Microsoft Surface Pro 7+

INFORMATION OBLIGATION (Data Act)

As of September 12, 2025, the seller is obliged to inform how connected devices and related services process data. A Computer is a connected device (it connects to networks, the manufacturer’s services, and updates), and some functions are provided by related services (system apps and vendor tools).

Link: https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained (accessed: 2025-09-11)

WHAT DATA IS PROCESSED AND FOR WHAT PURPOSE

• Updates and security (Windows, Defender, driver/BIOS updates).
• Quality improvements and diagnostics (anonymous or identified usage data — depending on settings).
• Cloud features and synchronization (e.g., OneDrive, Microsoft account — only if the user enables them).

Link: https://www.microsoft.com/en-us/privacy/privacystatement (accessed: 2025-09-11)

SYSTEM: WINDOWS 11

Windows 11 processes diagnostic and security data necessary for the system to operate (updates, error detection, protection). The scope and transmission of data can be managed in Settings > Privacy & security (diagnostics, app permissions, activity history). Details: Microsoft Privacy Statement and privacy/diagnostics guides. Microsoft Defender (the built-in antivirus) analyzes files, processes, and network connections for protection — the scope of data and retention are described in Defender documentation.

Link: https://www.microsoft.com/en-us/privacy/privacystatement (accessed: 2025-09-11)
Link: https://learn.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization (accessed: 2025-09-11)
Link: https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-antivirus-windows (accessed: 2025-09-11)

WINDOWS DEFAULT APPS

Microsoft Edge, Microsoft Store, Notepad, Paint, system tools — run locally; some features (e.g., the store, profile sync, OneDrive) require an account and may process data in the cloud if the user enables them.

Link: https://www.microsoft.com/en-us/windows/comprehensive-security (accessed: 2025-09-11)

ADDITIONAL SOFTWARE (installed)

Mozilla Firefox — processes technical data and browser settings; advanced privacy options are built in.
Link: https://www.mozilla.org/pl/privacy/firefox/ (accessed: 2025-09-11)

Google Chrome — processing in line with Google’s Privacy Policy; see “Privacy in Chrome” in the Help Center for details.
Link: https://policies.google.com/privacy?hl=en-us (accessed: 2025-09-11)

Brave — privacy-focused browser; includes Safe Browsing with a local database of URL hash prefixes, tracker blocking, etc.
Link: https://brave.com/privacy/browser/ (accessed: 2025-09-11)

VLC — media player; runs locally. It can optionally connect to the internet to fetch cover art/metadata (can be disabled in Preferences — “Allow metadata network access / Privacy & Network Access”).
Link: https://www.videolan.org/vlc/privacy.html (accessed: 2025-09-11)

Codec pack — components for local audio/video decoding; no account/cloud.

LibreOffice — office suite; documents are processed locally (the program itself does not require an account). The privacy policy applies to TDF websites and services.
Link: https://www.libreoffice.org/about-us/privacy/privacy-policy-en/ (accessed: 2025-09-11)

System libraries: .NET Framework, Microsoft Visual C++ Redistributables — runtime components; they do not collect usage data as standalone services. (General Microsoft product privacy policy).
Link: https://www.microsoft.com/en-us/privacy/privacystatement (accessed: 2025-09-11)

Microsoft Defender — real-time protection; processes security signals (e.g., file metadata, hashes, process/network information).
Link: https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-antivirus-windows (accessed: 2025-09-11)

VENDOR SUPPORT APPS (installed to match the hardware brand)

HP – HP Support Assistant / HP Perform: automated support, updates, diagnostics. HP may collect device configuration, status, and performance data to tailor updates and resolve issues; the scope and legal bases are described in the HP Privacy Statement and data notices for modules (e.g., Perform).
Link: https://www.hp.com/us-en/ai-solutions/perform-faq-data-notice.html (accessed: 2025-09-11)
Link: HP Privacy Statement (PL, PDF) (accessed: 2025-09-11)
Link: https://www.hp.com/us-en/privacy/privacy-central.html (accessed: 2025-09-11)

Dell – SupportAssist: collects system information (configuration, status, logs) for proactive diagnostics and support; privacy settings are available in the app (Settings > Privacy and terms). Additional materials: Dell guides and security documents.
Link: https://www.dell.com/support/manuals/en-us/dell-supportassist-pcs-tablets/sahomepcs_ug/privacy-and-terms (accessed: 2025-09-11)
Link: https://www.dell.com/support/manuals/en-us/dell-supportassist-servers-v1.2/dsasug/data-collected-by-supportassist (accessed: 2025-09-11)
Link: SupportAssist Security White Paper (PDF) (accessed: 2025-09-11)

Lenovo – Lenovo Vantage / Commercial Vantage: may collect device identifiers, events, and app usage data and, if you enable location/network-based updates, information about Wi-Fi/VPN; it stores data on the PC and shares with Lenovo only with your consent (“opt-in”). Collection can be disabled in Vantage settings (“Help improve” / usage statistics).
Link: https://www.lenovo.com/pl/pl/privacy/ (accessed: 2025-09-11)

YOUR CHOICES AND CONTROLS [Windows]

Windows 11: Settings > Privacy & security — diagnostics, app permissions (camera, microphone, location), activity history.

Accounts/Cloud: signing in to manufacturer accounts (Microsoft/Google/etc.) is optional; not signing in limits the transfer of account data.
Link: https://www.microsoft.com/en-us/privacy/privacystatement (accessed: 2025-09-11)

Vendor apps (HP/Dell/Lenovo): you’ll find a Privacy section in the app; there you can limit or disable the sending of diagnostic data.

Browsers: in privacy settings you can disable sync, history, personalization, and cloud-based protection features (e.g., URL scanning).

VLC: if you don’t want metadata/cover art fetched from the internet, disable it in Preferences > Privacy & Network Access.

DATA PROCESSING INFORMATION – OFFICIAL SOURCES

Microsoft (Windows/Defender): https://www.microsoft.com/privacy/privacystatement
Windows – diagnostics/privacy (IT/admin): https://learn.microsoft.com/windows/privacy/configure-windows-diagnostic-data-in-your-organization
Mozilla Firefox – Privacy Notice: https://www.mozilla.org/privacy/firefox/
Google – Privacy Policy: https://policies.google.com/privacy
Chrome – Privacy in Chrome (Help): https://support.google.com/chrome/answer/14225066
Brave – Browser Privacy Policy: https://brave.com/privacy/browser/
LibreOffice – Privacy Policy (TDF): https://www.libreoffice.org/about-us/privacy/privacy-policy-en/
VLC – “Privacy & Network Access”: https://trac.videolan.org/vlc/ticket/9667
K-Lite Codec Pack – project site: https://codecguide.com/
HP – Privacy Statement: https://www.hp.com/us-en/privacy/privacy.html
HP Perform – FAQ/Data Notice: https://www.hp.com/us-en/ai-solutions/perform-faq-data-notice.html
Dell – SupportAssist (Privacy & terms): https://www.dell.com/support/manuals/en-us/dell-supportassist-pcs-tablets/sahomepcs_ug/privacy-and-terms
Dell – Privacy Center: https://www.dell.com/en-us/lp/privacy-center
Lenovo – Privacy Statement (Vantage): https://www.lenovo.com/us/en/privacy/

IMPORTANT PRACTICAL NOTES FOR THE BUYER

All preinstalled programs are current as of the date of sale.

Nothing requires an account or cloud sync until the user enables it (e.g., signing in to a Microsoft/Google account, enabling OneDrive, or telemetry in vendor apps).

From the system and within each app you can limit or disable data collection, in line with the links above.

ADDITIONAL LEGAL BASIS (Data Act)

The EU “Data Act” takes effect on 2025-09-12 and covers, among other things, transparency of data processing by products and related services. (See: European Commission page “Data Act explained”).
Link: https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained

ACCESS AND DATA PORTABILITY

You have the right to obtain a copy of the data generated while using the connected product/service and to request that it be transferred to a third party you designate. Providing data to the user is free of charge.

SCOPE OF DATA, FREQUENCY AND VOLUME

Data includes, among other things, system diagnostic and security signals, events from the manufacturer’s applications, and—if you enable them—cloud features and synchronization. Collection frequency and estimated volume depend on your settings (e.g., Windows diagnostic level, HP/Dell/Lenovo modules, browser sync). For example: security events are recorded in real time, usage statistics periodically.

DATA HOLDER AND REQUEST RECIPIENTS

The data holder is typically the hardware manufacturer or the provider of the related service (e.g., Microsoft for Windows/Defender, HP/Dell/Lenovo for support apps, the browser publisher). Submit access/portability requests directly to the relevant entity—see links to policies and settings in the section “DATA PROCESSING INFORMATION – OFFICIAL SOURCES”.

HOW TO SUBMIT A REQUEST

Submit your request via the privacy forms or contact channels indicated by the data holder (links in this document). The seller does not act as an intermediary; the user submits requests directly to the data holders.

HOW TO OBTAIN THE DATA YOURSELF — STEP BY STEP

1. Identify the data holders
   
   • system and security (e.g., Windows / Defender),
   • vendor support applications (e.g., HP/Dell/Lenovo),
   • browsers (Chrome/Edge/Firefox) and cloud accounts (e.g., Microsoft/Google),
   • other related services (e.g., sync, backups).
2. Gather identifiers needed for the request
   
   • account email address (Microsoft/Google/Firefox),
   • device model and serial number/Service Tag,
   • optional: device name in the OS, device ID in the vendor app, date range of interest.
3. File an access/portability request with each data holder
   

   Open the provider’s “Privacy” area (account dashboard or app settings) and choose data access/export or transfer to a third party. If there is no “export” button in the app, use the provider’s “Privacy/DSR” contact form.

4. Choose format and scope
   

   Request a common machine-readable format (e.g., JSON or CSV) and specify (excluding gatekeepers — DMA):

   • data categories (diagnostics, security events, vendor app data, service logs),
   • period (e.g., last 12 months),
   • frequency (real-time events, periodic logs — broken down if possible).
5. (Optional) Designate a third-party recipient
   

   Include: recipient’s name and contact details, legal/contractual basis (if required), and preferred transfer method (secure link, SFTP, encrypted package).

6. Verify identity and receive the package
   

   The provider may require additional verification (e.g., code sent by email/sign-in). After verification, you will receive a data package or a download notification.

7. Where to find it — example paths
   
   • Microsoft (Windows/Defender/M365): Account privacy dashboard → “Download your data” / “Manage your data”; in Windows: Settings → Privacy & security → Diagnostics & feedback → Diagnostic Data Viewer (view/export).
   • HP/Dell/Lenovo (support tools): Vendor app → Settings → Privacy/Diagnostics → export/request; if missing, use the vendor’s Privacy form and provide the serial/Service Tag.
   • Browsers & cloud:
     – Google/Chrome: account privacy centre (export history, activity and Chrome data),
     – Microsoft/Edge: account privacy dashboard (browser and service data),
     – Firefox: Firefox Account → privacy settings (sync data, bookmarks, history if synced).
8. Cost and timing
   

   Providing data to the user is free. Requests are handled without undue delay; track status in the privacy dashboard or by email.

EXCLUSIONS AND LIMITATIONS

Inferred or derivative content (e.g., audiovisual materials, highly enriched analyses) is out of scope; raw data generated by the product/service (e.g., diagnostic signals, events) remains in scope. Data obtained may not be used to create a competing connected product. In specific cases, the data holder may limit disclosure to protect trade secrets or meet product-safety requirements. The data holder is not obliged to share data with third parties established outside the EU. Refusal is allowed only if the data holder demonstrates a risk of serious economic harm to trade secrets or if disclosure would violate product-safety requirements set by law.

GDPR COMPLIANCE

Sharing personal data with another entity requires an appropriate legal basis (e.g., consent), especially when the requester is not the data subject. Co-created data may combine personal and non-personal elements; principles of minimization and security apply.

DISPUTES AND APPEALS

Disputes regarding data provision may be referred to certified dispute-resolution mechanisms (once designated in your country) or to the competent authority designated under the Data Act.

Date: 2025-09-12
Legal basis: Regulation (EU) 2023/2854 (“Data Act”)

GLOSSARY OF TERMS AND ACRONYMS

• EU — European Union.
• EC — European Commission.
• Data Act — Regulation (EU) 2023/2854.
• GDPR — General Data Protection Regulation (EU) 2016/679.
• DMA — Digital Markets Act; “gatekeepers” are platforms designated by the EC.
• DSR — Data Subject Request — request to exercise rights (e.g., access/export).
• JSON — JavaScript Object Notation — structured, machine-readable format.
• CSV — Comma-Separated Values — text format for tabular data.
• Export — transferring data to a file or to a third party.
• SFTP — Secure File Transfer Protocol — encrypted file-transfer protocol.
• URL — Uniform Resource Locator — internet address of a resource.
• VPN — Virtual Private Network — encrypted private network connection.
• Wi-Fi — wireless networking standard.
• BIOS/UEFI — motherboard firmware for boot and hardware configuration.
• M365 — Microsoft 365 — Microsoft services/apps (user account, cloud, etc.).
• Service Tag — device identifier (esp. Dell) used for support/servicing.
• Opt-in — explicit activation by the user (disabled by default until consent).

List of Laptop Safety Warnings – based on Regulation (EU) 2023/988 (GPSR)

Purpose: to provide clear, readable information on safe laptop use, foreseeable hazards, and ways to mitigate them.

1. Power and electric shock

• Plug the power adapter only into a working grounded outlet; do not use damaged extension cords or overloaded power strips.
• Do not touch the plug or power cord with wet hands; do not pull the cable.
• Avoid areas with high humidity (bathrooms, laundries, condensation).
• If you notice a burning smell, see smoke or sparking — immediately disconnect power and contact service.

2. Overheating and ventilation

• Ensure free airflow; leave at least 5 cm of clearance around intake/exhaust vents.
• Do not block the vents and do not use the laptop on soft surfaces (blankets, pillows).
• Regularly remove dust from ventilation openings (compressed air, gently).

3. Fire risk

• Use only original or compatible adapters/chargers with proper parameters (voltage, current, wattage, USB-PD profile).
• Do not leave the device powered on unattended near flammable materials.
• In case of fire, do not use water; use fire extinguishers for electrical equipment (class C) or lithium fire extinguishers if available.

4. Lithium-ion battery

• Protect the battery from impacts, crushing, punctures and strong shocks.
• If the battery swells, overheats, or emits an odor — stop using it, disconnect power; do not puncture or open the casing.
• Have replacements done by a service center; do not burn batteries and do not dispose of them with mixed waste.

5. Operating temperature and environment

• Use within a typical range of 5–35 °C (check your model specs); do not expose to direct sunlight, in a car, or on radiators.
• Avoid sudden temperature changes (condensation) — before switching on, allow the device to reach ambient temperature.

6. Liquids and moisture

• Do not use outdoors in the rain or in wet rooms.
• In case of spillage: immediately unplug the adapter, do not power on, contact service.

7. Stability and injury

• Use the laptop on a stable, flat surface; avoid edges and high shelves.
• Do not carry an open device by the screen; close the lid before transport.

8. Cleaning and maintenance

• Before cleaning, disconnect from power; use a soft, slightly damp cloth (no aggressive detergents; avoid alcohol on the screen — use LCD cleaners).
• Do not spray liquids directly onto the keyboard/vents — use a cloth.

9. Accessories and compatibility

• Use certified power supplies, docking stations and cables (USB-C/Thunderbolt) compliant with the manufacturer’s parameters.
• Improper accessories may cause overheating, electric shock or damage.

10. Ports and connections

• Do not insert metal objects into ports; do not force plugs at an angle.
• Disconnect peripherals according to instructions (e.g., “Safely remove hardware”).

11. Children and vulnerable persons

• Keep power cables out of children’s reach; do not leave small parts (screws, feet) in play areas.
• Children should not use the equipment without adult supervision.

12. Ergonomics and health

• Set the screen at eye level; take regular breaks (e.g., the 20-20-20 rule).
• Avoid prolonged contact of a hot chassis with skin (risk of low-temperature burns).
• When using headphones, avoid excessive volume.

13. Software and cybersecurity vs physical safety

• Install system/driver/BIOS updates only from trusted sources (Windows Update/manufacturer).
• Avoid unauthorized software interfering with power management or battery charging — it may cause overheating and failures.

14. Service, modifications and disassembly

• Do not open the enclosure while connected to power; entrust repairs to qualified service.
• Do not remove covers or tamper with the cooling system; improper assembly may lead to overheating.

15. Transport and storage

• Transport in a rigid bag with shock protection; power off and close the lid.
• Store in a dry place; storage temperature range as per the product sheet.

16. Disposal and recycling (WEEE / batteries)

• Electrical equipment marked with the crossed-out wheeled bin must not be disposed of with mixed waste — take it to a collection point (WEEE).
• Return used batteries/accumulators to dedicated points; do not remove batteries yourself if the model is not designed for it.

17. Emergency response

• Unusual chemical smell, smoke, squealing near the battery — disconnect power, move to a safe place, avoid touching with bare hands, contact service; in case of fire call 112.

18. Checking warnings and recalls

• Before use, check whether warnings or recall actions have been published for the model (Safety Gate / manufacturer notices).

Note: scope and parameters may vary by manufacturer/model. Always follow the manufacturer’s instructions.