DATA PROTECTION STATEMENT
Last revised: October 2022
1. Overview
This document details the data protection guidelines implemented by Afri Profit ("us," "we," or "our") regarding our offerings and solutions (the "Solutions") and platform (the "Platform"). Protecting your privacy and maintaining the security of your information is fundamental to us in providing our Solutions and managing the Platform.
Our Solutions and Platform may connect to external sites and solutions. We are not responsible for the privacy practices of these external entities. It is recommended to examine their privacy policies before engaging with them.
All information obtained by us in relation to our Solutions is handled as confidential. We utilize comprehensive technical, security, and organizational measures to safeguard Personal Data (as specified below) against unauthorized processing, accidental loss, destruction, damage, theft, or disclosure.
When transmitting your information through our platform, you may be asked to supply personal information, (for instance) your name, email, phone number, date of birth, and various identification details. This information may be used, among other things, to confirm identity, manage information, provide technical support, and meet contractual and legal requirements. We may send important details through notifications, and with your authorization, share information about products and solutions via SMS, email, etc. You have the ability to control notification preferences and opt out from certain communications.
2. Platform; Visitors and Users
2.1. Overview
This section outlines the details of data collection from various groups: Platform's visitors ("Visitors"), users ("Users"), and business partners (collectively "Partners"). Personal Data includes IP address, name, contact details, and information about the relationship with us, as specified by applicable data protection regulations.
2.2. Collection and Usage
By accessing the Platform, you agree to the collection and use of your Personal Data. Disagreement to these terms should prevent you from accessing the Platform. We may collect information through page view activity, IP addresses, and cookies. Additionally, we process submitted data from forms and registrations.
2.3. Purpose of Processing Personal Data
We process Personal Data to improve, understand, and customize our Platform and Solutions. This includes enhancing accuracy, communication about Solutions, support, contractual requirements, and collaboration with partners. Authorization or legal basis is required for any processing.
The following details the purposes and legal basis for processing Personal Data:
| Account registration and setup | Your authorization; Performance of Solutions or contract requirements |
| Delivering and utilizing Solutions | Performance of Solutions or contract requirements |
| Service updates and notifications | Performance of Solutions or contract requirements |
| Addressing inquiries and delivering support | Legitimate interests or performance of Solutions |
| Customized Solutions, advertising, and marketing | Legitimate interests or your authorization |
| Enhancing and developing new Solutions | Authorization and legitimate interests |
| Distributing advertising and marketing materials | Your authorization |
| Evaluating marketing campaign performance | Legitimate interests or authorization |
| Conducting various support activities | Legitimate interests or performance of Solutions |
| Analysis, including statistical evaluation | Legitimate interests |
| Safeguarding interests, rights, and assets | Legitimate interests or legal requirements |
2.4. Sharing Personal Data
We may share information with service vendors, Partners, and contractors. For Visitors and Users in the European Data Region, data processing complies with GDPR and Data Protection Laws and applicable regulations.
3. Partners
3.1. Overview
To deliver Solutions and collaborate with Partners, we collect and process specific data types. Partners are responsible for their data, and we may access it through secure means.
3.2. Processing of Personal Data
We depend on Partner authorization or legitimate interests to process Personal Data. Data Aggregations may be created for development and quality enhancement.
3.3. Controller/Processor
We may function as a Controller or Processor depending on the data type:
- Visitor/User data: Controller
- Partner data: Processor
- All data is securely hosted, following the highest security standards. We implement physical, technical, and organizational safeguards.
3.4. External Data Protection
If Solutions involve processing Personal Data on an external platform:
- We function as a Processor
- Follow the external party's instructions
- Deploy security measures
- Report data breaches
- Do not subcontract without authorization
- Do not process data outside the European Economic Area without authorization
- For electronic marketing communications, authorization and opt-out options are provided.
4. Security
We utilize administrative, organizational, and technical safeguards to protect Personal Data from unauthorized access, disclosure, alteration, loss, misuse, or damage. When sharing data with external parties, we ensure they maintain the same data protection standards, and contractual obligations are established for exclusive, secure processing aligned with this Statement.
If there's a suspicion that the interaction with us is compromised, Visitors, Users, or Partners should immediately notify us. It's important to note that, despite our security measures, we cannot guarantee complete immunity from external hacking. Users acknowledge the inherent risks and potential breaches.
5. Cookies
Refer to our Cookie Policy for detailed information about the types of cookies and tracking technologies used on the Platform, reasons for use, and how to accept or reject them.
6. Links to External Sites
While navigating the Platform, Users may encounter links to external sites beyond our control. We don't bear responsibility for the content or privacy policies of these sites. Users are advised to review the privacy policies of such external websites and solutions before disclosing any Personal Data.
7. Retention and Removal
Data, including Personal Data, will not be retained longer than necessary. Visitors and/or Users with active accounts are responsible for timely data removal. Upon termination of an account or partnership, related Personal Data collected through the Platform and/or Solutions will be removed in compliance with applicable laws and our internal policies.
Withdrawal of authorization for processing Personal Data may limit access to some or all requested Solutions, with no claims or contentions to be available.
8. Your Rights
Users are entitled to specific rights regarding their Personal Data:
8.1. Right of Access
- Verify if Personal Data is processed
- Access to Personal Data and related information
- Information about processing purposes, categories, recipients, storage duration, rights, and profiling existence
8.2. Right to Correction
- Correction of inaccurate Personal Data
- Completion of incomplete Personal Data
8.3. Right to Removal
- Request removal of Personal Data under specific grounds
8.4. Right of Processing Restriction
- Obtain restriction of processing under specific circumstances
8.5. Right to Data Portability
- Receive Personal Data in a structured, machine-readable format
- Transfer Personal Data to another controller
8.6. Right to Object
- Object to processing based on legitimate interests or direct marketing
- Cease processing unless compelling and/or legal grounds applicable
8.7. Right to Withdraw Authorization
- Withdraw authorization for processing Personal Data at any time
9. Advertising and Marketing Materials
Authorization is obtained to use Personal Data and contact details for providing advertising and marketing materials. Withdrawal of authorization is possible by sending written notice to the provided email address.
10. Acceptance of this Statement
By using the Platform and/or Solutions, Visitors, Users, and/or Partners are presumed to have read and agreed to this Statement. Any disagreement implies refraining from using the platform. We reserve the right to modify the Statement, and Users are encouraged to check for updates periodically. Continued use after changes indicates acceptance.
11. Legal Requirement to Disclose Personal Data
Personal Data may be disclosed without prior permission if there's a belief that it's necessary to establish identity, contact, or initiate legal proceedings against individuals suspected of infringing rights or property. Disclosure shall be made when legally required to.
12. Data Protection Officer
For privacy and data protection matters, a designated "Data Protection Officer" can be reached at