A. Processing responsibility
We inform you that the personal data that you provide us in the framework of our contractual relationship will be processed by Zitro SARL (hereinafter, “Zitro”), located at 17 Boulevard Royal, 2449 Luxembourg (Luxembourg), for the purposes described below.
You approve of and certify the veracity and accuracy of the provided data, and that it corresponds to your current status. In this regard, you agree to communicate any changes that may affect this data, in accordance with the procedure established in section E. Applicant’s rights.
B. Purpose of processing
Next, you are informed that your data will be processed by Zitro with the following purposes:
i. Based on the contractual relationship:
a. To process your application for registration as a client in order to manage our commercial relationship with you.
b. To manage, maintain and ensure compliance with the contractual or pre-contractual relationship that binds us.
ii. Based on a legal obligation:
a. To communicate information to public authorities, regulators or governmental agencies in those cases required by law, local regulations or compliance with regulatory obligations.
iii. Based on the legitimate interest of Zitro:
a. To perform actions or commercial and/or advertising communications, by any means, including through electronic or equivalent communications, related to products or services similar to those contracted from Zitro.
b. To perform profiling based on personal data available to Zitro in order to determine the products and services that may best match your profile, in order to maximize their performance and bring you the best product and service offers that may be of interest to you.
c. To conduct satisfaction surveys related to the products and/or services contracted by you, in order to evaluate your satisfaction with them, for the purpose of improving Zitro’s processes and services.
d. To manage, process and respond to possible complaints and claims filed by you.
e. To perform audio and/or video recordings of you and so store telephone and/or video calls, when expressly indicated. The legitimate interests of Zitro are to maintain quality of service and use the recordings if necessary to protect their legal position in the face of potential conflict.
f. To share the data with the rest of Zitro Group’s companies as a consequence of the administrative and computer process centralization particular to the Zitro Group.
iv. Based on your explicit consent:
a. If you so authorize it, Zitro can construct a profile based on your consumption habits using both internal and external information originating, for example, from sources accessible to the public (promotional census, lists of people belonging to professional groups or networks). open social, among others), in order to bring you special offers on products or services tailored to your needs, as well as communicate your data to third parties outside Zitro and who are advertising partners thereof, i.e. companies that allow Zitro to display advertising related to Zitro products and services, matching to your preferences when you visit other websites or make use of various social networks, even after the termination of this contract.
In the terms described in section B. Purpose of processing, Zitro may communicate your personal data to the following entities:
i .Public authorities, regulators or governmental or jurisdictional bodies in cases required by law, local regulations or compliance with regulatory obligations.
ii. Third parties and companies of the Zitro Group with the purposes described in section f) of item iii) Legitimate Interest.
In addition to the previous data communications, Zitro collaborates with certain third party service providers that have access to your personal data and that process the aforementioned data in name of and on behalf of Zitro pursuant to service delivery.
Zitro follows strict criteria in its selection of service providers in order to comply with their data protection obligations and commits to signing the relevant data processing contract with them, which will impose, among other things, the following obligations: application of appropriate technical and organizational measures; processing of personal data for the agreed purposes and catering only to the instructions documented by Zitro; and deletion or return of the data to Zitro upon termination of the provision of services.
Specifically, Zitro will engage the provision of services by third-party suppliers that perform their activity, including but not limited to the following sectors: logistics services, legal advice, supplier certification, professional service companies, companies related to maintenance, companies providing technology services, companies providing IT services, physical security companies, instant messaging service providers and call centers.
D. Data sourcing
Regardless of the personal data you provide, Zitro may carry out the processing of personal data from general or sectoral joint exclusion files, and/or government agencies in accordance with the purposes and legitimizing bases described in the aforementioned “B. Purpose of processing” section.
In accordance with the above, Zitro will process personal data provided by the aforementioned third parties corresponding to the following categories:
i. Identification data.
ii. Postal or electronic addresses.
Specially protected personal data is not obtained from third parties.
E. Applicant’s rights
You may revoke the consents provided in the cases foreseen in this act at any time, at your simple request. We inform you that in accordance with current legislation you have the right to exercise your rights of access, rectification, cancellation and opposition, as well as the right of withdrawal, limitation of processing and the right to portability of your data, by certifying your identity (by means of valid ID or equivalent) at the following address: ZITRO S.A.R.L., 17 Boulevard Royal, 2449 Luxembourg (Luxembourg), or the following email firstname.lastname@example.org .
If you consider that Zitro has not respected any of the aforementioned rights, you will have the right to file a claim with the Spanish Data Protection Agency.
F. Data retention
Your personal data will be kept for the entire duration of the contractual relationship between you and Zitro.
Upon termination, we will proceed to the elimination of your personal data when all the necessary actions to manage and terminate any obligation that may remain between the parties have been taken, having carried out all the necessary administrative procedures, except in those cases in which the delivery of commercial communications is applicable.
Notwithstanding the foregoing, your data will be kept duly blocked, as long as responsibilities can be derived from the execution of our contractual relationship, as well as for the fulfillment of other legal obligations by Zitro.
In this regard, Zitro certifies that it will not process the data unless it is necessary for the formulation, exercise or defense of claims or when this is required to facilitate the same to Public Administration, Judges and Courts during the period of prescription of their rights or legal obligations.