PRIVACY POLICY
Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”) and art 19 LPD
Why this information notice?
Roberto Cavalli S.p.A. and Helier Fashion FZELugano subsidiaryinvite you to read the following Information notice in order to acquire all the information required by Article 13 of EU Regulation 2016/679 (hereinafter "EU Reg. 2016/69" or "GDPR") and by art.19 of Federal Law on Data Protection (hereinafter “LPD”). This notice relates to types and methods of processing personal data as stated below and connected to the purchase of a product.
Navigation data
Data belonging to this category:IP addresses, domain name,URI/URL addresses, time and method of request, response from server and a few information regarding the user-agent. More information available in the Cookie Policy.
Social media: For more information regarding the processing of personal data carried out by any Social Media platforms deployed on this website, please refer to their respective privacy policies.
Personal data we may collect and process
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30).In this specific case, personal data that will be processed, depending on the relative purpose, are: name, surname, e-mail address, physical address, telephone number, date of birth, nationality, product ID, billing address and one or more postal shipping addresses, the identification data of one or more of your credit cards and information contained in the requests sent to Roberto Cavalli S.p.A.
>
|
|
JOINT CONTROLLERSAND DATA PROTECTION OFFICER (RPD - DPO) Joint Controllers pursuant to art.26 of UEReg. 2016/69 and pursuant to art.5 ofLPD are: - Roberto Cavalli S.p.A.with registered office in Piazza San Babila 3, 20122 Milano (MI), represented by the legal representative pro tempore.You can freely contact the Data Controller sending an E-Mail to the following address:privacy@robertocavalli.comRoberto Cavalli S.p.A.has appointed theData Protection Officer (RPD - DPO)pursuant to art.37, 38, 39 of the Reg. UE 2016/679. You can reach the appointed DPO in the above-mentioned registered offices or via E-Mail:dpo@robertocavalli.com - Helier Fashion FZE,Luganosubsudiarywith registered office in Vaile Giuseppe Cattori 11,6900 Paradiso, Svwitzerland,represented by the legal representative pro tempore. You can freely contact the Data Controller by mail at Lardi & Partners SA Via Cantonale 19 6900 Lugano Switzerland
|
|
PURPOSES OF PROCESSING |
LEGAL GROUND |
DATA RETENTION |
DATA CONFERRAL |
|
A) Website browsing |
Legitimate interest for technical cookies Art. 6 lett. f) and recital 47 GDPR overriding private interest LPD
Consentfor non-technical cookies Art 6.1.a) GDPR art. 6 cap. 6, 7; art 31 cap. 1 LPD
|
More information available in the cookie policy |
For technical cookies, the provision of information is necessary. For non-technical cookies, their provision is optional and the lack of conferral will not affect the website navigation |
|
B) Account creation The creation of the account will allow you to save contact information, payment methods, keep the history of purchases, book eventual returns, track the shipment, modify any previously provided consents to profiled marketing communications
|
Contract
Art. 6(1)(b) GDPR Art. 31 (a) LPD |
Up until the account is active and valid |
In case of creation of a new account the provision of personal data is mandatory; nevertheless, some of them are optional |
|
C) Purchasing goods |
Contract
Art. 6(1)(b) GDPR Art. 31 (a) LPD
|
10 year |
The provision is necessary in order to proceed with the finalization of the purchase |
|
D) Returning goods |
Contract
Art. 6(1)(b) GDPR Art. 31 (a) LPD
|
The information is kept for the necessary time to proceed with the evasion of the request |
The E-mail address and the order ID are required to process the request |
|
E) Contact requests |
Pre-contractual measure
Art. 6(1)(b) GDPR Art. 31 (a) LPD
|
up to 12 months |
The provision is necessary to process the request |
|
F) Personal shopper Asking for the assistance of a personal shopper you will have the opportunity to receive help, style advice |
Pre-contractual measure
Art. 6(1)(b) GDPR Art. 31 (a) LPD
|
The information is kept for the necessary time to proceed with the evasion of the request |
The provision is necessary to process the request |
|
G) Direct marketing – soft spam Joint Controllers will use the e-mail contact provided by the Data Subject in the context of the purchase of a product, for sending communications concenrningsimilar productsto those purchased, without requiring the consent. Data Subject, during the collection or in occasion of sending this kind of communication, is informed about the possibility to object, at any time, in an easy and free way. |
“Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child(C47-C50) Art.6(1) (f) GDPR and Federal law against unfair competition, art.3 (o)(LCSI) The legitimate interest of Joint Controllers is connected with the possibility to keep in touch with the clients by sending communications withing the limits of products similar to those purchased by the clients. (art. 130 co. 4 d.lgs. 30 giugno 2003, n. 196) |
Until 5 years after the last purchase or until opposition (opt-out) if earlier |
The provision is necessary. You may object at any time. |
|
H) Profiled marketing communication by means of E-mail, phone calls, instant messages, paper mail depending on the provided information. We inform you that the profiling activity is carried out taking into account previous purchases and any product included in the wish-list
|
Consent
art. 6 par. 1 lett. a) GDPRe art. 6 cap. 6, 7; art 31 cap. 1 LPD
|
Up to 5 years |
The provision is optional and where lacking you won’t be affected from carrying out other activities on this website
|
|
I) Staff recruitingby means of the “work with us” area |
Contract
Art. 6(1)(b) GDPR Art. 31 (a) LPD
|
Up to 12 months |
The provision is necessary for Data Controller to analyse the resume and proceed with the selection process |
|
|
DATA RECIPIENTS Personal data provided may be communicated to recipients acting as Processors (art. 28 of the Reg. EU 2016/679) and/or persons under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the pointed ahead purposes. You can request a complete listing of processors at the abovementioned addresses. Your data may be disclosed to recipients being part of the following categories: - subjects providing services and assistance to the database collecting all the data and to the commercial communications system; - Subjects providing services for the management of the information system and telecommunication networks, including e-mail, host and website; - Companies in the context of assistance and consultancy relationships; - Companies of the group to which Roberto Cavalli S.p.A. belongs; - Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request |
|
|
WILL DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EEA? Data are transferred outside the EEA and specifically in Switzerland, Country that guarantees an adequate level of protection, and to the United Arab Emirates through Standard Contractual Clauses. |
|
|
DATA SUBJECT RIGHTS You may freely exercise your rights as indicated in sections 15 of GDPR and Section 4 of LPD, contacting the Joint Controllers at the abovementioned address. You have the right, at any time, to request the access to your personal data, their rectification, erasure, to ask for restriction. The controller shall communicate any rectification or erasure of data or processing restriction to each recipient to whom personal data have been disclosed. Upon data subject’s request the controller shall inform him regarding these latter. If the processing is based on a contract, you have the right to portability and in this case you will receive the data in a structured, commonly used and machine-readable format. You have the right to object, at any time, to the processing of personal data grounded on a legitimate interest and in cases where the legal basis is consent, you have the right to revoke the given consent without prejudice to the lawfulness of the processing based on the consent before the revocation. Personal data will be processed manually, electronically and by mean of automated processed. Please note that fully automated decision-making processes are not carried out. Without prejudice to any other administrative or judicial remedy, in case you consider the processing in contrast with Reg. UE 2016/679 or LPD you have the right to lodge a complaint with a supervisory authority (www.garanteprivacy.ithttps://www.edoeb.admin.ch/edoeb/it/home.html) |
CHANGES TO THE INFORMATION NOTICE
Data Controllers reserve the right to modify, update, add or remove parts of this information. In order to facilitate the verification and modification of the text, the information will contain the date of revision.
Update date: 23/01/31
The Data Controller is Roberto Cavalli S.p.A. with registered office in Piazza San Babila 3, 20122 Milano (MI), represented by the legal representative pro tempore. You can freely contact the Data Controller sending an E-Mail to the following address: privacy@robertocavalli.com Roberto Cavalli S.p.A. has appointed the Data Protection Officer (RPD - DPO) pursuant to art.37, 38, 39 of the Reg. UE 2016/679. You can reach the appointed DPO in the above-mentioned registered offices or via E-Mail: dpo@robertocavalli.com
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by this latter. The identifier is then sent back to the server each time the browser requests a page from the server. Third parties cookies, instead, are deployed by a website other than the one the user is visiting, since website store different elements (images, maps, sounds, specific links to other domains, etc.) which are hosted on different servers. Cookies are deployed with several purposes: to perform session monitoring, to store specific information about user’s device accessing the server, preferences, etc. Hereunder, you will find all the information regarding cookies deployed by this website and useful indication on how to manage your choices to them related. For further information, please visit: www.allaboutcookies.org.
Local storage is a technology aiming at optimizing the navigation and does not collect data relating to preferences expressed by visitors (e.g., it stores a code that identifies the user's session after login, to avoid the user from typing username and password on each page when accessing restricted areas).
"Tracking code" or "monitoring code" is a small portion of code that get released by some systems and get recalled into others to track some data about the visitor and his browsing sessions, E-Mails opening, in a full transparent way. The tracked data may belong to different categories: date and time of browsing, geographical position, type of device used for browsing, complex tracking pixels to monitor the value spent for a purchase order and other useful information for marketing departments.
It interacts with another program to expand or extend its original functionality. The most used plugins are those of social networks, which allow the user, in eg., to follow a page or a social profile with a click, to leave “likes” and share pages on his own social network profile, etc.
It is a graphic component aiming at facilitating user’s interaction with the platform itself. The most used widgets are social networks’ ones, which allow users to easily open social networks pages in a separate window. Interactions and information that may be acquired by the site are subject to the privacy settings of the third party deploying these technologies. For more information pursuant to art. 13 Reg. UE 2016/679 – GDPR and regarding processing of your personal when taking advantage of these Technologies, you can browse the relative third parties’ websites
From the website You can anytime manage your choices through the banner. From the browser If you are unaware of your browser’s type and version, click "Help"and access to all the necessary information. On the other hand you can hereunder select the browser you are browsing from, in order to access the cookie management page:
More information available at www.youronlinechoices.euAll the employed cookies and relative processing activities are entirely covered by the privacy statement issued by Roberto Cavalli S.p.A. Closing the banner or using the "REFUSE ALL" button involves the persistence of the default settings in the absence of cookies or tracking tools other than technical ones.
Cookies related to activities strictly necessary to site operativity and service provision.
| Name | Supplier | Scope | Expiration | Type |
|---|---|---|---|---|
| Name | Supplier | Scope | Expiration | Type |
|---|---|---|---|---|
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
Cookies (or other technologies), other than the technical ones indicated above, are installed or activated only following user’s expressed consent the first time he/she visits the site. Consent can be expressed in a general manner, interacting with the short information banner on landing page and according to the procedures indicated in its banner and it can be selectively provided or denied. The consent is tracked for following visits. You can always revoke all or part of the already expressed consent.
Third parties’ Cookies (or other technologies) other than technical ones indicated above, are released or activated prior user’s expressed consent.
| Name | Supplier & Privacy policy | Scope | Expiration | Type |
|---|---|---|---|---|
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
| asa | iso | osi | asa | osi |
The Data Controller reserves the right to modify, update, add or remove parts of this statement. In order to facilitate upcoming verification and modification activities, the notice will contain the updating date.
Update date: november 21th 2022