According to EU Regulation No. 679/2016 (“GDPR”) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

.

This information notice (hereinafter “Information Notice”) is provided pursuant to EU Regulation 679/2016 and subsequent national adaptation legislation (hereinafter, collectively “GDPR”) “) and describes how the company identified in the following paragraph collects and processes Personal Data (the term “Personal Data” shall mean all categories of data listed in section 3. below, taken together) of users or customers. This Policy applies to all activities of collection and subsequent processing of Personal Data – both online and offline – through the various channels, such as Renda’s websites, in particular www.renda.net (“Site”), apps, social networks, physical shops, and, more generally, all activities described in this Policy.

The Policy may be amended, supplemented or updated from time to time, also in consideration of any changes in the applicable legislation or measures of the Italian Data Protection Authority. Substantial amendments and updates to the Policy will be brought to the attention of data subjects as soon as they are adopted by updating the link to the Privacy Policy in the footer of the Website. Data subjects are encouraged to regularly consult this Policy for the latest updated version so that they are always aware of how their Personal Data is collected and used. In the event of changes that significantly affect the rights of the registered user, the latter will be informed by e-mail and the communication will be made with reasonable notice.

Renda Sas (hereinafter “Renda”) is the controller of Personal Data. Renda pays the utmost attention to the security and confidentiality of Personal Data processed in the performance of its activities. These activities include

– Management of e-commerce activities carried out through the Sites (management of the purchase of products and services from the virtual store and related activities);
– management of the Sites (e.g. management and development of the Sites and services for users, including the management and operation of cookies);
– management of Renda’s physical shops;

WHICH PERSONAL DATA ABOUT YOU MAY BE COLLECTED.

As part of the activities described above, Renda may collect the following categories of Personal Data about you:
Contact Data – name, surname, address, telephone number, e-mail address and any other data that you voluntarily provide within the Sites to proceed with online orders and to register.
Demographic Data and Interests – data describing your demographic characteristics or habits, such as date of birth, age or age range, gender, geographic origin (postcode/zip code), favourite products, hobbies and interests, and family or lifestyle information.
Payment data – information about the purchase you have made and the related payment (e.g. credit/debit card number, IBAN). These data will be processed only as necessary in the case of periodic payments, and if you have not objected to the processing by changing your settings from “My Account” on the Sites, from the “Payment Methods” section saved for subsequent purchases.
Web site usage – information on how you use the Sites, open or forward Renda communications, including information collected through cookies (you can find our cookie policy at the following address: Cookie Policy which governs the details);
Data provided by third parties (e.g.: postal service companies, couriers, data entry companies) – all Personal Data that Renda receives from other sources to perform its services.
Social Log-In – information relating to your Social Network account as well as other data you provide to the Social Network used to log-in to the Website, which may be disclosed according to the privacy preferences you have set on such Social Network.
As a general rule, Renda does not process Personal Data concerning personal beliefs, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health information, sex life or sexual orientation (hereinafter “Special Categories of Data”). If it is necessary to process Special Categories of Data, Renda undertakes to process such data in compliance with the applicable legislation. The legal basis for such processing is, as a rule, the fulfilment of a legal obligation, it being understood that Renda shall ask for your explicit consent if there is no concrete legal obligation to process such Data.

HOW WE COLLECT YOUR PERSONAL DATA.

Renda may collect and process your Personal Data, depending on their respective activities, in the following manner
– if you register on the Sites or if you register through apps, social networks or other websites owned or available to Renda;
– if you make online purchases or register for loyalty programmes or prize competitions;
– if you subscribe to the newsletter for the virtual shop or individual shops;
– if you contact Customer Service;

If you are providing Personal Data on behalf of someone else you should always make sure, in advance, that they have read this Privacy Policy and have given their consent where necessary. They ask you to help them keep your Personal Data up to date and inform them of any changes.

.

The Personal Data requested for registration on the Sites or identified with an asterisk in the forms relating to the various activities are necessary to allow registration, as are the data required to allow the use of the purchase and/or booking and/or online order functions or to provide the specific service requested. Unnecessary Personal Data are not identified with an asterisk in the various forms and may not be returned without any consequence.

WHAT PURPOSES MAY YOUR PERSONAL DATA BE USED FOR.

Renda may process your Personal Data for one or more of the purposes listed below and on the basis of the legal basis indicated from time to time.

A) Fulfillment of purchase orders placed through the Websites and activities related to the management of orders (e.g.: providing e-commerce services, customer service, sales and after-sales assistance, communication with the customer on the status of the order, receiving customer enquiries on purchased products, payment management, notifications, home delivery and/or collection by you at the agreed point of sale, etc.); as well as to ensure the proper fulfilment of legal obligations, including the regulations on prize competitions in case of your participation in them. Your Contact Data and Payment Data may be processed by Renda for the purpose of processing your purchase order placed by filling in the relevant form on the Websites.

The processing of personal data is subject to the execution of a contract to which you are a party and the fulfilment of legal obligations related to such contract. The provision of data is compulsory in order to process your order; otherwise, we will not be able to process it.

B) Registration on the Site, including through the Social Log-In system – to simplify registration operations using the information already provided to your Social Network.

Renda may process your Contact Information to allow you to complete the registration process on the Website and to allow you to access your Personal Area in order to: (i) download from your Personal Area documents relating to the services you have purchased; (ii) process other requests made through the Website. If you voluntarily decide to do so, registration on the Site may also take place using the Social Log-In mechanism. In this way you will not have to enter the data necessary for registration (such as Contact Data), which will instead be communicated by the Social Network through which the Log-In is carried out. It should be noted that in this case the Data Controller may process the Social Log-In data, i.e. not only those relating to your Social Account but also any other personal data that may be made visible according to the preferences you have set or according to the privacy policy of the Social Network itself. We therefore invite you to read the privacy policy of your Social Network, also for further information about these preferences.

Prerequisite for processing: fulfilment of contractual obligations, to allow you to register on the Site, it being understood that you are not obliged to use the Social Log-In to complete your registration.

C) Account management in case of registration to the Sites for the use of the relative services.

The use of the Sites does not require the creation of a personal account; however, in order to access certain pages reserved for registered users, you must create one and thus become a registered user. The Personal Data you provide may be processed by Renda for the management of your personal account on the Sites.

Precondition for processing: execution of pre-contractual measures requested by the data subject and execution of a contract to which the data subject is a party. The provision of data is mandatory for the creation and management of the account; otherwise, we will not be able to process it.

F) Statistical analysis, service improvement and protection of legitimate interests.

Renda may use your Personal Data, including your Personal Data relating to the use of the Site, your shopping habits and preferences, your geographic area of reference, your level of expenditure, active services and frequency of use, where possible in aggregate and anonymous form, for internal statistical research purposes and to improve the services offered, as well as for customer care and customer satisfaction activities, complaint management, administrative and accounting management, etc..

Prerequisite for processing: the legitimate interest of Renda.

Within the limits of the provisions of Article 21 of the GDPR, you have the right to object to the processing of personal data concerning you carried out by Renda in pursuit of its legitimate interest. The request to object should be addressed to the following address: info@renda.net

Your Personal Data will not be used to profile you for commercial and marketing purposes, unless you have given your prior consent in accordance with the provisions of point E) above. Only in this case the described profiling activity may also be carried out for the purpose of sending you personalised commercial communications as referred to in point E) above.

G) Defence of rights in the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered.

Your Personal Data may be processed by Renda in order to defend your rights or to take action or make claims against you or third parties.

Prerequisite for processing: Renda’s legitimate interest in protecting its rights.

Renda uses appropriate security measures in order to improve the protection, security, integrity and accessibility of your Personal Data. All your Personal Data is stored on our secure servers (or appropriately stored hard copies) or those of our suppliers, and is accessible and usable according to our standards and security policies (or equivalent standards for our suppliers).

HOW LONG WE KEEP YOUR DATA

Renda retains your personal data only for as long as is necessary for the purposes for which it was collected or for any other related legitimate purpose. If your personal data is no longer needed, or if there is no longer a legal basis for its storage, it will be irreversibly anonymized or securely destroyed.

Below we list the retention times in relation to the different purposes listed above:

a. Fulfillment of purchase orders formulated through the Sites and activities related to the management of orders: for 10 years from the date of purchase in accordance with the ordinary contractual prescription.
b. Account management in case of registration to the Sites for the use of the relevant services: 3 years from the date of the last service provided to the user or, in case of inactivity, 3 years from your registration to the Sites.
c. Participation in and implementation of loyalty programs offered by Renda (e.g. cash-back) and/or agreements entered into with various entities (both public and private): 10 years from the date of use of the program or agreement by the user.
d. Marketing activities to provide promotional offers, including personalised offers: Personal Data processed for this purpose may be stored for 3 years from the date on which Renda obtained your last consent to receive commercial communications (unless you revoke your consent earlier). Where Personal Data is processed for marketing purposes, including personalised marketing, as part of a loyalty programme, Personal Data shall be stored for the entire duration of your participation in the loyalty programme (including any renewals, unless you have the right to object).
e. To defend your rights in the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered: for 10 years from the end of the proceedings with the final decision or the settlement and/or agreement reached.

WITH WHOM WE MAY SHARE YOUR PERSONAL DATA.

Your Personal Data may be accessed by external consultants and suppliers such as: cloud service providers, IT providers or hosting providers, tax and legal advisors, etc., who are appointed, where they do not act as independent data controllers, as data processors.

In addition, if requested, your Personal Data and information about the transactions carried out and other activities performed through the Sites may be made available to the authorities and to the judicial police in compliance with the procedural rules or to other State administrations if expressly requested.

Contacts

The contact details of Renda are:

Renda sas, with registered office in Trapani (TP), Via G. B. Fardella, 80, postcode 91100, Tax code/VAT number: 01602840819, PEC address salumeria@pec.it.