Information regarding processing of personal data in Rimi Online store

We care about your privacy

Your trust is important to us. Our aim is that you feel safe when you share your personal data with us. Personal data is any information that can be used to identify an individual.

We take appropriate measures to ensure that your personal data always is safe with us and that the processing of your personal data is compliant with present data protection laws, our internal policies, guidelines and routines. We have also assigned a Data protection officer whose task is to monitor that we follow these laws, guidelines and routines.

It is important for us to be transparent with how we handle your personal data. In this information text, we therefore describe how and where we process personal data in the context of shopping in Rimi online store.

It is your responsibility to provide only valid and genuine personal data and only such data as are appropriate and necessary for the purpose of fulfilling the objectives mentioned in this information text. If you do not agree to the processing of personal data as described in this information than your online order will be not completed and information provided in profile form will not be saved in any of Rimi systems.

In accordance to Rimi online store terms and conditions our responsibility is to deliver your placed orders in the online store. To make it possible, we need to process your personal data.

Which categories of personal data do we collect and why

Creation and administration of your profile in Rimi online store

We process your personal data in order to provide you with the opportunity to create your personal profile in Rimi online store, so that you can use the information stored in the profile to place order in online store, to choose to receive information about Rimi online store new offers, to view your previous order history, save baskets, save your favorite products and see your usually bought products.

We process your personal data to administer your registration in Rimi online store. In order for us to register you and administer your profile, you must provide the personal details required for the conclusion and performance of the contract. Additionally to mandatory fields you will need to enter your birth date, in order for Rimi to validate, that you don’t have existing account already in Rimi system. Birth data will be used only to complete validation, it will not be stored. If you do not provide the necessary personal information, you will not be able to place order in Rimi online store. If you are unable to complete any of the required fields, you must contact Customer Service. Your data will be used to assemble and deliver order to you, contact you, respond to your requests, ensure that your information is accurate and up-to-date. For creation and administration of your profile in Rimi online store we process and store following data:

Categories of personal data

Legal basis

Retention period

Identity information, e.g., name, surname, username, customer ID etc.

Authentication information, e.g., information on electronic signature, a password, a secret question, a verification code etc.

Contact details, e.g., email, phone number, address etc.

Customer choice data, e.g., subscription to notifications, subscription to loyalty program clubs, set language settings etc.

Personal data collected from “My Rimi” loyalty program:

Identity information, e.g., name, surname, username, customer ID etc.

Contact details, e.g., email, phone number, address etc.

Demographic data, e.g., date of birth, gender, citizenship etc.

Membership information, e.g., date of becoming a member, status of customer, type of customer etc.

Household information, e.g., number of people in household, information about offspring's, animals in the household etc.

Purchase history, e.g., information about previously purchased products and amounts etc.

To sign contract with you and execute it

See section “For how long my personal data are stored?”

 

We use your name and surname, to identify and validate you at order delivery/collection, to find your order in case you contact customer service and report issues with your order, to process product returns, if you request it.

We use your phone number to contact you if any issues occur with your placed order and to contact you when delivering your order to your place, send PIN code for order collection. Your phone could also be used to search order or find your profile in our customer database.

We use your e-mail, to inform you about your order statuses (order confirmed, ready for delivery, delivered, cancelled, failed, waiting for pick-up after failed delivery, etc.), send PIN code for order collection, send new’s e-mails if you have selected it. Your e-mail could also be used to search order or find your profile in our customer database.

Alternatively, you can choose to use your “My Rimi” Loyalty program profile by logging in the Rimi online store and providing additional information in order to proceed with orders. For creation and administration of your profile in Rimi online store we will process and store only the same data from Loyalty program as prescribed in table above. Personal data collected from Loyalty program profile will only be used the same way as prescribed in above. Please remember that processing of your personal data within Loyalty program is still subject to privacy policy of “My Rimi” Loyalty program.

By logging in with your Loyalty program profile will enable you to receive benefits, that program offers through profiling:

  • Personal offers (also on your birthday, name day, kids name day and kids’ birthday, pet’s club offers);
  • Loyalty card offers;
  • Earn My Rimi money;
  • Earn Digital stickers.

By registering in Rimi online store you confirm that the data is accurate and correct and that you are at least 18 years of age. If personal data is inaccurate, you must correct it immediately.

Order creation for “Guest” customer

In order to place order in Rimi online store it is not mandatory to create profile. There is also possibility to check-out as guest user by providing personal data that is necessary to complete the order.

Personal data provided as “Guest user” will not be stored as profile in Rimi customer database. But it will be saved and processed with the order and order related documents (for example, Invoice, Credit note):

Categories of personal data

Legal basis

Retention period

Identity information, e.g., name, surname, username, customer ID etc.

Contact details, e.g., email, phone number, address etc.

To sign contract with you and execute it

See section “For how long my personal data are stored?”

 

We use your name and surname, to identify and validate you at order delivery/collection.

We use your phone number to contact you if any issues occur with your placed order and to contact you when delivering your order to your place, send PIN code for order collection. Your phone could also be used to search order or find your profile in our customer database.

We use your e-mail, to inform you about your order statuses (order confirmed, ready for delivery, delivered, cancelled, failed, waiting for pick-up after failed delivery, etc.), send PIN code for order collection. Your e-mail could also be used to search order or find your profile in our customer database.

By placing order as guest user in Rimi online store you confirm that the data is accurate and correct and that you are at least 18 years of age. If personal data is inaccurate, you must correct it immediately.

To assemble and deliver order

Rimi online store must assemble the order with items that you have ordered, therefore order contents are processed both by systems and by Rimi employees.

If you choose Home Delivery:

If you choose during placing order Home Delivery as your preferred delivery method, you must enter address to which order should be delivered.

If you are registered user and have signed-in, then this address will be saved under your profile. If you wish to delete or add new address to your profile, you can do it by entering your profile section in Rimi Online store or by contacting Rimi customer service and request it to be removed. You can also select if you would like this address to be “Default” and show-up always as your first choice.

If you are “Guest” user, then your address will not be saved in Rimi customer database, but will be saved with your placed order and used in the same way as in case of registered user.

If you choose during placing order Click&Collect as your preferred delivery method, you must select store in which you would like to collect the order. This information will be stored only with the order. You can also select if you would like this store to be your “Favorite” and it will show-up always as your first choice.

To assemble order and deliver it to you following personal data will be processed:

Categories of personal data

Legal basis

Retention period

To assemble order:

Order details, e.g., order ID, ordered items, product prices, delivery method etc.

To deliver order to Home address:

Identity information, e.g., name, surname, username, customer ID etc.

Order details, e.g., order ID, ordered items, product prices, delivery method etc.

Delivery details, e.g., delivery date and time, delivery address, comments etc.

To deliver order at Click&Collect station:

Identity information, e.g., name, surname, username, customer ID etc.

Order details, e.g., order ID, ordered items, product prices, delivery method etc.

Delivery details, e.g., delivery date and time, delivery address, comments etc.

To execute contract

See section “For how long my personal data are stored?”

 

Order details are used to enable Rimi employees to pick in bags your order.

Listed data to deliver order to Home address are used to execute contract and deliver your order by Rimi couriers to address you have selected.

Listed data for delivering order to Click&Collect store are used to hand-out your order when you arrive at Click&Collect store.

All the data mentioned above is also used to inform you about the order statuses via your e-mail and generate Invoice and Credit Note (Order confirmed, ready for delivery, delivered, canceled, failed, ready for pick-up, refund processed).

To enable Click&Collect order collection via car plate scanning

Registered customer has ability to add to their profile Car number plates, that can be used in Drive Click&Collect stations, to recognize that you have arrived after your order. It is optional to add this information to your profile.

If you wish to delete or add new Car Plate number to your profile, you can do it by entering your profile section in Rimi Online store or by contacting Rimi customer service and requesting it to be removed.

To enable Click&Collect order collection via car plate scanning we process and store following personal data:

Categories of personal data

Legal basis

Retention period

Identity information, e.g., name, surname, username, customer ID etc.

 

To execute contract

See section “For how long my personal data are stored?”

To process payment of the order

To create order in Rimi Online store customer must complete payment. There are three payment options available - payment with credit/debit card, payment with Swedbank BankLink, payment with SEB bank BankLink.  Without completing payment customer will not be able to place an order in Rimi online store.

During payment processing following customer data will be processed and stored with order information:

Categories of personal data

Legal basis

Retention period

Swedbank and SEB Bank Link:

Identity information, e.g., name, surname, username, customer ID etc.

Payment details, e.g., payment type, bank account number, payment card number, payment purpose description etc.

Transaction information, e.g., transaction date and place, purchased items, amount of purchase, receipt ID etc.

Credit/Debit card:

Identity information, e.g., name, surname, username, customer ID etc.

Payment details, e.g., payment type, bank account number, payment card number, payment purpose description etc.

To execute contract

See section “For how long my personal data are stored?”

 

Rimi online store website enables registered customers to save their credit card details in their profile, to enable easier payments in future. This not mandatory by RIMI, but it is optional for customer. If you wish to delete or add new payment card to your profile, you can do it by entering your profile section in Rimi Online store. If you save credit card to your profile following data will be stored and processed in Rimi customer database:

Categories of personal data

Legal basis

Retention period

Payment details, e.g., payment type, bank account number, payment card number, payment purpose description etc.

 

 

To execute contract

See section “For how long my personal data are stored?”

Direct marketing

We process your personal data, to send you marketing information/new’s. For example, to send you update about newest items in assortment, sales or special discounts. Please take into account that marketing information will be sent to you only, if you sign-up for it during registration or select to receive them in your profile. To send marketing messages we use e-mail, phone number, and social media.

Categories of personal data

Legal basis

Retention period

Identity information, e.g., name, surname, username, customer ID etc.

Contact details, e.g., email, phone number, address etc.

Your consent

See section “For how long my personal data are stored?”

 

Management of claims and fraud prevention

We may process your personal data to defend, establish and exercise legal claims, including to prevent fraud or criminal activity, misuses of our products or services.

Categories of personal data

Legal basis

Retention period

Identity information, e.g., name, surname, username, customer ID etc.

Contact details, e.g., email, phone number, address etc.

Order details, e.g., order ID, ordered items, product prices, delivery method etc.

Delivery details, e.g., delivery date and time, delivery address, comments etc.

Customer choice data, e.g., subscription to notifications, subscription to loyalty program clubs, set language settings etc.

Payment details, e.g., payment type, bank account number, payment card number, payment purpose description etc.

Transaction information, e.g., transaction date and place, purchased items, amount of purchase, receipt ID etc.

For management of legal claims

Our legitimate interest to prevent fraud or criminal activity, misuses of our products and services and exercise legal claims

Till investigation, settlement and implementation of legal claim. 

Statistical and market research purposes

We process your personal data for the purposes of reporting and statistics, to monitor, evaluate, improve and expand our online services (for example, how many on-time deliveries we have made, how many complains in customer service we have received). For these purposes, we will not process your name, contact information or any other directly identifiable information that may directly identify you as a specific person.

Categories of personal data

Legal basis

Retention period

Customer choice data, e.g., subscription to notifications, subscription to loyalty program clubs, set language settings etc.

Order details, e.g., order ID, ordered items, product prices, delivery method etc.

Delivery details, e.g., delivery date and time, delivery address, comments etc.

Payment details, e.g., payment type, bank account number, payment card number, payment purpose description etc.

User generated personal data, e.g., information about activities within our information systems, behavior in digital channels, saved shopping list, favorite store etc.

Feedback data

Processing is necessary to accomplish our legitimate interests and to improve and extend our services.

See section “For how long my personal data are stored?”

Information Security Purposes

We keep audits of user activity. We collect and store information when you (or, upon your request, we) access your profile, make changes to data, or perform other activities under the Rimi online store. This is done to identify potential threats, fraud, or illegal activities, and to maintain consistency and protect systems and data from unauthorized changes. Processing is necessary to fulfill our legitimate interest in ensuring information security.

Management of customer claims

To process claims you submit in Rimi Online store contact form or via sending e-mail info.lv@rimibaltic.com, or via contacting RIMI with phone we must process and store your personal data. For more information on how we process and store your personal data with regards to claims submitted by you, please see Claim and/or request evaluation Privacy Policy.

 

From which sources do we collect personal data?

Yourself

We collect the personal data you provide to us regarding yourself when you are creating Rimi profile and add additional details for online shopping, place order in Rimi online store and contact us via Customer Service or Help page in Rimi online store.

Sharing of personal data

Service providers

To fulfil our obligation towards you we share your personal data with companies that provides services to us. For example:

  • Data center services;
  • System development and maintenance services;
  • Client data analysis services;
  • Direct marketing message sending services;
  • “Rimi” loyalty program marketing related activity services (only for existing “Rimi” loyalty program participants);

These companies can only process your personal data according to our instructions and not use them for other purposes. They are also required by law and our cooperation agreement to protect your personal data.

Law enforcement authorities, state and local government institutions

To fulfill our legal obligation, we may transfer your personal data to law enforcement authorities, state and local government institutions upon their request. We may also transfer your personal data to law enforcement authorities, state and local government institutions in order to meet our legitimate interest in establishing, claiming and defending legal claims.

Where do we process your personal data?

We always aim to process your personal data within EU/EEA.

Your personal data is not transferred or processed in a country outside EU/EEA.

 

For how long are my personal data stored?

Customer profile/account:

Until user account is deleted. If customer is inactive (no log-ins) for a 1 year then profile is deleted.

If you have Rimi online store and “Mans Rimi” loyalty program account than "Mans Rimi" loyalty program data storage length is applied.

Order data:

5 years from day of order creation

Return data:

5 years from return creation

Credit card token:

Removed immediately after account deletion

Financial document (Invoice, credit note):

5 years from document generation

Unregistered user personal data in orders (First name, Last name, Delivery address, phone number):

5 years

 

Your rights

Data protection laws give you a number of rights with regards to the processing of your personal data.

Access to personal data

You are entitled to request confirmation from us if we process personal data relating to you, and in such cases request access to the personal data we are processing about you. If you have Rimi profile you can log in to your profile in Rimi website at any time to see certain information we have about you, such as name, contact information, etc. To carry out the mentioned right, you also can provide a written request to us or to our Data protection officer.

Rectification of personal data

Furthermore, if you believe that information about you is incorrect or incomplete, you have the right to correct it yourself or ask us to do it. If you have Rimi profile you can update some information about yourself by logging in to the Rimi profile. To carry out the mentioned right, you also can provide a written request to us or to our Data protection officer.

Withdrawal of consent

To the extent that we process your personal data based on your consent, you are entitled to, at any time, withdraw your consent to the personal data processing. To carry out the mentioned right, please, provide a written request to us or to our Data protection officer.

Objection against processing for direct marketing purposes 

You also have the right to object to your personal data processing for direct marketing purposes at any time. You can unsubscribe from direct marketing by logging in to the RIMI profile or by calling Customer Service. 

Objection against processing based on a legitimate interest

You are entitled to object to personal data processing based on our legitimate interest. However, we will continue to process your data, even if you have objected to it, if we have compelling motivated reasons for continuing to process data. To carry out the mentioned right, please, provide a written request to us or to our Data protection officer.

Erasure

Under certain circumstances, you have rights to ask us to delete your personal data. However, this does not apply if we are required by law to keep the data. To carry out the mentioned right you also can provide a written request to us or to our Data protection officer.

Restriction of processing

Under certain circumstances, you are also entitled to restrict the processing of your personal data. Please note, that if you request that the processing of your data is limited, it might affect your participation in Rimi Online Store. To carry out the mentioned right, please, provide a written request to us or to our Data protection officer.

Data portability

Finally, you have the right to receive or transmit your personal data further to another data controller (“data portability”). This right solely covers only data what you have provided to us based on you consent or on a contract and where processing is carried out by automated means. To carry out the mentioned right, please, provide a written request to us or to our Data protection officer.

Who do I contact if I have any questions?

If you have any questions about the processing of your personal data, please feel free to contact us.

If you are not satisfied with the response you received, you are entitled to file a complaint with the Data Inspectorate

Contact details of company in charge of handling your personal data

SIA Rimi Latvia, reg. No. 40003053029,

Legal address: 161 A. Deglava iela, Riga, Latvia, LV 1021

Phone number: +371 67045409

Email: info.lv@rimibaltic.com

 

Client support center contact details

Phone number: + 371 80000180

E-mail: info.lv@rimibaltic.com

 

Contact details of the Data protection officer

Email: RimiDPO@rimibaltic.com 

You also can contact our Data protection officer by sending a letter to us at the above-mentioned address and addressing it to the Data protection officer.