INFORMATION ON THE PROCESSING OF PERSONAL DATA - APP PROKE

Introductory Note

The following text contains information about the processing of personal data for the purpose of providing the Proke service.
The terms of use of the Proke App can be found at this link: Terms of Use.
The processing of the data collected by us is carried out in compliance with the EU Regulation 2016/679 (hereinafter the "GDPR”) and with this information we inform the data subjects what data we process, how we treat them and what the rights of the interested parties are.

Data Controller

The data controller is PGM12 Srls
Address: via T. Folengo 9, Padova (Italia)
VAT: 05269840285
Email: info@proke.app
Company website: www.proke.app

Data Processor

The updated list of data processors, if appointed, is available at the data subject’s request, to be sent to the data controller to the addresses indicated above.
Each Tailor (term used in accordance with the provisions of the Terms of Use App Proke) is an independent data controller.

Purpose of the Processing and Legal Basis of the Processing

When registering for the Proke Service, the following User data is collected: name, surname, date of birth, gender, telephone number, email address, tax code, complete address with postal code and country of residence or domicile. For the Business User, the tax data necessary for the administrative management of the commercial relationship are also collected, such as the VAT number and the certified email address. During the use of the Proke Service, the following User data may be collected: height, weight, body and posture data, body measurements and body photographs.
Images of the User's body are captured by the device of the User undergoing measurement and may also extend to the face, if included in the frame.
The data of the Consumer User are processed in order to allow communication to the Tailor, for the creation of made-to-measure garments, objectively and remotely.
The data of the Business User are processed in order to implement the commercial relationship between it and the Supplier.
The legal basis of the processing is the execution of a contract of which the interested party is a part or the execution of pre-contractual measures adopted at the request of the same (Article 6 paragraph 1 letter b GDPR), in combination with the consent of the interested party (Art. 9 co. 2 letter a GDPR) for the categories of data that request it.

Data Recipients

The Tailor to whom the interested party has turned, for the remote creation of made-to-measure garments, is the recipient of the data collected, as indicated above, and has access to them as a necessary measure in order to execute a contract of which the interested party is a party.

Data Transfer to a Third Country

The Owner has no intention of transferring the data outside the country of his domicile, as indicated above, but in the event that the Consumer User has contacted a Tailor based in a third country, the data processed will be communicated to the domicile of that addressee.
For the provision of the Proke Service, the Owner also makes use of technological tools and services made available by the third-party supplier Amazon Web Services, which may carry out transfers to third countries and applies standard terms of service approved with the European Commission Implementing Decision (EU) 2021/914 of 4 June 2021.

Data Retention Period

The data is kept until the user profile is cancelled, upon request by the data subject to be sent to the Data Controller, or, in the case of access via third-party accounts, until dissociation from said account, again by the interested party.
Following the cancellation of the user profile, or disassociation from the third-party account, the data collected during the entire period of use of the Proke Service are therefore no longer recoverable.

Rights of the Interested Party

The interested party has the right to contact the Data Controller at any time, requesting access to the data as required by art. 15 GDPR, the rectification as required by art. 16 GDPR, cancellation as required by art. 17 GDPR, the limitation of the treatment as foreseen by the art. 18 GDPR, or to oppose the treatment pursuant to art. 21 GDPR or to obtain data portability pursuant to art. 20 GDPR. The interested party also has the right to revoke the consent previously given at any time, but this does not affect the lawfulness of the processing based on the consent given before the revocation. The withdrawal of consent makes it impossible for the Owner to continue providing the Proke Service. The interested party also has the right to lodge a complaint with a supervisory authority.

Obligation to Provide Data

The communication, from the Data Subject to the Data Controller, of the data indicated above is mandatory in order to allow the Data Controller to provide the Proke Service. Failure to communicate results in the impossibility of providing or continuing the Proke Service.