PRO’ADVISORY® / PRO.FI.T Group®
Privacy
1. Test draft — completion required
This policy describes planned processing for PRO’ADVISORY® / PRO.FI.T Group®. The legal controller, registered address, registration number and representative must be confirmed before publication. Interim contact: contact@profit-group.net. This text does not appoint a data protection officer.
2. Scope and applicable law
Processing must comply with applicable Tunisian law, including Organic Law 2004-63. The GDPR applies where its territorial criteria are met. Required filings, authorisations and transfer conditions must be checked before launch. This draft is not a compliance certification.
3. Information collected
Forms collect identity, contact details, organization, country, city, requested profile and messages. Quotation requests include the service, currency and stated budget. Accounts use identifiers, hashed passwords, permissions and access or administrator decision logs. Data comes from you or an authorised administrator. Do not provide unnecessary sensitive or confidential information.
4. Purposes and legal grounds
Responding to enquiries and preparing quotations may rely on requested precontractual steps. Delivery and account management may rely on a contract. Security and abuse prevention may rely on a legitimate interest following a proportionality assessment. Legal duties apply where relevant. Marketing and nonessential trackers require a separate appropriate choice; submitting a form does not subscribe you to marketing.
5. Required fields and access
Required fields are identified in the forms. Missing required data prevents processing. Client, Partner, Candidate and Media access requires human administrator approval. Refusals or suspensions must be explainable and open to review. The planned AI chat must not independently make decisions with legal effects.
6. Recipients and hosting
Access must be restricted to authorised staff and necessary service providers. Planned hosting is Vipdomaine/cPanel; the contracting entity, server countries, subprocessors and safeguards remain to be confirmed. Data is not sold. Disclosure to authorities requires an appropriate legal basis.
7. International transfers
Actual hosting, remote access and transfers must be mapped before launch. Required Tunisian authorisations and GDPR safeguards must be established where applicable. This general notice does not authorise a transfer by itself.
8. Retention
A documented retention schedule must be agreed and disclosed before launch for enquiries, candidates, inactive accounts, contracts, logs and backups. Periods must reflect purpose and applicable legal duties. Backups require a defined deletion cycle; litigation holds must be limited and documented. Use fictional Test data and delete it when testing ends.
9. Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, objection, portability or withdrawal of consent. Contact contact@profit-group.net with your request. Proportionate identity checks may be necessary. Where GDPR applies, requests are normally answered within one month, subject to permitted justified extensions. Complaints may be made to Tunisia’s INPDP or the authority competent for your circumstances.
10. Cookies and third-party services
Session and security cookies support authentication. Currency preference is stored in your browser and does not perform conversion. Nonessential analytics or advertising must not activate without the required choice. WhatsApp, LinkedIn and Google Maps links lead to separate services with their own policies. Embedded maps and remote media require a tracker review before activation.
11. Security, AI and incidents
Role-based access, hashed passwords, encrypted production connections and audit logs are required. Backup restoration must be tested. The Test AI chat has no connected engine. Its supplier, data flows, retention, transfers and user information require review before activation. Incidents must be assessed and notified as required by applicable law.
12. Updates
Working version: 11 November 2026. Significant changes must be dated and communicated. Final publication depends on verification of actual practices and outstanding company details.