Information on Online Purchase and Account Registration

In implementation of EU regulation 2016/679 and current regulations we provide you with the following information relating to the processing and protection of your personal data.

Data Controller

RE S.p.a. viale E. Caldara, 40 – 20122 Milan VAT number 01782300154 reachable at no. 02 952430222 or by email at info@re-spa.com

Source of Personal Data

Personal data is collected directly from the interested party when completing this form for the purpose of purchasing the products offered, even without the need to create a specific account.

Purpose of the Processing

The personal identification data collected from the interested party, user of the site, constitute the object of the processing and are processed and used directly for the following purposes:

• a) Satisfy users’ purchase requests and register their personal account. Any incorrect or insufficient communication of the requested data may result in the total or partial impossibility of following up on the data subject requests.
  • Consent is not required for account registration.
  • Retention time: 10 years from registration.
• b) The stipulation and execution of the contract aimed at the purchase.
  • Consent is not required since these are contractual purposes.
  • Retention time: 10 years from purchase.
• c) For administrative/accounting purposes.
  • Purpose and retention time as required by law.
• d) Defensive purposes or debt collection.
  • Consent is not required for legitimate interest.
  • Retention time: 10 years from the last purchase.
• e) To send communications on future commercial and promotional initiatives.
  • Sending is subject to your express consent.
  • Data will be stored until the consent is revoked.

Recipients

The data collected will not be disclosed. They will be communicated to third parties to whom communication is necessary to carry out fiscal, administrative obligations, legal provisions or orders from the authorities.

Methods

The processing of your personal data will be consistent with the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be processed with the aid of current IT systems or paper support by specifically authorized personnel trained in confidentiality and the obligation to use the data only for the purposes identified by the Data Controller. The Data Controller will implement technical and organizational measures appropriate to the level of risk. Once the retention periods indicated above have expired, all data will be destroyed or made anonymous, compatibly with the technical cancellation and backup procedures.

Transfer of Data Outside the EU

The data of the interested party will not be transferred to non-European countries. If the Data were to be transferred to non-European countries or international organizations in the future, all the provisions of Chapter V (EU Regulation 2016/679) will be respected in order to ensure an adequate level of protection.

Rights of the Data Subjects

You have the right to ask the data controller for access to your personal data, rectification, cancellation of the same or possibly limitation of processing. You can always request a complete specification of the processing and your rights by writing to the contacts made available by the Data Controller and indicated at the beginning of the information.

Revocation of Consent

You can interrupt the processing (referred to in point e) Purpose of the processing) of this information at any time by writing your intentions to the Data Controller, without this however jeopardizing the operations carried out lawfully up to that moment.

Right to Complaint

If you believe that the processing concerning you violates the GDPR Regulation EU-2016/679, you have the right to lodge a complaint with the Guarantor Authority for the Protection of Personal Data through the contacts available on the website https://www.garanteprivacy.it/.