Subjects of the Treatment

The data controller pursuant to the laws in force is R.E.D srls. You can contact us in the here. 

Purpose of the processing and legal basis

Our website processes data mainly on the basis of user consent. This consent can take place through the banner placed at the bottom of the page, or through the use or consultation of the website. By consulting and using our website, visitors and users actually approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision. of a service.

We remind you that consent to the collection and processing of data is optional: you can deny consent or revoke it at any time (via the banner at the bottom of the page or the browser settings for cookies, or the Contact form). We remind you, however, that denying consent may make it impossible to provide some services and the browsing experience on the website could be compromised.

 The personal information (personal data) that we may collect about you serves three purposes:

1. Contractual and pre-contractual activity (requested by the user: purchase orders and registration of their user profile);
2. Marketing (promotional newsletters for news on products and services);
3. Profiling activities. 

1. Contractual and pre-contractual activity

When you want to buy one of our products through the website and manage the order, you will provide us with some of your personal information to allow the successful purchase.

For example:

Registration information: linked to creating an account on our Legend-Lore website. We will collect information about you, such as your name, address, telephone number, email address and the password you create.

This information will allow us to manage any order that you will place according to our Terms of Use, to identify you when you log into your account, to contact you for any after-sales service (also related to updates or changes on orders in progress).

 Information on transactions: related to the payment of your Orders. These payment transactions are contracted to our payment processors (like Stripe, a recognized worldwide provider). This means that we do not store your credit card information in our systems in any way. In transactions, we also obtain delivery information (the delivery address, which can also be your physical address) to complete any order.

This information will allow us to process your Order and issue an invoice, keep you updated on the status of the order, send information relating to the order to our forwarder, detect fraud attempts or other acts in violation of the general conditions or policies relating to the Services.

 Information related to the “Contact Us” form: here we collect your name and e-mail address, and obviously the content of your message to better respond to your questions or requests for information.

This information will allow us to respond to your requests for information and to improve our services.

For the processing of your data for the above points, your consent is not required as the processing is necessary for the execution of contractual or pre-contractual measures adopted according to your request, or to respond to legal obligations. See art. 6 paragraph 1, letter b) and c) of the GDPR).

 

2. Marketing

If it is of your interest you can subscribe to our newsletter. This implies that we will use your e-mail address to send you commercial promotions, news about our products and any other initiative.

You can always unsubscribe from our newsletter at any time by using the unsubscribe functionality in the communications you receive or by changing your profile.

For the processing of your data for the aforementioned marketing purposes, your consent is required, which will be requested by the owner as the legal basis of the processing (Article 6 paragraph 1 letter a) of the GDPR). We reiterate that the provision of your data for this purpose is optional and in case of non-acceptance the only consequence is the non-receipt of our newsletter.

3. Profiling activities

Profiling activity means any automated processing of personal data consisting in the use of such data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning professional performance, economic situation, personal preferences, the interests, reliability, location of said natural person (art.4 point 4) of the GDPR).

 Once you have accessed our Services, some of your personal data may be collected for the purpose of offering you targeted offers that may be of interest to you.

The data we can collect (and the means to do so) are as follows:

– information about your activities on our website: how you use our website, what you buy or visit, the content of your messages sent to our attention. This information is collected with the sole purpose of improving our services and website, and the offer of products for our customers.

Cookies and various: cookies (for more information you can view our Cookie Policy) are used to measure (and consequently analyze) the use and effectiveness of our Services, optimize and personalize advertising for our Services on other websites web and platforms.

Many websites and online services use cookies and other technologies to record your interaction with our Services, and are essential for storing your searches, shopping carts, and resubmitting them at the time of the Order.

 

Information we obtain from third parties.

If we receive your personal data from third party sources (such as advertising networks), we will only use it after verifying that the third parties have received your consent to process such personal data or have otherwise received legal permission or have a legal obligation to share your personal information with us. This information could include your likely demographic group.

This information could be collected through surveys or market research by third parties or even collected aggregate information managed by companies such as Facebook and Google.

The processing of your personal data for profiling activities must be based on your explicit consent (Article 22 paragraph 2 letter c) of the GDPR) as well as the communication of such data to third parties.

You can at any time obtain the details of all your data used for profiling (Article 15 of the GDPR) as well as your right to object at any time to the profiling carried out for direct marketing purposes by writing directly to the owner here.

 Who do we share personal information with?

Depending on the services rendered, your personal information may be shared with our Couriers (for the processing and delivery of your Order), to third parties who carry out activities for the promotion and support of our Services (some may also be located at outside your country of residence), any public security or regulatory body, government agency, judicial authority or other third party, if we believe disclosure is necessary (i) under applicable law or regulation, (ii) to exercise establish or defend our legal rights, or (iii) to protect your vital interests or those of other persons, any other person, provided that you have given your consent to the disclosure.

 We will not sell or distribute your personal information in any capacity, except with your prior consent or where required by law.

 

Safety

The security of your personal data is important to us.

The technical and organizational measures adopted by us are those that are appropriate and in line with industry standard technology, with the aim of protecting data from unauthorized access and from unlawful processing, accidental loss, destruction and damage.

We remind you that if you have chosen a password to access your account, it is your responsibility to keep it confidential. We advise you not to share your password with anyone and to use a unique password for our Services. We will not be liable for unauthorized transactions made using your name and password.

 

Data retention

The data are kept for the time strictly necessary to provide the service requested or required by law and subsequently deleted, except for further conservation obligations required by law.

The data collected for marketing purposes will be kept until the receipt of your opposition to the processing or withdrawal of consent. The data collected for profiling purposes will be kept until the contractual relationship between the parties is maintained.

 

Your data protection rights

The data owner respects the rights to confidentiality and data protection.

In particular, the owner provides you with the possibility to access, analyze and / or update your personal data at any time. This includes the deletion of this data, as explained above.

You can also object to the processing of your personal data, or limit its processing, or request its transfer to third parties.

You have the right to no longer receive marketing communications (such as the newsletter) at any time.

The withdrawal of your consent to the processing of your personal data does not affect the legality of the processing we conducted prior to your withdrawal, nor does it affect the processing of your personal information conducted in relation to other legitimate bases of processing other than consent.

To exercise all these rights mentioned above, you can contact us using the Contact form, without prejudice to the right to complain to a data protection supervisory authority regarding the collection and use of your personal information.

 

Links to third party sites

Our website may contain links to and from the websites of our partners and advertisers or to websites that may offer information that we believe useful to our customers and visitors. When we provide these links we do so only for convenience and the inclusion of these links does not imply endorsement of the relevant website by the Data Controller. If you access the link, and therefore to other websites, we remind you that these (and their reference companies) have their own privacy policies and that we will not be responsible for their policies or for the linked websites. We therefore advise you to check these policies before sending them personal information.

 

Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to continuing legal, technical or commercial developments. When we update our Privacy Policy, we take appropriate measures to inform you, in line with the importance of the changes we make. We will obtain your consent to any material changes to the Privacy Policy if required by applicable data protection laws.

 

Is there a Data Protection Officer (DPO)?

The Data Protection Officer (DPO) is RED srls, who can be contacted here.

Please read our Cookies Policy for further information on how we use your personal data.