PLEASE NOTE: This Policy is continuously updated to reflect both changes in the way our products and services work and are being delivered, and latest market practices and regulations that may impact its provisions. While we will notify you at the time of any significant changes, we recommend you review the Policy regularly and check whether a newer version of it has been uploaded since your last review.

SUMMARY

While using Render Street’s products and services and the site located at render.st (the “Products”), we want to make sure you benefit from the best services available in the space of 3D visual rendering. In the process of making the Products available and running, we need to access several pieces of data that refer and/or belong to you.

That is why we want you (we also refer to you as the “User” in this document) to take a minute to review several aspects about the connection and similar between our Products and your data.

When you tick the box that mentions you have read and understood this document (the “Privacy Policy”), we consider that you understand how the Products use your data. If you have any questions about your personal data, e-mail us at privacy@render.st or contact us in the Support Section of the dashboard in your account.

What data are we referring to? The Products collect data from you both directly (i.e. from your input in textboxes or forms across the Products, such as the account registration form or the contact form) and indirectly (i.e. while you are using the Products, without your direct input).

Part of this data is personal data (i.e. data that can lead to your identification). Part of the personal data is needed to make the Products work as intended (i.e. deliver you the service you requested and expected when using the Products and/or registering an account with us), while another part is used with your express consent, which we request before we need to access and use that specific piece of personal data. You can find out more about the specific personal data we process in Section 3 below.

Who can access your data and from where? First, the entity operating the Products: Render Street SRL, a company registered in and operated from Romania. You can learn more about us by visiting our website (https://render.st/), writing to us using the pop-up bubble in the right-hand side of our website, or e-mailing us at support@render.st. We may also refer to ourselves as “we”, “us”, “our company” in this document.

Second, in developing and operating the Products, we use products and services provided to us by third-parties. They may access some parts of your personal data strictly to provide us with their products and services. These include: data hosting services; social media services; payment services providers; e-mail marketing and marketing automation services. The entities which provide these services are referred to in Section 4.2 below.

Why do we need your personal data? Some parts of your personal data are needed to provide you with the services in the Products (such as your e-mail address, which is used to keep you updated about the status of your rendering jobs you have instructed to take place, as well as to avoid the creation of duplicate accounts, or your credit card details, which are needed to validate the payment of the products). Without this data, the Products cannot function as designed and cannot be guaranteed to operate as you expect them to do.

For other pieces of personal data, we have a legitimate interest to be aware of, since they are required for us to be able to monitor any fraudulent uses of the Products, by first-time or repeat offenders attempting to access the Products or part thereof by making use of technical loopholes. These pieces of personal data include: your IP address, the zip code of the location you are present in when accessing the Product, the name of your Internet Service Provider. We strictly use this information to limit fraud.

If you have any questions or are unsure about any provisions in this Privacy Policy, please e-mail us at privacy@render.st or use the Support Section of the dashboard in your account.

1. WHO WE ARE AND THE PURPOSE OF OUR POLICY
   1. The entity owning and operating the Products is Render Street SRL, registration number J40/14191/2012, a company registered and operating from Bucharest, Romania, having the headquarters at Str. Carol Knappe 14, B wing, sector 1, 011507 (we, us or our, in any case the "Company"). This Privacy Policy comes to ensure that we have standards in place to protect the Personal information that we collect about Users that is necessary and incidental to:
      1. offer the Products we develop in the space of 3D visual rendering; and
      2. the normal day-to-day operations of our business.
   2. This Privacy Policy follows the legal provisions in place, including:
      1. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the "Directive", in force until 24 May 2018); and
      2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("General Data Protection Regulation" or "GDPR", applicable starting with 25 May 2018).
   3. By publishing this Privacy Policy, we aim to make it easy for you (the "User") and anybody else interested, to understand what Personal information we collect and store, why we do so, how we receive and/or obtain that information, and the rights you have with respect to the Personal information that we have. 
2. WHO AND WHAT THIS POLICY APPLIES TO
   1. Our Privacy Policy deals with how we handle “personal information" or "personal data", as we may refer to it in this document.
   2. Our Privacy Policy does not apply to information we collect about businesses or companies; however it does apply to information about the people in those businesses or companies that we store. This means that, even if you use the Products as an entity, the information you provide and we collect is still personal data if it can lead to the identification of an individual in your company.
   3. If, at any time, you provide personal information or other information about someone other than yourself, it means you have the capacity and/or authority to do so. We will not contest this, and you are responsible for the way in which you use the personal information that you provide us with.
   4. Our website and services are unavailable to children (persons under the age of 18 years).
3. THE INFORMATION WE COLLECT, HOW IT IS BEING USED AND THE LEGAL GROUNDS FOR COLLECTION
   1. In the course of business, it is necessary for us to collect personal information. This information allows us to identify who an individual is for the purposes of our business, share personal information when asked of us, contact the individual in the ordinary course of business and transact with the individual. The personal data we collect is: 
      
      1. your e-mail address and real name, which are collected directly from you when you sign-up for an account for our Products. We need this information to be able to provide you with the service you request and expect, as well as be able to screen for duplicate accounts and notify you whether you already have an account with us;
      2. the IP address you use to access the Products, the Internet Service Provider with which you have a contract allowing you to access the Products via Internet username, and the zip code of your location used to access the Product. We need this information based on our legitimate interest to scan any fraudulent activity that some users may engage in using technical loopholes. This is the only purpose for which such information is used;
      3. your user and project ID, which are pseudonymous pieces of information allocated automatically by our systems whenever a rendering job is instructed in our Products. We need this information based on our legitimate interest to keep track of rendering jobs performed through our Products and quickly identify what project is causing a particular problem in the way our Products operate.
4. HOW INFORMATION IS COLLECTED & PROCESSORS
   1. We collect information from you using forms (such as the account registration form) or other textboxes (such as the contact forms available in your User dashboard). We collect information each time you contact us, either through the Product or via e-mail, but we attempt to not store personal data contained in your communication with us other than that which is necessary to respond to your request..
   2. We also collect information with the help of third-parties that have products and services integrated in our Products. These third-parties are:
      1. Lucky Orange LLC (privacy policy available here: https://www.luckyorange.com/privacy.php), which we use in order to see how and where a user is performing different actions in our Products;
      2. PayPal (Europe) S.a.r.l. et Cie, S.C.A. (privacy policy available here: https://www.braintreepayments.com/en-ro/legal/braintree-privacy-policy), which we use in order to process payments you make in our Products; please note that, in this case, we do not store your payment information, we only use the positive result of PayPal's query into whether your payment details are valid;
      3. PayU SA (Romania). (privacy policy available here: https://corporate.payu.com/payu-privacy-policy), which we use in order to process payments you make in our Products; please note that, in this case, we do not store your payment information, we only use the positive result of PayU's query into whether your payment details are valid;
      4. Sendgrid Inc. (privacy policy available here: https://sendgrid.com/policies/privacy/), which we use in order to send you e-mails and manage all your incoming e-mails centrally;
      5. SendinBlue SAS (privacy policy available here: https://www.sendinblue.com/legal/privacypolicy/), which we use in order to handle our marketing campaigns;
      6. ActiveCampaign LLC (privacy policy available here: https://www.activecampaign.com/privacy-policy/), which we use in order to handle our e-mail marketing strategy;
      7. Amazon Web Services, Inc. (privacy policy available here: https://aws.amazon.com/privacy/), which we use in order to host our Products and Product-related data;
      8. Google Ireland Limited (privacy policy available here: https://cloud.google.com/terms/data-processing-terms), which we use in order to host our Products and Product-related data;
      9. Datacamp Limited (privacy policy available here: https://datapacket.com/privacy-policy), which we use in order to host our Products and Product-related data;
   3. If this section changes, we will inform you in advance of any such changes, including the impact of the change on your use of the Products and, where the case, whether an explicit consent from your end is required for such changes to effect.
   4. Where we obtain personal information without a User's knowledge, we will either delete/destroy the information, or inform the individual that we hold such information and regarding other aspects, according to legal provisions in force at that moment. 
5. STORAGE PERIOD
   1. We will store personal information for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. To this extent:
      1. the information you used to register and use your account (real name and e-mail address) is stored two years after you delete your account, so that you can easily have your preferences in one place while you are using the Products, as well as allowing us to assess our success in re-activating you as a User of the Products following our remarketing campaigns; after you delete your account, your e-mail address will be marked accordingly in our internal database to signify you are no longer a user of the Products; the above will not impact your subscription to the newsletter, if the case, and you will need to unsubscribe from the newsletter using the buttons available in the newsletter, if you wish do so
      2. personal data contained in any invoices we issue with your details will be stored according to applicable Romanian laws on archiving invoices, which provide a term of at least 10 years of invoices being stored after their issuance;
   2. If it is necessary for us to disclose your Personal information to third parties in a manner compliant with applicable legal provisions in the course of our business, we will inform you that we intend to do so, or have done so, immediately, using the contact details you have provided to us.
6. THE SAFETY & SECURITY OF PERSONAL INFORMATION
   1. We are continually aiming to minimize the quantity of personal data we process in order to maximize the security of your experience while using the Products. To this extent, we are taking the following measures to secure your personal data:
      1. Personal data is stored and accessed from servers operated by Datacamp Limited, while a back-up of all this data is available on servers operated by Google Ireland Limited;
      2. Access to personal data is only available to members of the senior management of the Company, without the possibility of other employees/collaborators to access such data;
   2. Based on the quantity of personal data we may process in the future, as well as the purposes of such processing, we may appoint a Data Protection Officer who will be the main contact person for you regarding any inquiries or issue you may have regarding your personal data. At the moment, you can direct any questions you may have, or exert your rights related to your personal data by using the Support Section of your user dashboard or by e-mailing us at privacy@render.st. 
   3. We are not responsible for the privacy or security practices of any third party (including third parties that we disclose your Personal information to or whose products/services we use in accordance with this policy or any applicable laws). The collection and use of your personal data by such third parties is subject to those third parties' privacy and security policies. We can only guarantee that we seek to constantly minimize the quantity and granularity of personal data that third parties can access, in any way, via the Products.
   4. If you suspect any misuse or loss of, or unauthorized access to, your Personal information, you should let us know immediately by using the Support Section of the user dashboard or by e-mailing us at privacy@render.st.
7. RIGHTS OF THE USER
   1. Users enjoy the following rights in connection with their personal data, which they may exercise by using the Contact Section of the user dashboard or by e-mailing us at privacy@render.st:
      1. Right to access personal data
         1. Any User may ask the Company, for free, once every 6 months, to confirm that the Company processes (or not) personal data related to the User. In case the Company processes such data, it must inform the User about: purposes of processing; types of personal data being processed and, to the extent such data is not actual/up-to-date/relevant, the User's right to request the rectification, deletion or restriction of processing related to these personal data, or the right to oppose processing; the list of individuals / entities that may access personal data; duration of storage of personal data; the right to file a complaint with the National Authority of Personal Data Processing Surveillance, to the extent the User considers it may not exert its rights and/or the Company's answers to its requests were unsatisfactory.
         2. The Company may decide to ask for a fee for requests which are more frequent that mentioned in the article above.
      2. Right to rectify personal data
         1. Any User may request the Company, for free, to rectify its personal data which turns out to be incorrect. If it considers necessary, after the Company's response, the User may request changes to the personal data, and the Company may either make the changes itself, or instruct the User on steps they may take to make the changes themselves.
      3. Right to erase personal data
         1. The User may request the Company to erase their personal data, and the Company will do so in any of the following situations:
            1. if personal data whose deletion is requested is no longer needed by the Company to fulfil the purposes in which they were collected or processed. In this respect, the company will send a reply to the User, explaining the need for the processing of the personal data concerned in relation to the purposes of the processing, but also the consequences of deletion. In so far as the User considers that such processing is no longer consistent with the purposes specified by the Company, it may maintain its position on the deletion of personal data, assuming its liability for any effects related to the use of the Products as a result of deleting those personal data;
            2. if the User withdraws their consent to the processing of personal data, if the personal data concerned is processed with the user's consent, as a legal basis (you can find more details on the basis of which we process the data Personal Information in Section 5 above);
            3. if the User opposes the processing of personal data, in accordance with the provisions of this policy; the Company will send a reply to the User, indicating to what extent there are legitimate reasons for the processing of personal data further. If the Company transmits a newsletter to users or other methods of commercial communication, the User will have any time and for any reason whatsoever, the possibility to opt out of receiving such communications;
            4. if the User considers that the processing of personal data has been carried out unlawfully; the Company will send a reply to the User, explaining to what extent there is a legal basis for the processing of personal data; in so far as the User considers that such processing is no longer consistent with the purposes specified by the Company, it may maintain its position on the deletion of personal data, assuming its liability for any effects related to the use of the Products as a result of deleting those personal data;
         2. The Company may refuse to comply with the request of the User if the personal data whose deletion is required cannot be deleted due to a legal obligation on the Company's activity (in which case the Company will indicate to the User the basis of this legal obligation), or for the purposes of archiving or statistical (in which case the Company will indicate to the User what measures it may take to ensure that the User's personal data is processed in a safe manner and, at the same time, that the processing does not occur than to provide aggregate information about users' behavior in relation to the Products).
      4. Right to restrict processing of Personal Data
         1. The User has the right to request the Company to restrict the processing of personal data in one of the following cases:
            1. The User indicates that the personal data concerning them is not correct and the Company cannot rectify the personal data indicated instantly, at the time of receipt of the information from the user;
            2. The User indicates that the processing is not legal, but does not wish to delete the data, wishing only to restrict the processing;
            3. The User indicates that they want personal data to be accessible within the Products in order to be able to use them to defend/exercise/ascertain a right before an authority, but does not want personal data to be processed in other purposes;
            4. The User disputes the legitimate interest of the processing of personal data (which are processed on the basis of this legitimate interest) by the Company, and the Company cannot assess, at the time of receiving the request from the User, to what extent the legitimate interest of the company prevails against the right exercised by the user.
         2. If the right to restriction of processing is respected, the Company shall inform the User, as appropriate, before the restriction of processing is no longer applicable, the personal data being processed again.
      5. Right to request portability of personal data.
         The User may ask the Company to transmit all personal data that the User has provided to the Company (so only the personal data that the User has entered directly within the Products, or which relates to their preferences in the Products), in a format that allows the User to transmit this personal data to another entity (for example, another 3D visual design rendering app), in order to be able to access new services or products. This right is exercisable only in the case of personal data processed with the User's consent, or for the provision of the services to the User.
      6. Right of opposition
         1. The User has the right to oppose the processing of personal data that is processed on the basis of the legitimate interest of the Company, as provided in this policy. In this respect, the User can send an email to the company at privacy@render.st, or by using the Support Section of the user dashboard, stating the reason for opposition.
         2. The Company shall reply to the User within 30 days of receipt of the request, indicating to what extent it considers that the company's legitimate interest takes precedence over the reason for opposition indicated by the User.
         3. If the User does not wish to receive marketing and/or promotion messages from the Company (in so far as the Company transmits such messages to the User), they may express their choice at any time, without recourse from the Company.
         4. If the exercise of the right by the User is legitimate, the Company will also submit requests to other third parties that may have received that User's personal data, to stop processing the user's personal data;
   2. The User can address National Authority for Personal Data Processing Surveillance, in so far as they consider themselves unjustified by the Company's response/lack of a response to its request for the exercise of one of the rights referred to in this policy.
8. REMARKETING
   We store cookies on your browser that allow us to identify you later and present advertising based on that, with the help of Google Adwords (https://adwords.google.com/home/). Cookies are collected anonymously and, although possible, we store no information that would allow us to connect specific cookies with your account, email or name. For more information on cookies, visit section "Types of cookies used by RenderStreet" below.
9. PROMOTIONS, CONTESTS AND SWEEPSTAKES
   From time-to-time, the Company may provide you the opportunity to participate in promotions, contests or sweepstakes in connection with its Products. Such promotions, contests and sweepstakes will be governed by this Privacy Policy, the applicable Terms of Service, but also any specific rules and regulations posted in connection with such promotions, contests and sweepstakes, which you will be notified of and allowed to read carefully prior to entering such promotions, contests and sweepstakes.
   
   If you participate, you will be required to register with the Company, which will require you to provide certain Personal Information. Participation in these promotions, contests and sweepstakes is completely voluntary and you therefore have a choice whether or not to register and provide your Personal Information. The requested information typically includes contact information, such as name, shipping address, e-mail address, and telephone number. We will use this information to notify winners and award prizes. Additionally, during your registration process you may opt-in to receiving additional related communications from us. If you decide to opt-in, we will use the information provided to send you communications described throughout this Privacy Policy.
10. NEWSLETTERS
    If you wish to subscribe to the Company's newsletter(s), you may do so by providing your e-mail address, which will be used for the sole purpose of sending the newsletters to you, and only until you withdraw your consent of receiving our newsletter using the buttons available at the end of each e-mail received from the Company.
11. COOKIES
    The Company uses both session ID cookies and persistent cookies as part of its interaction with your browser. A cookie is an alphanumeric identifier (a file) that the Company's websites transfer to your computer's hard drive through a web browser to enable its systems to recognize your browser for record-keeping purposes. A session ID cookie expires when you close your browser, while a persistent cookie remains on your hard drive for an extended period of time.
    
    We use session ID cookies to make it easier for you to navigate our websites. We use persistent cookies to identify and track which sections of its website you most often visit. We also use persistent cookies in areas of its website where you must register, and where you are able to customize the information you see, so that you don't have to enter your preferences more than once.
    
    The Company uses Google Analytics, an ad tracking technology that is provided by Google. For more information, please visit https://www.google.com/analytics/ . If you wish to opt-out from Google Analytics, you can do so with the tools offered here.
    
    By configuring the options in your browser, you may control how cookies are processed by your system. However, if you decline the use of cookies you may not be able to use certain features on this site and you may be required to reenter the information required to complete an order during new or interrupted browser sessions.
    
    Some of the Company's business partners (e.g., advertisers) use cookies on the Company's website. We have no access to or control over these cookies (see "Third Party Advertising" and "Third Party Cookies" below). Accordingly, this Privacy Policy covers the use of cookies by the Company only and does not cover the use of cookies by any advertisers.
12. LOG FILES
    As is true of most websites, the Company gathers certain information automatically and stores it in log files. This information includes internet protocol (IP) addresses, browser type, internet services provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. The Company uses this information to analyze trends, to screen for fraud, to administer the Company's sites, to track users' movements around the websites and to gather demographic information about the Company's user base as a whole, in order to ensure a proper functioning of the Company Services.
13. CLEAR GIFS (WEB BEACONS/WEB BUGS)
    The Company employs a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs), that helps it better manage content on its websites by informing the Company what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. In contrast to cookies, which are stored on a user's computer hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence.
    
    The Company uses clear gifs in its HTML-based e-mails to inform itself of which e-mails have been opened by you. This allows the Company to gauge the effectiveness of certain communications and the effectiveness of the Company's marketing campaigns and better tailor Company Services to your needs. If you would like to opt-out of these e-mails, please see the "Choice and Opt-Out" section of this Privacy Policy.
14. INFORMATION FROM THIRD PARTY SOURCES
    To improve services and enhance personalization, the Company may periodically obtain information about you from other independent third-party sources and add it to our account information. The Company does not investigate beforehand whether those third-parties have obtained that information, which may include Personal Information, from you directly or indirectly, or if the information is obtained with your consent. For example, when you visit a site on which the Company advertises, and click through such advertisement, the Company may place cookies on your computer.