This privacy policy aims to inform and clarify for the User the procedures for collecting, processing, and using their personal data, as well as the rights they possess, established by Fish Surf School, under the terms of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the “GDPR,” and Law No. 67/98 of 26 October. We are committed to protecting your privacy. We do not collect personal information unless you choose to provide it. This means you can visit the website without having to reveal your personal data. When you browse this website, information about your visit will be collected, but not any personal data. What is personal data? “Personal data” is understood to mean any information capable of identifying a natural person. “Sensitive personal data,” such as data relating to racial or ethnic origin, religion, political opinion, health status, or sexual orientation, is not collected. Data Provided Directly by the Data Subject: The data subject may provide data directly, whether within the scope of a contractual relationship, for the execution of a contract, for the provision of Services, or within the scope of marketing activities. We may use the data subject’s personal data to provide information about products and services sent via email, electronic messages, social networking websites, or any other method that becomes relevant. Personal Information: Your information is protected by a password to prevent unauthorized access. We may use your email address to send communications about products and services. If you do not wish to receive such communications, you must inform us by email at info@epicsurfschool.pt in order to be removed from our email list. Sharing of Information: No personal information will be provided to any person or company unless there is prior authorization from you. Third-Party Products and Links in Our Services: Our website contains links to third-party websites and services. After the data subject has left this website, we will not be responsible for the protection and privacy of any personal data you may provide on other websites. By registering on this site, the user expressly declares that they accept without reservation the privacy policy described above. The EPIC SURF SCHOOL website ensures its users’ privacy and security regarding the data provided for the various services offered. Only the data necessary for the provision of the service is requested and collected, in accordance with the explicit indications on the website and the user’s options.

1. PRIVACY AND PROTECTION OF PERSONAL DATA

EPIC SURF SCHOOL is committed to respecting and protecting the privacy and personal data of website users, in accordance with the requirements approved by EU Regulation 679/2016 of the European Parliament and of the Council of 27 April 2016. In general, the EPIC SURF SCHOOL website can be visited without the need to disclose any personal information. However, there are areas of the site where we need users to provide their personal data in order to use the services available there, notably when sending information requests by email. We recommend that users adopt additional security measures, such as maintaining correctly configured and updated equipment and software, using protection against malicious software and firewalls, and not browsing websites where there are no guarantees of authenticity. Use of this site implies acceptance of the Privacy & Cookies Policy. It is advisable to read this Policy, which may be revised or changed at any time. All changes will be posted on the website.

2. SOCIAL NETWORKS AND LINKS TO EXTERNAL WEBSITES

On our website you will find hyperlinks to third-party websites. We cannot control how these sites collect and process your data, and we cannot be held responsible for this collection and processing, nor for the accuracy, reliability or functionality of these sites. EPIC SURF SCHOOL is not responsible for the privacy policies or content of these sites.

3. PERSONAL DATA

Personal data is information relating to an identified or identifiable natural person. This information can be of any nature and be found in any medium, including sound and image. A person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identification number, or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity. This information may include IP address, browser type, domain, access times and referring website addresses. This information is used for the operation of the service in order to guarantee its quality and provide general statistics regarding the use of the EPIC SURF SCHOOL website. This collected data is automatically linked to personally identifiable information, such as name and email address. Your personal information is used only to ensure the relevance of our website content to your needs and interests, as well as to alert you to product updates, special offers, events and other relevant information that may be of interest to you. EPIC SURF SCHOOL assumes responsibility for protecting the privacy and data of all users. Personal data is not shared with third parties and is only used with the user’s consent for marketing campaigns or to deliver our newsletter.

4. COOKIES

Cookies are text files stored in your browser when you visit a website. These files are used by most websites to improve performance and user experience and only collect anonymous information, not allowing access to users’ computers or any personal information.

5. RESPONSIBLE FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA

EPIC SURF SCHOOL, also referred to as ESS, is the entity responsible for processing the personal data of users of the website www.epicsurfschool.pt or www.epicsurfschool.com. The user should carefully read this privacy policy and freely decide whether to provide their personal data to EPIC SURF SCHOOL before using the website. The user guarantees that they are of legal age and that the information provided is true, accurate, complete and up-to-date, being responsible for any discrepancies. If the data provided belongs to a third party, the user guarantees that they have informed that third party about the conditions set out in this document and that they have obtained their authorization to provide their data to EPIC SURF SCHOOL for the indicated purposes. Data of Epic Surf School (ESS) Unipessoal, Lda. Legal entity no. 509906028 Email: info@epicsurfschool.pt Telephone contact: 962769236

6. COLLECTION AND PROCESSING OF PERSONAL DATA

Personal Data: The personal information collected by EPIC SURF SCHOOL is voluntarily provided by users of our website, for example, when they fill out a form or subscribe to the newsletter. The data collected may vary depending on the situation and may include, among other things, the user’s name, email, address, or telephone number. Other Data: EPIC SURF SCHOOL also collects anonymous information when users visit the website. This information may include, for example, the type of device, operating system, and browsers used to access the website, geographic location, duration of the visit, and number of pages visited. However, it is not possible to link this data to individual users. We may also collect personal information from job applications (such as your CV, application form, and cover letter). When we send emails to registered customers, we may track who opened the emails and who clicked on any of the hyperlinks. We do this to measure the performance of our email campaigns and to improve our offers. If, in the future, recipients of such communications prefer not to receive them, they may do so using the “unsubscribe” feature provided in the communication itself.

7. How do we use this information?

EPIC SURF SCHOOL may process personal data for the following purposes:

  • To enter into contracts with you;
  • Sending you information that you have requested or that may be of interest to you based on your preferences;
  • Invite you to participate in training sessions or other events organized by EPIC SURF SCHOOL;
  • To communicate with you and answer your questions;
  • Continuously improve our products and services;
  • And for all other purposes that are directly related to our professional relationship, whether you are a client, a supplier, or another business partner.

Each time we collect personal data, we will inform you of its specific purpose in order to provide complete transparency about what we do with your personal data.

8. PERÍODO DE CONSERVAÇÃO DE DADOS PESSOAIS

A EPIC SURF SCHOOL manterá as suas informações durante o tempo que a sua conta estiver ativa ou enquanto for necessário para lhe fornecer serviços. Pode em qualquer altura alterar as suas informações pessoais ou cancelar o consentimento. Para questões relacionadas com privacidade e proteção de dados, por favor entre em contato através do email: info@epicsurfschool.pt Toda a informação recolhida será tratada exclusivamente pela EPIC SURF SCHOOL. Assim, comprometemo-nos a não vender, trocar, alugar ou partilhar com terceiros esses dados sem consentimento do utilizador, exceto se a tal estivermos obrigados e no estrito cumprimento de decisão judicial ou ordem de organismo competente dotado de autoridade. Podemos comunicar os seus dados pessoais a outras empresas EPIC SURF SCHOOL a fim de executar o contrato que celebrámos consigo ou para reunir informações ou documentação que nos solicitaram. Podemos também partilhar os seus dados com os prestadores de serviços, que apoiam o nosso negócio a fim de nos ajudar a fornecer os melhores produtos e serviços ou organizar eventos. Por exemplo, podemos usar um prestador de serviço para processar informações de pagamento, fornecer análises ou usar o software de terceiros para gerir o nosso sistema CRM. Quando usamos prestadores de serviços externos, o acesso aos seus dados é limitado ao estritamente necessário para que tal prestador de serviços possa executar tarefas em nosso nome. Esses prestadores de serviços estão proibidos de usar as suas informações pessoais para qualquer finalidade além de prestar essa assistência e estão contratualmente obrigados a proteger as informações pessoais divulgadas pela EPIC SURF SCHOOL e respeitar os princípios gerais de privacidade descritos nesta Política de Privacidade.

9. SECURITY

EPIC SURF SCHOOL has implemented internal security and privacy standards:

  • To process data lawfully and fairly, collecting only the information that is necessary and relevant to the purpose for which it is intended;
  • Do not use the collected data for a purpose incompatible with the purpose for which it was collected;
  • Ensure the explicit consent of the data subject whenever required;
  • To guarantee, free of charge, the right to have their data deleted when requested by the data subject;
  • Having security systems in place that prevent unauthorized access, modification, or destruction of data, and that allow for the detection of intentional or unintentional information leaks.

10. USER RIGHTS

In accordance with current legislation regarding the protection of personal data, we inform you that the following are guaranteed to the data subject:

  • Right to be informed, at the time of collection of personal data:
    • Contact details of the person responsible for treatment.
    • Regarding the purposes of treatment
    • Regarding the storage time limit
    • Your rights as holders of personal data
    • Regarding the possibility of appealing to the supervisory authority to file a complaint (and their contact details)
    • Regarding the (potential) existence of automated decisions and/or profiling.
    • Ask what information EPIC SURF SCHOOL has about them and why;
    • Knowing where your data is stored and how it is handled;
    • To be informed about how EPIC SURF SCHOOL fulfills its data protection obligations.
  • Right of access
    • Confirmation of whether or not your personal data is being processed;
    • Perguntar como obter acesso aos seus dados;
    • Providing a copy of the personal data processed, preferably in an exportable format.
  • Right to correct, delete and block
    • To be informed about how to keep them updated;
    • To obtain correction of outdated, incorrect, or incomplete data;
    • Possibility of deleting personal data that is no longer necessary for the purpose;
    • Block the processing of this data to verify accuracy or object to its processing.
  • Right to limitation
    • Contesting the accuracy of personal data, for a period that allows the controller to verify its accuracy.
  • Right to erasure/to be forgotten
    • Request the removal of your data and the permanent deletion of any data that does not conflict with legal obligations.
  • Right to Portability
    • Request the portability of your data;
    • The possibility of requesting your personal data in a commonly used format, in order to transfer it to another organization, even a competitor.

11. Data Protection Officer

To clarify any questions related to this Privacy and Cookies Policy, you can contact the Data Protection Officer by sending a letter addressed to the Data Protection Officer. In case of complaints or requests for information, you can contact the National Data Protection Commission – CNPD, the national supervisory authority in this context. Data subjects may exercise their rights using the forms available on the EPIC SURF SCHOOL website or, without using the forms, by emailing info@epicsurfschool.pt or by mail, sending a letter with the following information: Subject: Exercise of personal data protection rights To: EPIC SURF SCHOOL Av. do Brasil, 124, 4º – Dto, 1700-074 Lisboa

12. ALTERAÇÕES

To ensure that our Privacy Policy remains up-to-date with the latest legal requirements or any changes to our privacy management practices, we will need to amend this policy from time to time. When we make such changes, we may notify you, where necessary. A copy of the most recent version of this Privacy Policy will always be available on this page. Version 1.0 effective January 1, 2020