PRIVACY POLICY

Navigation data — Web server systems automatically collect IP addresses, user agents, pages visited, request times and HTTP methods. This data is used solely to derive anonymous statistical information and to ensure the technical operation of the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: max 30 days.

Cookies and similar technologies — The site uses necessary technical cookies and, subject to your consent, analytics and marketing cookies. See the Cookie Policy for the full list.

Google Analytics (with consent only) — Subject to your consent, aggregated usage data is collected via Google Analytics 4 to improve the site. Legal basis: consent (Art. 6(1)(a) GDPR). Retention: 14 months.

Shop data (coming soon) — When the shop goes live, we will process contact, billing and payment data to fulfill orders. A specific notice will be provided at that time.

Data may be shared with:

• Hosting and CDN providers for technical operation of the site

• Google LLC (Google Analytics) — with consent — based in the USA, under Standard Contractual Clauses (SCCs) approved by the European Commission

No data is sold or shared with third parties for marketing purposes without consent.

Under Arts. 15–22 GDPR you have the right to:

• Access your data (Art. 15)

• Rectify inaccurate data (Art. 16)

• Request erasure (Art. 17)

• Restrict processing (Art. 18)

• Object to processing (Art. 21)

• Withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7)

• Lodge a complaint with the Italian Data Protection Authority: www.garante.gov.it

To exercise your rights, write to: sunrunclub@gmail.com