Information on the processing of personal data

Art. 13 and 14 Reg. (UE) 2016/679

In compliance with articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of Regulation (EU) 2016/679 (GDPR), the following information, which refers to the Users of this Website exclusively to the processing carried out through said Website and not through other web sites eventually visited through links from the present, for which it is suggested to read the relative information given by the respective Data Controllers.

SUBJECT OF INFORMATION

SHORT INFORMATION

(+)EXTENDED INFORMATION

HOLDER OF THE TREATMENT

 

URANO'S S.R.L.S.

info@surfriend.com

 

URANO'S S.R.L.S. , with registered office in 09123 CAGLIARI, Via Vittorio Veneto 1 , C.F. e P.IVA 03673800920 – tel +39 339661239 email: info @surfriend.com

The Data Controller reserves the right to appoint as Head of the processing of personal data managed for the purposes of technical assistance, maintenance, technical management and the like of this Site a web agency, whose references may be communicated following a request to the addresses indicated above.

The Data Controller and the Data Processor process the Users' data also thanks to their own Internal Representatives, specifically designated and provided with instructions for the correct processing of their personal data, even in oral form.

DATA PROTECTION OFFICER (DPO)

NO

NO

TYPE OF DATA PROCESSED AND COLLECTION SOURCES

  • Browsing data

 

  • Cookies, for which we invite you to read our specific information (LINK)

 

  • Data provided voluntarily by the user, including:

 

  • Common data (identification data, personal data, billing data and similar)

 

  • Only exceptionally particular data (Art. 9 GDPR)

 

  • Sources: browsing, other sites, cookies and the like; user; public sources

We will be able to handle first of all navigation data, as well as cookies, for which we invite you to read our specific information here www.surfriend.com/en/cookiespolicy.

We may also process data provided voluntarily by the user, for example through the contact form or sending a communication via e-mail, including common personal data (identification, personal data, billing and similar) and exceptionally special data under the 'art. 9 GDPR in the strict limits in which this is necessary by the request for information received.

Data may come from automated sources or from voluntary sources, as well as from public sources. For example, they could come from user browsing, which could carry information about previous consultations of other sites, including cookies and other similar technologies. The data could also be granted voluntarily by the user or by persons related to him. Other data may come from public sources, such as those processed in research and from public records, public databases and the like.

PURPOSE OF THE TREATMENT

  • Made to Users of the web services offered by the Site

 

  • Cookies management

 

  • Cart management

 

  • Sending newsletters

 

  • Offers management
  • Web site, as described above, will be processed in the ways and forms prescribed by the GDPR, for the performance of the functions of the Web Site, with particular - but not exclusive - reference to the procedures described therein, data collection, contact form, possible registration / access area reserved area, newsletter subscription (for which please, refer to the specific privacy policy), purchase procedure and related cart and alike.
  • In particular, the personal data provided to the Data Controller will be processed for the pursuit of the following purposes:

- to follow up the specific requests addressed to the Data Controller by the User through the Website and its communication tools (contact forms, information request forms and alike);

- for any subscription to the newsletter and the consequent sending of commercial communications and various information concerning the sector in which the Data Controller operates, with the appropriate consent given by the user by checking the relative box; for the forms of mere subscription to the newsletter, please, refer to the specific privacy notice published there;

- for communications of an informative nature relating to the services of the same Data Controller, following the request for information via emails or completing the contact form and other communication tools;

- for the registration procedure aimed at purchasing services or, in cases where registration is not required, in any case for the cart procedure and invoicing tax profiles or similar;

- for other accessory purposes or connected to those indicated above and in any case falling within the scope of the Website's activities;

- for the processing of the email address provided by the interested party in the context of the sale of a product or service, aimed also at sending, without further consent, communications for the subsequent direct sale of products or services similar to those object of the sale itself; in any case, the interested party can express his / her refusal and oppose this treatment, both initially and subsequently, in an easy and free way, following the instructions given in each subsequent communication.

 

The processing of data given in general will be carried out, even as a result of automatic collection during navigation, for the sole purpose of verification and control of access to the Website. This also applies to technical cookies, to be understood as session cookies, of functionality or analytics that present the requirements specified by the Guarantor. In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where they are created and used directly by the Website. In any case, for these cookies analytics, the Website, also in accordance with the clarifications of the Guarantor, has provided for the anonymization of IP addresses and the collection and use of the aforementioned navigation data (without prejudice to the anonymization of IP addresses) allow monitoring of the Website's progress and allow to improve the service offered, proposing to the User a better browsing experience. Please refer to the appropriate Cookie Policy for further information.

LEGAL BASIS OF TREATMENT

  • Consent

 

  • Fulfillment of a contractual or social contact obligation
  • Information

The processing of personal data is based on the right to information, on the fulfillment of contractual obligations or social contact, or where necessary on consent through the free and conscious compilation of the appropriate information fields in the dedicated form.

LEGITIMATE INTEREST OF THE HOLDER

  • Exercise of the rights of the information society

 

  • Execution of the service by the Owner

 

  • Direct Marketing

The processing of personal data is also based on the legitimate interest of the owner, such as the exercise of their rights in the context of the information society, the performance of the contractual service and the implementation of direct marketing operations.

COMPULSORY OBLIGATORY

  • Some data are mandatory, others are optional, depending on the purpose of the processing that will be specifically indicated at a time.

 

  • See More information for a complete illustration of our policy.

The provision of data relating to navigation by Users, for the purposes set out above, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases, disabling may impair navigation on this Website. For certain forms of this Website, the provision of navigation data and / or the use of technical cookies is mandatory for the proper functioning of the Website.

The provision of some personal data is in any case necessary for the structure of the Website and its procedures. In particular, by way of example:

- in order to send messages via contact form or to subscribe to the newsletter, the minimum data required therein is mandatory, such as the USERNAME and / or the name / surname and / or email address and / or other data identifiers of the sender;

- for registration and access to the reserved area of the Website, the USERNAME and PASSWORD are obligatory in any case, as well as other data related to the possible e-commerce procedure, such as the name / surname / name, address and delivery address for the products / services object of purchase, tax code / VAT number and similar as better described in the specific purchase form. Failing this, the procedure itself can not be completed.

Any request for other optional data will be preceded by a special approval check.

The provision of all other data is optional, in accordance with the type of information that the User wishes to give to the Website.

CONSEQUENCES OF FAILURE TO PROVIDE

  • Failure to receive commercial information

Failure to provide personal data prevents the Data Controller from sending updates on their commercial and promotional initiatives.

EVENTUAL RECIPIENTS OF PERSONAL DATA

  • Communication: YES
  • Recipients: partner companies and consultants of the Owner
  • Intra EU transfer: YES
  • Extra UE transfer: YES (under Privacy Shield)

The data may be communicated to companies connected, connected or controlled by the Data Controller, as well as to consultants, or also to third parties who operate, also in the name and account of the Data Controller, for the execution of the services related to the purposes indicated in this information. intra-EU and non-EU (in the latter case, it will only be subjects belonging to the Privacy Shield protocol).

Browsing data and alike (for which the above is referred to), as well as profiling cookies, including those of third parties (for which reference is made to the Cookie Information of this Website), which will be communicated to the respective interested third parties, where these do not manage them directly as Data Controllers.

CONSERVATION PERIOD

  • Until revocation

 

  • Until the evasion of the functions

 

The data provided by the interested party will be kept until the express will be revoked by the interested party, also through action on their browser, cleaning of cookies, express or otherwise expressed request.

The navigation data will be kept for the technical time necessary for the evasion of the functions for which they were collected.

RIGHTS OF THE INTERESTED PARTY

Rights (arts. 15 – 22 GDPR):

  • access
  • rectification
  • cancellation
  • limitation
  • portability
  • Forms and terms of operation: Article 12 GDPR

by email at info@surfriend.com

Each interested party has the right to access, rectify, cancel (forget), limit, receive notification in the event of rectification, cancellation or limitation, portability, opposition and not be subject to an automated individual decision, including the profiling, pursuant to articles from 15 to 22 of the GDPR.

These rights may be exercised in the forms and terms set forth in art. 12 GDPR, by written communication sent to the Data Controller via email at info@surfriend.com

The Data Controller will respond as soon as possible and in any case within 1 month from receipt of the request.

RIGHT OF REVOCATION OF CONSENT

  • by email: info@surfriend.com
  • at the headquarters of the Data Controller

You may revoke this consent at any time:

 

  • sending an email to the address of the Data Controller info@surfriend.com;
  • giving a notice at the headquarters of the Data Controller.

COMPLAINTS

Complaint (art. 77 GDPR):

  • to the Guarantor for the protection of personal data

Each interested party has the right to lodge a complaint pursuant to arts. 77 and following of the GDPR to a supervisory authority, which for the Italian State is identified in the Guarantor for the protection of personal data.

The forms, methods and terms for proposing complaints are foreseen and governed by the national legislation in force.

The claim is without prejudice to administrative and jurisdictional actions, which for the Italian State may alternatively propose to the same Guarantor or the competent Court.

PROFILING

  • YES

The personal data provided with this form will be subject to profiling.

The profiling allows the Data Controller to evaluate certain personal aspects of the interested party in particular to his preferences, his interests, his tastes with reference to the products sold and the activities carried out by the owner, in order to allow the Data Controller to offer to Interested in a sales service more specific and targeted to its needs.