The processing of personal data by RENA falls within the scope of the statutory exemption regulations. For this reason, the processing is not reported to the Dutch Data Protection Authority.
Types, purposes, legal bases and period of processing of personal data
The personal data are primarily processed if you conclude an agreement with RENA (as a customer, supplier or subscriber to our newsletter). If a customer or supplier wishes to make use of the services provided by RENA, a number of personal data are collected to enable RENA to contact you through MailChimp. These are your first name, last name and email address. Visitors can also subscribe to the newsletter. The registration form indicates what data are mandatory. These are your first name, last name and country of origin. The country of origin is used to address you in the correct language. The registration form also asks for your email address. RENA needs your e-mail address to keep you informed of news, products or services that may be of interest to you. These data are stored for as long you use our services and/or until you cancel your subscription. You can always change your details and unsubscribe from the newsletter at MailChimp.
The processing of your data is based on the following legal grounds: (I) Necessary for a legitimate interest, this includes achieving the marketing purposes of RENA. (II) Permission given by the visitor/customer for the use of the provided data.
If you do not want to share your personal data with RENA, it will not be able to provide you with its services. RENA may not be able to meet its contractual, statutory and mandatory obligations as a result. You will be responsible for any adverse consequences of the failure to provide the personal data in this case.
You can unsubscribe from the RENA newsletter by sending an e-mail to email@example.com or by changing your preferences at MailChimp using the link included in each newsletter.
Reference to other websites
Transfer to processors and third parties
Personal data are processed by companies that have been hired by RENA to implement the agreement. The GDPR calls these companies 'processors'. Examples are MailChimp or Google. The processors act under the responsibility of RENA.
Personal data will also be shared with third parties if RENA is required to disclose personal data to competent authorities based on a legal obligation.
RENA has taken suitable technical and organisational measures to secure your personal data against loss or unlawful processing. This website has an SSL certificate, which enables the transmission of data using a secure connection.
RENA has also taken security measures in respect of third parties. RENA has, for example, concluded a processing agreement with all third parties that process your personal data. The processing agreement sets out the purpose of the processing and the agreements on the level of the technical and organisational measures.
The personal data you share through MailChimp are stored on a server not located in the Netherlands but in the United States. This country is considered reliable.
Data of customers and suppliers are also stored in Canada. This country is also considered reliable and RENA has concluded an SLA with the hosting company.
Your privacy rights
Data that are no longer necessary will be deleted. You have a right of access, rectification, deletion or restriction of the processing of your personal data in accordance with the provisions of the General Data Protection Regulation. You can contact RENA at firstname.lastname@example.org in this context.
If you want to submit a complaint about RENA concerning the processing of your personal data, you can contact us by sending an e-mail to email@example.com.
You can also submit your complaint to the Dutch Data Protection Authority. You can find more information on how to do this at this link.