Privacy Policy

1. Data controller

DNA Surf S.r.l., Via dello Sport 1, 00100 Roma RM — VAT IT00000000000
Email: privacy@dnasurf.it

2. Data we collect

• Purchase data: email, name, shipping/billing address, products purchased.
• Payment data: handled exclusively by Stripe (we do not store card data).
• Browsing data: IP, technical cookies, usage statistics via Google Analytics (in anonymized form).
• Communications: emails sent for support and order notifications.

3. Purposes and legal basis

• Performance of the contract — processing orders, shipments, refunds.
• Legal obligation — tax and accounting requirements.
• Legitimate interest — fraud prevention, site security.
• Consent — newsletter and promotional communications (revocable at any time).

4. Data recipients

Your data may be shared with: couriers for delivery, Stripe for payments, Resend for transactional emails, Google for Analytics. All recipients are appointed as data processors or act as independent data controllers.

5. Retention

Order data is retained for 10 years for tax obligations. Inactive account data is deleted after 3 years from the last login.

6. Your rights

You have the right to access, rectification, erasure, restriction, portability and objection to processing. You can exercise them by writing to privacy@dnasurf.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

7. Cookies

For details on the use of cookies, please see our Cookie Policy.