SECOND RUNYour personal job hunterFor the game industryJOIN WAITLIST

Privacy notice

Last updated 15 September 2026 · Disclosure version 2026-08-18.1

This notice covers the Second Run website and its waiting list. It is provided under Article 13 of the General Data Protection Regulation (GDPR).

Controller

Controller
Ruben Caliandro, acting as a private person
Contact
privacy@second-run.com

Data collected

When you join the waiting list, the following is recorded:

  • your email address;
  • the discipline and the seniority you selected;
  • the date and time of your submission, and of the confirmation email sent to you;
  • the version of this notice in force at your submission.

The record holds no IP address, browser or device information, or referring page. Providing the data is voluntary; without an email address you cannot join the list.

  • Inviting you to the closed beta and informing you when the beta opens or the product launches. Legal basis: your consent (Article 6(1)(a) GDPR), given through the checkbox on the form.
  • Sending you one confirmation email after you join. It contains no promotional content. Legal basis: the same consent.
  • Keeping the server that receives the form secure and working. That server keeps access logs, which include the IP address each request comes from, for 14 days. Legal basis: legitimate interest in the security and operation of the service (Article 6(1)(f) GDPR).
  • Answering messages sent through the contact form at second-run.com/contact or to the address above. Legal basis: legitimate interest in answering them (Article 6(1)(f) GDPR).
  • Counting visits to this website with Cloudflare Web Analytics, which sets no cookies and stores nothing in your browser. Legal basis: legitimate interest in measuring the use of the site (Article 6(1)(f) GDPR).

Your record holds no IP address. For 14 days after you join, the server's access log does, and it can be linked to your submission. The log is not searchable by person and is not covered by an erasure request; it is deleted when its 14 days expire.

Your data is used for no other purpose. It is not disclosed to anyone other than the providers listed below, and it is not sold.

Retention

Your record is kept while the waiting list is in use and deleted when it is no longer needed for the purposes above, and in any case no later than 24 months after your submission. Deletion from the database is immediate; encrypted backup copies are overwritten by rotation and are gone within six weeks of the deletion.

Emails you send to the address above, and messages sent through the contact form, are kept for 12 months after the matter they concern is closed, or after receipt if they ask for nothing, and are then deleted in a quarterly sweep, which can leave a message in the mailbox for up to 15 months.

Recipients

The following providers process data on the controller's behalf, each under a data processing agreement.

Hetzner Online GmbH
Hosting. Holds the database that contains your record and the server's access logs. Processed in the European Union (Germany or Finland); no transfer outside the EU.
Resend (Plus Five Five, Inc.)
Email delivery. Receives your email address and the confirmation email, and the reply address and message of anything sent through the contact form; keeps message content and delivery logs for 30 days. Processed in the United States. Transfer safeguard: the EU–US Data Privacy Framework, under which Resend is certified, and the European Commission's Standard Contractual Clauses.
Cloudflare, Inc.
Serves this website and its visit counts, and stores the encrypted database backups in EU-restricted storage. Transfer safeguard: the EU–US Data Privacy Framework, under which Cloudflare is certified, and the European Commission's Standard Contractual Clauses.
Proton AG
The mailbox that receives email sent to the address above. Processed in Switzerland, which is covered by a European Commission adequacy decision.

A copy of the transfer safeguards can be requested at privacy@second-run.com.

Your rights

Under Articles 15 to 21 GDPR you have the right to:

  • access your data and receive a copy of it;
  • have it rectified;
  • have it erased;
  • restrict its processing;
  • receive it in a portable format;
  • object to processing based on legitimate interest.

You can withdraw your consent at any time. Withdrawal removes your record from the waiting list; it does not affect the lawfulness of processing carried out before it.

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live, where you work, or where the alleged infringement took place. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).

Exercising your rights

Write to privacy@second-run.com, or reply to the confirmation email. Requests are handled only when they come from the email address on the record; a request concerning an address, sent from a different address, is not acted on.

Cookies

This site sets no cookies and stores nothing in your browser. See the cookies page.

Changes to this notice

The date and the disclosure version at the top of this page change whenever the notice does. Changes that affect people on the waiting list are notified by email.