1.1 Information We Collect and Receive. For you to use our Site and Services, we need to collect and process certain types of information. Depending on your use of our Site and Services, this may include:
We will only use personal information to provide you with information, products, or services you have requested, or for other purposes set out in this Policy. Personal information does not include aggregate information from which individual identities have been removed.
1.2 Information from Children. Rahr does not knowingly solicit or collect any personal information from anyone under 13 years of age, and children under 13 are not permitted to register for or use our Site or Services, including by subscribing to receive information from Rahr. Parents can contact our customer service department to access, change, or delete the personal information that has been submitted by a child. If we become aware that a child under the age of 13 has provided us with personal information, we will delete it.
Types of Cookies: The cookies we place on your device fall into one of the following two categories:
The cookies that we place on your device may also be:
You can opt-out of online behavioral advertising cookies and similar technologies by using the Digital Advertising Alliance’s Consumer Choice Tool available here, or if located in the European Union you can make your choices here. Please note you may continue to receive generic ads.
Controlling Cookies: Your browser may give you the ability to control some types of cookies. If you do not want to accept the kinds of cookies you can control, you can change your browser settings so that certain types of cookies are not accepted.
If you turn off any cookies, please be aware that you may lose some of the functionality of this website. For more information about cookies and how to disable them please check one or more of the following resources:
Rahr may use the personal information we collect for the following purposes:
Rahr will never sell or rent any of your personal information, and we will never share your personal information publicly without your consent. However, from time to time, Rahr may engage other trusted third party companies and individuals to perform functions such as sending postal mail and e-mail, removing repetitive information from customer lists, analyzing data, providing marketing assistance, providing search results and links (including paid listings and links), and providing customer service. Such companies shall only use your personal information for those purposes required to perform their functions and you consent to Rahr sharing your personal information with such companies so they can perform their functions. For example, we may store the information described in Section 1.1 above with a third-party data storage service to support delivery of our Products and Services, and to respond to customer service requests. Whenever we share data with third-party services, we require that they use your information only for the purposes we’ve authorized, and that they protect your personal information at least to the same standards we do.
We also reserve the right to disclose personal information when it is reasonably necessary to conduct our business, protect Rahr’s legal rights and property, and to comply with the law or law enforcement. Otherwise, your personal information is never shared with any individual or other organization.
We take the security of your personal information seriously and follow industry-standard practices to protect the data we collect and process. Rahr has therefore put in place commercially reasonable physical, electronic, and managerial procedures to safeguard and secure the personal information that Rahr collects. Access to personal information will be restricted to our authorized personnel who require the information in order to perform their duties properly. In addition, access will be limited to only that information that is strictly necessary for the performance of those duties.
Remember, the safety and security of your information also depends on you. Where you have chosen, or where we have given you a username and password for access to certain parts of the Site or Services, you are responsible for keeping the username and password confidential. No method of transmission over the internet or electronic storage is completely secure, so Rahr cannot guarantee its absolute security.
Data protection law in Europe requires a “lawful basis” for collecting and retaining personal information from residents of the European Economic Area. Our lawful bases include:
We try to keep email communications to a minimum and give you the ability to opt out of any marketing communications we send. For example, we may send you email relating to the Products or Services that we offer. You may also elect to receive certain marketing email communications in accordance with your preferences, and from which you may opt out at any time. You can always opt out of receiving email information or other electronic notifications from Rahr (other than certain required communications informing you of the completion of a purchase, user registration, correction of user data, or change of password), by adjusting your user preferences in your account profile if you are a registered user, or by sending us an email at Privacy@Rahr.com stating your request. If we have sent you a promotional email or mobile device notification, you may send us a return email or mobile device communication asking to be omitted from future email or mobile device distributions. This opt out does not apply to information provided to Rahr as a result of a purchase of the Products or Services, product service experience, or other transactions.
We will hold your personal information on our systems for as long as is necessary to perform the relevant processing activity for that information, or as long as is set out in any relevant contract you hold with us. This is a case by case determination that depends on things like the nature of the data, why it is collected, why it is processed, and any relevant legal or operational retention needs. For example, we may retain your data for as long as you maintain an account on our Site so that we may process and deliver your orders. We may also be legally required to hold some types of information to fulfil our statutory obligations. We review our retention periods for personal information on a regular basis. When the relevant processing activity has been completed, we may destroy your data, or alternatively anonymize the data in such a way that you are not personally identifiable, either directly or indirectly.
Users or Site visitors residing in certain locations, including California and the European Union, may be afforded certain rights regarding their personal information. Except where an exception or exemption applies, these rights may include 1) the ability to request access to or a copy of the information we have collected about you; 2) the right to review our data collection practices related to you; 3) the ability to request deletion of your personal information; 4) the right to request correction of any information we hold about you; 5) the right not to be discriminated against due to your exercise of any of the preceding rights; and 6) the right to request portability of your data. In certain circumstances, you may also request restriction of, or objection to the processing we perform about you. While these rights are not globally applicable, our customers are entitled to access the personal information that we hold about them.
You may also send us an email at Privacy@Rahr.com to request access to, correct, or delete any personal information that we hold about you. Residents of California may designate an authorized agent to exercise certain privacy rights on their behalf and should make any such request by contacting the above email address. To protect your privacy and security, Rahr may take reasonable steps to verify your identity before granting access to, correcting, or deleting data. We will attempt to respond to your request for information within 30 days. Please note that we may retain certain information as required by law or as necessary for our legitimate business purposes.
10. EU-US Privacy Shield
Rahr participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework. Rahr is committed to subjecting all personal data received from European Union (EU) member countries and the United Kingdom, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield website.
Rahr is responsible for the processing of personal data that it receives through the Privacy Shield Framework that it subsequently transfers to a third party acting as an agent on its behalf. Rahr complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Rahr is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Rahr may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
11. Questions, Comments, or Complaints
Rahr strives to satisfy our customers’ and visitors’ privacy concerns. However, if you have contacted Rahr about your issue and feel that your issue is still unresolved, and if you are also a resident of the European Economic Area, subject to applicable law, you may contact our independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, visit https://bbbprograms.org/privacy-shield-complaints/ for more information and to file a complaint. This service is provided free of charge to you.
Finally, under certain conditions more fully described on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.