Privacy Policy
The Data Controller, as subsequently identified, may modify or simply update, in whole or in part, this Information by informing the Users. The changes and updates will be binding as soon as they are published on the Website.
The User is therefore invited to read the Privacy Policy presented here.
In the event of non-acceptance of changes made to the Privacy Policy, the User is obliged to stop using this Website and may request the Data Controller to remove their Personal Data, if present in the Data Controller’s files.
Personal Data collected by the Website
Content and information voluntarily provided by the user
Contact details and contents: these are Personal Data voluntarily provided by the User during the use of the Website, such as personal data, contact details, credentials for accessing services and/or products provided, personal interests and preferences, and other personal content, etc.
Failure to provide Personal Data, where there is a legal or contractual obligation, or where they are necessary for the use of the service or for the conclusion of the contract, will result in the impossibility for the Data Controller to provide all or part of its services.
The User who communicates to the Controller Personal Data of third parties is directly and exclusively responsible for their origin, collection, processing, communication, or dissemination.
Data and content acquired automatically during the use of the Website
Technical data:
The computer systems and software procedures used to operate this Website may acquire, in the course of their normal operation, some Personal Data whose transmission is implied by the use of internet communication protocols. This information is not collected to be associated with identified users, but—by its very nature—through processing and association with data held by third parties, could allow the identification of users.
This category includes IP addresses or domain names used by Users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.
Usage data:
Personal Data relating to the use of the Website by the User, such as pages visited, actions taken, features, and services used, may also be collected.
Geolocation data:
The Website may collect Personal Data about your location which can be GNSS (Global Navigation Satellite System) data, as well as data identifying the nearest repeater, Wi-Fi, and Bluetooth hotspots, communicated when enabling location-based products or features.
Personal Data collected through cookies or similar technologies
The Website uses cookies, web beacons, unique identifiers, and other similar technologies to collect Personal Data on pages, links visited, and other actions performed when using our services. They are stored to be retransmitted at the next visit of the same User.
The User can view the complete Cookie Policy at the following address: cookie policy.
Purposes
The Personal Data collected may be used for the execution of contractual and pre-contractual obligations and legal obligations, as well as for the following purposes:
-
Support and contact with the User: to respond to the User’s requests and assist them in case of problems (both Talents and companies and partners).
-
Monitoring, analysis, and tracking of the User’s behaviour: to monitor and analyse how the User interacts with the Website.
Some Personal Data may be managed by www.google.com/privacy
Processing methods
The processing of Personal Data is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
In some cases, individuals involved in the Controller’s organization (such as HR staff, sales staff, system administrators, etc.) or external parties (such as IT companies, service providers, postal couriers, Swiss-based hosting providers, etc.) may also have access to the Personal Data.
These parties may be appointed as Data Processors by the Controller, if necessary, and may access Users’ Personal Data whenever required. They are contractually bound to maintain the confidentiality of the Personal Data.
The updated list of Data Processors can be requested via email at the provided address: contact@spiritoflongboard.com
Legal basis for processing
The processing of Personal Data relating to the User is based on the following legal bases:
-
the consent given by the User for one or more specific purposes;
-
the processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures;
-
the processing is necessary to comply with a legal obligation to which the Data Controller is subject;
-
the processing is necessary for the execution of a task in the public interest or for the exercise of official authority vested in the Data Controller;
-
the processing is necessary for the pursuit of the legitimate interests of the Data Controller or third parties;
-
the processing is necessary for the protection of vital interests of the Data Controller or third parties.
Terms and Conditions for Newsletter Subscription (“Join the Club”)
By subscribing to the newsletter service offered through the WEBSITE under the section “Join the Club,” Users expressly consent to the collection and processing of the following Personal Data: name, surname, email address, country of residence, and date of birth.
The data collected will be processed by the Data Controller for the following purposes:
-
Sending of newsletters, promotional communications, and marketing materials;
-
Invitations to exclusive events and early access to offers;
-
General information about the brand, products, and related initiatives.
Subscription to the newsletter is entirely optional. Failure to provide the aforementioned Personal Data will make it impossible to complete the registration and receive the associated benefits.
The legal basis for processing is the User’s explicit consent, which may be withdrawn at any time by clicking the “unsubscribe” link at the bottom of any newsletter or by sending a request to contact@spiritoflongboard.com
The Personal Data provided will be stored for as long as the newsletter service is active and until the User withdraws their consent. After withdrawal, the Data Controller may retain the data for the time necessary to comply with legal obligations or for defensive purposes.
Location
Personal Data is processed at the Controller’s operational offices in Milan (Italy) and on servers located in Switzerland, managed by a Swiss hosting provider that guarantees compliance with the General Data Protection Regulation (GDPR).
Switzerland is recognized by the European Commission as a country providing an adequate level of data protection (Decision 2000/518/EC and subsequent updates).
Therefore, the transfer of data to Switzerland is lawful under Article 45 of the GDPR and does not require additional safeguards.
For further information, please contact the Controller at the following email address: contact@spiritoflongboard.com
Security measures
The processing is carried out using methods and means designed to ensure the security and confidentiality of Personal Data.
The Controller has adopted appropriate technical and organizational measures to guarantee and demonstrate that the processing is performed in accordance with applicable legislation.
Data retention period
Personal Data will be kept for the period of time necessary to fulfil the purposes for which they were collected.
In particular, Personal Data will be retained for the duration of the contractual relationship, for the execution of related obligations, for compliance with applicable legal and regulatory obligations, and for the Controller’s or third parties’ defence purposes.
If the processing of Personal Data is based on the User’s consent, the Controller may store the Personal Data until such consent is revoked.
Personal Data may be retained for a longer period if necessary to comply with a legal obligation or by order of an authority.
All Personal Data will be deleted or stored in a form that does not allow the identification of the User within the legal retention period. Upon expiry of this period, the right to access, delete, correct, and transfer personal data will no longer be exercisable.
User rights
Users may exercise certain rights with respect to the Personal Data processed by the Controller. In particular, the User has the right to:
-
Revoke consent at any time;
-
Object to the processing of their Personal Data;
-
Access their Personal Data;
-
Verify and request rectification;
-
Obtain restriction of processing;
-
Obtain the deletion of their Personal Data;
-
Receive their Personal Data or have it transferred to another controller;
-
Submit a complaint to the Personal Data Protection Supervisory Authority and/or take legal action.
To exercise their rights, Users can send a request to the following email address: contact@spiritoflongboard.com
Requests are made free of charge and processed by the Controller as soon as possible.
Data Controller
The Data Controller is Spirit of Longboard S.r.l., an Italian company based in Milan (Italy).
Email: contact@spiritoflongboard.com