Redis CO SRL , a Romanian legal entity, headquartered in Buftea, Str. Industriei, no. 2, Ilfov County, postal code 070000, registered with the Trade Register under no. J23/1867/2002, unique registration code/VAT code (RO)6640548, (“Redis” or “we”) send you this Information Notice to explain how we process and protect personal data.

PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH REGULATION (EU) 2016/679

The Privacy Policy describes the categories of your data that we process, the way and purposes in which we collect it, in which situations we transfer personal data and the various rights and options available to you in this regard. At the same time, our Privacy Policy details how we process personal data in managing the relationship with customers.

1. Data protection principles

• The collection of personal data will be done only for specified, explicit and legitimate purposes (presented in point 3).
• The data will not be processed by third parties in a manner incompatible with those purposes;
• In the event of updates to the transmitted data, the consent remains in force until you notify Redis of this;
• The processing of personal data will be done in a legal, fair and transparent manner;
• All personal data will be kept confidential and stored in a manner that ensures the necessary security;
• Personal data will not be distributed to third parties, unless this is necessary to achieve the purposes presented in point 3.;
• Data subjects have the right to request access to personal data, rectification and deletion thereof, opposition to or restriction of data processing, as well as the right to data portability.

2. Personal data and their collection

The data we collect may include the following:

• Personal data includes all types of direct or indirect information (i.e. used in connection with other data) relating to the natural person concerned, such as: name and surname, e-mail address, postal address, mobile or landline telephone number and other similar contact data necessary to contact you in order to process the orders placed or for any other objectives planned in relation to you;
• We collect login data to access the online store account www.redis.ro ;
• We collect data about your device and how you and your device interact with our products through Google Analytics;
• We collect data through Google Analytics about the features you use, the items you purchase from our web pages, and the pages you visit;
• We collect data through Google Analytics about the device and network you use to connect to our products, such as geographic location, language, and operating system. We do not collect information about software applications installed on your device or product keys.

IMPORTANT : ALL INFORMATION COLLECTED BY GOOGLE ANALYTICS THROUGH OUR SITES IS FOR STATISTICAL PURPOSES ONLY AND CANNOT BE LINKED TO ANY PARTICULAR PERSON. GOOGLE ANALYTICS MAY STORE INFORMATION RELATING TO IP, BUT THAT INFORMATION IS NOT AVAILABLE TO US. WE CAN ONLY SEE THE STATISTICAL DATA GENERATED.

3. Purpose of collecting personal data

• administration, improvement and provision of services provided by the website www.redis.ro
• any communication related to informing the individual regarding the validation, shipping and invoicing of orders, resolving cancellations or problems of any nature relating to an order, to goods purchased from the online store www.redis.ro;
• any communication related to informing the individual regarding the postal/courier shipment of samples, information materials, promotional materials;
• any communication to individuals in our database related to sending informative newsletters and/or periodic alerts, product news, feedback forms, or other company actions or activities, transmitted using the individual's electronic mail (e-mail, SMS);
• after-sales activities, including customer relations services, informing users/customers regarding the evaluation of the products/services offered (including the evaluation of services on the website www.redis.ro), improving the quality of customer support services, product replacements.
• compliance with legal obligations;

IMPORTANT : Also, where applicable or the situation requires it to achieve the purpose defined above (for example: shipping an order, processing an order with card payment, sending sample packages, information/promotional materials), Redis may provide personal data to other partner companies, but only on the basis of a confidentiality commitment from them, guaranteeing that this data is kept safe and that the provision of this personal information is made in accordance with the legislation in force, as follows: courier service providers, marketing service providers, payment/banking service providers, IT service providers, or other similar services. If you do not agree with the disclosure of personal data to these companies, please contact Redis at the email address gdpr@redis.ro

5. To whom do we disclose your personal data?

In order to achieve one or more of the purposes mentioned above, Redis may disclose your personal data to the following categories of recipients:

- Redis' contractual partners (such as the companies with which Redis has partnership relationships, but only on the basis of a confidentiality commitment from them, guaranteeing that this data is kept secure and that the provision of this personal information is made in accordance with the legislation in force),

- service providers (marketing, payment/banking services, courier/postal services or other services), including entities that assist Redis in data processing as processors, insurers, public authorities (Prosecutor's Office, Police, courts and other authorized state bodies), based on and within the limits of legal provisions and as a result of express requests, other companies in the same group as Redis as well as you as the data subject in the context of exercising your right of access.

The data recorded by Redis is not sold to third parties and is used only for the purpose of improving Redis services.

5. Use of personal data

• we will use personal data only for the purpose for which it was collected and we will store the data only as long as necessary for the purposes mentioned above (point 3);

6. Processing security

We will process data securely, we will apply and maintain appropriate technical measures to protect personal data against accidental or unlawful destruction or loss, alteration, disclosure or unauthorized access, in particular when the processing involves the transmission of data over a network, as well as against any other form of unlawful processing.

Questions related to personal data security can be sent to redis at the email address gdpr@redis.ro

7. Access and rectification or deletion of personal data

• you have the right to request at any time access to: rectification, portability, deletion or restriction of the processing of the collected data;
• to keep your personal data updated, we recommend that you inform us of any change or discrepancy;

The consent expressed will remain valid until withdrawn by you.

Once you have expressed your disagreement in writing, your personal data will no longer be processed and appropriate measures will be taken to delete any records containing your personal data.

Consent can be withdrawn at any time, free of charge, by accessing the UNSUBSCRIBE link in the footer of any email received from Redis or by directly sending your request in writing to gdpr@redis.ro .

To view or modify your personal data or to obtain information related to your personal data, as well as for any dissatisfaction related to the processing of your personal data, you can contact us using the email address gdpr@redis.ro.

We remind you of the rights granted by the General Data Protection Regulation 679/2016, including the right to information, access, rectification, not to be subject to a decision based solely on automated processing, and the right to erasure .

You can exercise any of these rights by email at gdpr@redis.ro or by sending us a signed and dated letter to Buftea, Str. Industriei, no. 2, Ilfov County, postal code 070000. We may ask you to prove your identity by sending us a copy of a valid ID document in order to comply with our security obligations and prevent unauthorized disclosure of data.

We will consider any requests or complaints we receive and will provide you with a timely response. If you are not satisfied with our response, you may submit your complaint to the National Supervisory Authority for Personal Data Processing – located at Bd. Gheorghe Magheru no. 28-30, Bucharest, Romania.

8. Updates to this privacy policy

We reserve the right to update and modify this Privacy Policy periodically to reflect any changes in the way we process your personal data or any changes in legal requirements.

***

Last updated: May 19, 2018.

We may update this Privacy Policy from time to time and will notify you of any changes by posting the new version on the website www.redis.ro. If you have provided us with your contact information and authorized us to contact you, we will notify you if we materially change this Privacy Policy.

Please review this Privacy Policy periodically for any changes. Redis assumes no responsibility for any incorrect recording of personal data caused by data indexing software.

We would like to point out that no information security program is infallible.