Information on the processing of personal data

Pursuant to art. 13 of EU Regulation 679/2016 hereinafter referred to as GDPR (General Data Protection Regulation), your personal data will be processed in the manner and for the purposes indicated below:

1. Contact identity of the data controller The data controller is ZoomProfit, to whom you can contact to assert your rights. The aforementioned rights may also be exercised by you by sending communications to the following e-mail address: info@zoomprofit.net
The data collected is used in compliance with current legislation on privacy (GDPR 2016/679 and Legislative Decree 196/2003).

2. Purpose of the processing pursuant to Art. 13, par. 1 letter c) Your personal data will be processed: A) Without your express consent for the following service purposes: - fulfill the pre-contractual, contractual, administrative and tax obligations deriving from existing relationships with you; in this case, the legal basis of the processing is as follows: the need to execute the contract, or to fulfill pre-contractual measures (Article 6 letter b) GDPR); - fulfill the obligations established by law; legal basis of the processing: allowing the Data Controller to fulfill a legal obligation to which the same is subject (Article 6 letter c) GDPR); - exercise the rights of the Data Controller, for example the right to defense in court; legal basis of the processing: pursuit of a legitimate interest of the Data Controller or third parties (Article 6 letter f) GDPR); B) Only subject to your specific and distinct consent for marketing purposes through activities of: sending e-mails, post and / or text messages and / or push notifications, telephone contacts, newsletters, commercial communications, fidelity cards, and / or advertising material on products or services offered by the Data Controller and detection of the degree of satisfaction with the quality of services, participation in activities aimed at developing market research. For the same marketing activities just listed in this point B, the personal data collected may be disclosed to other companies of the same group (commercial network) or to third-party companies; legal basis of the processing: consent (articles 6 par. 1 letter a) and 7 of the GDPR).

3. Revocation of consent The consent, if any, expressed below, may be revoked by you at any time without prejudice to the lawfulness of the processing based on consent before revocation, based on the provisions of art 7 par. 3 of the GDPR.

4. Recipients or categories of recipients pursuant to Art. 13, par. 1 letter e) 1) Authorized persons: from the Accounting Area within the company for tax and accounting obligations, from the Commercial Area within the company for commercial obligations. 2) Any external data processors: 3) Associated companies and third-party companies for the purposes indicated in the previous art. 3 B). The updated list of the authorized, data processors and companies mentioned above is available at the headquarters of the Data Controller in the previous art. 1 and can be acquired by sending an application to that effect by email to the e-mail address of the Data Controller or by registered letter with return receipt indicated in the previous art. 1. With regard to third-party companies to which, subject to your specific consent, your personal data may be disclosed, it should be noted that these companies, in their capacity as data controllers, will be required to provide you with specific information pursuant to Article 14 of the GDPR.
As part of the management of the contractual relationship, no transfer of User data to third countries outside the EU or to international organizations is envisaged. In any case, without the need for express consent (Article 6, letters b, c, f, GDPR), the Data Controller may communicate your data for the purposes listed above to Supervisory Bodies, Judicial Authorities, to insurance companies for the provision of insurance services, banks and credit institutions, consultants and professionals, third parties in general, including platforms that offer data storage and exchange services specifically indicated by you, etc., as well as to those subjects to whom communication is an obligation legal or contractual or is the fulfillment of your specific request, with the specification that these subjects will process the data in their capacity as independent data controllers.

5. Retention period of personal data pursuant to Art. 13, par. 2 lett. a) Your personal data will be kept for a period of time not exceeding the achievement of the purposes for which they are processed and in any case no later than the terms established by law. For tax purposes, the conservation of accounting records and documents follows the provisions of art. 22 of Presidential Decree no. 600/1973 and by art. 39 of Presidential Decree no. 633/1972 relating to the keeping and conservation of registers and documents relevant for VAT purposes. In the event that an offer is not confirmed, the personal data contained therein will be kept only for the duration of the offer itself and in any case no later than 6 months from the drafting of the document. For the purposes referred to in art. 2.B), no later than 24 months from the collection of personal data for any marketing purposes.

6. Conservation Personal data is stored on servers external to the company, through a third company responsible for data processing.

7. Processing methods The processing of your personal data will take place using manual, IT and / or telematic tools and will be based on the principles of lawfulness, correctness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality and protecting the rights and freedom of the interested party. Your personal data will therefore be processed with logic strictly related to the purposes indicated below, in accordance with the provisions of the GDPR and, in any case, in order to guarantee the security and confidentiality of the data.

8. Exercise of rights by the interested party In accordance with the provisions of the GDPR, you have the right to exercise the following rights:
a) right of access - Obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, receive information relating, in particular, to: purposes of the processing, categories of personal data processed and retention period , recipients to whom these can be communicated (article 15, GDPR);
b) right of rectification - obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR);
c) right to cancellation - obtain, without undue delay, the cancellation of personal data concerning you, in the cases provided for by the GDPR (article 17, GDPR);
d) right of limitation - obtain from the Data Controller the limitation of the processing, in the cases provided for by the GDPR (article 18, GDPR);
e) right to portability - receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller, as well as obtain that the same are transmitted to another Data Controller without impediments, in the cases provided for by the GDPR (article 20, GDPR);
f) right to object - to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing (Article 21, GDPR);
g) the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
h) right to lodge a complaint with the supervisory authority - Propose a complaint to the Guarantor Authority for the protection of personal data.
Nature of the provision of data and consequences of refusing to respond pursuant to art. 13 par. 2 lett. e)
The provision of data for the purposes referred to in art. 3.A) of this information is mandatory. In their absence, we will not be able to guarantee the Services listed therein. The provision of data for the purposes referred to in art. 3.B) of this information is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing personal data already provided: in this case, you will not be able to receive e-mails, mail and / or text messages and / or push notifications, telephone contacts, newsletters, commercial communications. , fidelity card, and / or advertising material on products or services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in art. 3.A) of this information;

9. Any updates This information is effective from 01/01/2020. Zoom Profit reserves the right to modify or simply update its content, in part or completely, also due to changes in current legislation and therefore invites you to regularly visit the specific section of the owner. I website to get acquainted with the most recent version of the same.