Another productive way to use this tool to begin a daily writing routine. One way is to generate a random paragraph with the intention to try to rewrite it while still keeping the original meaning. The purpose here is to just get the writing started so that when the writer goes onto their day's writing projects, words are already flowing from their fingers.

Specifications

(added "Data collected by the Sifly app")

I. INTRODUCTION

Welcome to https://sifly.global (hereinafter referred to as “Web site” or “Website”) which is operated by Sifly Ltd, a Bulgarian company, with UIC: 206523598, having its seat registered at: Sofia Municipality, Sofia, 15-17 Tintyava Street, Postal code: 1113, Republic of Bulgaria and email: hello@sifly.global.

BY USING THIS WEBSITE YOU AGREE TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL DATA IN COMPLIANCE WITH THIS PRIVACY POLICY.

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING THIS WEBSITE AND IF YOU HAVE ANY QUESTIONS ABOUT THIS PRIVACY POLICY, PLEASE CONTACT US AT: HELLO@SIFTY.GLOBAL. IF YOU DO NOT AGREE TO ANY OF THE CONDITIONS CONTAINED IN THIS PRIVACY POLICY, YOU SHOULD NOT USE THIS WEBSITE.

DATA CONTROLLER

Sifly Ltd (hereinafter referred to as “Controller”) is a Bulgarian company, with UIC: 206523598, having its seat and registered address at: Sofia Municipality, Sofia, 15-17 Tintyava Street, Postal code: 1113, Republic of Bulgaria, email: hello@sifly.global and website: https://sifly.global.

SUPERVISORY AUTHORITY

Commission for Personal Data Protection

Address: Republic of Bulgaria, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Telephone: +3592/91-53-518; +3592/ 91-53-515; +3592/91-53-519

Fax: +3592/91-53-525

Е-mail: kzld@cpdp.bg

Web-site: www.cpdp.bg

II. PURPOSE AND SCOPE OF THE PRIVACY POLICY

1.1 The Controller understands the privacy concerns of the visitors to this Website (hereinafter referred to as “individuals”) regarding the protection of personal data and is committed to protect their personal data by applying all the standards for protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”). With this Privacy Policy, the Controller respects the privacy of individuals and undertakes every effort to protect the personal data of individuals against unlawful processing by applying technical and organizational measures, which measures are entirely consistent with state-of-the-art technological developments and provide a level of protection that corresponds to the risks associated with the processing and the nature of the data that should be protected.

1.2  With this Privacy Policy and in compliance with the requirements of the GDPR, the Controller provides information on:

– the purpose and scope of this Privacy Policy;

– personal data collected and processed by the Controller;

– purposes of personal data processing;

– period for which the personal data will be stored;

– mandatory and voluntary nature of provision of personal data;

– processing of persona data;

– protection of personal data;

– recipients of personal data;

– rights of individuals;

– procedure to exercise the rights.

III. DEFINITIONS

2.1 For the purposes of the GDPR and this Privacy Policy, the following terms shall have the following meaning:

1. Personal data means any information relating to an identified or identifiable natural person (‘individual’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

2. Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

4. Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

5. Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

6. Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

7. Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

8. Third party means a natural or legal person, public authority, agency or body other than the individual, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

9. Consent of the individual means any freely given, specific, informed and unambiguous indication of the individuals’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

10.                Personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

IV. PRINCIPLES RELATING TO PROCESSING OF PERSONAL DATA

3.1 The Controller observes the following principles relating to processing of personal data:

–   The personal data are processed lawfully, fairly and in a transparent manner in relation to the individual (‘lawfulness, fairness and transparency’);

– The personal data are collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;

– The personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);

– The personal data are accurate and, where necessary, kept up to date (‘accuracy’);

– The personal data are kept in a form which permits identification of individuals for no longer than is necessary for the purposes for which the personal data are processed (‘storage limitation’);

– The personal data are processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).

V. PERSONAL DATA COLLECTED AND PROCESSED BY THE CONTROLLER

A. Processing of special categories of personal data (“sensitive data”)

4.1 The Controller does not collect and record special categories of personal data, such as: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. Individuals shall not provide such sensitive data to the Controller. If the individual negligently or intentionally provides sensitive data to the Controller, the Controller undertakes to immediately delete such data.

B. Personal data collected directly from individuals

Personal data collected directly from individuals when individuals contact the Controller using the contact form of the website

5.1 Individuals provide personal data to the Controller when they contact the Controller by sending a message using the contact form on the Controller’s website at: https://sifly.global/contacts. When the individual sends a message to the Controller using the contact form to contact the Controller, the Controller collects and processes the name of the individual, the e-mail address and the other information that the individual provides in the sent message, such as the address. These personal data are processed for the purpose of communication with the individual and record keeping. The processing of these personal data is necessary for actions preceding the conclusion of a contract and undertaken at the request of the individual, namely providing more information about the goods offered by the Controller in connection with a possible conclusion of a contract with the individual.

The Controller uses the services of an e-mail service provider to store received emails on a server that is located in Germany.

Personal data collected directly from individuals when individuals contact the Controller by e-mail

5.2 Individuals provide personal data to the Controller when they contact the Controller by sending an e-mail. The e-mail address of the Controller is specified in the Controller’s Identification Information in this Privacy Policy and in the “Contact us” menu where the contact details of the Controller are provided. When the individual sends an e-mail to the Controller, the Controller collects and processes the e-mail address of the individual and the other information that the individual provides in the sent message, such as the address. These personal data are processed for the purpose of communication with the individual and record keeping. The processing of these personal data is necessary for actions preceding the conclusion of a contract and undertaken at the request of the individual, namely providing more information about the goods offered by the Controller in connection with a possible conclusion of a contract with the individual.

The Controller uses the services of an e-mail service provider to store received emails on a server that is located in Germany.

Personal data collected directly from individuals when individuals contact the Controller by sending a message using the Facebook platform

5.3 Individuals provide personal data to the Controller when they contact the Controller by sending a message using the Facebook platform via the Facebook messaging service available through the Facebook controller page at:  https://www.facebook.com/SiFly-e-foils-109670004652131/ . When the individual sends a message to the Controller using the Facebook platform via the Facebook messaging service, the Controller collects and processes the individual's name, as well as the other information the individual provides in the sent message. This data is processed for the purpose of communication with the individual and record keeping. The processing of such personal data is necessary for the realization of the legitimate interests of the Controller, whose legitimate interests are to reply to the received messages, as well as to keep the received messages. The Controller uses the Facebook services, an independent US service provider, to receive messages via the Facebook platform. This means that the personal data provided will be stored on Facebook servers in the United States. For the transmission of such personal data outside the European Economic Area, appropriate safeguards should be provided in accordance with Article 46 of Regulation (EC) 2016/679. Facebook has its own Privacy Policy and individuals are advised to get acquainted with it in order to get more information. The Facebook Privacy Policy is posted at https://www.facebook.com/policy.php .

Personal data collected directly from individuals when individuals contact the Controller by sending a message using the Instagram platform

5.4 Individuals provide personal data to the Controller when they contact the Controller by sending a message using the Instagram platform via the Instagram messaging service available through the Instagram page of the Controller (https://www.instagram.com/sifly.global/). When the individual sends a message to the Controller using the Instagram platform via the Instagram messaging service, the Controller collects and processes the individual's name, as well as the other information the individual provides in the sent message. This data is processed for the purpose of communication with the individual and record keeping. The processing of such personal data is necessary for the realization of the legitimate interests of the Controller, whose legitimate interests are to reply to the received messages, as well as to keep the received messages. The administrator uses the Instagram services, an independent US service provider, to receive messages via the Instagram platform. This means that the personal data provided will be stored on Instagram servers in the United States. For the transmission of such personal data outside the European Economic Area, appropriate safeguards should be provided in accordance with Article 46 of Regulation (EC) 2016/679, and Instagram provides such safeguards and describes in detail in its Privacy Policy. The Instagram Privacy Policy is posted at https://help.instagram.com/519522125107875 .

Personal data collected directly from individuals when individuals register an account on the website or through the ” SiFly” smartphone app

5.5 Individuals provide personal data to the Controller when they register an account on the Controller's website or directly through the “SiFly” smartphone app. When making a registration, the individual provides the following personal data that the Controller collects and processes, namely: name and surname of the individual, e-mail address and the address. The collection and processing of these personal data is necessary:​​

- for the realization of the legitimate interests of the Controller, which legitimate interests are enabling the individual to maintain a registered account on the Controller's website.

- for concluding or executing a contract for the purchase of goods. The data of the individuals are stored on a server of a hosting provider and the server is located in Germany.

Personal data collected directly from individuals when individuals purchase goods from the website

5.6 Individuals provide personal data to the Controller when they purchase goods from the Controller's website. The individual provides the following personal data that the Controller collects and processes, namely: name and surname of the individual, e-mail address, telephone, address, Credit/Debit card information (for payment) and invoicing details. The collection and processing of this personal data is necessary: ​​

- for concluding or executing a contract for the purchase of goods;

- for fulfilling legal obligations for the purpose of issuing invoices.

The data of the individuals are stored on a server of a hosting provider and the server is located in Germany.

Personal data collected directly from individuals when individuals subscribe to a newsletter

5.7 Individuals provide their e-mail addresses when they want to subscribe for receiving of a newsletter. When the individual subscribes to receive newsletters containing publications and useful information about the goods offered by the Controller, promotional offers and the like, the Controller collects and processes the e-mail address of the individual. This data is processed for the purpose of sending of newsletters to the individual. The reason for processing of the provided personal data is the consent of the individual. The Controller uses the services of MailChimp, an independent US service provider, to send newsletters and manage the email list. This means that the provided e-mail addresses will be stored on the servers of MailChimp in the United States. For the transmission of such personal data outside the European Economic Area, appropriate safeguards should be provided in accordance with Article 46 of Regulation (EC) 2016/679. MailChimp has its own Privacy Policy and individuals are advised to get acquainted with it in order to get more information. MailChimp Privacy Policy is posted at https://mailchimp.com/legal/privacy/. Additionally, there is a contract between the Controller and Mailchimp.

C. Personal data collected from third parties

6.1 The Controller usually does not obtain personal data for individuals from third parties. However, in some cases, if the Controller has a reasonable grounds to suspect any individual of infringing Controller’s legal or intellectual property rights, then the Controller will obtain personal data of the suspected individual from public registers or private sources. This data may be processed for the purposes of investigating the infringement and taking legal actions against the infringement. The lawful grounds for processing of the personal data are the legitimate interests pursued by the Controller, which legitimate interests are investigating the infringement and taking legal actions against the infringement.

D. Data collected automatically

7.1 When an individual visits the Web site, the Controller automatically collects the following data, namely:

– The type of device from which the individual accesses the platform (for example, a computer, a mobile phone, a tablet, etc.);

- Internet Protocol (IP) address of the device from which the individual accesses the website (usually used to determine the country or city from which the individual accesses the website);

– Type of operating system;

– Type of the browser;

– Concrete actions undertaken, including the pages visited, frequency and duration of visits to the website;

– Date and time of visits.

E. Data collected by the “Sifly” smartphone apps

When an individual installs the “Sifly” on their iOS or Android device he can use the app offline without an user account or online - by logging in his personal account. The personal account can also be created from the app itself in the same way it is created on the website (described in section 5.5).. It also collects statistical data to improve the user experience such as:

   – The type of device from which the individual accesses the app;

   – Type  and version of the operating system;

   – Concrete actions undertaken, including the configuration of the eFoils in use, frequency and duration of visits to the app;

VI. USE OF COOKIES

8.1 Individuals can obtain more information about how the Controller uses cookies on the Cookies Policy which is published on the website of the Controller.

VII. PURPOSES OF PERSONAL DATA PROCESSING

9.1 The Controller collects and processes the personal data of individuals who are provided directly by them solely for the following purposes, namely:

– to provide the services that the Controller offers, namely the sale of goods and identify individuals (future and current clients);

– to contact the individual via e-mail in order to respond to the received inquiries;

– for the execution of obligations of a contract to which the individual to whom such data refer is a party, and for actions at the individual’s request and preceding the execution of a contract;

– for the execution of an obligation of the Controller, stipulated by law;

- for sending the goods purchased by the individual;

- for sending newsletters containing information about new products, discounts, etc. Newsletters are sent only after the Controller has received an explicit consent of the individual;

– accounting purposes;

– statistical purposes.

9.2 The Controller collects and processes the personal data of individuals who are automatically collected for the following purposes, namely:

– improving the efficiency and functionality of the website;

– preparing anonymous statistics on how the website has been used;

- providing better services;

- administering the website;

- adapting the website to the preferences of individuals.

The Controller may not use the personal data of individuals for purposes other than those specified in this section of this Privacy Policy.

VIII. PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED

A. Period for which the personal data will be stored

10.1 Inquiries and correspondence by email, Facebook, Instagram: The Controller stores the personal data and the communication received by e-mail and messages sent by Facebook and Instagram for a period necessary to answer to the received message and to satisfy individual’s request, as well as for one calendar year after the Controller has answered to the received message and satisfied individual’s request.

10.2 Personal data of individuals who have purchased goods: The Controller stores personal data of the individuals who have purchased goods for a period of ten years, which is the term stipulated by law for storing invoices for clients.

10.3 Newsletter mailing list: The Controller stores the personal data provided for newsletter subscription, which is the e-mail of the individual, until the individual remains subscribed for receiving of newsletters or until the Provider ceases sending newsletters, whichever of the two circumstances comes first.

B. Criteria for determining the period for which the personal data will be stored

10.4 In other situations, not specified above, the Controller will store the personal data of the individual for no longer than needed considering the following criteria, namely: - if the Controller is obliged by a legal norm to continue with the processing of the personal data of the individual; - if appropriate industry rules exist on the period for which the personal data shall be stored; - purpose for storing of the personal data both currently and in the future; - if the Controller and the individual have concluded an agreement and the Controller is obliged to continue to process the personal data in order to comply with the obligations under the agreement; - purposes for using of the personal data currently and in the future; - if it is necessary to contact the individual in the future; - if the Controller has any legal ground to continue to process the personal data of the individual; - any other sufficient grounds, like the character of the relationship with the individual.

IX. MANDATORY AND VOLUNTARY NATURE OF PROVISION OF PERSONAL DATA

11.1 The personal data required to be provided by the individuals are in accordance with the services offered by the Controller. The provision of personal data by individuals is voluntary. In the event that the individual refuses to provide the personal data:

– the Controller will not be able to deliver the goods purchased by the individual;

– the Controller will not receive the e-mail if the individual does not fill the necessary data in the contact form;

- The individual will not be able to create a profile on the website.

X. PROCESSING OF PERSONAL DATA

12.1 The Controller processes the personal data of individuals by means of a set of actions that can be performed by automatic or non-automatic means.

XI. PROTECTION OF PERSONAL DATA

13.1 The Controller undertakes the appropriate technical and organizational measures to protect the personal data against accidental or unlawful destruction, or against accidental loss, unauthorized access, alteration or dissemination, as well as against other unlawful forms of processing, including the following:

– using only secure and protected servers and folders for storing of the personal data;

– verifying and confirming the identification of the individual inquiring access to his/her personal data before granting access to such personal data;

- web based information systems have the prefix "https:" instead of "http:". In this way, your information is protected and unchanged and unread by third parties, and for this purpose the Controller uses an SSL certificate issued by one of the world's leading companies in the field of security and encryption of data transmitted over the Internet.

- the Controller never sends correspondence, including electronically, requiring a user name and password to access the individual's profile.

- the Controller provides individuals with a secure and encrypted connection when sending personal data;

- the Controller provides individuals with a secure and encrypted connection when logging into the profile of the website.

13.2 In case you would like to receive detailed information about the technical and organizational measures, please do not hesitate to contact us at hello@sifly.global .

XII.  RECIPIENTS OF PERSONAL DATA

14.1 The Controller has the right to disclose the personal data processed to the following categories of persons, namely:

·      to Individuals to whom the data relate when they exercise the right of access the personal data relating to him/her.

·       to state bodies if provided for in a legal act, for example state bodies (NRA, Patent Office, Commercial Register, etc.).

• to data processors providing services in favour of the Controller’s business activities, such as accounting service providers, hosting service providers, marketing services providers, website traffic analysis providers, which are subject to a confidentiality obligation, and they have provided sufficient assurance of enforcement appropriate technical and organizational measures in such a way that the processing proceeds in accordance with the requirements of the Regulation and ensures the protection of the rights of individuals.
• to courier companies for the purpose of delivery of the purchased goods.
• to providers providing electronic and banking payment services.

14.2 The Controller does not sell personal data provided by the individual to third parties.

XIII. RIGHTS OF INDIVIDUALS

Right of access by the individual:

15.1 The individual has the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed. If the Controller processes personal data of the individual the Controller shall provide a copy of the personal data undergoing processing.

Right to rectification:

15.2 The individual has the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the individual has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (‘right to be forgotten’):

15.3 The individual has the right to obtain from the Controller the erasure of personal data concerning him or her without undue delay and the Controller has the obligation to erase personal data without undue delay where one of the stated in article 17 of the GDPR grounds applies.

Right to restriction of processing:

15.4 The individual has the right to obtain from the Controller restriction of processing where one of the stated in article 18 of the GDPR grounds applies. If the processing has been restricted, such personal data shall, with the exception of storage, only be processed with the individual’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. The Controller informs the individual who has obtained restriction of processing before the restriction of processing is lifted.

Right to data portability:

15.5 The individual has the right to receive the personal data concerning him or her, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the Provided to which the personal data have been provided, if the processing is based on consent or on a contract.

Right to object:

15.6 The individual has the right to object on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. According to Article 21, Paragraph 4 of the GDPR the right to object shall be explicitly brought to the attention of the individual and shall be presented clearly and separately from any other information. For compliance of this obligation, more information about the right to object, can be found in the section below titled “Right to object to processing of personal data”.

Right of withdrawal of consent:

15.7 The individual has the right at any time to withdraw the consent he has given. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The order for withdrawal of the consent is specified in Section XIV of this privacy policy. The individual may either withdraw the given consent by choosing the "unsubscribe" option when receiving a newsletter.

Profiling rights:

15.8 The individual has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Right to be informed about the personal data breach:

15.9 The individual has the right to be informed without undue delay about the personal data breach when the personal data breach is likely to result in a high risk to the rights and freedoms of individual.

Right to judicial and administrative protection:

– Right to lodge a complaint with a supervisory authority

15.10 Without prejudice to any other administrative or judicial remedy, the individual has the right to lodge a complaint with the supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the individual considers that the processing of personal data relating to him or her infringes the GDPR.

– Right to an effective judicial remedy against a supervisory authority

15.11 Without prejudice to any other administrative or non-judicial remedy, the individual or legal person has the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them. Proceedings against a supervisory authority shall be brought before the courts of the Member State where the supervisory authority is established.

– Right to an effective judicial remedy against the Controller or processor

15.12 Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority, the individual has the right to an effective judicial remedy where he or she considers that his or her rights under the GDPR have been infringed as a result of the processing of his or her personal data in non-compliance with the GDPR. Proceedings against the Controller or a processor shall be brought before the courts of the Member State where the Controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the individual has his or her habitual residence.

Right to compensation and liability:

15.13 Individual who has suffered material or non-material damage as a result of an infringement of the GDPR has the right to receive compensation from the Controller or processor for the damage suffered. Court proceedings for exercising the right to receive compensation shall be brought before the courts of the Member State where the Controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the individual has his or her habitual residence.

XIV. PROCEDURE TO EXERCISE THE RIGHTS

16.1 The individual exercises his or her right to withdraw the given consent, right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object and profiling rights, by submitting a written request to the Controller (either by post at the address specified in the identification of the Controller above or by e-mail), which should contain the following information:

1. the name, address, and other data necessary for identifying the respective individual;

2. a description of the request;

3. signature, date of submission of the request and e-mail address.

16.2 The request shall be filed personally by the individual. The Controller keeps the requests filed by the individuals in a separate register.

16.3 When the individual exercises the right of access to the personal data relating to him or her the Controller shall verify the identity of the individual before responding to the request. This is necessary to minimize the risk of unauthorized access and identity theft. If the Controller cannot identify the individual from the collected information, then the Controller has the right to require a copy of individual’s documentation (such as ID card, driving license, other documents containing personal data that identify the individual) in order to verify the individual’s identity.

16.4 The Controller considers the request and provides the information on action taken on the request of the individual within two months of receipt of the request. This period may be extended by one further month where necessary, taking into account the complexity and number of the requests.

16.5 The Controller informs the individual of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the individual makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the individual.

16.6 In case the Controller does not take action on the request of the individual, the Controller informs the individual without delay and at the latest within one month of receipt of the request of the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

16.7 The Controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Controller informs the individual about those recipients if the individual requests it.

XV. RIGHT TO OBJECT TO PROCESSING OF PERSONAL DATA

17.1 The individual has the right to object on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. According to Article 21, Paragraph 4 of the GDPR the right to object shall be explicitly brought to the attention of the individual and shall be presented clearly and separately from any other information. For compliance of this obligation, more information about the right to object, will be provided in this section of the Privacy Policy.

17.2 The individual has the right to object on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller or processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual which require protection of personal data, in particular where the individual is a child, including profiling based on any of these provisions. The Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the individual or for the establishment, exercise or defense of legal claims. The individual can exercise this right by submitting a written request to the Controller, either by post at the address specified in the identification of the Controller above or by e-mail.

17.3 Where personal data are processed for direct marketing purposes, the individual has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the individual objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. The individual can exercise this right by submitting a written request to the Controller, either by post at the address specified in the identification of the Controller above or by e-mail requiring to stop sending him or her marketing information or by clicking the unsubscribe link contained at the bottom of the e-mail the Controller sends to the individual.

XVI. BUTTONS, TOOLS AND CONTENT FROM OTHER COMPANIES

18.1 The Website contains buttons, which connect to other third party websites such as „Facebook“ button, „YouTube” button, “Instagram” button, “App Store” button, “Google Play” button. All websites of such companies that can be accessed through this website are independent and the Controller assumes no responsibility for any damages and losses incurred as a result of the use of these sites. Individuals use these sites on their own responsibility and it is recommended that they familiarize themselves with the relevant Privacy Policy of the respective company for more information.

XVII. CHANGES TO THE PRIVACY POLICY

19.1 This Privacy Policy may be updated at any time in the future. When this happens, the revised Privacy Policy will be posted on this Website with a new “Last Updated” at the top of this Privacy Policy and will be in force from the date of publication. It is therefore advisable to periodically check this Privacy Policy to make sure that you are familiar with any changes. Using the Website after publishing the updated Privacy Policy, you will be deemed to agree with the changes made.

XVIII. CONTACTS

20.1 If you have additional questions about this Privacy Policy, please do not hesitate to contact the Controller at: hello@sifly.global.

SiFly Locations
Harnessing the basic principles of hydrofoil technology, SiFly’s eFoil offers an innovative way to experience surfing through the use of an electric propulsion system. The surfboards are designed for maximum efficiency and safety, yet every newcomer is encouraged to go through basic training, either through video tutorials or by visiting one of the many SiFly locations.

In which countries can we learn to eFoil?
SiFly has its main facilities in Turkey and Dubai, however, the company has partnered with many retailers and schools for watersports all throughout Europe and the Middle East. You can get the chance to learn to fly with a certified SiFly instructor in the UK, Cyprus, Italy, Spain, Greece, Portugal and others. Outside of Europe, SiFly also offers an opportunity for training at the Palm, Kite Beach and many other locations in Dubai and Abu Dhabi, United Arab Emirates. All of the SiFly Schools are easily accessible by car and offer the possibility to rent and try out eFoiling. Following a session, beginner efoilers should feel comfortable enough to fly on their own.

Where can we purchase electric hydrofoil surfboards?
The intuitive and easy-to-use SiFly website offers a partner map. Every location serves as a reseller for the SiFly eFoils. Detailed information and directions to a certified retailer near you can be found online. Orders from the online shop will ship throughout Europe, however, non-European clients should contact customer support to clear shipping arrangements. Water sports enthusiasts can also find useful video lessons and review a set of extensive information on SiFly’s products online.

How does SiFly make your life easier?
SiFly has created the perfect learning ecosystem through partnerships and a user-friendly website that encourages customers to learn, experiment and eFoil. The electric hydrofoil provides a way to experience watersports in a state of absolute freedom without any constraints in terms of surfing locations and water conditions. Exploring new places and charting your own course becomes even easier through the built-in GPRS locator, which records the route, speed and duration of every ride.

Even if you have never experienced surfing, SiFly’s large eFoil surfboards offer maximum stability and a low flying speed, both perfect for beginners. On the other hand, experienced surfers could reach up to 40 km/h on the smaller, more sporty boards. With the aim of popularising the sport, SiFly’s design guarantees that every user will find a board that will fit them perfectly.

Manage your profile - passwords, addresses, orders and more!