Skip to content
Legal documents

Privacy Notice

How SEOZoom collects and processes your personal data: purposes, legal bases, retention periods and the rights you can exercise at any time.

Latest version: 8 April 2025 GDPR compliant (EU Reg. 2016/679) Drafted by Polimeni.Legal
Data Controller

SEOZoom s.r.l.

Registered office at Via dell'Epomeo, 463 – 80126 Naples (NA), Italy · VAT no. 07231591210.

Email info@seozoom.it PEC seocube@pec.it
Address Via dell'Epomeo, 463 – 80126 Naples (NA), Italy

Which websites does this notice apply to?

This notice applies to the processing carried out through the following domains:

seozoom.it seozoom.com sz2020.seozoom.it payments.seozoom.it

In this document you will find, for each service:

Purpose of the processing
Legal basis
Retention period

Contents

1

Introduction

Under the European General Data Protection Regulation (GDPR), legal entities are not regarded as data subjects and the European Regulation therefore does not apply to them. However, where personal data relating to a natural person is included in the collection of company data, that person is to be regarded as a data subject within the meaning of the Regulation, and the relevant legislation applies accordingly.

2

What processing is carried out through the website?

For each service you will find the purpose, legal basis, retention period and the other information required by Articles 13 and 14 GDPR.

Free trial Purchase Express checkout Registration Request a demo Chat Newsletter / DEM Reviews Transactional emails Lead generation Marketing and profiling Webinars Contact us Abandoned cart Browsing data

Free trial

through seozoom.it and seozoom.com

1 month
Purpose

The main purpose of the processing is to allow you to use the SEOZoom platform free of charge for a limited period (7 days). First name, last name, email address and telephone number are therefore required. Finally, the data may be needed in the event of disputes concerning the correct performance of the contract.

Legal basis

Performance of a contract. In the event of litigation, the data will be processed in order to bring or defend legal claims, which corresponds to the legitimate interest of the Data Controller. The Controller's legitimate interest also lies in the mandatory provision of the telephone number, so that the Controller can send the user a one-time password (OTP) to verify that there are not several accounts linked to the same person, thereby preventing fraud against them.

Retention period

The data will be kept for 1 month from collection. It may be kept longer only in the event of disputes, and therefore in order to bring or defend a legal claim.

Further information

The provision of data is based on the performance of the contract. Accordingly, if you refuse to provide it, the stated purpose cannot be achieved.

Purchase

through payments.seozoom.it

10 years
Purpose

The main purpose of the processing is to allow you to purchase a SEOZoom subscription. The data is also necessary to comply with legal obligations (including accounting and tax obligations). Finally, it may be needed in the event of disputes concerning the correct performance of the contract.

Legal basis

Performance of a contract and consequent compliance with the legal obligations incumbent on the Data Controller. In the event of litigation, the data will be processed in order to bring or defend legal claims, which corresponds to the legitimate interest of the Data Controller.

Retention period

The data will be erased 10 years after performance of the contract. It may be kept longer only in the event of disputes, and therefore in order to bring or defend a legal claim on the basis of the Data Controller's legitimate interest.

Further information

The provision of data is based on the performance of the contract. Accordingly, if you refuse to provide it, the stated purpose cannot be achieved.

Purchase via express checkout

through payments.seozoom.it

10 years
Purpose

The main purpose of the processing is to allow you to purchase a SEOZoom subscription. The data is also necessary to comply with legal obligations (including accounting and tax obligations). Finally, it may be needed in the event of disputes concerning the correct performance of the contract.

Legal basis

Performance of a contract and consequent compliance with the legal obligations incumbent on the Data Controller. In the event of litigation, the data will be processed in order to bring or defend legal claims, which corresponds to the legitimate interest of the Data Controller.

Retention period

The data will be erased 10 years after performance of the contract. It may be kept longer only in the event of disputes, and therefore in order to bring or defend a legal claim.

Source and categories of data processed

Where the purchase is made via express checkout, the personal, billing and contact details are imported from PayPal (Article 14 GDPR).

Registration

through payments.seozoom.it and sz2020.seozoom.it

6 months / 1 year
Purpose

The purpose is to complete a registration for the following purposes:

  • Registration on payments.seozoom.it - to make the payments relating to the SEOZoom subscription. In addition, once payment has been made, the profile used to access sz2020.seozoom.it is activated. That profile can also be used to access the SEOZoom Academy platform.
  • Registration on sz2020.seozoom.it as a copywriter - a SEOZoom subscriber may request specific copywriting services from those who have registered on the platform as copywriters.

In any event, the data may be used to bring or defend a legal claim in the event of litigation.

Retention period
  • Registration on payments.seozoom.it - the data will be erased 6 months after the subscription contract expires.
  • Registration on sz2020.seozoom.it as a copywriter - if the account remains inactive for 1 year, we will send you an email to ask whether you are still interested in keeping it active; otherwise the account will be deleted. The data will be processed for a longer period in the event of litigation.
Legal basis

Performance of a contract. In the event of litigation, the data will be processed in order to bring and/or defend legal claims on the basis of the Controller's legitimate interest.

Further information

The provision of data is based on the performance of the contract. Accordingly, if you refuse to provide it, the stated purpose cannot be achieved.

Request a demo

through the websites listed above

18 months
Purpose

The main purpose of the processing is to allow you to request a demo of the product and/or to try it free of charge for a period of time.

Legal basis

Performance of pre-contractual measures taken at the Data Subject's request. In the event of litigation, the data will be processed in order to bring or defend legal claims, which corresponds to the legitimate interest of the Data Controller.

Retention period

The data will be erased after 18 months. It may be kept longer only in the event of disputes, and therefore in order to bring or defend a legal claim on the basis of the Data Controller's legitimate interest.

Further information

The provision of data is mandatory and, if you refuse to provide it, the stated purposes cannot be achieved.

Chat

through all the websites listed above

Until answered
Purpose

The purpose is to allow you to request information via chat.

Legal basis

Consent of the Data Subject.

Retention period

Chats will be kept in order to answer your questions and will then be deleted.

Further information

You are entirely free to provide the requested data, as there is no legal obligation to do so. However, if you choose not to provide the data marked as essential, the Data Controller will be unable to achieve the stated purpose.

Newsletter / DEM

including by automated means (email, SMS, WhatsApp, social media) or traditional means · through all the websites listed above

1 year
Purpose

The purpose of the processing is to send you newsletters and DEMs by traditional means or by automated means (email, SMS, WhatsApp, social networks).

Legal basis

Consent given by the Data Subject under Article 6(1)(a) GDPR and Article 130(1)-(2) of Legislative Decree 196/2003 (Italian Privacy Code).

Retention period

1 year from the last mailing or until consent is withdrawn.

Further information

Consent may be withdrawn at any time. You are entirely free to provide the requested data, as there is no legal obligation to do so. However, if you choose not to provide the data marked as essential, the Data Controller will be unable to achieve the stated purpose.

Reviews

through seozoom.it and seozoom.com

Until withdrawal
Purpose

The purpose of the processing is to ask you to leave a review to be published on the website so that you can share your experience, and to bring or defend a legal claim in the event of litigation.

Legal basis

The Controller's legitimate interest in requesting the review and the Data Subject's consent to leaving it. In the event of litigation, the legal basis is the legitimate interest of the Data Controller.

Retention period

Until the content becomes obsolete or until consent is withdrawn. The data will be kept for a longer period in the event of litigation.

Further information

You may freely choose to send a photograph of yourself to be published together with the review; otherwise, only the text of the review will be published. Consent may also be withdrawn at any time.

Transactional emails

through payments.seozoom.it and sz2020.seozoom.it

Until completion
Purpose

The purpose of the processing is to send you information relating to the purchase you have made or to your registration.

Legal basis

Performance of a contract.

Retention period

Until the purchase or registration is completed.

Further information

Transactional emails are sent in order to provide the Customer with confirmation of the purchase or registration.

Follow-up via Facebook forms / lead generation

lead generation campaigns on social media platforms

Until contact is made
Purpose

The purpose of the processing is to make a one-off call back to the user who has provided their telephone number in order to receive the requested information.

Legal basis

Performance of pre-contractual measures taken at the Data Subject's request.

Retention period

The data will be kept in order to call the user back and will then be erased.

Further information

There is no legal obligation to provide the data. However, if you refuse to provide it, the stated purpose cannot be achieved.

Marketing and profiling through digital platforms

marketing cookies, CRM Custom Audience campaigns, social media pages

Until withdrawal
Purpose

The purpose of the processing is to show you marketing content based on your interests, as identified by your interactions on our website or on social media. This includes the use of retargeting tools provided by digital platforms in order to deliver targeted advertising messages.

Legal basis

Consent, which may be obtained by various means:

  1. Through cookies on our website: your consent to marketing and profiling cookies is collected through the cookie settings on our website.
  2. For CRM Custom Audience campaigns (prospecting and retargeting): for these campaigns, we obtain your explicit consent to use your contact details (e.g. email address) for marketing purposes.

Interaction with social media pages: if you have consented to the use of profiling cookies on our Website, we may process your contact details and the information you provide while interacting with our Social Media Pages. We use this information, in accordance with your privacy settings on social media, to show you personalised marketing advertisements.

Retention period

The data will be kept until consent is withdrawn through the cookie settings.

Further information
  1. Consent obtained through cookies on our website: you may manage or withdraw this consent at any time, as described in our Cookie Policy. Please also note that cookies may be both first-party and third-party and may therefore be installed, through us, directly by Meta.
  2. Consent obtained for CRM Custom Audience campaigns (prospecting and retargeting): this consent allows us to process your data in order to identify similar audiences (lookalike) and to show targeted advertisements on social media and other digital platforms.

Where the user is merely segmented, your consent is not required.

Webinar attendance

through the websites listed above

18 months
Purpose

The purpose of the processing is to allow you to attend the webinars offered.

Legal basis

Performance of a contract. In the event of litigation, the legal basis is the legitimate interest of the Data Controller.

Retention period

The data will be kept for 18 months.

Further information

The provision of data is mandatory and, if you refuse to provide it, the stated purposes cannot be achieved.

Contact us

through seozoom.it and seozoom.com

18 months
Purpose

The purpose is to allow the User or the Customer to contact the Data Controller.

Legal basis

Performance of a contract and of pre-contractual measures taken at the Data Subject's request.

Retention period

The data will be erased after 18 months.

Further information

There is no legal obligation to provide the data. However, if you refuse to provide it, the stated purpose cannot be achieved.

Abandoned cart

through payments.seozoom.it

1 month
Purpose

The purpose of the processing is to send an email inviting the user to complete a purchase interrupted on the website.

Legal basis

The Data Controller's legitimate interest in the completion of the purchase.

Retention period

One month.

Further information

The data is provided automatically as a result of the shopping cart being partially filled in.

Browsing data

through all the websites listed above

24 months
Purpose

Website security.

Legal basis

We will process the data on the basis of the company's legitimate interest in information security and in complying with legal obligations. The legal basis for the processing of cookies other than necessary ones is consent.

Retention period

24 months.

Further information

For the rules on cookies, please refer to the dedicated notice.

3

What else should I know?

The data will be processed lawfully, fairly and with the utmost confidentiality, in compliance with the appropriate security measures required by the Italian Privacy Code and by the Regulation. The processing will be carried out by digital means. The data will not be publicly disseminated, with the exception of data relating to reviews. Furthermore, you will not be subject to automated decision-making such as profiling unless you consent to it by installing cookies or other tracking tools, the rules for which are set out in the dedicated notice.

4

Who will my data be disclosed to?

  • The Controller may disclose the data to all parties to whom disclosure is required by law in order to fulfil the purposes laid down by law.
  • The Controller also relies on certain companies or IT tools that carry out processing activities on data subjects' personal data exclusively in the Controller's interest, all of which have been duly appointed as data processors under Article 28 GDPR.
  • In the case of payment, the data will also be disclosed to payment gateways acting as independent controllers.
  • The list of data processors is available at our registered office.
  • In the event of a merger, sale or any other corporate change, and/or where any such transaction is being arranged, your data may be shared. Furthermore, should the company owned by the Data Controller, or part of it, be sold to a third party, that third party may continue to use your data, always in the manner set out in this privacy notice.
5

Where is the data stored and transferred?

Servers inside and outside the European Union

Personal data will be managed and stored on servers located both inside and outside the EU. The Data Controller guarantees that any transfer outside the EU takes place in accordance with Articles 44-47, Chapter V, GDPR, by entering into standard contractual clauses and/or on the basis of adequacy decisions.

6

What are my rights and how can I exercise them?

As a data subject, you have the rights set out in Article 15 et seq. of the Regulation, and specifically:

Article 15 GDPR

Right of access

You have the right to obtain confirmation as to whether or not personal data concerning you exists, even if not yet recorded, and to have it communicated in intelligible form.

Article 16 GDPR

Right to rectification

You have the right to obtain the rectification of inaccurate personal data concerning you, as well as the completion of incomplete data.

Article 17 GDPR

Right to erasure

You have the right to obtain the erasure of personal data on specific grounds, such as the withdrawal of consent, objection to the processing, where the data is no longer necessary for the purposes for which it was collected and processed, or in the case of unlawful processing. Erasure will not always be possible, but the Data Controller must in any event provide adequate reasons.

Article 18 GDPR

Right to restriction of processing

You have the right to obtain the restriction of processing in specific cases, for example where you have requested rectification or lodged an objection, for the time needed to assess the request.

Article 20 GDPR

Right to data portability

Where the processing is based on consent or on a contract and is carried out by automated means, you may receive the data in a structured, commonly used and machine-readable format, or ask for it to be transmitted to another controller.

Article 77 GDPR

Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority under Article 77 GDPR if you believe that the processing of your data infringes the legislation in force.

Article 21 GDPR

Right to object

You have the right to object, in whole or in part:

  • on legitimate grounds, to the processing of personal data concerning you, even where it is relevant to the purpose of the collection;
  • to the processing of personal data concerning you for purposes not covered by Section 2.

You may submit a request to object to the processing of your personal data under Article 21 GDPR, setting out the reasons that justify the objection: the Controller reserves the right to assess the request, which would not be accepted where there are compelling legitimate grounds for the processing which override your interests, rights and freedoms.

How to exercise your rights

You may exercise the rights set out in the previous section at any time by contacting the Data Controller at the addresses given above.

info@seozoom.it Go to contacts

Latest version: 8 April 2025
This notice was drafted by Polimeni.Legal

Related documents

The other notices

Cookie Policy Which cookies we use and how to manage your consent.
Terms and conditions The rules of the service and of the subscription.
Contacts Write to us with any question about your data.

The market will not wait.
Take control now.

The only platform to hold your ground on Google and AI engines.

Try it free for 7 days
  • Full
    platform (trial included)
  • Strategy demo
    with an expert
  • Support
    in Italian