PRIVACY POLICY

1. SCOPE

 1.1. Profimetrics – Software Solutions, S.A., VAT 507579011, with head office in Rua Lionesa 446, Edifício C Loja L, 4465-671 Leça do Balio, a business unit belonging to the Itim Group (U.K.), which develops business solutions for the retail industry, acts, as per the personal data collected by the site profimetrics.com (hereinafter the “Site”), under the Regulation (E.U.) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/E.C. (“General Data Protection Regulation” or “GDPR“), as controller; i.e. it is the entity that determines the purposes and means of the processing of personal data, and that processes the data for its purposes and to comply with legal obligations.

1.2. This Privacy Policy governs our privacy practices regarding the use of our website profimetrics.com

1.3. If you have any additional questions, please contact us at info_iberia@itim.com

 

2. PROCESSING OF PERSONAL DATA

2.1. As per the General Data Protection Regulation, personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The processing of personal data must have a legal basis (as provided for in articles 6, 9 and 10 of the GDPR). As per the data retention periods, the data will be deleted after that period unless there is a pending dispute, in which case Profimetrics will keep the data until the decision is final.

2.2. Under the General Data Protection Regulation processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2.3. The processing of personal data for a specific purpose must meet one of the legal grounds listed in the GDPR. Profimetrics may process your personal data on the following grounds:

2.3.1. if you have given consent to the processing of your personal data for one or more specific purposes (article 6, 1, a));

2.3.2. if the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract (article 6, 1, b));

2.3.3. if the processing is necessary for compliance with a legal obligation to which Profimetrics is subject (article 6, 1, c));

2.3.4. if the processing is necessary for the purposes of the legProfimetricsate interests pursued by Profimetrics or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (article 6, 1, f)).

2.4. Profimetrics process your personal data according to the General Data Protection Regulation and related legislation for the purposes described by Annex I hereto.

2.5. Profimetrics will process the following personal data:

  • Your name;
  • Your e-mail address.

 

3. RECIPIENTS

3.1. For Profimetrics to fulfil all its duties and provide you with the best service possible, you may have to communicate or give access to your personal data to other entities.

3.2. Profimetrics will only communicate or give access to your personal data to the following categories of recipients:

 

  • Profimetrics group companies;
  • Sister company EDI PLUS
  • IT support;
  • Document management;
  • Internal marketing
  • Health insurance support
  • Legal and accounting support;
  • Logistical support;
  • Public authorities.

 

4. DATA RETENTION PERIODS

4.1. Profimetrics keeps your data for the periods referred to in Annex I to this Policy.

 

5. PERSONAL DATA TRANSFERS

5.1. Profimetrics may transfer your personal data for countries outside the European Economic Area in relation to the provision of some services to you.

5.2. Profimetrics ensures that it has put into place appropriate safeguards in order to ensure the security of your personal data.

 

 

6. EXERCISE OF DATA SUBJECT’S RIGHTS

With regard to the processing of your personal data, and to the extent the legal requirements applicable are met, you have the rights described below, under the terms of articles 15 to 21 of the General Regulation on Data Protection.

 6.1. Right of access

You have the right to obtain from Profimetrics confirmation as to whether or not personal data are being processed by Profimetrics, and, where that is the case, access to the personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii)  the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (v) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (vi) the right to lodge a complaint with a supervisory authority; (vii) the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

6.2. Right to rectification

If you consider your personal data are inaccurate or incomplete, you have the right to obtain from Profimetrics, without undue delay, the rectification of inaccurate personal data which concerns you.

6.3. Right to erasure

To the extent legally admissible, you have the right to obtain from Profimetrics the erasure of your personal data without undue delay and Profimetrics shall have the obligation to erase personal data without undue delay where one of the following grounds applies: (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) you have withdrawn consent on which the processing is based according to point (a) of Article 6(1) of the GDPR and where there is no other legal ground for the processing; (iii) you have objected to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legProfimetricsate grounds for the processing, or you have objected to the processing pursuant to Article 21(2) of the GDPR; (iv) the personal data have been unlawfully processed (v) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which Profimetrics is subject; (vi) the personal data have been collected in relation to the offer of information society services. Right to erasure does not apply if the processing is (i) for compliance with a legal obligation which requires processing by Union or Member State law to which Profimetrics is subject to; (ii) for the establishment, exercise or defence of legal claims. After the exercise of the right of erasure in the terms legally admissible your personal data will be deleted.

6.4. Right to restriction of processing

You shall have the right to obtain from Profimetrics restriction of processing where one of the following applies: (i) the accuracy of the personal data is contested, for a period enabling the controller to verify the accuracy of the personal data; (ii) the processing is unlawful and you have opposed to the erasure of the personal data and have requested the restriction of their use instead; (iii) Profimetrics no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; (iv) you have objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legProfimetricsate grounds of Profimetrics override yours.

6.5. Right to data portability

You have the right to receive your personal data provided by you, in a structured format, in common use and automatic reading. You also have the right to ask Profimetrics to transmit this data to another controller, as long as this is technically possible, where applicable under article 20 GDPR.

6.6. Right to object

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. Profimetrics shall no longer process the personal data unless it demonstrates compelling legProfimetricsate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

6.7. Right to lodge complaints with the supervisory authority

You have the right to file complaints with the competent supervisory authority regarding matters related to the processing of your personal data. In Portugal, the competent supervisory authority is the National Data Protection Commission. For more information, go to www.cnpd.pt

6.8. How to exercise your rights

In order for you to exercise your rights please contact us at privacy@itim.com

The exercise of your rights is free of charge. Notwithstanding, where your requests are manifestly unfounded or excessive, in particular because of their repetitive character, you may be charged a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested.

 

7. MODIFICATIONS TO THIS POLICY

Profimetrics may update, at any time, the information provided for in this Policy. Therefore, its regular consultation is advisable.

 

 

Last Update: 11 June 2021

 

 

ANNEX I

PURPOSE

LEGAL BASIS

DATA RETENTION PERIOD

Process your query through the contact form and reply to it  

Consent

Legitimate interest

 

2 years, unless the law lays down a different data retention period

Mailing of the Newsletter

Consent

2 years from the moment consent is collected

In order to take steps at your request prior to entering to a contract  

Consent

Legitimate interest

 

2 years, unless the law lays down a different data retention period