This information notice (hereinafter “Information Notice”) is provided pursuant to EU Regulation 679/2016 and subsequent national adaptation legislation (hereinafter, collectively “GDPR”) “) and describes how the company identified in the following paragraph collects and processes Personal Data (the term “Personal Data” shall mean all categories of data listed in section 3. below, taken together) of users or customers. This Policy applies to all activities of collection and subsequent processing of Personal Data – both online and offline – through the various channels, such as Renda’s websites, in particular www.renda.net (“Site”), apps, social networks, physical shops, and, more generally, all activities described in this Policy.
Renda Sas (hereinafter “Renda”) is the controller of Personal Data. Renda pays the utmost attention to the security and confidentiality of Personal Data processed in the performance of its activities. These activities include
– Management of e-commerce activities carried out through the Sites (management of the purchase of products and services from the virtual store and related activities);
– management of the Sites (e.g. management and development of the Sites and services for users, including the management and operation of cookies);
– management of Renda’s physical shops;
WHICH PERSONAL DATA ABOUT YOU MAY BE COLLECTED.
As part of the activities described above, Renda may collect the following categories of Personal Data about you:
– Contact Data – name, surname, address, telephone number, e-mail address and any other data that you voluntarily provide within the Sites to proceed with online orders and to register.
– Demographic Data and Interests – data describing your demographic characteristics or habits, such as date of birth, age or age range, gender, geographic origin (postcode/zip code), favourite products, hobbies and interests, and family or lifestyle information.
– Payment data – information about the purchase you have made and the related payment (e.g. credit/debit card number, IBAN). These data will be processed only as necessary in the case of periodic payments, and if you have not objected to the processing by changing your settings from “My Account” on the Sites, from the “Payment Methods” section saved for subsequent purchases.
– Data provided by third parties (e.g.: postal service companies, couriers, data entry companies) – all Personal Data that Renda receives from other sources to perform its services.
– Social Log-In – information relating to your Social Network account as well as other data you provide to the Social Network used to log-in to the Website, which may be disclosed according to the privacy preferences you have set on such Social Network.
As a general rule, Renda does not process Personal Data concerning personal beliefs, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health information, sex life or sexual orientation (hereinafter “Special Categories of Data”). If it is necessary to process Special Categories of Data, Renda undertakes to process such data in compliance with the applicable legislation. The legal basis for such processing is, as a rule, the fulfilment of a legal obligation, it being understood that Renda shall ask for your explicit consent if there is no concrete legal obligation to process such Data.
HOW WE COLLECT YOUR PERSONAL DATA.
Renda may collect and process your Personal Data, depending on their respective activities, in the following manner
– if you register on the Sites or if you register through apps, social networks or other websites owned or available to Renda;
– if you make online purchases or register for loyalty programmes or prize competitions;
– if you subscribe to the newsletter for the virtual shop or individual shops;
– if you contact Customer Service;
The Personal Data requested for registration on the Sites or identified with an asterisk in the forms relating to the various activities are necessary to allow registration, as are the data required to allow the use of the purchase and/or booking and/or online order functions or to provide the specific service requested. Unnecessary Personal Data are not identified with an asterisk in the various forms and may not be returned without any consequence.
WHAT PURPOSES MAY YOUR PERSONAL DATA BE USED FOR.
Renda may process your Personal Data for one or more of the purposes listed below and on the basis of the legal basis indicated from time to time.
A) Fulfillment of purchase orders placed through the Websites and activities related to the management of orders (e.g.: providing e-commerce services, customer service, sales and after-sales assistance, communication with the customer on the status of the order, receiving customer enquiries on purchased products, payment management, notifications, home delivery and/or collection by you at the agreed point of sale, etc.); as well as to ensure the proper fulfilment of legal obligations, including the regulations on prize competitions in case of your participation in them. Your Contact Data and Payment Data may be processed by Renda for the purpose of processing your purchase order placed by filling in the relevant form on the Websites.
The processing of personal data is subject to the execution of a contract to which you are a party and the fulfilment of legal obligations related to such contract. The provision of data is compulsory in order to process your order; otherwise, we will not be able to process it.
B) Registration on the Site, including through the Social Log-In system – to simplify registration operations using the information already provided to your Social Network.
Prerequisite for processing: fulfilment of contractual obligations, to allow you to register on the Site, it being understood that you are not obliged to use the Social Log-In to complete your registration.
C) Account management in case of registration to the Sites for the use of the relative services.
The use of the Sites does not require the creation of a personal account; however, in order to access certain pages reserved for registered users, you must create one and thus become a registered user. The Personal Data you provide may be processed by Renda for the management of your personal account on the Sites.
Precondition for processing: execution of pre-contractual measures requested by the data subject and execution of a contract to which the data subject is a party. The provision of data is mandatory for the creation and management of the account; otherwise, we will not be able to process it.
F) Statistical analysis, service improvement and protection of legitimate interests.
Renda may use your Personal Data, including your Personal Data relating to the use of the Site, your shopping habits and preferences, your geographic area of reference, your level of expenditure, active services and frequency of use, where possible in aggregate and anonymous form, for internal statistical research purposes and to improve the services offered, as well as for customer care and customer satisfaction activities, complaint management, administrative and accounting management, etc..
Prerequisite for processing: the legitimate interest of Renda.
Within the limits of the provisions of Article 21 of the GDPR, you have the right to object to the processing of personal data concerning you carried out by Renda in pursuit of its legitimate interest. The request to object should be addressed to the following address: email@example.com
Your Personal Data will not be used to profile you for commercial and marketing purposes, unless you have given your prior consent in accordance with the provisions of point E) above. Only in this case the described profiling activity may also be carried out for the purpose of sending you personalised commercial communications as referred to in point E) above.
G) Defence of rights in the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered.
Your Personal Data may be processed by Renda in order to defend your rights or to take action or make claims against you or third parties.
Prerequisite for processing: Renda’s legitimate interest in protecting its rights.
Renda uses appropriate security measures in order to improve the protection, security, integrity and accessibility of your Personal Data. All your Personal Data is stored on our secure servers (or appropriately stored hard copies) or those of our suppliers, and is accessible and usable according to our standards and security policies (or equivalent standards for our suppliers).
HOW LONG WE KEEP YOUR DATA
Renda retains your personal data only for as long as is necessary for the purposes for which it was collected or for any other related legitimate purpose. If your personal data is no longer needed, or if there is no longer a legal basis for its storage, it will be irreversibly anonymized or securely destroyed.
Below we list the retention times in relation to the different purposes listed above:
a. Fulfillment of purchase orders formulated through the Sites and activities related to the management of orders: for 10 years from the date of purchase in accordance with the ordinary contractual prescription.
b. Account management in case of registration to the Sites for the use of the relevant services: 3 years from the date of the last service provided to the user or, in case of inactivity, 3 years from your registration to the Sites.
c. Participation in and implementation of loyalty programs offered by Renda (e.g. cash-back) and/or agreements entered into with various entities (both public and private): 10 years from the date of use of the program or agreement by the user.
d. Marketing activities to provide promotional offers, including personalised offers: Personal Data processed for this purpose may be stored for 3 years from the date on which Renda obtained your last consent to receive commercial communications (unless you revoke your consent earlier). Where Personal Data is processed for marketing purposes, including personalised marketing, as part of a loyalty programme, Personal Data shall be stored for the entire duration of your participation in the loyalty programme (including any renewals, unless you have the right to object).
e. To defend your rights in the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered: for 10 years from the end of the proceedings with the final decision or the settlement and/or agreement reached.
WITH WHOM WE MAY SHARE YOUR PERSONAL DATA.
Your Personal Data may be accessed by external consultants and suppliers such as: cloud service providers, IT providers or hosting providers, tax and legal advisors, etc., who are appointed, where they do not act as independent data controllers, as data processors.
In addition, if requested, your Personal Data and information about the transactions carried out and other activities performed through the Sites may be made available to the authorities and to the judicial police in compliance with the procedural rules or to other State administrations if expressly requested.
The contact details of Renda are:
Renda sas, with registered office in Trapani (TP), Via G. B. Fardella, 80, postcode 91100, Tax code/VAT number: 01602840819, PEC address firstname.lastname@example.org.