INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO REGULATION (EU) 2016/679 (“GDPR”)
- Website -

1. DATA CONTROLLER
Renaissance S.r.l. (the “Controller” or the “Company”)
Via dei 4 Martiri, 31 - Mugnano (NA) 80018, Italy
VAT number: 06738631214

E-mail address: info@renaissance-bta.com
Website: www.renaissance-bta.com (the “Site”)

2. PERSONAL DATA PROCESSED
- Personal data (name, surname, address of residence, tax code);
- Contact details (e-mail address and telephone number);
- Data relating to purchases made on the Site;
- Billing data and details of debit/credit cards used to make payments;
- Browsing data (also jointly referred to as the “Data”).

COLLECTION OF PERSONAL DATA
Browsing data

The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data, including IP addresses or domain names of computers used by users who connect to the Mesauda Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data are collected by means of cookies and metadata described in the Cookie Policy of the Mesauda Site and are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing.

The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

PURPOSE AND LEGAL BASIS OF THE PROCESSING
In some sections of the Site, in relation to specific services, some of the Data listed above are requested, which will be processed by the Company for the purposes and legal bases indicated below.

For the execution of pre-contractual measures and/or a contract to which you are a party:
for the purposes of registering a user on the site renaissance-bta.com (“Account”);
for the management and technical administration of the website;
to proceed with the purchase of Mesauda products;
to be able to use the services reserved for holders of a personal Account on the Site, such as participation in the loyalty program, viewing previous purchases, etc.;
to receive and correctly process requests for information and contact received (also through the live chat or the "my invitation" form).
On the basis of a legitimate interest of the Data Controller (soft spam pursuant to art. 130 paragraph 4 of Legislative Decree 196/2003 as updated by Legislative Decree 101/2018 - Personal Data Protection Code), for the promotion via email of services similar to those of sales, without prejudice to the possibility of objecting at any time.

Furthermore, subject to your prior consent, which is optional and revocable at any time, the personal data collected may be processed for additional purposes, and in particular for:

Marketing: to send you communications about initiatives, commercial offers, questionnaires and market research of the Data Controller through digital channels (for example via email);
Profiling: for the analysis of your preferences, habits, behaviors, interests inferred, for example, from online clicks on articles/sections of the Site, in order to send you personalized commercial communications or carry out targeted promotional actions.

In any case, your personal data may be processed, where necessary, also for the following purposes:

For the need to fulfill legal obligations, and in particular to fulfill obligations established by regulations and by applicable national and supranational legislation (tax, administrative obligations, etc.);
On the basis of a legitimate interest (legal protection), to ascertain, exercise or defend the rights of the Data Controller in court and/or out of court.

RETENTION PERIOD
For the entire duration of the contract and, after termination, for the ordinary limitation period of 10 years, for processing having as its legal basis the execution of pre-contractual measures and/or a contract to which the interested party is a party;
Until exercising your right to opt-out for the activity of promotion via email of services similar to those of sales, based on the legitimate interest of the Owner (soft spam);
For a duration of 24 and 12 months respectively from the date of collection of the interested party's consent for optional marketing and profiling processing;
For the duration provided by law (10 years for administrative-accounting obligations) for the processing of compliance with legal obligations;
In the case of conte

judicial proceeding, for the entire duration of the same, until the terms of practicability of appeal actions have expired, for the processing of judicial protection of the Data Controller on the basis of his legitimate interest.

The personal data in question, once the retention terms indicated above have expired, will be destroyed, deleted or made anonymous compatible with the technical deletion and backup procedures and with the accountability needs of the Data Controller.

MANDATORY NATURE OF DATA PROVISION
The provision of Data processed for the purposes of executing pre-contractual measures and/or a contract and fulfilling legal obligations is necessary for the stipulation of the various contractual relationships, the execution of orders and services requested and the fulfillment of legal obligations.

Therefore, any refusal by the interested party will make it impossible for the Data Controller to provide the requested service.

In relation to any optional processing, such as marketing and profiling, the provision of data is entirely optional and the interested party may express his or her right to opt-out at any time.

With regard to navigation data, see the Cookie Policy which can be accessed from the link in the sidebar at the bottom of the page.

DATA RECIPIENTS
The Data may be known and processed by employees of the company functions responsible for pursuing the purposes indicated above, who have been expressly authorized to process it and who have received adequate operating instructions.

Furthermore, the Data may be processed by external parties operating as independent controllers such as, for example, supervisory and control bodies, Public Authorities who make an express request for administrative or institutional purposes and in general all parties authorized by current national and European legislation to request such data.

The Data may also be processed, on behalf of the Company, by external parties who can be classified as data controllers (pursuant to art. 28 of the GDPR). Such entities, by way of example, may be:

companies that offer email sending services;
companies that perform the management and/or maintenance service of the Company's website;
companies that offer support in carrying out market research;
companies that offer services for the management of the information system and telecommunications networks, including email;
companies that offer services for the sending of documentation and/or material (post offices, freight forwarders, couriers, etc.);
banks for the management of collections and payments deriving from the execution of contracts.
The complete list of data controllers can be consulted upon request to be sent to the Data Controller using the contact details indicated in the following Paragraph 9.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
Your personal data will not be transferred outside the European Union.

Should this occur, in reference to the data collected using cookies, the Data Controller, to the extent of its competence, will adopt appropriate guarantees, including the adequacy decisions in force and the standard contractual clauses (Standard Contractual Clauses) adopted by the European Commission.

RIGHTS OF INTERESTED PARTIES
The interested parties may ask the Data Controller for access to the Data concerning them, their deletion, the rectification of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for, as well as opposition to processing, for reasons related to their particular situation, in the cases of legitimate interest of the Data Controller:

by contacting the Privacy Office, by post at the address Via dei 4 Martiri, 31 - Mugnano (NA) 80018, Italy, for the attention of the Privacy Representative; or by email to info@renaissance-bta.com
In addition, in the event that the processing is based on consent or on the contract and is carried out with automated tools, the interested parties have the right to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another owner without impediments (so-called right to portability).

Finally, the interested parties always have the right to withdraw their consent given for marketing and/or profiling purposes at any time (this, in any case, will not affect the lawfulness of the processing carried out on the basis of the consent given before the withdrawal) and to lodge a complaint with the competent Supervisory Authority in the Member State in which they habitually reside or work or in the State in which the alleged violation occurred.