PRIVACY POLICY

Last Updated April 2024
PURSUANT TO THE ART. 13 OF REGULATION (EU) 679/2016 (“GDPR”)

1. WHO WE ARE

The company SOFYAN LIMITED with registered office in Amathus Avenue, 4532 Agios Tychonas, Limassol, Cyprus, Registration Number: HE 445193 (hereinafter “Sofyan” or the “Company”), in its capacity as data controller with regard to Personal Data (as defined below) collected on the adult website https://www.skokka.com.au (hereinafter also referred to as the “Website”), pays the utmost attention to the security and confidentiality of personal data in the performance of its activities.

This privacy policy may be subject to periodical amendments, additions or updates, also in consideration of possible changes in the applicable legislation, or measures of the Italian Data Protection Authority and/or the European Data Protection Board (“EDPB”). Substantial changes and updates to the privacy policy will be brought to the attention of those concerned by updating the link to the privacy policy in the footer of the Website.

We invite you to regularly read this policy in order to be aware of its latest version and to be informed at all times of how we process your Personal Data.

In the event of significant changes that affect your privacy-related rights as a registered User, we will inform you by e-mail with reasonable notice.

2. WHICH PERSONAL DATA MAY BE COLLECTED

The following categories of personal data relating to you, which you voluntarily provide, may be collected by the Company in the performance of its activities (the term “Personal Data” shall mean all the categories listed below, jointly considered):

  • Contact details: information about your name, surname, telephone number, email address, I.D. document; 
  • Purchase data: information about the purchase you have made;
  • Other personal data: information about your gender, age, photograph(s), as well as other data you may provide spontaneously while browsing the Website;
  • Special categories of personal data: information that may be related to your lifestyle and sexual behaviour;
  • Use of the website: IP address, User Agent and information acquired via cookies (see our Cookie Policy which regulates the details).

We also collect, use and share aggregated data such as statistical or demographic data which is not Personal Data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' usage data to calculate the percentage of users accessing a specific Site feature in order to analyse general trends in how users are interacting with our Site to help improve the Site and our service offering.

3. HOW WE COLLECT YOUR PERSONAL DATA

The Company collects and processes your Personal Data in the following circumstances:

  • If you visit and navigate the Website;
  • If you register to the Website in order to use all of its functions;
  • If you publish an advertisement on the Website or reply to an advertisement;
  • When carrying out support requests;
  • When verifying the minimum age requirements.

If you provide Personal Data on behalf of someone else, you must first ensure they have read this Privacy Policy and have provided consent.

We ask you to keep your Personal Data up to date and to inform us of any changes.

Please note that in the event that you contact a User of the Site, using the contact details provided by the latter, we shall not be responsible for the processing carried out by that User, the contacted user will in fact act as autonomous data controller.

4. WHAT PURPOSES CAN YOUR PERSONAL DATA BE USED FOR

The processing of personal data is carried out for the following purposes and is legitimised by the legal bases provided for in the applicable data protection legislation, as described below:

  1. Operational management and purposes strictly related to accessing, browsing and registering on the Website.

    The Company may process your Personal and Contact Data, Other Personal Data and Site Usage Data to enable you to access, browse and register with the Website as well as when carrying out support communication with requesting users.

    Legal basis of the processing: performance of a contract to which you are a party or of pre-contractual measures taken at your request.

    Providing your Personal Data for such purpose is mandatory in order to respond to your requests; failure thereof, would prevent the Company to process the requests.

  2. Publication of and possible response to advertisements.

    The Company may process your Contact details, in particular, your email address, to allow you to publish or reply to an advertisement.

    Legal basis of the processing: performance of a contract to which you are a party or of pre-contractual measures taken at your request.

    The provision of such data is necessary in order to access the site service; failure to provide such data will prevent you from accessing the functions of the Website, including the ability to publish or reply to an advertisement.

    The Company may also process for the same purpose your photograph, as well as Special categories of personal data to publish or reply to an advertisement.

    Legal basis for processing: consent, that will be asked to you both for the possible processing of your photograph and/or for the possible processing of your Special categories of personal data.

    Failure to provide consent will not prevent you from publishing or replying to an advertisement. Consent may be withdrawn at any time by sending an email at the following address privacy@skokka.com.au.

  3. Age Verification

    The Company may, also through external providers, process your personal and contact data and proceed with the verification of the minimum age requirements, either in an automated form, through a service of external providers, or through a manual verification, in the event that automatic verification is not possible.

    To this end, the Company may also process Special Categories of data and, in particular, biometric data, for the sole purpose of verifying minimum age requirements.

    Legal basis of the processing: consent. Such consent may be given for the processing of personal and contact data and for special categories of data, including biometric data.

    The provision of such data is optional; failure to provide such data will prevent you from accessing certain functions of the site, such as an advertisement. Your consent may be revoked at any time, with effect on subsequent processing, by writing to the e-mail address privacy@skokka.com.au.

  4. Fulfillment of orders formulated through the Website and activities related to the management of orders.

    The Company may process your Contact details and Payment Data to process your order.

    Legal basis for processing: performance of a contract and fulfilment of the legal obligations connected to such contract.

    The provision of such data is mandatory to process your order; otherwise, we will not be able to process it.

  5. Marketing purposes to meet your needs or to inform you of promotions.

    The Company may process your Personal Data for marketing and advertising purposes, to inform you of promotional sales initiatives via automated contact methods (email, SMS and other mass communication tools, etc.) and traditional contact methods (e.g. by telephone), or for market and statistical research, if you give us your consent and within the limits of such consent declaration.

    Legal basis for processing: consent. The consent is optional. Failure to provide consent will not have any contractual consequences.

    Consent may be withdrawn at any time by sending an email at the following address privacy@skokka.com.au.

  6. Market and statistical research to improve the service.

    The Company may process your Contact details to analyze and improve its services for better customer satisfaction.

    Legal basis for processing: legitimate interest of the Company in verifying and improving its services.

    Providing your Personal Data for such purpose is mandatory; failure thereof would prevent the Company from carrying out market and statistical researches to improve its services.

    However, you may object, at any time, to the processing of your Contact details for the above purpose. The request for objection can be made by sending an email at the following address privacy@skokka.com.au.

  7. Defend a right in the course of judicial, administrative or extra-judicial proceedings and in the context of disputes arising in connection with the services offered.

    The Company may process your Personal Data to defend its rights or act or even claim anything against you or any third party.

    Legal basis for processing: legitimate interest of the Company to defend its rights in court.

    You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out by the Controller in pursuit of its legitimate interests.

    Providing your Personal Data for such purpose is mandatory; failure thereof would prevent the Company from defending its rights.

  8. Purposes relating to obligations provided for by laws, regulations and European legislation, by provisions / requests for authorities entitled to do so by law and/or by supervisory and control bodies.

    The Company may process your Personal Data in order to comply with requests from Judicial Authorities and/or Supervisory Authorities, or to fulfil a legal obligation.

    Legal basis for processing: legal obligation.

    Providing your Personal Data for such purpose is mandatory; failure thereof would prevent the Company from complying with specific legal obligations.

5. HOW WE KEEP YOUR PERSONAL DATA SAFE

The Company uses a wide range of security measures to improve protection and maintain the security, integrity and accessibility of your Personal Data.

All your Personal Data are stored on our secure servers (or on secure paper copies or other durable storage means) or on those of our suppliers, and may be accessed and used based on our standards and our security policies (or equivalent standards for our suppliers).

6. HOW LONG DO WE STORE YOUR INFORMATION FOR

The Company will keep your Personal Data only for the time necessary to achieve the purposes for which they were collected or for any other related and lawful purpose.

Therefore, if Personal Data is processed for two different purposes, we will store such Personal Data until the processing purpose with the longest term ends; however, we will no longer process Personal Data for the purpose for which the retention period has expired.

We restrict access to your Personal Data only to those who need to use it for relevant purposes.

When your Personal Data are no longer required, or when there is no longer any legal basis for storing them, they will be irreversibly anonymized or securely destroyed.

The retention periods relating to the different purposes described above are indicated as follows:

  1. Purposes strictly related to accessing and browsing the Website, including registration to the Website and requests of support: Personal Data being processed for such purpose will be stored by the Company for the time strictly necessary to provide you access to the Website and in any case no later than 2 years after your last access to the Website. We keep the last 2 years-worth of server log files.
  2. Publication of and possible reply to advertisements: Personal Data being processed for such purpose will be stored by the Company no later than 1 year after the publication of the advertisement.
  3. Verification of minimum age requirements: the Personal Data processed for this purpose will be retained for 1 year after the deletion of the account.
  4. Fulfilments of orders formulated through the Website and activities related to order management: Personal Data processed to fulfil any contractual obligation may be stored for the entire duration of the contract, and following termination of the contractual relationship no later than the next 10 years.
  5. Marketing to meet your needs or to inform you of promotions: Personal Data being processed for such purpose will be stored by the Company for 2 years from the date of their collection for this purpose (except in the event that you previously withdrew your consent).
  6. Market and statistical research in order to improve the service: Personal Data being processed for such purpose will be stored by the Company for 2 years from their collection.
  7. Defend a right in the course of judicial, administrative or extra-judicial proceedings and in the context of disputes arising in connection with the services offered: Personal Data being processed for such purpose will be stored by the Company for the time strictly necessary to achieve such purpose.
  8. Purposes relating to obligations provided for by laws, regulations and European legislation, by provisions / requests for authorities entitled to do so by law and/or by supervisory and control bodies: Personal Data being processed for such purposes will be stored by the Company for the time strictly necessary to achieve such purposes.

7. WHO WE CAN SHARE YOUR PERSONAL DATA WITH

Your Personal Data may be accessed by duly authorised employees, as well as by external suppliers providing support for the provision of services, if any, designated as data processors, including all IT suppliers involved in the provision of the services offered by the Website, (including but not limited to those providing payment gateways for orders placed through the Site, providers of age verification services, etc.). Please contact us at the following email address: privacy@skokka.com.au if you wish to see the list of data processor and other entities we share data with.

8. TRANSFER OF PERSONAL DATA OUTSIDE AUSTRALIA

For the performance of processing operations, your Personal Data may be transferred to Countries outside of Australia, including but not limited to the European Economic Area. In such circumstances, the Company shall take appropriate safeguards to protect your Personal Data in accordance with Australian legal requirements as well as reasonable steps to ensure that such recipients protect your Personal Data.

9. CONTACTS

The contact details for the Company, in its capacity as data controller, are the following:  SOFYAN LIMITED with registered office in Amathus Avenue, 4532 Agios Tychonas, Limassol, Cyprus, Registration Number: HE 445193
privacy@skokka.com.au.

10. YOUR PERSONAL DATA PROTECTION RIGHTS AND YOUR RIGHT TO LODGE A COMPLAINT BEFORE THE SUPERVISORY AUTHORITIES

You have the right to:

  • Obtain confirmation of the existence or non-existence of Personal Data concerning you, obtain access to your Personal Data and obtain a copy thereof (Right of Access - Australian Privacy Principle 12);
  • In the event that the processing is carried out by automated means on the basis of consent or contract, to receive your Personal Data in a structured, commonly used and machine-readable format or to request its transmission to another controller without hindrance (Right of portability);
  • Obtain the rectification of Personal Data processed by us that is inaccurate or the integration of incomplete Personal Data (Right of rectification - Australian Privacy Principle 13);
  • Obtain the deletion of Personal Data processed by us if any of the grounds set forth in Art. 17 of the GDPR apply (Right to erasure);
  • Revoke your consent to the processing at any time if the processing is based on your consent, without prejudice to the lawfulness of the corresponding processing until the time of revocation (Right to revoke consent);
  • Request to limit the processing to certain Personal Data only, if one of the grounds set out in Art. 18 GDPR exists (Right to restrict processing);
  • Object in whole or in part to the processing of Personal Data relating to you (so-called Right of Objection).

Requests to exercise the above rights should be addressed to the following address: privacy@skokka.com.au.

The exercise of these rights is free and is not subject to any formal constraints. Should you exercise any of the aforementioned rights, it shall be the responsibility of the Company to verify that you are entitled to exercise them and to reply to you, as a rule, within one month.

In the event that you believe that the processing of your Personal Data is in violation of the provisions of the Australian Privacy Act, you have the right to lodge a complaint with the Office of the Australian Information Commissioner, whose contact information is available at www.oaic.gov.au.