PRIVACY NOTICE TO USERS ON DATA COLLECTION AND PROCESSING

1. INTRODUCTION

   1. This notice on processing of Personal Data ("Privacy Notice") describes how REWARDKART TECHNOLOGIES INTERNATIONAL PRIVATE LIMITED (“REWARDKART” "us", "ours", "we") collect and process information about you when you communicate with us or use the platform www.rewardkart.in/orderingplatform, the web shop rewardkart.constient.com or customer specific web shops that are named after the model [customer name].constient.com (the "Services").
   2. REWARDKART only facilitates the sales of products and services to individuals and businesses through aggregators, brand partners, vendors, suppliers,intermediaries, associates and representatives and the information we process will primarily concern, the company you represent.
   3. The Privacy Notice applies to the processing of personal data that you give to us or that we collect through the Services or other sources.
   4. REWARDKART is the data controller for your personal data. All enquiries to REWARDKART may take place by using the contact information stated in Section 6.
2. PERSONAL DATA WE COLLECT, THE PURPOSES OF THE PROCESSING AND THE LEGAL BASIS
   1. When you use our Services: We automatically collect information about you and your use of the Services, when you visit the Services. This includes information about your IP address, which type of browser you use, the webpages you visit on the site,the links you activate and generally how you use the Services.
      1. The purpose is to pursue our legitimate interest in optimizing user experience and to improve the function of the Services as well as to register for how long visitors use the Services and to show you relevant offers.
      2. The legal basis for the processing is the Indian Information Technology Act, 2000 (hereafter referred to as “IT Act”) and the Information Technology Rules, 2011 (hereafter referred to as “IT Rules”) laid down by the Government of India as we have found after completing a balancing of interest test that the described activity does not infringe your interests and fundamental rights and freedoms.
   2. When you represent a company that is our Customer and open a User account:We collect information about your name, email address, delivery address, mobile phone number, the company you represent and other information as mandated by the Government of India regulations, and the information that you voluntarily choose to provide us with, including sharing our products on your social media accounts, saving product ideas and choosing to 'like' our products etc.
      1. The purpose with the processing is to communicate with you, including by email and phone, to respond to inquiries and notifications of defects and to provide you and the company you represent the best possible service, including to consider special wishes and needs as well as to give us the preconditions to offer the company you represent relevant products and marketing.
      2. The basis for processing your data is to pursue our legitimate interest in communicating with you and to provide you with the best possible service as well as to market our products to the company you represent, as we have found after completing a balancing of interest test that the described activity does not infringe your interests and fundamental rights and freedoms.
   3. When you purchase our products: We collect information about your name, which company you represent, your email address, your mobile phone number, address for delivery, possibly your date of birth (optional), PAN card, preferred method of payment, information on which products you buy, delivery preferences etc.
      1. We do not collect data related to your sexual orientation, health information, biometrics, or other sensitive information.
      2. The purpose for processing your data is to deliver the products you have ordered and to fulfil the contract we have entered into, with you / the company you represent.
      3. The legal basis for data processing is to perform the contract and to deliver the products that have been purchased.
      4. When you subscribe to our newsletters and request to receive other marketing material, including electronically: We collect information about your name, email address, which company you represent and your consent to receive direct marketing.
         1. The purpose of this is to send you newsletters and to pursue your interest in receiving our marketing material.
         2. The legal basis for the processing is “IT Act” and “IT Rules” of India. We will only send you e-marketing if you specifically have given your consent to receive such e-marketing.
3. RECEPIENTS OF PERSONAL DATA, INCLUDING THIRD PARTY TRANSFERS
   1. REWARDKART will only share your Personal Data with third parties when we are obligated to do so according to law or specifically to deliver the products we offer through the Services.
   2. Disclosure to data controllers: REWARDKART may share information that you have provided to us in connection with a purchase and disclose to our delivery partners and suppliers whose products you may have purchased. The disclosure is necessary to complete the delivery of the products you have purchased and not stored permanently by our partners.
   3. Disclosure to data processors: Your information may be handed over to external business partners that process Personal Data on our behalf. We may use external business partners from time to time for inter alia technical operations, feedback collection and improvement of the Services, data analysis, distribution of newsletters as well as targeted advertising. One of these suppliers is NTT DATA,which is the processor of payments that facilitates transactions made by you through payment gateways and AMAZON WEB SERVICES (AWS) which hosts your company programs.These companies are data processors and are under our instruction and process data that we are data controllers for. Data processors will not use Personal Data for other purposes than to fulfil the agreement with us and are under a duty of confidentiality about such data. We have entered into written data processor agreements with all data processors that process your Personal Data on our behalf.
   4. The appropriate safeguards for the transfer of your Personal Data to third parties for rendering services is secured through a contractual agreement, declaration or certification as detailed under “IT Act” and “IT Rules” of India
4. WHEN WE DELETE YOUR PERSONAL DATA
   1. Information collected about your use of the Services is deleted if you have not used the Services for 18 months.
   2. If you have not signed into your account for a period of more than 18 months, we will delete your account and the information we have registered about you. You can also delete your account via the profile settings on the Services. We will however keep information about your purchases to fulfil our legal obligations in accordance with Bookkeeping, Accounting and Tax legislation.
   3. The information may be kept for a longer period, i) if we have a legitimate interest in storing the information for a longer period, ii) if it is necessary to establish,exercise or defend a legal claim, or iii) if the storing is necessary to comply with legal obligations. Accounting material is kept for 7 years until the end of the accounting year to comply with the requirements in India.
   4. Information collected about your feedback on our newsletters is deleted when you withdraw consent to receiving our newsletters. Documentation on your consent to receive direct marketing will be stored for 2 years to document that we have not violated the law by sending you marketing material.
5. YOUR RIGHTS
   1. With a view to create transparency on the processing of your Personal Data, we provide you with information on your rights in this section.
   2. Right of access: You are entitled at any time to request information on inter alia the information we have registered about you, which purposes the registration serves, the categories of Personal Data and recipients of Personal Data there might be as well as information on where the data stems from. You also have the right to receive a copyof the Personal Data that we process about you.
   3. Right to rectification: You have the right to have inaccurate Personal Data about you rectified by us.
   4. Right to erasure: Under certain circumstances you have the right to have all or some of your Personal Data erased, for example if you withdraw your consent and we do not have another legal basis enabling us to carry on with the processing. To the extent a continued processing of your Personal Data is necessary, e.g. to comply with legal obligations or to establish, exercise or defend a legal claim, we are not obligated to erase your Personal Data.
   5. Right to restrict the processing to storage: Under certain circumstances you have the right to restrict the processing of your Personal Data to only consist of storage,for example if you are of the opinion that the information we process about you is inaccurate.
   6. Right to object: You have the right to object to our processing of your Personal Data when used for direct marketing purposes. You can unsubscribe from our newsletter and direct marketing via your user account. You also have the right to object, on grounds relating to your situation, to the processing of your Personal Data that is based on our legitimate interests.
   7. Right to withdraw consent: You have the right to withdraw a consent you have given to us for a specific processing activity at any time, including in connection with your feedback to our newsletter.
   8. Right to complain: You have the right to submit a complaint to the designated authorities in India.
6. CONTACT INFORMATION
   1. If you have any questions or comments to this Privacy Notice or if you wish to exercise one or several of your rights, you may contact:

      REWARTKART TECHNOLOGIES INTERNATIONAL PRIVATE LIMITED

      Address: Gee Gee Complex, 42, Anna Salai, Chennai 600002, Tamilnadu, India

      Email: info@rewardkart.in

      Phone Number: +91-72002 77190

7. CHANGES TO THIS PRIVACY NOTICE
   1. In case we make any changes to this Privacy Notice, the newest version of the Privacy Notice will always be available on the Services, including your user account if you have opened such an account.