Last Udpated In: July 2021
Your Privacy and the security of your personal data/information are very important for the whole of Tod's Group, and that is why we use the utmost care in collecting and processing the personal data you will provide us with during the purchase process on our Website, adopting specific provisions in order to ensure the security, confidentiality and integrity thereof, in compliance with Regulation (EU) 2016/679 (from here on, the Regulation).
You will find below all the information concerning our processing of your personal data to allow you to purchase the products of Tod’s Group products on the online store (hereinafter, “E-Store”).
The Data Controller of your personal data, which will be processed for the purposes described in the following section, is Tod’s S.p.A. (hereinafter referred to as “Tod’s”, “we”, “us” or “our”), having its registered office in Via Filippo Della Valle, 1, Sant’Elpidio a Mare, (FM) - Italy (EU).
Your personal data (e.g. your name, surname, delivery address, e-mail address, and the like.), shall be processed pursuant to art. 6.1 (b) of Regulation, in order to allow you to purchase products on our E-Store, as well as to fulfil our contractual obligations.
We would like to point out that we shall NOT process your payment information (i.e. your credit card number) in any way.
Failing to disclose your personal data and information will not allow to complete your purchasing process, since such information is necessary to allow us to fulfil our contractual obligations, as well as to comply with the legislation, including the fiscal, bookkeeping and administrative obligations.
Finally, we may also process your personal data in order to comply with any legal obligations that we may have, pursuant to art. 6.1 (c) of Regulation, or to pursue any legitimate interest, be it ours or belonging to third parties (i.e. optimising the purchasing procedures, preventing frauds, exercising and defending a right of ours, improving the shopping experience), pursuant to art. 6.1 (f) of the Regulation, in compliance with the conditions and limits set by the legislation currently in force.
We shall process your personal data both by means of paper- and IT-based tools, and such processing shall be based on the principles of fairness, lawfulness, and transparency, in order to protect your rights and privacy.
We make use of industry-standard physical, organizational, contractual and technological security measures to protect your personal data from unauthorized access, public disclosure, use, modification, damage or loss.
We shall not disseminate your personal data.
We also undertake to carry out, in accordance with laws in force, any possible prior risk assessment concerning the data transfer; adopting, if necessary, any additional security measures, complementary to the safeguards guaranteed by the aforementioned transfer mechanisms.
At any rate, we shall transfer your personal information, only if the protection level, guarantee by the Regulation, is not compromised.
Should an adequacy decision pursuant to art. 45(3), or of appropriate safeguards pursuant to art. 46 of Regulation, including binding corporate rules, be absent, we may transfer your personal data only if:
Your personal data shall only be processed by parties being duly instructed and able to provide adequate technical and organizational safeguards, as well as bound to the strictest confidentiality by us.
We shall process your personal data at different times depending on the purpose.
Your personal data that we will process to enable you to complete your purchases on the E-Store shall be stored and processed until we completely fulfil all the obligations arising from the contract.
We would also like to inform you that we are further required to store your personal data in order to comply with specific law provisions dealing with fiscal, accounting and administrative matters, in the manner and within the timeframe established by said regulations.
Should the processing of your personal data be based on any legitimate interest, be it ours or belonging to third parties, the processing of your personal data shall be strictly limited to the time required to achieve the legitimate interest, on a case-by-case basis.
You have the right, as detailed within the law in force, to access your personal data, to correct or update it, to delete or to obtain a copy or the transmission in a structured format to any third party thereof. You may also request to limit or object to such processing.
You may exercise these rights at any time, by writing to our Data Protection Officer (DPO) to the following addresses:
We would like to inform you that we shall not discriminate against you, should you exercise one or more of your privacy rights acknowledged by the relevant legislation; such an exercise shall have no impact on the purchasing of our products or on any existing relationships with the Company.
We will make sure to comply with your request to exercise your rights, always within the terms of the law.
We shall retain the right to ask you, in the ways we deem appropriate, for specific information to help us confirm your identity and be reasonably certain that only you can access your personal data and no unauthorized third party can seize, change or delete them. The processing of your request is free of charge. However, should your requests be manifestly unfounded, excessive, or repetitive in nature, we shall retain the right to refuse to comply with them or to request suitable economic contributions for them.
Remember that you can file a complaint with the Supervisory Authority if you believe that we have violated any rules concerning the protection of personal data.