when the player loads and may store data once you play a video. Google's privacy policy applies to that.
3. Cookies
The public site sets no cookies and uses no analytics or advertising trackers. Fonts are served from our own server. The only cookie we use is a strictly necessary session cookie for staff signing in to the admin area; visitors never receive it.
4. Who receives your data
Applications are read only by the Future Bits team. We use these processors, who handle data on our behalf and under contract:
- Optinet SA (Switzerland): administration, accounting and contracts for Future Bits. It acts only on our written instructions and must return or delete our data when its mandate ends.
- Hostinger International Ltd. (Cyprus, EU): hosting of the website and stored applications.
- Cloudflare, Inc. (USA): bot protection. Transfers rely on the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and standard contractual clauses.
We never sell your data or share it for marketing.
5. How long we keep it
We delete applications 12 months after the hiring process for that role ends, unless you agree that we keep them longer for future openings. Ask us and we'll delete yours sooner.
6. Your rights
You can ask us for access to your data, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time. Email info@futurebits.org.
You can also complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in Italy, where the controller is based, the Garante per la protezione dei dati personali; or the authority of the EU country where you live or work.
7. Changes
If we change this policy we'll update the date at the top of this page.