Privacy Policy

WEBSITE PRIVACY NOTICE ISSUED ACCORDING TO THE GENERAL DATA PROTECTION REGULATION (Reg. (EU) 2016/679 hence “GDPR”)

Who is issuing this Privacy Notice? The issuer is AmagisTech Limited [C 95772] having its registered office in Gzira (Malta), Level 4, 266 Triq IX-Xatt and an Italian Office Via Brera 16, Milan, Italy; AmagisTech Limited has a subsidiary in Italy, AmagisTech Italia Srl [with registered office in Via Brera 16 Milan 20121, Italy and the Vat no. 14438530967 and share capital 10,000.00 EURO] (hereinafter referred to as “We” or “AmagisTech Group”).

Depending on the services you interact with, your data may be processed by other legal entities within the AmagisTech Group (subsidiaries or affiliates).

In such cases, the companies act as Joint Controllers (pursuant to Art. 26 GDPR) or as independent Controllers. This internal sharing is carried out for legitimate business purposes, such as:

• Coordinating IT infrastructure and cybersecurity.
• Internal administrative, accounting, and reporting activities.
• Recruiting.
• Routing your specific inquiries to the most relevant regional or specialized team within the Group.

The Group DPO is Francesca Valenti, and can be contacted at privacy@amagistech.com

Who are the addresses of this privacy notice? This notice is issued for users of our website [referred as “Data Subject(s)”] https://www.amagistech.com/ (“Website”)

Why this Privacy Notice? This privacy notice describes how we collect and use your personal data in connection with the use of our website.

What is a data controller? A data controller is a company that is responsible for deciding how to collect, hold, and use your personal data. In this case, AmagisTech.

Which one of your personal data we collect and use? Common personal data:

• Personal contact details such as name, surname, addresses;
• Any other data voluntarily provided by the users.

Why do we collect the above mentioned data? And on what legal basis do we process them?

1. Running the website;
2. Recruiting;
3. Complying with current regulations;
4. Pursuing our legitimate interests. provided by the users.

Purposes we may use your personal data to fulfil our legitimate interests? Receiving your requests on the “Contact” or “Careers” section of the Website.

What happens if you do not share your information with us? Nothing, you are the one who decides to share your personal data via the relevant section of our website.

Information on third party to which we share your personal data. We will share your personal data with third parties where required by law, where it is necessary to administer the website, where we have another legitimate interest in doing so.
We will share your personal data with other entities in our group as part of our regular business activities, intra-group provision of services, reporting activities on company performance, in the context of a business reorganisation or group restructuring exercise, for system maintenance support and hosting of data.
For example, you can consider third parties recipient of your data at least the following categories of subjects:

• Authorities of the countries in which Amagistech or the group operates or provide services, including national income authorities;
• External law firms;
• ICT services providers.

Examples of ICT service providers:

• We use industry-leading cloud-based tools to manage our business operations, including Google Workspace (Gmail, Drive, and Docs). While we are based in Malta and Italy, the use of these services involves the processing of your data by our service provider, Google.
• When you apply for a position within the AmagisTech Group through our “Careers” page, your personal data (such as your CV, contact details, and professional experience) is processed through Ashby (Ashby, Inc.), our third-party recruitment platform.

To protect our Website and your communications from spam and abuse, we use the Google reCAPTCHA service. This service analyzes your behavior on our site (e.g., mouse movements or typing patterns) to distinguish humans from automated bots. Because this service is provided by Google, their Privacy Policy and Terms of Service apply to these specific interactions.

We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business and/or request for advisory services, correspondence with the relevant authorities, as well as with service providers and clients as detailed above.

International data transfers. Please note that we might transfer data to other extra-EEA countries during the execution of AmagisTech’s activities. In doing so, we will comply with GDPR provisions.

AmagisTech may transfer your data to countries outside of the European Economic Area due to its use of Google, Ashby, and other tools.

These services are provided by companies based in the United States. We ensure that such transfers are legally compliant under the GDPR by relying on:

• The EU-U.S. Data Privacy Framework: Both Google and Ashby are certified participants, ensuring an adequate level of data protection.
• Standard Contractual Clauses (SCCs): We have signed Data Processing Agreements with these providers that incorporate the standard clauses approved by the European Commission to protect your personal data.

What security measures are we using? We implemented Multi-Factors authentication, a cloud based IT system, and segregation of information.
A summary can be found here: https://amagistech.com/trust-center/

For how long we retain your data? We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Unless you request otherwise or we are required by law to keep the data longer, candidate profiles will be stored for a period of 12 months from the date of the last interaction, to consider you for future opportunities within the AmagisTech Group. After this period, your data will be deleted or anonymized.

WHAT ABOUT YOUR RIGHTS?

Withdraw. You can withdraw consent to data processing at any time, if the processing is based on your consent.

Right of access. You can: i) ask for a confirmation as to whether or not we are using, storing or otherwise processing your personal data and we shall provide specific information on the ongoing processing and ii) request information on the legal basis under which personal data is transferred outside of the EEA.

Right of rectification. You can ask us i) to rectify inaccurate data concerning you or ii) to complete incomplete personal data processed by AmagisTech.

Right of erasure. You can ask to erase personal data if it is no longer necessary in relation to the purposes for which it was collected or processed or other conditions occur.

Right to restriction. You can ask to restrict processing in specific circumstances: i) you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data, ii) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, iii) personal data for the purposes of the processing are no longer needed, but they are required by you for the establishment, exercise or defence of legal claims, and iv) during the period necessary to handle the request of a request of exercise the right to object.

Data portability. When the processing of your personal data is based on your consent or on the basis of a contract, you have a right to receive the personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from us.

In addition, please note that you have the following rights:

Right to object. You can object to certain processing: i) objecting processings of your personal data for direct marketing purposes, ii) challenging processing which has been justified on the basis of our legitimate interests or in the public interest, and iii) objecting to decisions based solely on automated processing, including profiling. on the basis of our legitimate interests or in the public interest, and iii) objecting to decisions based solely on automated processing, including profiling.

And you have the RIGHT TO FILE A COMPLAINT to a supervisory authority:

Complaints:

• Malta: Information and Data Protection Commissioner https://idpc.org.mt/raise-a-concern
• Italy: Garante per la protezione dei dati personali https://www.garanteprivacy.it/diritti/come-agire-per-tutelare-i-tuoi-dati-personali/reclamo

DOES THIS WEBSITE USE COOKIES?

What about cookies? Cookies are text files with small pieces of data that are stored within a web browser that the website can retrieve at a later time.

Do we collect your personal data availing active website cookies? Yes

WHAT SHOULD I DO TO CONTACT AMAGISTECH FOR QUESTIONS RELATED TO THIS PRIVACY NOTICE?

What should I do to contact AmagisTech for questions related to this Privacy Notice?

• To ask QUESTIONS on this privacy notice please send an email to: privacy@amagistech.com;
• To exercise your RIGHTS:
  • via email at the following email address: privacy@amagistech.com
  • with a registered mail at the registered office of AmagisTech Limited (C 95772) as indicated from time to time at the Malta Business Registry: https://registry.mbr.mt/ROC/ or to the Italian Office, as displayed in the Registro delle Imprese link

---

Version last updated on 16 March 2026
periodically updated