Legal & Privacy Hub
One place for all of iubenda’s legal and privacy documents, whether you’re visiting iubenda.com, subscribing to our newsletters, or using our products.
ISO/IEC 27001:2024 certified
EU-US Data Privacy Framework
Operating under the GDPR since 2018
Overview
iubenda helps protect privacy on over 2.5 million websites around the world, and we hold ourselves to the same standards we help our clients meet. This hub brings together, in one place, the legal and privacy documents that apply when you visit iubenda.com, subscribe to our communications, or use our products and services.
We’ve operated under the General Data Protection Regulation (GDPR) since it came into force in 2018, we run an ISO/IEC 27001-certified information security management system, and we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses for international transfers. iubenda s.r.l. is based in Milan, Italy, and is part of the team.blue group.
Depending on the context, iubenda plays one of two roles.
When we process personal data about you directly, for example when you browse iubenda.com or subscribe to one of our newsletters, we act as the data controller, and you can exercise your data protection rights with us at any time.
When our clients use our products on their own sites and apps, iubenda acts as a data processor on the client’s behalf, and the client remains the controller.
Below you’ll find our website and product privacy and cookie policies, security information, terms, the data processing agreement for our clients, our accessibility statement, and our governance documents.
Questions about privacy, security, or compliance?
Get in touch at info@iubenda.com.
Who we are
Impressum / Imprint
iubenda S.r.l., Via Aosta 4, 20155 Milan, Italy (c/o Impact Hub S.r.l.), part of the team.blue group.
iubenda brands
Privacy
Privacy Policy of iubenda.com
How we process the personal data of visitors and clients of iubenda.com.
Notice at Collection (US)
The short notice required under US state privacy laws (CCPA/CPRA), summarizing what we collect and why.
Your Privacy Choices
Manage your cookie and privacy preferences, and opt out of the sale or sharing of personal data.
Have you received an email from us?
Transactional (service) emails relate to your account, your purchases, or the operation of our services: receipts, security notices, and important service updates. Because they’re necessary to provide the service you asked for, you receive them regardless of your marketing preferences.
Marketing emails include newsletters, product news, and promotional content. You can opt out at any time without affecting your account.
Update your preferences in the iubenda dashboard under Account & Billing info → Communications preferences, or use the unsubscribe link in any marketing email.
The DPO Newsletter works differently. We manage it through our email provider and it isn’t tied to an iubenda account, so use the unsubscribe link at the bottom of any newsletter email. Its privacy policy applies only to the DPO Newsletter, not to your use of other iubenda products, which have their own policies listed on this page.
Data subject requests
If iubenda processes your personal data as a controller, for example if you visit iubenda.com, subscribe to a newsletter, or receive our communications, you can exercise your rights (access, rectification, erasure, portability, restriction, and objection) at any time. Use our data subject request form, or contact us at info@iubenda.com.
Where iubenda processes personal data as a processor on behalf of a client, that client is the controller responsible for handling requests from its own data subjects, and we assist them to the extent set out in the Data Processing Agreement.
Products
These policies cover the personal data processed inside iubenda’s products, as opposed to the iubenda.com website.
Security
On request
ISO/IEC 27001:2024 certificate
Our information security management system is ISO/IEC 27001 certified.
Technical and organizational measures (TOMs)
The security measures we apply, set out in Appendix 1 of our Data Processing Agreement.
On request
List of sub-processors
Request our current list of sub-processors at info@iubenda.com, as set out in section 7 of our Data Processing Agreement.
Legal
Data Processing Agreement (DPA)
For our clients (the controller): governs how iubenda processes personal data on your behalf as processor. Includes our technical and organizational measures at Appendix 1.
Accessibility
Accessibility Statement
iubenda’s commitment to digital accessibility under the European Accessibility Act.
Still have a question?
Get in touch at info@iubenda.com and we’ll point you to the right document or the right team.