Privacy Policy

1. Introduction

Welcome to the website https://www.ran.com (hereinafter the “Website”).

RAN, part of the RAN Group, provides this Privacy Policy to inform Users about the collection and processing of their personal data when using the Website or its services (collectively, the “Services”).

In accordance with the General Data Protection Regulation (EU Regulation 2016/679 – “GDPR”) and applicable national laws (together, “Privacy Legislation”), this Privacy Policy explains what personal data is collected, why, how it’s processed, and the security measures in place.

2. Data Controller and Data Protection Officer

The Data Controller is RAN , with registered office at [Full Address], VAT no. [XXXXXXXXX].

You may contact the Data Controller at:
📧 Email: privacy@ran.com
📬 Mail: [Full Registered Address]

RAN has appointed a Data Protection Officer (DPO) who can be contacted at:
📧 Email: dpo@ran.com

3. Categories of Personal Data Processed
3.1. Browsing Data

When Users access the Website, systems may collect technical information such as IP addresses, browser type, access time, and page interaction. This is used for statistical and security purposes only.

3.2. Account & Service Data

To access certain features, Users may be asked to create an account or submit a form, providing:

  • Name

  • Email address

  • Date of birth

  • Payment and delivery information (for purchases)

  • Preferences or interactions (for personalized services)

If Users share third-party data, they must do so in compliance with Privacy Legislation.

4. Purposes of Processing and Legal Basis

Personal Data is processed for:

PurposeLegal Basis
(a) Account creation and managementContract fulfillment
(b) Handling inquiries (chat, form, email, phone, WhatsApp)Contract fulfillment
(c) Providing the Website’s services and updatesContract fulfillment
(d) Managing sales, delivery, returns, billingContract fulfillment
(e) Compliance with legal obligations (e.g., tax, AML, fraud prevention)Legal obligation
(f) Marketing communications (newsletter, promotions)User consent
(g) Profiling for marketing personalizationUser consent
(h) Targeted ads via cookies and social platformsUser consent (via cookie banner)
(i) Aggregated analytics and business intelligenceLegitimate interest
(j) Legal defense and dispute managementLegitimate interest
(k) Service quality monitoring and customer relationship managementContract fulfillment

Providing data for (a–e, j–k) is necessary for service access. Consent for (f–h) is optional and can be withdrawn at any time.

5. Data Retention
Data TypeRetention Period
Registered User dataAs long as the account is active + 10 years
Transaction and invoicing data10 years
Customer support dataUntil resolution of the request
Marketing & profiling data7 years (based on local DPA authorizations)
Data for analysis (i) and legal purposes (j)Retained as long as required to fulfill the purpose

Data will be securely destroyed or anonymized once it’s no longer necessary.

6. Data Processing Methods

Data is processed using secure electronic systems and, where required, paper formats. We enforce physical, technical, and administrative security measures to protect your data.

7. Data Sharing and Transfers
7.1 Internal Access and Third Parties

Personal Data is accessible only to authorized RAN staff and may be shared with:

  • IT and cloud service providers

  • Delivery and payment processors

  • Customer support services

  • Legal or government authorities where required by law

Third parties are appointed as Data Processors under Article 28 of GDPR.

RAN does not sell or share personal data for independent marketing purposes.

7.2 Transfers Outside the EEA

Data may be transferred outside the European Economic Area. These transfers are protected using:

  • Standard Contractual Clauses approved by the European Commission, or

  • Adequacy decisions by the Commission.

 
8. User Rights

You may exercise the following rights at any time:

  • Access: Confirm if we process your data and request a copy.

  • Rectification: Correct or update inaccurate data.

  • Withdraw Consent: Withdraw marketing/profiling consent at any time.

  • Erasure: Request deletion of personal data under specific circumstances.

  • Restriction: Temporarily halt processing in certain cases.

  • Portability: Receive data in a machine-readable format.

  • Object: Object to processing based on legitimate interests or for marketing.

  • No Automated Decisions: Request not to be subject to automated profiling.

You may contact us at:

You may also lodge a complaint with your Data Protection Authority.

9. Cookies

The Website uses:

  • Technical cookies (essential)

  • Analytics cookies

  • Profiling cookies (for personalized ads)

  • Social media integrations