Privacy | Zkl Invest Service

PRIVACY POLICY

Pursuant to Regulation (EU) 2016/679 ("GDPR") and applicable national legislation

1. Data Controller

The Data Controller is ZKL Invest Service Srl, a company operating in the financial and insurance guarantee sector, with registered office at Via Cesare Battisti 5, 81100 Caserta (CE), Italy.
Email: info@zklinvest.co.uk

The company operates in compliance with the principles of lawfulness, fairness, and transparency as set out by data protection regulations, with particular attention to data processed in the context of financial and insurance activities, including risk assessment, underwriting, and surety bond management.

2. Types of Data Collected

Through this website, the following personal data may be collected and processed:

Identification data: name, surname, email address
Technical data: IP address, browsing data, browser type, device used
Data voluntarily provided: via contact forms, quote requests, or access to services
Cookies: technical, functional, and analytical cookies, with the potential future use of profiling cookies (e.g., Google Ads, Meta Pixel) subject to explicit consent

Due to the nature of the services offered by the company, the data collected may later be used for risk profiling and customer segmentation, in line with the evaluation methodologies adopted in the financial and insurance context.

3. Purpose of Processing

The personal data collected are processed for the following purposes:

Managing requests received through online forms
Fulfilling contractual and pre-contractual obligations
Improving website functionality and user experience
Assessing the economic-financial soundness of users in connection with guarantee requests
Performing statistical analysis, including through third-party tools, in aggregated and anonymous form
(In the future): Direct marketing and remarketing activities through third-party platforms (Meta, Google), involving behavioral tracking, only with prior consent

4. Legal Basis for Processing

The processing is based on the following legal grounds:

Performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR)
Data subject’s consent for marketing and profiling purposes (Art. 6(1)(a) GDPR)
Compliance with legal obligations (Art. 6(1)(c) GDPR)
Legitimate interest of the Data Controller concerning cybersecurity, service improvement, website performance monitoring, and fraud prevention (Art. 6(1)(f) GDPR)

5. Processing Methods and Security Measures

Data processing is carried out using electronic, digital, and manual tools, in compliance with the security measures outlined by international standards (e.g., ISO/IEC 27001), with controlled access and data segregation policies.

The website is hosted on infrastructure managed by a qualified external provider that ensures:

SSL/TLS encryption
Regular backups
Intrusion prevention and firewall systems
Physical security of data centers

Data are not subject to automated decision-making unless otherwise communicated in the event of future developments.

6. Data Retention

Data will be retained only for as long as necessary to fulfill the purposes for which they were collected. Currently, there is no automated data deletion policy in place. However, the data subject may exercise their rights at any time as set out in section 8.

7. Data Disclosure and Transfer

Data may be disclosed to:

External IT and hosting service providers
Professionals and consultants responsible for website management or statistical analysis
Public authorities or judicial bodies, where required by law

Data are not transferred outside the European Economic Area. Should such a transfer become necessary, appropriate safeguards will be adopted pursuant to Articles 44 et seq. of the GDPR.

8. Data Subject Rights

Data subjects have the right to:

Access their personal data
Request correction or deletion
Object to or request restriction of processing
Request data portability
Withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal
Lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)

Requests can be sent via email to: info@zklinvest.co.uk

9. Changes to This Privacy Policy

This policy may be subject to updates. Any changes will be communicated via publication on the website, with the date of the latest revision clearly indicated.
Last updated: 15/07/2025