Privacy Policy
The ProfitPoint group of companies (MASTERBROK SRL, BROKTRIUMPH BUCURESTI SRL, WORKMASTERBROK SOLUTIONS SRL, MASTERBROK TRANSYLVANIA SRL, MASTERBROK MARITIME SRL, TIMIMASTERBROK SOLUTIONS SRL, CLUJ MASTERBROK CONNECT SRL, MASTERBROK BRAŞOV NEXUS S.R.L.) respects the right to protection of personal data of each individual and has taken measures to comply with the legal provisions laid down in EU Regulation No 679/2016 (“GDPR”), as well as other regulations in force, in the field of personal data protection.
Among the compliance measures adopted is this Privacy Policy. The provisions of this policy apply to you if:
- You are a visitor to the profitpoint.ro website and wish to register for one of the courses available on the platform, either via the platform or by telephone or e-mail;
- You are a visitor to the profitpoint.ro website and choose to register a new account on the platform to facilitate access to the services and educational materials;
- You are a visitor to the profitpoint.ro website or an active customer and communicate with us via the online chat application;
- You are a visitor to the profitpoint.ro website or an active client and benefit from free services: documents, e-books, webinars, courses, seminars;
- You are an active client or guest and participate in online or offline events, with or without charge;
- You are a visitor to the profitpoint.ro website and access the “Contact us” functionality;
- We will prepare the necessary documents for registration, participation and completion of the courses;
- You opt to subscribe to the newsletter and receive commercial communications.
- In order to make our message as accessible as possible, throughout this policy, we will address you using the term “User”.
I. Who we are
We are a group of companies (Masterbrok S.R.L., a legal entity organized as a limited liability company, with registered office at Str. Traian Grozăvescu nr. 2, et. 1, ap. 1, Mun. Timișoara, Jud. Timiș, registered at the Trade Register under no. J35/1437/2017 and having CUI 30900810, BROKTRIUMPH BUCURESTI SRL, a legal person organised as a limited liability company, with registered office at Str. SCĂRLĂTESCU, Nr. 17-19, CAM. 3, PARTER FLOOR, Bucharest, sector 1, registered at the Trade Register under No. J40/16242/2023 and having the CUI 48713416, WORKMASTERBROK SOLUTIONS SRL, a legal entity organised as a limited liability company, with registered office at Șoseaua MIHAI BRAVU, No. 225, BIR.2, Floor 4, Bucharest, sector 3, registered at the Trade Register under No. J40/16426/2023 and having the CUI 48726882, MASTERBROK TRANSYLVANIA SRL, a legal person organised as a limited liability company, with registered office at str. MIHAIL KOGĂLNICEANU, Nr. 17, cam. 01, bir .2, Bloc C4, Floor XII, Ap. C4XII, jud. Brasov, Brasov, registered at the Trade Register under no. J8/2449/2023 and with CUI 48714101, MASTERBROK MARITIME SRL, a legal entity organized as a limited liability company, with registered office at str. ȘTEFAN CEL MARE, Nr. 47A, COMPLEX COMERCIAL “GALERIILE CIOTE”, CAM. 1, Floor 4, jud. Constanta, Constanta, registered with the Trade Register under No. J13/2950/2023 and having the CUI 48720197, TIMIMASTERBROK SOLUTIONS SRL, a legal person organised as a limited liability company, with registered office at Bulevardul Mihai Eminescu, Nr. 12, CAMERA 3, jud. Timis, Timisoara, registered with the Trade Register under No. J35/3326/2023 and having the CUI 48718065, CLUJ MASTERBROK CONNECT SRL, a legal person organised as a limited liability company, having its registered office at str. DECEBAL, Nr. 110, bureau 1, cam. 3, ground floor, Ap. 20, jud. Cluj, Cluj, registered at the Trade Register under no. J12/3707/2023 and with CUI 48726637, and MASTERBROK BRAŞOV NEXUS S.R.L., a legal person organised as a limited liability company, having its registered office at BRASOV, Str. MIHAIL KOGALNICEANU, Nr. 17, Bl. C4, Et. XII, Ap. C4XII, județ BRAȘOV, registered at the Trade Register under no. J08/2447/2023 and with CUI 48714160) (hereinafter referred to as “Profit Point”, “We”, “Us”, “Operator”, “Profit Point platform” “metrics-point.com”).
Profit Point is an online learning platform whose main purpose is to facilitate the interaction of professionals from different fields of activity, in their position as trainers, coaches and mentors, by offering courses, seminars, masterclasses, workshops, webinars and other kinds of educational materials and services, to people interested in their personal and professional development in their fields of interest. Profit Point provides a platform for experts of all kinds to create courses that can be offered to the public, either for free or for a fee. Profit Point provides tools that allow users to create a course, promote it and earn money from its sale.
In order to achieve this goal, we get in touch with you both through the profitpoint.co.uk website and through other online and offline marketing channels (email, facebook, google, phone, etc.).
As a personal data controller, we determine how we process personal data, for what purposes and by what means.
The document below is very important because it explains why we need certain personal data in order to provide certain services. Please read it carefully as it contains a number of principles and concepts that are useful both in interacting with our website and in interacting with the online environment in general.
We will also tell you below what rights you have in relation to the personal data we process about you, and what actions you can take to better understand and control the amount of personal data processed about you online.
II. Our contact details
You can always contact us by the following methods:
In writing, at the address of our registered office at Str. Traian Grozăvescu nr. 2, et. 1, ap. 1, Mun. Timișoara, Jud. Timiș;
By e-mail at comunicare@profit-point.eu.
By browsing our website, you agree to the processing rules described in this Privacy Policy.
III. Scope of application
This Privacy Policy provides information about the processing of personal data relating to persons visiting the site, who create an account or already have an account on profitpoint.ro, or relating to persons who contact us.
IV. Right to privacy and data protection
As a User, you can choose what information you want to send us.
Of course, certain information will be necessary for the provision of our services and the optimal functioning of the site. However, our services do not always require all the data you may provide us.
In order to disclose as little personal information and data as possible, you can use:
Cookie-related restriction options. This allows you to install additional extensions in your browser to block unnecessary cookies. By doing so, you will not see any interest-based advertising.
Advertising restriction options. If you do not wish to receive informative communications from us, you can unsubscribe at any time. In this case, we will not be able to send you any of our offers or communications.
V. What personal data we process
In order to be able to provide Users with the information needed for our services, we use external and internal tools and systems to process your personal data for staff management and business operations purposes.
When using the tools and systems, we collect, process and store the following categories of personal data:
Contact information:
Your first and last name, phone number, email address, any other personal information you may submit to us in the messages by which you contact us.
Reason – if you contact us, we collect this data because we need to know who we are talking to and what we have talked about, so that we can help you with the issue you have contacted us about.
Master data:
First and last name, phone number, email address, pseudonymised information about your password.
Reason – if you request to register a new account on profitpoint.co.uk, the data collected is necessary to grant access to the platform.
Contact information
Name and surname, telephone number.
Reason – we will process this data for administrative communications related to the courses you have registered for.
Contact information
Full name, telephone number
Reason – we will process this data for administrative communications related to the courses you have registered for, the provision of free services (documents, e-books, tutorials, webinars, sewing, seminars) or information related to your participation in online or offline events.
Contact information
Name, first name, e-mail address, phone number, city of residence
Reason: we will process this data for the management and allocation of your registration/application to the educational service provider for the purpose of providing the services requested through the form completed at registration
Payment information
Name, surname, address, CNP, company name, CUI, payment method
Reason: we will process this data for the purpose of complying with legal provisions and issuing proforma and fiscal invoices for the services provided.
Contact information
Name, surname, home address, e-mail address, IP address, telephone number
Reason: we will process this data in order to be able to respond to your complaints. We will also process this data for the purposes of evaluating the services provided, carrying out development activities, market research or statistical activities.
Device information, access and location data:
The IP of the device, region or general location from which you are accessing the site, browser type, operating system or device from which you are accessing us
Reason – with each access, this information is stored for technical reasons. We use this information pursuant to our legitimate interest in observing the extent to which the site pages match the display needs of your particular device, to diagnose possible problems our servers have when delivering pages to certain types of devices, to analyze trends, to observe how users can better navigate our pages. We also use parts of this information to detect suspicious behavior at an early stage and to prevent any fraud.
Communication data:
Email address, first and last name
Reason: we will process this data for sending you personalised commercial communications, financial offers and general informational communications (newsletters).
Please do not provide us with any personal data other than those strictly necessary for the purposes specified in this policy.
VI. How we collect personal data
Data is collected directly from you via forms on the profirpoint.ro platform, the profit-point.org website, Facebook forms, the chat application, by email or by phone.
Data may also be collected directly and indirectly via your equipment or devices depending on your privacy settings or browser preferences.
Data is collected indirectly when another person (natural or legal) registers for the course on your behalf.
VII. For what purposes we process personal data
We process your personal data only in accordance with legal requirements. We pay particular attention to compliance with the principles applicable to the processing of personal data.
Account creation
When you create a customer account, you will be asked to enter basic data. This is absolutely necessary because we cannot create a customer profile without this data. Your email address and phone number are particularly important as we can use this information to identify you in our system when you want to log in again.
Categories of personal data:
Profile data (master data)
Device information
Legal basis
Art. 6 para. 1 lit. (b) GDPR, execution of contract
Processing of data for the purpose of concluding or performing a contract
In order to be able to offer you our services, the processing of personal data is essential. Much of this data is submitted to us by you directly and some is collected automatically when you use our platform. You can help us by sharing with us only the data we need to fulfil our contractual obligations.
Categories of personal data:
Contact information
Legal basis
Art. 6 para. 1 (b) GDPR, contract performance
Login
If you already have an existing customer account, you will need to enter your email address and password to log in. If we detect any irregularities during registration, such as entering the wrong password more than once, we will take appropriate measures to prevent any harm to both you and us.
Categories of personal data
Profile data (master data)
Legal basis
Art. 6 para. 1 (b) GDPR, fulfilment of contract in relation to registration
Art. 6 para. 1 (f) GDPR, for security measures
Telephone calls from our representatives
If one of the courses selected by you is unavailable or you choose to communicate more information about it, Profit Point representatives (employees, collaborators, etc.) have been instructed by us to call you so that you can receive correct and complete information in order to choose our services.
Categories of personal data
Contact information
Legal basis
Art. 6 para. 1 lit. (b) GDPR, data processing for the purpose of concluding the contract or performing the contract
Direct Marketing and Newsletter
If you have provided us with your e-mail address, we reserve the right to send you, by e-mail, offers on our services similar to those already purchased from our range.
Not only does the content of our newsletters differ, but also the technologies and criteria we use to design the newsletters and the division of User groups. Specific customer segmentation may have a legal effect on you or may impact you in other ways if you receive certain newsletters that are not included in other campaigns.
If automated decision making affects you negatively and you do not agree with this, you can contact us at comunicare@profit-point.eu . In this case, we will assess the circumstances of your case individually.
Categories of personal data
Communication data
Legal basis
The processing of data in this respect takes place only on the basis of consent given for personalised direct marketing in accordance with Art. 6 para. 1 lit. (b) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you an email for marketing purposes. You have the right to object to the use of the e-mail address for the mentioned advertising purposes at any time, with effect for the future, by notifying us at the e-mail address: comunicare@profit-point.eu. Upon receipt of your objection, we will immediately discontinue the use of the e-mail address for advertising purposes.
Net Promoter Score (NPS)
We are constantly striving to improve our services. Your constructive feedback is very important to us. That’s why we will occasionally send you surveys and ask for your feedback. If you do not wish to receive such surveys, you can unsubscribe at any time. If you have any queries about the surveys we carry out, you can click the “unsubscribe” button and we will not contact you again.
Categories of personal data
Communication data
Legal basis
Art. 6 para. 1 (f) GDPR, legitimate interest
Text messages/SMS
In addition to other means, we will continue to use SMS to inform you about new offers in your area. You will only receive an SMS from us if you have given your consent to do so. You will be able to revoke your consent for future communications at any time. By sending an e-mail to comunicare@profit-point.eu. Registration as well as cancellation will be carried out free of charge.
Categories of personal data
Contact information
Communication data
Legal basis
Art. 6 para. (1) lit. a) of GDPR, consent
Cookies
In order to make the use of our website as pleasant as possible and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session has ended, i.e. after closing the browser (so-called session cookies). Other cookies remain on the device used and allow us to recognise your browser on your next visit (persistent cookies). You can adjust your browser options so that you are informed about the cookie setting and can decide individually to accept cookies or to exclude cookies for specific cases or in general. Excluding the use of certain cookies may limit the functionality of our website/app.
Legal basis
Where data processing is carried out with your consent, the legal basis for the processing is Art. 6 para. (1) lit. a) GDPR, i.e. your consent. Otherwise, the processing is carried out on the basis of our legitimate interest in accordance with the provisions of Art. 6 para. (1) lit. f) GDPR. Our legitimate interest is represented by the purpose mentioned above.
You can access our cookie policy with all the cookies we use, here.
User Relationship Management
We attach great importance to providing a quality service. Therefore, we want to be available to answer all your questions. In order to be able to answer these questions and to understand the overall issue, we store information about conversations with our representatives when you contact us.
The content of the information we store depends on the information you provide to us during our communications.
Categories of personal data:
Contact information
Communications information
Legal basis
Article 6(1)(b) GDPR, performance of contract.
Fraud prevention and security of our platform
In order to protect our Users and our site from possible attacks, we continuously monitor the activities on our site carried out by all visitors. To this end, we use various technical measures to ensure that all suspicious behaviour is detected early and prevented in time. To achieve this goal, several monitoring mechanisms run in parallel and prevent potential attackers from accessing the site.
The decision-making process is automated and can have a legal effect on the person concerned or affect them in a similar way. If automated decision making results in negative consequences for your rights and you do not agree with this, you can contact us according to the information in the section “Our contact details”. In this case, we will consider the circumstances of your case individually.
Categories of personal data:
Device information and access data
Contact information
Legal basis:
Art. 6 para. (1) lit. a) GDPR, Consent
Online marketing
Our services rely heavily on convincing potential customers that we offer a great user experience and that every visit to our platform is worth it. To reach as many potential customers as possible, we are very active in online marketing. It is equally important to gain the trust of potential customers as it is to build the trust of our existing customers. Therefore, we would like to present our processes relating to processing for marketing purposes as transparently as possible.
Targeting
In principle, targeting means publishing and personalising banner ads on websites tailored to specific target groups. The aim is to display the most attractive advertising messages (banners) in a way that is personalised to the user and potential customer. First, we define a target group and second, we ask service providers to display our advertising to the defined target group. We do not process personal data, as it is initially anonymised. To better define the target group, we segment the types of customers and place different ads on different portals.
Retargeting
As soon as you have visited our website and, for example, selected a course, we store this information in cookies. If you continue to browse other websites, our advertising partners will remind you on our behalf that you have not yet completed your order. We don’t want you to miss out on the amazing experience we offer every customer.
You can disable retargeting by installing the appropriate additional settings on your browser.
Furthermore, you can and should regularly delete cookies stored in the browser you are using.
Categories of personal data
Contact information
Legal basis
Art. 6 para. (1) lit. f) GDPR, Legitimate interest.
Mergers and acquisitions, change of control
We would also like to inform you that in the event of a merger with or acquisition by another company, we will disclose information about data subjects to that company. Of course, we will require that company to comply with the legal provisions on the protection of personal data.
Categories of personal data:
Contact information
Legal basis:
Art. 6 para. (1) lit. f) GDPR, legitimate interest
Our legitimate interest is represented by the purpose described above.
VIII. Who are our collaborators and where we process your personal data
We never provide your personal data to unauthorized third parties. Your personal data may be processed by third parties with whom we have a contractual relationship for purposes that serve our legitimate interest.
Your personal information may be disclosed to collaborators/affiliates who provide services through the Profit Point platform and whom you expressly request by filling in registration forms for educational events (courses, seminars, masterclasses, workshops) organized by them and promoted through Profit Point.
For the efficient operation of the platform, we use various services from external or internal providers, to whom we may transmit part of the personal data collected from you, with the express mention that we will only use entities that offer sufficient guarantees for the implementation of adequate technical and organizational measures, so that the processing complies with the requirements set out in the Regulation and ensures the protection of your personal data.
However, as part of our business, we use the services of selected service providers and give them limited and strictly monitored access to some of the data we hold. Before sending personal data to these partner companies for them to process data on our behalf, each company is individually audited. All recipients must comply with the legal provisions on personal data protection and demonstrate the level of data protection with appropriate evidence.
In this case they can be mentioned:
Website and database hosting, backup and infrastructure services – may have access to name, surname, email address, phone number, address; IP. Services offered by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Social media services – may have access to email addresses. Services offered by Facebook based in the USA, Menlo Park, CA. 555753
Google Analytics services – statistics application do not have access to personal data, Yandex Metrics services – statistics application do not have access to personal data.
Billing services – may have access to name, surname, e-mail address, phone number, address; Services offered by Cubus Arts S.R.L with registered office in: Str. Mitropoliei 25, Sibiu 550179, Romania
Courier/post services – can have access to name, surname, e-mail address, phone number, address; Services offered by Fan Courier head office Sos. de Centura nr. 32, Stefanestii de Jos, Ilfov, 077175
SMS sending services – can have access to the phone number; Services offered by Telekom Romania Communications: Bucharest, Piata Presei Libere nr. 3-5, Cladirea City Gate
Online payment processing services – can have access to name, surname, e-mail address, phone number, address; Service offered by NETOPIA SRL, located at Bulevardul Pierre de Coubertin 3-5, Office Building, 4th floor, Bucharest, sector 2, 021901
IT Services – company involved in the operation and maintenance of our website and database – may have access to name, surname, e-mail address, phone number, address; IP. Services offered by Vimsoft Digital Production SRL. Head office: Bucharest, Mărășești Boulevard, no. 42, bl.1, sc. A, et. 2, ap. 7
A detailed list of our partners can be requested by any of the methods provided in “Our contact details”.
IX. Third parties
In addition to the above-mentioned authorised persons, we also cooperate with third parties, to whom we also transmit your personal data, but who are not subject to our instructions. These are, for example, our consultants, lawyers or tax consultants to whom we provide your data on a contractual basis and who process that data for legal reasons or to protect our own interests.
We will also disclose your personal data to third parties:
- If you consent to this disclosure;
- To persons who demonstrate that they are acting lawfully on your behalf;
- To respond to any complaints, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity;
- To protect the rights, property or safety of our employees, customers, suppliers or others.
Any collaborator/affiliate/partner/supplier to whom we disclose your personal information in accordance with the above are limited (by law and contract) in their ability to use your personal information only for the specific purposes identified by us. We will always ensure that any third parties to whom we disclose your personal information are subject to confidentiality and security obligations in accordance with the contracts signed with them and applicable laws. However, for the avoidance of doubt, this may not be applicable where disclosure is not our decision.
A detailed list of our partners can be requested by any of the means provided under “Our Contact Details”.
If you have specified a different city/town when registering, the internal system will assign you to the nearest city where we have a partner/collaborator who can provide the service you requested.
Except as expressly detailed above, we will never disclose, sell or rent your personal information to a third party without notifying you and, if applicable, obtaining your consent.
We have profiles on various social media platforms where we advertise our products and interact with customers. Because these profiles operate on third-party platforms, each time you visit these social media channels, the operators collect your personal data.
We are responsible for all interactions on our own platforms. Operators of social media platforms are themselves data controllers in relation to general interactions and interactions outside our profiles. The Facebook and Instagram social media platforms are operated by and belong to Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland.
The following links will show you exactly what data is collected by the respective social media operators:
Facebook Privacy Policy
Instagram Privacy Policy
X. Prosecution bodies and legal proceedings
Unfortunately, it may happen that a small proportion of our Users and Service Providers do not behave in good faith in accordance with the law and intend to harm us. In such cases, we are not only obliged to disclose personal data by virtue of legal obligations, but also based on our interest to prevent damage, to enforce our claims and to fight unjustified claims.
XI. Data processing outside the EU
We process your personal data mainly within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers mentioned above are based outside the EU and the EEA.
The GDPR imposes high data protection standards on the transfer of personal data to third countries. All our data recipients must ensure that these standards are met. Before transferring data to a third country service provider, each service provider is first assessed as to its level of data protection. Only if they can demonstrate an adequate level of data protection will they be listed as a service provider.
Regardless of whether our service providers are located in the EU/EEA or in third countries, each service provider must sign a data processing agreement with us. Service providers outside the EU/EEA must meet additional requirements. According to Art. 44 f. GDPR personal data may be transferred to service providers that meet at least one of the following requirements:
The Commission has decided that the third country ensures an adequate level of protection (e.g. Israel and Canada);
Standard data protection clauses adopted. These are contractual clauses that cannot be changed by the contracting parties and in which they commit to ensure an adequate level of data protection;
Approved certification mechanism.
XII. How long we store your data
In general, we delete after the purpose of processing has been fulfilled. The personal data provided by you will be processed during the course of the contractual relationship, as well as thereafter, for a reasonable period, which may not be shorter than the general limitation period.
We will delete your personal data either if you wish to do so, you notify us and deletion is possible under the legal rules, or if your account is no longer active. Before this happens, you will receive a separate notification from us to the email address registered in your User account.
In the case of newsletters, we will delete personal data within 1 (one) year from the date the reader no longer accesses the content of these communications.
In addition to the deletion rules defined by us, we will also keep the data for the period of time for which we have a legal obligation to retain it. For example, tax data must be kept for between five and ten years or even longer in some cases. These particular retention periods vary depending on the legal provisions contained in existing local legislation.
Therefore, despite the request for deletion of personal data, we may still be obliged to store some data due to legal regulations. In this case, however, we will restrict the data from further processing.
XIII. Is your personal data safe?
Profit Point is committed to protecting your personal data against loss, misuse, disclosure, alteration, unavailability, unauthorised access and destruction and takes all reasonable precautions to protect the confidentiality of such data, including the use of appropriate organisational and technical measures. Organizational measures include controlling physical access to our premises, training staff and locking physical files in storage lockers. Technical measures include the use of encryption, passwords for access to our systems, the use of SSL security certificates to encrypt data in transit, etc.
All data is stored in the data centres of the subcontractor Hetzner Online GmbH.
Hetzner Online GmbH’s data centres are equipped with electronic access control systems with log-in, video surveillance at entrances and exits. Data centre staff are available 24 hours a day, 7 days a week.
During the provision of your personal data to you, personal data may be transferred over the Internet. Although we make every effort to protect the personal data you provide to us, the transmission of information between you and us over the internet is not completely secure (it is possible that the terminal you are typing from, for example, may be monitored by third parties without us being able to do anything about it). Therefore, we cannot guarantee the security of your personal information transmitted over the Internet. You understand, therefore, that any such transmission is at your own risk. Once we receive your personal data, we will use strict procedures and security features to prevent unauthorized access to it.
XIV. Our Cookie Policy
You can access our cookie policy here with all the cookies we use.
XV. Rights of the data subject
In accordance with the provisions of the Regulation you have the following rights as a data subject:
Right of access to data
In accordance with this right you can obtain from us a confirmation of the processing of personal data concerning you and access to that data. You may also obtain a copy of the personal data provided to us and which are subject to processing. For any other copies requested by you, we are entitled to charge a reasonable fee based on administrative costs. If you submit your request in electronic format and unless you request another format, the information will be provided to you in a commonly used electronic format;
Right to rectification and updating of data
Under this right you can obtain the rectification of your personal data if they are incorrect or inaccurate and the completion of personal data if they are incomplete; Profit Point will inform each recipient to whom personal data has been disclosed of any rectification of personal data, unless this proves impossible or involves disproportionate effort, and will inform you of these recipients if you so request.
Right to erasure of data
Under this right, you may request us to delete personal data relating to you without undue delay and we are obliged to delete such data when:
- the personal data are no longer necessary for the purposes for which they were collected or processed;
- you withdraw your consent on the basis of which the processing takes place and there is no other legal basis for the processing;you object to the processing and there are no overriding legitimate grounds for the processing;
- personal data have been unlawfully processed;
the personal data must be deleted in order to comply with a legal obligation incumbent on us under European Union or Romanian law; - Profit Point will notify each recipient to whom personal data has been disclosed of any erasure of personal data, unless this proves impossible or involves disproportionate effort, and we will inform you of these recipients if you so request;
The right to restrict processing
Under this right, you have the possibility to restrict the processing of your personal data in certain situations, as provided for by the Regulation, as follows: (i) you dispute the accuracy of the data, for the period that allows Profit Point to verify the accuracy of the data; (ii) the processing is unlawful, and you object to the erasure of the personal data, requesting instead the restriction of its use; (iii) Profit Point no longer needs the personal data for processing purposes, but you request for the establishment, exercise or defence of a right in court; or (iv) you have objected to the processing for the period of time during which it is ascertained whether Profit Point’s legitimate rights prevail over your rights; Profit Point will notify each recipient to whom personal data has been disclosed of any restriction of processing, unless this proves impossible or involves disproportionate efforts, and we will inform you of these recipients if you so request.
Right to data portability
You have the right to receive your personal data as provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller under certain conditions; in exercising this right, you have the right to have your personal data transmitted directly from Profit Point to another controller where technically feasible;
Right to object
You have the right to object, for reasons relating to your particular situation, at any time to the processing of your personal data, including the creation of profiles on the basis of these provisions;
Rights concerning profiling and decisions based solely on automatic processing, including profiling
Under this right you can object to profiling as well as to decisions based solely on automated processing;
Right to complain
Under Article 77 of the Regulation, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that the processing of your personal data is not carried out in accordance with the provisions of the Regulation.
The supervisory authority responsible for us is:
The National Supervisory Authority for Personal Data Processing, located in Bucharest, Bd. General Gheorghe Magheru no. 28-30, Sector 1, email: anspdcp@dataprotection.ro.
Right to withdraw your consent
If we have processed your personal data on the basis of your consent, your consent may be withdrawn with respect to the processing at any time, without however affecting the lawfulness of the processing of personal data carried out by us on the basis of consent prior to the withdrawal of consent.
XVI. How you can exercise your rights
If you wish to exercise any of the above rights, please contact us in one of the following ways:
Email: comunicare@profit-point.eu
At the address: Str. Traian Grozăvescu nr. 2, et. 1, ap. 1, Mun. Timișoara, Jud. Timiș
We only accept written requests, as we cannot deal with verbal requests immediately, without first analysing the content of the request and identifying you first.
Your request must contain a detailed and precise description of the right you wish to exercise.
You must provide us with a copy of an identification document to confirm your identity (ID card, identity card, passport).
Any other data contained in the copy of the identification document, such as your photo or any other personal characteristics, may be covered.
We will not accept any other means of ensuring your identity, especially if you want us to provide you with the data we hold, as we risk passing your data to unidentified persons.
If you wish to propose alternatives, we will evaluate them on a case-by-case basis.
The use of the information in your identification document is limited to the activity of confirming your identity and will not result in the storage of your personal data longer than necessary for this purpose.
In some cases, we may not be able to search your personal data due to the identifiers you provide in your request. In such cases, if we are unable to identify you as a data subject, we are unable to comply with your request to enforce your legal rights described in this section, unless you provide additional information that allows us to identify you. We will inform you and give you the opportunity to provide such additional details.
You will receive our response to your requests concerning the protection of your personal data at the email address from which you sent us your request or at the postal address from which you wrote to us.
We will try to respond to your request within 30 days and may extend this period for specific reasons related to the complexity of your request. In all cases, if this period is extended, we will inform you of the extension period and the reasons for it.
If you are not satisfied with our response, you can make a complaint to the National Supervisory Authority for Personal Data Processing. You can find more information about the process at https://dataprotection.ro/?page=procedura_de_solutionare_a_plangerilor.
XVII. The right to amendment
We reserve the right, at our discretion, to change our privacy practices and to update and make changes to this notice at any time. For this reason, we encourage you to keep coming back to this notice. This document is current as of the date that appears at the top of the document. We will treat your personal data in a manner consistent with the privacy notice under which it was collected, unless we have your consent to treat it differently.