General information
The provided personal data will be the object of processing complying with the rules of GDPR UE 2016/679 Regulation, in particular in respect of the principles of need, transparency, legitimacy, honesty and proportionality of processing of personal data.

The Data Controller
The Data Controller of the data collected is the company Renner Italia S.p.A., with registered office in via Ronchi Inferiore, 34, 40061 Minerbio (BO), Vat no. 024333001209: Renner Italia autonomously decides on the purposes and methods of processing, as well as on the security procedures to be applied in order to guarantee confidentiality, integrity and availability of data. The up-to-date list of processing Responsibles and Operators is kept at Data Controller headquarter.

Object of the processing
The Data Controller processes personal, identifying and non-sensitive data (in particular name, surname, tax code, VAT number, email, telephone number – hereinafter, “personal data” or even “data”) provided by you during the purchase of Renner Italia Products and for the detailed purposes in art. number 4 of this Information sheet.

Method and duration of processing
The processing of your personal data is carried out by means of the operations indicated in art. 4 par. 2 of GDPR and in compliance with the principles of lawfulness, fairness and transparency and the other principles indicated in art. 5 of GDPR.
Personal Data will be processed by the Data Controller to pursue the service or contract purposes for the time required to fulfill processing purposes and however for not more than 10 years from the suspension of the relationship for service, contract, financial, accounting purposes.

Purposes of processing and legal basis of the processing, optional or mandatory nature of data provision and need of consent and consequences of missed consent; automatic decision processes.

The collected personal data will be manually processed and/or by means of technologic or telematic means for the following purposes:

For the previous purposes the data processing is necessary i) to execute the obligates of the contract with the Client and/or for potential pre-contract obligates chosen by him/her self; ii) to comply with a law obligate to which the Data Controller is subject to and, finally, iii) to pursuit the legitimate interest of the Data Controller, such as the controversy management, the customers’ satisfaction contro, for statistical purposes and customers’ management.
The conferment of your data for these purposes is mandatory and necessary to execute the contract; for this reason, the refusal of data conferment implies the impossibility to establish and execute the contract relationship.
We want you to note that, if you are already our client, we could send you commercial communications concerning services and products of the Data Controller alike the ones you already benefited from, unless your refusal in every moment.
The processing of Your data will not be in any way subject to profilation and/or automatic decisions.

Access and data transfer

Your data will be treated by means of technological and manual tools suitable to guarantee safety and secrecy and will not be spread. Your data could be made accessible and/or transferred for the purposes at point 4:
to employees and/or collaborators of the Data Controller, names Processing Operators
to third parties (for example: providers to manage and update Website, suppliers, lending institution, professional bureau etc.) which will do outsourcing works on behalf of the Data Controller, in their role of Responsibles of processing, as well as to the competent authorities (Prefecture, Police headquarter, Police, Carabinieri corps, Firefighters), public and/or private institutions for the law compliances.

The management and storage of personal data will take place on paper archives at the headquarters of the Data Controller and/or on servers located within the European Union owned by the Data Controller and/or by third-party companies appointed and duly appointed as Responsibles of processing. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller ensures from now on that the transfer will take place in accordance with the applicable legal provisions by stipulating, if necessary, agreements that ensure an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.

The rights of the interested part
You may exercise the rights set forth in Articles 15 to 22 GDPR, in particular the right to access, rectify or delete the data, to ask for the limitation or to oppose the processing, as well as the right to data portability.
Interested party have the right to lodge a complaint to the Guarantor Authority.

Contacts to exercise the rights of the interested part
You may exercise your rights under current legislation by sending a registered letter with return receipt to the Data Controller at its registered office or by accessing the page of Renner Italia’s website dedicated to privacy: http://www.renneritalia.com/en/trattamento-dati/
In case of violation of your data, considering what is foreseen in article 34 of GDPR, the Data Controller will communicate to you the violation.