Privacy Notice and Declaration of Consent

For California privacy rights, please go here

Table of Contents

1. Personal information you give us:
2. Personal information we get from third parties
3. What happens if you don’t give us your data
4. Purposes of personal data use
5. Disclosing and transfer of personal data
6. Your rights
7. Privacy rights for California residents
8. Special note to employment applicants
9. Retaining personal data
10. Security of personal data
11. Amendment
12. Third party websites
13. About cookies
14. Website Security
15. Questions, concerns, complaints
16. Alternative dispute resolution

Introduction

The Zoreza global Holding, Inc, an international custom software development company, is a controller of the personal data submitted through this website (hosting provider: AWS; website is located in Ireland) and directly or indirectly collected in other ways

Our website is not designed or directed at children. In accordance with the Children’s Online Privacy Protection Act of 1998 (“COPPA”), we will not intentionally collect, maintain, or distribute information about anyone under the age of 13. If we become aware that we have inadvertently received personal information from a user under the age of 13, we will delete the information from our records.

Zoreza global Holding, Inc and all its affiliated companies (the list of Zoreza global group companies is here), hereinafter referred to as Zoreza global Group, is committed to respecting your privacy. We will treat any personal data supplied by you as confidential and will only process such information as permitted by applicable legislation.

This Privacy Notice describes the Zoreza global’s policies and practices regarding collection and use of your personal data, and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Notice as we undertake new personal data practices or adopt new privacy policies. In relation to consent-based data processing (as further described below), we will notify you of any changes and request your further consent.

Data Protection Officer

The Zoreza global Group is headquartered in Zug, Switzerland. The Zoreza global Group has appointed an internal data protection officer for you to contact if you have any questions or concerns about our personal data policies or practices. The email of Zoreza global Group data protection officer is DPO@Zoreza global.com.

How we collect and use (process) your personal information

1. Personal information you give us:

We may collect, store and use the following kinds of personal data:

• information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths);
• information you provide to us when submitting your CV (including your contact information);
• information you provide to us for the purpose of subscribing to our email notifications and/or newsletters (including your name and email address);
• information you provide to us when using the services or ordering trainings, or information which is generated in the course of the use of those services (including the timing, frequency and pattern of service use);
• information contained in or relating to any communication that you send to us or send through this website (including correspondence with us, communication content and metadata associated with the communication);
• information you provide to participate in Zoreza global events, live or web conferences;
• your publications, blogs, interviews, opinions, etc.;
• any other personal data that you choose to send to us (i.e. the personal data of a candidate to work who you want to refer).

You can find more details on which data is collected for which purposes in part 4 of this Notice.

2. Personal information we get from third parties

From time to time, the Zoreza global Group receives personal information about individuals from third parties around the world. This may happen if you publish your CV in the Internet on some job boards, if someone recommended you for potential employment or if your employer signs you up for training or certification in Zoreza global.

3. What happens if you don’t give us your data

You can enjoy this website without giving us your personal data or providing your consent. You can even enter only the minimal amount of information (name and contact information) to your profile if you wish, and you can edit your profile at any time. Some personal information is necessary so that Zoreza global can supply you with the services you have purchased or requested, and to authenticate you so that we know it is you and not someone else. You may manage your Zoreza global subscriptions and you may withdraw your consent to marketing communication at any time.

Please note, that if you do not give us your data, we most likely will not be able to communicate with you and provide you with our services described below.

4. Purposes of personal data use

Personal data submitted to us through this website and personal data we collected from you or third parties or from public sources will be used for the purposes specified in this Notice.

Depending on the relationships we have or wish to have with you, we may use your personal data for the following purposes based on the legal grounds set forth hereunder:

4.1. Communications, based on Zoreza global legitimate interest, art. 6 para. 1 f GDPR:

• if you have contacted us via this website or otherwise, we may process your name, contact details, location and other information you provided to us to be able to answer your questions, to organize the meeting, call, zoom or other communication (please note, that this communication may be recorded and stored by Zoreza global representative in Zoreza global corporate system, if you have given your consent), to enable you to publish your materials, interviews, opinions, comments, blogs, podcasts, photos and videos, to organize your participation in interactive features of our service when you choose to do so.

4.2. Marketing and public relations, based on your consent, art. 6 para. 1 a GDPR:

• if you are a visitor of our website, we may, by way of cookies and web beacons, process your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, log files, interactions with our website and with our online campaigns, data automatically collected about you or your device in accordance with this Privacy Notice, information you provided via website forms, services purchased (value, date, type, payment details), publicly available professional information about you, data sources, notes and remarks to carry out marketing research and to analyze the characteristics of this website visitors, to assess the impact of our marketing communication and to adjust it to the detected tendencies, to plan our future marketing activities, to prepare analytics and profiling for business intelligence, to personalize service and communications for you, to target our advertising, to provide direct marketing of the same, or similar, or related products and services; including also sharing and marketing within Zoreza global Group
• if you are our subscriber, you receive or would like to receive our marketing materials, we may process your personal data you provided to us to spread promotional materials; make announcements about additions and changes concerning our services; personalize this website and our marketing communication for you; send you e-mail notifications (e.g. about the job vacancies or organized events); send you our email newsletters and magazines (you can inform us at any time if you no longer interested in these materials); send you marketing communications relating to our business which we think may be of interest to you.

4.3. Trainings and events,  based on our contract with you, art. 6 para. 1 b GDPR:

• by purchasing courses or trainings via this website you agree to become a party to a Contract, terms and conditions of which will be stipulated in contract, offer or other documents concluded between you and Zoreza global in connection with such courses or trainings. In this case your personal data such as full name, contact details, address, passport data, payment details (if you pay yourself), your employer, position (if employer pays) your attendance records, result of an exam, will be transferred to and processed by a data controller – Zoreza global Training Center for the following purposes: to enter into agreement with you or your employer, organizing a visit and passing the training, passing the exam, issuing a certificate of passing the training, inviting you to our future trainings or courses.
  You can manage your personal data in your personal account here.

or based on Zoreza global legitimate interest, art. 6 para. 1 f GDPR:

• if you have visited or intend to visit our event or participate our conference, we may process your full name, contact details, position, employer, communication and topic preferences, specialization, professional experience, gender, t-shirt size (to the extent you have given us your consent), tests results, photos and videos (to the extent permitted by law) with you from Zoreza global events, to invite you and to organize your participation in our existing and future events/conferences.
  Please note that we have right to publish the group photos and videos from our events/conferences on our website, social media profile or other channels for marketing purposes.

4.4. Recruitment, internship, referral, relocation,  based on your consent, art. 6 para. 1 a GDPR:

• if you are a potential employee or intern, we may process your full name, contact details, your CV and specializations, social media profiles, date of birth, education history, references, employment history, notice period at current employer, degrees, professional skills, personal/professional interests, language skills, salary expectations, relocation interests, family status, citizenship, certifications, testing results, publicly available professional information about you to assist you with ongoing or future employment or internship in Zoreza global Group or its client, to enable you to submit your resume, apply for jobs online or to use the website otherwise.

or based on Zoreza global legitimate interest, art. 6 para. 1 f GDPR:

• in specific cases, and only upon the client’s request, we may show your CV to a potential client for business engagement or to current client to confirm the high level of skills of our members of staff providing the services. Also to fulfill its compliance obligations our client may need to check your biography more closely before providing with the access to its protected data and facilities, so we may ask you, to provide more specific information such as tax number, work permission, citizenship, criminal background and, other additional and specific background checks required by particular clients to provide you with an access to clients’ systems and premises.
• if you are a candidate for relocation, we may process your full name, position, contact details, passport details, date of birth, place of birth, registered address, photo, visas, citizenship, your salary expectations and your offer, CV, data on your relocated family members, other data per Migration Authorities request, to organize your relocation and employment in one of the countries of our global presence.

or based on our contract with you, art. 6 para. 1 b GDPR:

• if you would like to refer us to another person for recruitment, you must obtain that person's consent. We will seek a confirmation of this fact from the referred person. You should provide this person with the following information and request an explicit provable consent:

Please provide me with your consent to the transfer of your personal data such as your full name, contact details, location, publicly available professional information about you, reference, notice period at current employer, salary expectations, your CV and specializations to an international group of companies Zoreza global Group for the purposes of processing of this personal data in recruitment process for a position in the Zoreza global Group or its client.

The controller of the filing system, in which your personal data is stored and processed — is Zoreza global Holding, Inc. You may contact the Data Protection Officer of controller at DPO@Zoreza global.com. The controller will treat your personal data as confidential and will only process such information in compliance with the Privacy Notice and applicable legislation. The Zoreza global internal departments in the countries of Zoreza global global presence will have access to this recruitment database and will process your personal data on “need to know” basis for the purposes of managing the recruitment process for a position in the Zoreza global Group or client.

Your personal data may be transferred outside of your own jurisdiction or outside EEA (European Economic Area) to other Zoreza global Group locations insofar as reasonably necessary for the purposes set out above. The transfer is governed by corporate Standard contractual clauses adopted by all companies of Zoreza global Group. Your personal data will be kept for unlimited period of time (or until the consent is revoked), unless otherwise prescribed by applicable legal requirements and presuming that it is necessary for the purpose of processing.

You have the right of access and correct the collected data, to restrict and object to the data processing, the right to lodge a complaint with a supervisory authority. If you do not wish us to use the information any longer which has been provided to us, please e-mail us at DPO@Zoreza global.com with the subject heading "Don't use my data" with your name inserted inside.

Please note, that we will use your personal data, which you provided, to identify you and to award you a referral bonus if applicable.

4.5. Business relations, based on Zoreza global legitimate interest, art. 6 para. 1 f GDPR:

• if you are a representative of our current/potential client, vendor, business partner or investor, we may process your full name, contact details, current and previous positions, current and previous companies you represent, activities in relation to sales process, data on our communications with you, content and results of such communications, our internal notes about you, data on your position and publicly available professional information about you to develop and/or maintain business relations and communications with Zoreza global Group, to engage a new business with the company you represent, to provide you with the status/details/other information about our works and services, to organize the approval, processing and signing of contracts, acts, invoices and other contractual documentation, to promote our new products, works and services, to confirm the high level of our works and services, to invite you to the meetings, events and organize them, to comply with Sarbanes-Oxley Act (SOX), economic sanctions and export control list screening, industry watch-lists, industry standards, regulators’ requirements and other requirements related to anti-corruption, fraud prevention and anti-money laundering.

4.6. Corporate and investor relations, based on Zoreza global compliance obligations, art. 6 para. 1 c GDPR:

• if you are a current/potential director or top manager of Zoreza global Group legal entity, we may process your full name, contact details, position, professional background, education, affiliation, shareholding, conflict of interest, ID/passport data, citizenship, bank details, remuneration, travel details and representative expenses with respect to organize your participation in corporate meetings, events or SOP programs, business travel, to pay your remuneration, to cover related expenses, to maintain our corporate records, to make obligatory public disclosures and reports, to execute auditor’s requests, to present the company and its management during the sale process and to perform other legal obligations. We also may share this information within the Zoreza global Group, provide some of this data to banks, share registrar, notary, payroll agencies and legal advisors with the purpose of opening of corporate bank account or other accounts.
• if you are a current/potential shareholder or affiliate of Zoreza global Group legal entity, we may process your name, contact details, ID, shareholding account, type and number of shares, number of votes and personal data of your representative to organize your participation in corporate meetings and events, to provide you with the meetings’ materials and our reports, to support you in execution of your shareholder’s rights, to make obligatory public disclosures and reports, to execute auditor’s requests and to perform other legal obligations, including anti-money laundering requirements (disclosure of beneficiaries).

4.7. Security, based on Zoreza global legitimate interest, art. 6 para. 1 f GDPR:

• if you are a visitor of this website, we may process the personal data you uploaded, data automatically collected about you or your device in accordance with this Privacy Notice, for example by way of cookies, web beacons, to keep this website secure, prevent fraud, protect rights and interests of Zoreza global Group and third parties, protect IP rights. This information may be disclosed for the purpose of investigation or legal prosecution.
• if you are a visitor of our office, we may process your full name, ID, time of entrance-exit, time spent at the office, CCTV records and the name of person, invited you, to monitor physical access and to ensure security in our office, to prevent, detect and investigate any crime, misconduct, incident or accident. This information may be disclosed to third parties for the purpose of investigation, legal prosecution or for insurance purposes.

4.8. Merger & acquisition, integration process, based on Zoreza global legitimate interest, art. 6 para. 1 f GDPR:

• if you are an employee, candidate, manager, shareholder, investor, business partner of a company we intend to buy or already bought, we may process your personal data for the same purposes and on the same legal basis as this target company did. We will provide you with the specific privacy notice or will request a consent if necessary.
• other purposes for which we will provide you with an individual Privacy Notice.

You may withdraw your consent at any time with effect for the future. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. We will not, without your express consent, supply your personal data to any third party for the purpose of their or any other third party's direct marketing.

Personal data that we are processing based on your consent will be kept during unlimited period of time (or until the consent is revoked), unless otherwise prescribed or permitted by applicable law. If have revoked your consent, we will store only minimum data about you (full name, contact details, our references and notes) to the extent justified based on another legal ground, such as legitimate interest.

5. Disclosing and transfer of personal data

The Zoreza global Group is an international group of companies. Information we collect from you will be processed in EEA and outside EEA depending on the purpose of processing. The Zoreza global Group endeavors to apply suitable safeguards to protect the privacy and security of your personal data during the transfer and to use it only consistent with your relationship with the Zoreza global Group and the practices described in this Privacy Notice. The Zoreza global Group also minimizes the risk to your rights and freedoms by not collecting or storing sensitive information about you.

6. Your rights

The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights for data subjects.

You have a right to access and correct (rectify) the record of your personal data maintained by the Zoreza global Group if it is inaccurate. You may request that the Zoreza global Group erase that data or cease processing it, subject to certain exceptions. You may also request that the Zoreza global Group cease using your data for direct marketing purposes. You have a right to lodge a complaint with the data protection authority if you have concerns about how the Zoreza global Group processes your personal data. When technically feasible, the Zoreza global Group will—at your request—provide your personal data to you or transmit it directly to another controller.

If access cannot be provided within a reasonable time frame, the Zoreza global Group will provide you with a date when the information will be provided.

You may also request additional information about: the purpose of the processing; the categories of personal data concerned; who else outside the Zoreza global Group might have received the data from Zoreza global Group; what the source of the information was; and how long it will be stored.

If you wish to execute any of these rights, please contact our Data protection officer at DPO@Zoreza global.com. at any time.

WARNING! Please exercise your rights wisely and note that abuse of rights may entail your liability.

7. Privacy rights for California residents

For rights and choices specific to California consumers, please refer to our Privacy Notice for California Residents. Please note that we will take reasonable steps to verify your identity and the authenticity of your request. Once verified, we will maintain your request in the event our practices change.

8. Special note to employment applicants

If you intend to provide us with personal information for a prior supervisor, reference, or other third party, it is your responsibility to obtain such third party’s consent to provide this information to us. You are responsible for the information that you provide or make available and you must ensure that it is legal, truthful, accurate, and in no way misleading. You must ensure that the information you provide does not contain any material that is infringing on any rights of any third party, or otherwise legally actionable by such third party.

9. Retaining personal data

Your personal data is stored by the Zoreza global Group on its servers, and on the servers of the cloud-based database management services the Zoreza global Group engages.

Personal data that we are processing based on your consent will be kept for unlimited period of time (or until the consent is revoked), unless otherwise prescribed by applicable legal requirements and presuming that it is necessary for the purpose of processing.

If you didn’t provide us with your consent onto data processing or revoked the consent, we will store only minimum data about you (full name, contact details, our references and notes) for the statistic and reporting purposes or to the extent justified based on another legal ground, such as our legitimate interest.

Notwithstanding the other provisions of this Section, we will retain information and documents (including electronic documents) containing personal data:

• to the extent that we are required to do so by law
• if the information/documents are relevant to any ongoing or prospective legal proceedings; and
• in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)

10. Security of personal data

To help protect the privacy of data and personally identifiable information you transmit through use of this website, we maintain physical, technical and administrative safeguards.

We update and test our security technology on an ongoing basis. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information.

If any personal data leak occurs we will do everything to eliminate it and to assess a level of risk connected with the leak according to our Personal data breach policy. If it turns out the leak may lead to physical, material or non-material damage for you (e.g. discrimination, identity theft, fraud or financial loss) we will contact you without undue delay unless the law provides otherwise. All our steps will be taken in full cooperation with competent supervising authority.

11. Amendments

We may update this Privacy Notice from time to time by publishing a new version on this website.

As privacy laws, interpretations of state bodies, recommendations of privacy authorities change and improve from time to time, this Privacy Notice and Terms of Use are expected to change as well. We reserve the right to amend the Privacy Notice and Terms of Use at any time, for any reason, without notice to you, other than the posting of the amended documents at this website. Any changes to our Privacy Policy will be posted on this page so that you are always aware of our policies. The provisions contained herein supersede all previous notices or statements regarding our privacy practices and the terms and conditions that govern the use of this website. Additionally, we will update the “last updated” date below.

12. Third party websites

This website may include hyperlinks to, and details of third party websites. We have no control over, and we are not responsible for, the privacy policies and practices of third parties.

13. About cookies

As is true of most other websites, this website collects certain information automatically and stores it in log files. This includes Internet Protocol (IP) addresses, geographic location of your computer or device, browser type, operating system and other information about visiting this website, for example, pages viewed. This information is used to improve this website and, thanks to this constant improvement, to better serve to our users. Your IP address may also be used to diagnose problems with our server, administer this website, analyze trends, track a user’s movement on the site, and collect demographic information to help us understand visitor preferences and their needs. This website also uses cookies and web beacons.

14. Website Security

No data transmissions over the Internet can be guaranteed to be 100 percent secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you understand that any information that you transfer to Zoreza global Group is done at your own risk. However, Zoreza global Group uses website security measures consistent with current best practices to protect its website, email and mailing lists. These measures include technical, procedural, monitoring and tracking steps intended to safeguard data from misuse, unauthorized access or disclosure, loss, alteration or destruction.

We realize there can be incidents of misuse or unauthorized program incursions, as almost every website, service and user encounters. In those instances, our goals are to move quickly to isolate the problem, ensure or restore proper functionality and minimize any inconvenience to our users. As appropriate and necessary, Zoreza global Group will notify the relevant authorities of these incidents of misuse or unauthorized program incursions of the Zoreza global Group website.

15. Questions, concerns, complaints

If you have any questions regarding your personal information, want to execute your rights or you have concerns or complaints, please contact us by sending an email to our Global Data Protection Officer at DPO@Zoreza global.com.

If you wish that we do not use the information you provided to us, please drop us an e-mail to DPO@Zoreza global.com with "Don't use my data" title and your name inside.

In order to update or correct your personal data please contact Global Data Protection Officer by sending a message to DPO@Zoreza global.com.

16. Alternative dispute resolution

Regardless of your right to lodge a complaint with the supervisory authority and / or to take actions under applicable laws, you may always contact the Zoreza global Data Protection Officer (DPO) if you believe that your data protection rights have been impaired by an actual or assumed act of data processing. The DPO will carefully examine your concern and advise on your respective rights. In doing so, the DPO is obliged to uphold the confidentiality of any further personal data obtained in relation to your request. Upon your request, the DPO will make all reasonable efforts to reach a settlement of the complaint in due consideration of your concerns. Such a settlement may also include a recommendation concerning damages in connection with the infringement of your data protection rights.