Information on the use of cookies on CamperOnLine

Privacy Notice on the Processing of Personal Data pursuant to Arts. 13–14 EU Regulation 2016/679

Data Subjects: Visitors to the CamperOnline website.

Net Surfing Srl, acting as Data Controller pursuant to EU Regulation 2016/679 (hereinafter "GDPR"), hereby informs you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data, and that such processing will be carried out in accordance with the principles of fairness, lawfulness, transparency, and respect for your privacy and rights.

Your personal data will be processed in compliance with the legislative provisions of the above-mentioned regulation and the confidentiality obligations contained therein.

Purposes and legal basis of processing: in particular, your data will be used for the following purposes related to the performance of contractual or pre-contractual obligations:

• Website registration: allows you to create a personal account, participate in the Forum, and upload your travel diaries.

Your personal data may also, subject to your consent, be used for the following purposes:

• Subscription to Forum Extra;
• Newsletter subscription.

Providing your data for the above purposes is optional, and any refusal to consent to its processing will not affect the continuation of the relationship or the adequacy of the service provided.

Methods of processing. Your personal data may be processed in the following ways:

• By means of electronic computers using software systems managed or programmed directly by us.

All processing is carried out in accordance with the provisions of Arts. 6 and 32 of the GDPR and with the adoption of the appropriate security measures required therein.

Your data will be processed exclusively by personnel expressly authorised by the Data Controller, and in particular by the following categories of authorised staff:

• Netsurf staff members.

Disclosure: your data may be disclosed to external parties for the proper management of the relationship, and in particular to the following categories of recipients, including all duly appointed Data Processors:

• consultants and self-employed professionals, including in an associated capacity;
• web service providers responsible for managing and maintaining the platform.

Dissemination: your personal data will not be disseminated in any way.

Retention Period. In accordance with the principles of lawfulness, purpose limitation and data minimisation set out in Art. 5 of the GDPR, your personal data will be retained:

• Until withdrawal of consent;
• for a period not exceeding the duration of the services provided.

Cookie management: if you have any doubts or concerns about the use of cookies, you can always take action to prevent them from being set and read — for example by modifying the privacy settings in your browser to block certain types.

Since each browser — and often different versions of the same browser — can differ significantly, if you prefer to act independently through your browser preferences you can find detailed instructions in your browser's help guide. For an overview of how to proceed with the most common browsers, visit www.cookiepedia.co.uk.

Advertising companies also allow you to opt out of receiving targeted ads if you wish. This does not prevent cookies from being set, but stops certain data from being used and collected by those companies.

For more information and opt-out options, visit www.youronlinechoices.eu/.

Data Controller: the Data Controller, as defined by law, is Net Surfing Srl (Corso Vercelli 444, 10015 IVREA (TO), Italy, VAT No. IT 06953990014), reachable at: email info@netsurf.it, phone +39 0125 25 20 31.

You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, update, rectification, portability, and objection to the processing of personal data concerning you, and may generally exercise all rights provided for under Arts. 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

We work with Microsoft Clarity and Microsoft Advertising to capture information about how you use and interact with our website through behavioural metrics, heatmaps and session recording in order to improve and promote our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. We also use this information for site optimisation, security purposes and advertising. For more information on how Microsoft collects and uses your data, please visit the Microsoft Privacy Statement.

EU Regulation 2016/679: Arts. 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

1. The data subject has the right to obtain confirmation of whether or not personal data concerning them exists, even if not yet registered, to have it communicated in an intelligible form, and to lodge a complaint with the supervisory authority.

2. The data subject has the right to obtain information regarding:

1. the origin of the personal data;
2. the purposes and methods of processing;
3. the logic applied where processing is carried out with the aid of electronic tools;
4. the identification details of the Data Controller, Data Processors and any designated representative pursuant to Art. 5(2);
5. the parties or categories of parties to whom personal data may be communicated or who may become aware of it as designated representative in the territory of the state, as processors or authorised persons.

3. The data subject has the right to obtain:

1. the updating, rectification or, where of interest, the integration of data;
2. the erasure, anonymisation or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which it was collected or subsequently processed;
3. confirmation that the operations referred to in points (a) and (b) have been brought to the attention of those to whom the data was communicated or disclosed, including as regards their content, except where this proves impossible or involves a disproportionate effort relative to the protected right;
4. data portability.

4. The data subject has the right to object, in whole or in part:

1. on legitimate grounds, to the processing of personal data concerning them, even where it is relevant to the purpose of the collection;
2. to the processing of personal data concerning them for the purposes of sending advertising or direct sales material, or for carrying out market research or commercial communications.