Privacy Policy and Register Description

1. Data Controller

Profitland Managment Limited
info@profitland.bet

2. Person Responsible for the Register

Profitland Managment Limited
info@profitland.bet

3. Name of the Register

Company Customer Register

4. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation (GDPR) is:

• The data subject’s consent (documented, voluntary, specific, informed and unambiguous)
• A contract to which the data subject is a party
• A legal obligation
• The performance of a task carried out in the public interest, or
• The legitimate interest of the data controller (e.g., customer relationship prior to contract, employment relationship, membership).

The purpose of processing personal data is to maintain customer relationships, communicate with customers, provide services, and conduct marketing activities.

Personal data is not used for automated decision-making or profiling.

5. Data Content of the Register

The register may contain the following information:

• Name of the person
• Position/title
• Company/organization
• Contact details (phone number, email address, postal address)
• Website addresses
• IP address of network connection
• Social media usernames/profiles
• Information regarding ordered services and changes to them
• Billing information
• Other information related to the customer relationship and ordered services

IP addresses of website visitors and cookies necessary for the functionality of the service are processed based on legitimate interest, including ensuring information security and collecting statistical data on website visitors where such data may be considered personal data.

Consent will be requested separately where required for third-party cookies.

6. Regular Sources of Information

Information stored in the register is obtained from customers through:

• Messages sent via website forms
• Email correspondence
• Telephone communications
• Social media platforms
• Contracts
• Customer meetings
• Other situations where customers provide their information

Contact details of representatives of companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.

7. Regular Disclosures of Data and Transfers Outside the EU or EEA

Data is not regularly disclosed to third parties, except for possible invoicing or debt collection services.

Data may be published to the extent agreed with the customer.

The data controller may transfer personal data outside the EU or EEA.

Personal data will not be transferred to the United States without the explicit consent of the data subjects.

8. Principles of Register Protection

Due care is exercised in processing personal data, and information systems used to process personal data are appropriately secured.

When register data is stored on internet servers, both the physical and digital security of the hardware is properly ensured.

The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose job responsibilities require such access.

9. Right of Access and Right to Rectification

Every person in the register has the right to:

• Check the personal data stored about them
• Request correction of inaccurate data
• Request completion of incomplete data

Requests must be submitted in writing to the data controller.

The data controller may request verification of identity if necessary.

The data controller will respond within the time limits set by the EU General Data Protection Regulation (generally within one month).

10. Other Rights Related to Personal Data Processing

Individuals in the register have the right to request deletion of their personal data from the register (“right to be forgotten”).

Data subjects also have other rights under the EU General Data Protection Regulation, such as the right to restrict processing in certain circumstances.

Requests must be submitted in writing to the data controller.

The data controller may request verification of identity if necessary.

The data controller will respond within the time limits set by the EU General Data Protection Regulation (generally within one month).