Data protection

From 25 May 2018, the General Data Protection Regulation applies – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, which establishes the rules on the protection, processing and free movement of the personal data of natural persons and applies directly to all entities that process such data in any Member State of the European Union, namely Portugal.

The purpose of this communication is to make known to you the new rules applicable to the processing of your personal data and the rights you are entitled to, as well as to inform you of how you can manage, directly and simply, the respective consents.

Within the scope and for the purposes of the services we provide to you, RegySurf, insofar as it determines the means and purposes of processing, is the entity responsible for processing your personal data and for ensuring the protection of your privacy, acting in accordance with the law and the new Regulation.

Our records include data obtained throughout the contractual relationship you established with us and following the various interactions carried out with RegySurf.

If you wish to keep your data and the information that RegySurf has registered, you will not have to do anything.

In addition to the situations in which we process data to comply with legal requirements, we process your data for the following purposes:

• Provision of services - Whenever necessary, in order to provide you with our services, we process your personal data. In addition to this purpose, your data will also be processed for the provision of third-party services, where you have expressly consented to it.
• Marketing purposes - Your personal, traffic, profile and/or consumption data are likewise processed for marketing purposes or for the promotion of offers of goods or services of RegySurf, where you have authorized it. These communications are intended to inform you about news, promotions, campaigns and other opportunities you may benefit from.

RegySurf will retain your personal data for the period necessary for the provision of the services, the respective invoicing and compliance with legal obligations.

Your personal data may be communicated to RegySurf's service providers, for the purposes of providing the services, and to judicial, tax and regulatory authorities, for the purpose of complying with legal requirements.

At any time, through the RegySurf APP, you have the right to access your personal data, as well as, within the limits of the contract and of the Regulation, to change it, object to its processing, decide on its automated processing, withdraw your consent and exercise the other rights provided for by law (except for data that is indispensable for the provision of the services by RegySurf, and therefore mandatory to provide, or for compliance with legal obligations to which RegySurf is subject). If you withdraw your consent, this does not compromise the lawfulness of the processing carried out up to that date. You have the right to be notified, under the terms provided for in the Regulation, if a breach of your personal data occurs, and you may lodge complaints with the authority(ies).

We guarantee all the rights enshrined in the Regulation. To this end, from 25-05-2018 you can access your client area quickly, conveniently and securely through this application and there carry out any operation you wish, namely: add/change/delete your personal data; add/delete a photo on your public profile; export and download your personal data; export and download your data regarding your training history and attendance; make changes to your privacy preferences; make changes to the e-mails you wish to receive; cancel and permanently delete your account.

We are committed to the protection and confidentiality of your personal data. We have taken the technical and organizational measures necessary to comply with the Regulation, ensuring that the processing of your personal data is lawful, fair, transparent and limited to the authorized purposes. We have adopted the measures we consider appropriate to ensure the accuracy, integrity and confidentiality of your personal data, as well as all the other rights you are entitled to.