Privacy Policy

SECRET BAYS LLC , with registered office at 1603 Capitol Ave Suite 413G-1652, Cheyenne, Wyoming, USA
VAT Number: (to be provided)
Email: info@secret-bays.com
Website: secret-bays.com
(hereinafter, the “Data Controller”)

hereby provides this Privacy Policy pursuant to Article 13 of Regulation (EU) 2016/679 of April 27, 2016 (the “GDPR” or “Applicable Law”) to users who browse and register on the website secret-bays.com (the “Website”) (the “Users”).

The Data Controller places the utmost importance on Users’ right to privacy and the protection of personal data.

For any information regarding this Privacy Policy, Users may contact the Data Controller at any time using the following methods:

  • By sending a registered letter to the Data Controller’s registered office
  • By sending an email to: info@secret-bays.com

PURPOSES OF DATA PROCESSING

Users’ personal data will be lawfully processed by the Data Controller pursuant to Article 6 of the GDPR for the following purposes:

  1. Website browsing
    To allow proper functioning of the Website, including the collection of technical data such as the User’s IP address.
  2. Newsletter subscription
    To send informational newsletters, subject to the User’s explicit request and consent.
  3. Contact requests
    To respond to inquiries submitted via the contact form. The following data may be collected:

    • First Name
    • Last Name
    • Email Address
    • Phone Number
    • Message content

    This information is used to respond to the User’s request as effectively as possible.

  4. Legal obligations
    To comply with obligations imposed by law, regulations, or European legislation.

Providing personal data for the above purposes is optional but necessary. Failure to provide such data may result in the inability to browse the Website, register, or access the services offered.

The legal basis for processing is:

  • For purposes 1, 2, and 3: the performance of services requested by the User (Article 6(1)(b) GDPR)
  • For purpose 4: compliance with a legal obligation (Article 6(1)(c) GDPR)

METHODS OF PROCESSING AND DATA RETENTION

The Data Controller processes personal data using both manual and electronic tools, in a manner strictly related to the purposes outlined above and in compliance with appropriate security measures.

Personal data will be retained for the time strictly necessary to fulfill the purposes described above, or as required to protect the legal interests of both the Users and the Data Controller.

With reference to newsletter subscriptions, data will be retained until the User withdraws consent, either by using the unsubscribe link included in communications or by exercising their rights as described below.

 

DATA SHARING AND DISCLOSURE

Users’ personal data may be accessed by employees and/or collaborators of the Data Controller who are authorized to manage the Website. These individuals are formally appointed as persons authorized to process data and will act in accordance with this Privacy Policy and Applicable Law.

Personal data may also be processed by third-party service providers acting as Data Processors , including but not limited to:

  • IT service providers
  • Hosting and cloud service providers
  • Professional advisors and consultants

Users have the right to request a list of appointed Data Processors by contacting the Data Controller.

 

DATA SUBJECT RIGHTS

Users may exercise their rights under the GDPR by contacting the Data Controller via:

Under Articles 15 and following of the GDPR, Users have the right to:

  • Access their personal data
  • Request rectification or erasure
  • Restrict or object to processing
  • Request data portability

If a User believes that the processing of their data violates the GDPR, they have the right to lodge a complaint with a supervisory authority in the EU Member State where they reside, work, or where the alleged infringement occurred.