GDPR Compliance

Ultima actualizare

Our GDPR Commitment

RENDA is committed to protecting the privacy and rights of individuals in the European Union and European Economic Area under the General Data Protection Regulation (GDPR).

Data Controller and Processor

When We Act as Controller

For data we collect directly (account information, usage data), RENDA Holdings acts as the data controller.

When We Act as Processor

For content you upload for processing, we act as a data processor on your behalf. You remain the controller of that data.

Legal Basis for Processing

We process personal data under the following legal bases:

Contract Performance

  • Providing the RENDA service
  • Processing your requests
  • Account management

Legitimate Interests

  • Improving our services
  • Security and fraud prevention
  • Analytics and service optimization

Consent

  • Marketing communications
  • Optional features and integrations
  • Cookies (non-essential)

Legal Obligation

  • Tax and accounting requirements
  • Responding to legal requests

Your Rights Under GDPR

Right of Access (Article 15)

Request a copy of your personal data and information about how we process it.

Right to Rectification (Article 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

Request deletion of your personal data ("right to be forgotten") when:

  • Data is no longer necessary
  • You withdraw consent
  • You object to processing
  • Data was unlawfully processed

Right to Restriction (Article 18)

Request limited processing of your data in certain circumstances.

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format.

Right to Object (Article 21)

Object to processing based on legitimate interests or for direct marketing.

Right Not to Be Subject to Automated Decisions (Article 22)

Not be subject to decisions based solely on automated processing with legal effects.

How to Exercise Your Rights

Submit a Request

  • Email: privacy@renda.ai
  • Subject: "GDPR Request - [Your Right]"
  • Include: Your name, email, and specific request

Verification

We may verify your identity before processing requests.

Response Time

We respond to requests within 30 days, extendable by 60 days for complex requests.

No Fee

Most requests are free. We may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Protection Officer

For GDPR-related inquiries:

International Transfers

When transferring data outside the EEA, we use:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions where applicable
  • Supplementary measures as needed

Sub-Processors

We use the following categories of sub-processors:

  • Cloud infrastructure providers
  • AI model providers
  • Analytics services
  • Payment processors

A list of specific sub-processors is available upon request.

Data Protection Impact Assessments

We conduct DPIAs for:

  • New processing activities with high risk
  • Large-scale processing of sensitive data
  • Systematic monitoring of individuals

Breach Notification

In case of a data breach:

  • We notify supervisory authorities within 72 hours
  • We notify affected individuals when required
  • We document all breaches and response actions

Children's Data

We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us immediately.

Cookie Compliance

See our Cookie Policy for information about:

  • Types of cookies used
  • How to manage cookie preferences
  • Third-party cookies

Updates to This Notice

We update this notice as needed. Check the "Last Updated" date for the latest version.

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority. For a list of EU DPAs, visit the European Data Protection Board website.

Contact Us

RENDA Holdings Email: privacy@renda.ai DPO: dpo@renda.ai