Last Udpated In: July 2021
Your Privacy and the security of your personal data/information are very important for the whole of Tod's Group, and that is why we use the utmost care in collecting and handling the personal data we will process providing you with the services dedicated to visitors of our Website, adopting specific provisions in order to ensure the security, confidentiality and integrity thereof, in compliance with Regulation (EU) 2016/679 (from here on, the Regulation), and with the applicable privacy regulations in UK (e.g. Data Protection Act 2018, UK General Data Protection Regulation), according to the implementation and within the limits of their territorial scope.
You will find the information on the processing of your personal data we will perform in order to provide you with the services available on our Website: including, but not limited to, the possibility to book an appointment at a boutique belonging to Tod's Group, to reserve a product in our points of sale, to be informed when any given product returns available on our E-Store, to customize our products you bought or to purchase them through our WhatsApp Shopping service, to check the availability of any given product in our points of sale being nears to you (from here on, individually, “Service”).
The Data Controller of your personal data, which will be processed for the purposes described in the following section, is Tod’s S.p.A. (hereinafter referred to as “Tod’s”, “we”, “us” or “our”), having its registered office in Via Filippo Della Valle, 1, Sant’Elpidio a Mare, (FM) - Italy (EU).
We shall process your personal data (i.e. your name, surname, e-mail address, telephone number, and the like) to fulfil our commitments and to allow you the usage of the Services you requested. We would like to point out that the services available on our Website may change based on the individual Country.
The provision of any personal data is voluntary. However, failure to disclose certain personal data could prevent you from partially or fully using Service.
Any and all further processing of your personal data, performed by the point of sale you selected, both preparatory and related to the purchase of Tod’s Group products shall be carried out by each retail company of Tod's Group, which, in its role as the Data Controller will provide you with, the necessary information concerning your privacy and the processing of your personal data.
Finally, we reserve the right to process your personal data in order to comply with any legal obligations that we may be subject to, or to pursue any legitimate interest be it ours or belonging to third parties, (i.e. improving the services-providing process, preventing frauds, exercising and defending a right of ours or improving the interactions with our customers), in compliance with the conditions and limits set by the legislation currently in force.
We shall process your personal data both by means of paper- and IT-based tools, and such processing shall be based on the principles of fairness, lawfulness, and transparency, in order to protect your rights and privacy.
We make use of industry-standard physical, organizational, contractual and technological security measures to protect your personal data from unauthorized access, public disclosure, use, modification, damage or loss.
We shall not disseminate your personal data.
Your personal data shall be transferred from your country to our headquarter in Italy, based on adequacy regulations, pursuant the section 17A of the Data Protection Act 2018.
Data transfers toward countries outside the European Economic Area (EEA): We guarantee that we shall transfer your personal data towards a country outside the European Economic Area (EEA) not having an Adequacy Decision by the European Commission (EC), only after the adoption of at least one of the cross-border transfer mechanisms the Regulation recognizes as being able to ensure an adequate protection of the personal data being transferred:
We also undertake to carry out, in accordance with laws in force, any possible prior risk assessment concerning the data transfer; adopting, if necessary, any additional security measures, complementary to the safeguards guaranteed by the aforementioned transfer mechanisms.
We would like to stress the fact that the data transfer mechanisms, used to disclose your personal data outside the EU, are coherent with the cross-border data transfer tools stated by the UK laws framework.
Your personal data shall only be processed by parties being duly instructed and able to provide adequate technical and organizational safeguards, as well as bound to the strictest confidentiality by us.
The Company shall process your personal data for different lengths of time depending on different purposes of the processing and on the kind of Service you have subscribed to.
We shall process your personal information and data only for the period being strictly necessary to fulfil the commitments we have taken as you have subscribed to the Service.
We would also like to inform you that we are further required to store your personal data in order to comply with specific law provisions, in the manner and within the timeframe established by said regulations.
Should the processing of your personal data be based on any legitimate interest, be it ours or belonging to third parties, the processing of your personal data shall be strictly limited to the time required to achieve the legitimate interest, on a case-by-case basis.
You have the right, as detailed within the law in force, to access your personal data, to correct or update it, to delete or to obtain a copy or the transmission in a structured format to any third party thereof. You may also request to limit or object to such processing.
You may exercise these rights at any time, by writing to our Data Protection Officer (DPO) to the following addresses:
We would like to point out that, should you exercise one or more of the privacy rights acknowledged by the relevant legislation we shall not discriminate against you, and such activities shall have no impact on the services provided, nor on any relationship of yours with Tod’s Group.
We will make sure to comply with your request to exercise your rights, always within the terms of the law.
We shall retain the right to ask you, in the ways we deem appropriate, for specific information to help us confirm your identity and be reasonably certain that only you can access your personal data and no unauthorized third party can seize, change or delete them. The processing of your request is free of charge. However, should your requests be manifestly unfounded, excessive, or repetitive in nature, we shall retain the right to refuse to comply with them or to request suitable economic contributions for them.
Remember that you can file a complaint with the Supervisory Authority if you believe that we have violated any rules concerning the protection of personal data.