Privacy Notice

In accordance with EU Regulation 2016/679 ("GDPR") and current Italian law, Twoside Srl, headquartered in via Dante Alighieri 130, 20099 Sesto San Giovanni (MI), P.IVA 12886450969, as the data controller ("Data Controller"), informs visitors and customers of the website www.zzsurf.com about the methods and purposes of the processing of personal data collected.

1. Data Controller

The Data Controller is Twoside Srl, with registered office in via Dante Alighieri 130, 20099 Sesto San Giovanni (MI). For any request or information regarding privacy please write to: info@twoside.it

2. Type of data collected

• Browsing data: information collected automatically, such as IP address, device data, browser and operating system used, date and time of access, pages visited.
• Data provided voluntarily by the user: first name, last name, email address, shipping address, contact information, payment information, information needed to complete purchases, register or receive newsletters.
• Cookie: the site uses technical cookies and, subject to consent, profiling and analytical cookies. For more details see the Cookie Policy.

3. Purpose and legal basis for processing

• Order management, purchasing and shipping;
• User account management and support requests;
• Fulfilling tax, accounting and regulatory obligations;
• Sending promotional communications and newsletters (subject to consent);
• Statistical analyses for the improvement of services offered;
• Fraud prevention and site security;

4. Methods of processing

Personal data are processed by computer and paper tools, taking appropriate security measures to protect the confidentiality and integrity of the same. The processing is carried out by personnel appointed by Twoside Srl and any third parties appointed as data processors.

5. Communication and dissemination of data

The data may be communicated to third parties for needs related to the provision of services (e.g. couriers, payment service providers, tax consultants), as well as to public authorities in fulfillment of legal obligations. The data will not be disseminated.

6. Transfer of data outside the EU

Where necessary for technical needs (e.g. use of cloud providers), some data may be transferred to countries outside the EU. In these cases, the transfer will take place in compliance with the guarantees provided by the current legislation.

7. Retention period

Personal data will be kept for the time strictly necessary for the purposes for which they are collected and in any case according to the terms provided by law (e.g. tax and accounting obligations).

8. Rights of the data subject

At any time, the user may exercise the rights provided by Articles 15-22 of the GDPR: access, rectification, deletion, restriction, opposition, data portability, withdrawal of consent. Requests should be sent to info@twoside.it.

9. Changes to this policy

Twoside Srl reserves the right to update this privacy policy at any time. Users are encouraged to check this page regularly for any changes.

Last update: July 2025