Privacy Policy
The protection of privacy and personal data is a fundamental commitment of Surfing Figueira to data subjects who use our digital platforms. With the implementation of the new General Data Protection Regulation (GDPR) from 25 May 2018, our Privacy Policy complies with all the data protection principles and standards underpinning the GDPR. In this document, we aim to explain what personal data we collect, for what purposes we may use it, how we process it, with whom we share it, as well as how to contact us and exercise your rights.
General Data Protection Regulation
The new GDPR sets out the rules regarding the processing, by a person, a company or an organisation, of personal data relating to individuals in the European Union (EU).
The GDPR protects personal data regardless of the technology used to process that data; the protection is technology-neutral and applies to both automated and manual processing, provided the data is organised according to predefined criteria (for example, in alphabetical order). It is also irrelevant how the data is stored, whether in a computer system, via video surveillance, or on paper; in all these cases, personal data is subject to the protection requirements set out in the GDPR.
Who is the data controller?
Surfing Figueira is the data controller under the GDPR.
Data Protection Officer
Surfing Figueira has a Data Protection Officer (DPO) who (i) provides information and advises the data controller or processor on their obligations regarding privacy and data protection; (ii) monitors the compliance of data processing with applicable regulations; (iii) provides advice, when requested, regarding the data protection impact assessment and oversees its implementation; (iv) acts as a point of contact for data subjects to clarify issues relating to the processing of their data; and (v) acts as the point of contact for the supervisory authority (National Data Protection Commission – CNPD) on matters relating to processing, cooperating with this body. The Data Protection Officer can be contacted via email at escola@surfingfigueira.com.
Processing of personal data and scope
By providing their personal data to Surfing Figueira, the data subject consents to their data being processed in accordance with this Privacy Policy. The data collected via our website is processed automatically, and the information collected from the data subject is encrypted and managed using advanced security measures.
For what purposes is your personal data collected?
The data collected is used solely for administrative purposes relating to booking lessons and managing enquiries received via the website.
What security procedures ensure the protection of your data?
Surfing Figueira takes all necessary and legally required precautions to ensure the privacy of personal data processed and/or transmitted via its digital platforms. These precautions ensure the online and offline security of this information. Whenever sensitive information is collected or used, the data will, wherever possible, be encrypted using the SSL protocol. This technology, known as Secure Socket Layer, is used to improve the security of data transmission over the Internet, encrypting and protecting sensitive data and information using the HTTPS protocol. SSL guarantees to the data subject that the data will not be fraudulently intercepted and that all information is processed with the utmost security.
Do the website’s cookies collect personal data?
This website uses cookies in certain areas. Cookies are files that store information on the User’s hard drive or browser. Our cookies do not collect personal information and may only do so in the future with your consent. You can configure your browser to refuse cookies, but in that case, the website or parts of it may not function correctly. Cookies are used to monitor and analyse website usage, as well as to provide the best user experience.