Privacy policy

This privacy and personal data processing policy of RMART-GROUP LLC (the "Company"/"Operator"/"We") is drawn up in accordance with applicable personal data protection law and sets out how the personal data of visitors to rmartgrouptech.com (the "Users") who use the services, information and products of the website (the "Website") is processed and protected.

Confidentiality matters to the Company. The purpose of this Policy is to protect the rights and freedoms of individuals (personal data subjects) when the Company organises and/or performs the processing of their personal data, including the right to privacy and to personal and family secrecy.

This privacy and personal data processing policy (the "Policy") applies to all personal data of data subjects and to all information the Company may obtain about visitors to rmartgrouptech.com.

We have developed this Policy to describe how We process personal data, which includes any actions (operations) performed on personal data: collection, recording, systematisation, accumulation, storage, updating and amendment, retrieval, use, transfer (distribution, provision, access), blocking and destruction of personal data.

Relations connected with the processing of Website users' personal data are governed by this Policy, the Operator's internal regulations and applicable law.

Automated processing of personal data — processing of personal data by means of computer technology.

Blocking of personal data — a temporary suspension of processing (except where processing is needed to correct the data).

Website — the collection of graphic and informational materials, computer programs and databases that make them available on the internet at rmartgrouptech.com.

Personal data information system — the personal data contained in databases together with the information technologies and technical means that enable their processing.

Depersonalisation of personal data — actions after which it is impossible, without additional information, to attribute personal data to a specific User or other data subject.

Processing of personal data — any action (operation) or set of actions performed on personal data, with or without automation, including collection, recording, systematisation, accumulation, storage, updating and amendment, retrieval, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion and destruction.

Personal data — any information relating directly or indirectly to an identified or identifiable User of rmartgrouptech.com.

User — any visitor to rmartgrouptech.com.

Provision of personal data — actions aimed at disclosing personal data to a specific person or a defined group of persons.

Distribution of personal data — any actions aimed at disclosing personal data to an indefinite group of persons, including publication in mass media, placement in information and telecommunication networks or providing access to personal data in any other way.

Cross-border transfer of personal data — transfer of personal data to a foreign state authority, a foreign individual or a foreign legal entity.

Destruction of personal data — any actions after which personal data is irreversibly destroyed and cannot be restored in the personal data information system, and/or the physical media of the personal data are destroyed.

Personal data is processed on a lawful and fair basis.

Processing is limited to specific, predefined and legitimate purposes. Processing incompatible with the purposes of collection is not permitted.

Databases containing personal data processed for mutually incompatible purposes may not be merged.

Only personal data that corresponds to the purposes of processing is processed.

The content and volume of the personal data processed correspond to the stated purposes. Excessive processing relative to the stated purposes is not permitted.

When processing personal data, the Company ensures its accuracy, sufficiency and, where necessary, relevance to the purposes of processing. The Operator takes the necessary measures to delete or correct incomplete or inaccurate data.

Personal data is stored in a form that allows the data subject to be identified for no longer than the purposes of processing require, unless a longer retention period is established by law or by a contract to which the data subject is a party, beneficiary or guarantor. Processed personal data is destroyed or depersonalised once the purposes of processing are achieved or when those purposes no longer apply, unless otherwise provided by law.

The Policy applies to the processing of personal data collected through the Website in respect of the following categories of users:

Personal data is processed with the consent of the data subject. Users provide their data to the Operator freely, of their own will and in their own interest.

We may ask you for personal data whenever you contact the Company through the Website, including when placing an order, filling in forms (loyalty programmes, promotions, contests, etc.) or contacting the call centre. In each case you provide your data voluntarily and decide yourself how much information to share.

Depersonalised data of Website users collected by web analytics services is processed to gather information about user actions on the Website, improve the Website and its content, determine User preferences, carry out statistical and other research based on depersonalised data, and provide targeted information about the Company's products.

The purposes of processing the personal data of Website visitors and buyers of the Company's products and services are: providing access to the services, information and/or materials on the Website; promoting the Company's goods, works and services; preparing, concluding and performing contracts; and complying with consumer protection law.

For these purposes the following personal data is collected and processed: first name, patronymic and surname; phone number and email address; date of birth and gender; delivery address (where there is an order); order history and Website registration date.

The Company does not process special categories of personal data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, or intimate life.

The security of the personal data processed by the Company is ensured through the legal, organisational and technical measures required to comply in full with applicable personal data protection law.

The Company safeguards personal data and takes all possible measures to prevent access to it by unauthorised persons.

The Company does not disclose personal data to third parties or distribute it without the data subject's consent, unless otherwise provided by applicable law.

The Company may entrust the processing of personal data to another person with the data subject's consent, under a contract concluded with that person.

The Company may transfer personal data to third parties solely to fulfil the purposes of processing set out in this Policy. Such third parties may include courier services, postal operators, mobile network operators and other parties involved in performing sale contracts.

User data is processed using databases, with or without automated systems.

The personal data we collect allows us to send you notifications about new products, special offers and events. If you do not wish to be on our mailing list, you can unsubscribe at any time by informing us via the contact details on the Website.

From time to time we may use your personal data to send important notices about changes to our terms, conditions and policies, as well as updates on the progress of your orders. You cannot opt out of receiving such messages.

If you take part in a prize draw, contest or similar promotion, we reserve the right to use the personal data you provide to administer such programmes.

Automated data processing (cookies, information about user actions on the website, information about the user's device, session date and time) is carried out by the Company, including with the use of web analytics tools.

By using the website the visitor consents to the collection, analysis and use of cookies, including by third parties, for statistics and for optimising advertising messages.

If you do not want your data processed by analytics tools, you may stop using the Website at any time or disable cookies in your browser settings.

If we combine non-personal data with personal data, the combined information is treated as personal data for as long as it remains combined.

A user's personal data is destroyed:

Data of Users who provided their details to register a personal account on the Website is processed for 50 years from the date it was provided to the Company, or until the User withdraws consent or the User's access to the Website is terminated or restricted.

Data of Users related to the fulfilment of their orders is processed for 5 years from the moment the Company fully performs its obligations under the order.

Data of applicants for the Company's vacancies is processed until the purposes of processing are achieved (a decision on the application) or for no more than 3 years if the applicant is included in the Company's talent pool.

The Operator blocks personal data relating to a User at the request of the User or of the competent data protection authority for the period of a review, if inaccurate personal data or unlawful actions with it are identified.

We destroy data within the time limits established by law, and the destruction is documented in a destruction report.

The Company takes the necessary precautions — legal, organisational, administrative and technical — to protect your personal data in accordance with applicable personal data protection law, guarding it against unlawful or accidental access, destruction, alteration, blocking, copying, distribution and other unauthorised actions.

Given the nature of the internet, We cannot guarantee that third parties will not be able to circumvent the Company's security measures or use User data for improper purposes, as such actions may be beyond the Company's control. If such incidents occur, the Company will notify the competent authority within the time limits established by law and conduct an internal investigation.

When interacting with the Company you can easily keep your personal data and information up to date. We will store your personal data and information for as long as necessary to fulfil the purposes described in this Privacy Policy, except where a longer retention period is required by law.

To make sure your personal data is secure, we communicate confidentiality and security standards to the Company's employees and strictly enforce confidentiality measures within the Company.

If you have questions about the Company's Privacy Policy or the Company's data processing, you can contact us via the feedback contacts.

Users may send the Company any requests regarding the use of their personal data, including requests to amend, delete or destroy the data, by post or through the feedback form on the Website, providing enough details for the Company to identify them.

The Company undertakes to review and respond to a request regarding the Data, or to stop processing the User's Data, within 10 (ten) business days of receiving the request.

In all other matters not directly covered by this Privacy Policy, the Company is guided by the provisions of applicable personal data protection law.

The Company processes a User's personal data, with or without automation, only when the User submits it to the Company to create an account on the website or while using the Company's services. By filling in the relevant forms and/or submitting personal data on the Website, the User accepts the terms of this Policy and consents to the processing of their personal data.

When submitting a request through the Website's feedback forms, the User consents to the processing of their personal data by ticking the box confirming that the User accepts the terms of the Policy and consents to the processing of the personal data specified in the Policy.

The Company processes depersonalised data about the User where this is permitted by the User's browser settings (cookies and JavaScript enabled).

By providing personal information, the User confirms that it is provided voluntarily and knowingly, of their own will and in their own interest.

The User may at any time request from the Company information about the personal data the Company processes about them, and the Company undertakes to provide such information within a reasonable time.

The User may at any time request that the Company delete the personal data it processes about them, and the Company undertakes to fully delete the User's personal data within a reasonable time.

A Website visitor who provides their personal data and information thereby agrees to the provisions of this Privacy Policy.

The Company reserves the right to amend the Policy at any time at its own discretion in order to further improve protection against unauthorised access to the personal data provided by Users, without the User's consent. When we make significant changes to the Privacy Policy, a notice is posted on our website together with the updated version of the Privacy Policy.