You have the right to know which of your personal data we have stored and which ones are being processed, to request to update or correct it, as well as in cases provided for by the law, to delete it, and to restrict or object to the processing even after you have provided your explicit consent.
You may also request your personal data to be delivered in electronic format to a third party of your choosing.
Your rights : to learn more +
You may at any time email the Data Protection Officer (DPO) at firstname.lastname@example.org to exercise the following rights provided for by the Regulation regarding the specific processing activities we conduct.
Specifically, you have the right to:
a) request access to your personal data, as well as receive information about the purposes of the processing, types of data processed, parties or types of parties your data will be disclosed to, the expected retention period, and application, if any, of customer profiling techniques and automated decision-making processes;
b) request to correct your personal data, as well as update any information relating to you, though in some cases you will be asked to verify first the new data that you provided us.
c) request to delete or remove your personal data when its processing is no longer necessary, when you wish to exercise your right to object to its processing and there are no other legal basis to retain said data, if we have violated any laws related to said processing, or if we are required to delete your personal data to comply with a specific regulatory provision.
Please note that due to some legal constraints beyond our control, we may be prevented from satisfying your request at all or to its full extent.
In those cases, you will be informed promptly of the reasons behind our complete or partial inability to comply with your request.
d) request to object to the processing of your personal data or terminate in any way the processing according to your wishes.
We would like to point out that should we accommodate such request, there may or may not be a lawful basis for doing so.
If you had given your explicit consent to the processing, we will comply with your request to terminate the processing within the time frame set by the Regulation.
Further, you may also withdraw your consent to processing for marketing and/or customer profiling purposes by emailing the DPO as indicated above, or even do so directly from your personal account (if activated) on the Site.
Withdrawing your consent does not negate the legitimacy of the processing you had previously consented to.
We also would like to highlight that withdrawing your consent could prevent us from providing certain services or products in the Site and in the boutiques of the Tod’s Group.
In those cases, we will alert you so you can fully evaluate the effects of withdrawing your consent.
Finally, if the processing is performed based on our legitimate interests or that of third parties, we reserve the right to evaluate the reasons for your request.
If the purposes of processing legitimately override your interests, rights, and freedoms, or if it is necessary for us to process such data to file a claim, execute legal actions, or defend ourselves in court, we will have to reject your request and let you know of the reasons for such a decision.
e) request to restrict or suppress the processing of your personal data in the following cases:
i. if you request us to verify the accuracy of your data;
ii. if the data has been unlawfully processed and you prefer to restrict the processing rather than delete your data;
iii. if you want us to retain your data even if we no longer have to so you may establish, exercise, or defend a legal claim;
iv. if you object to the processing but we have to retain your data to ascertain if our legitimate interests override yours.
f) request to receive your personal data or provide them to a third party of your choosing in a structured, commonly used, machine-readable format.
This will be carried out only if it is technically possible to do so, if your personal data was processed by automated means, and if the processing was based on your consent or the performance of a contract.
When processing your request, we reserve the right to ask you in ways we deem appropriate for specific information to help us confirm your identity and be reasonably certain that only you can access your personal data and no unauthorized third party can obtain them.
We are committed to accommodating and following up on your request to exercise one or more rights, where possible, within a month of receiving it.
Occasionally, but always in compliance with the terms set by the law, we might take longer to process the request if it is particularly complex or if you have submitted several other requests.
In those cases, we will let you know and keep you posted.
The processing of your request is free of charge.
However, if your requests are manifestly unfounded, excessive, or repetitive in nature, we reserve the right to:
a) ask you to pay a reasonable fee based on the administrative costs incurred to action your request;
b) refuse to comply with your request.
Finally, you may decide at any time to file a complaint with the Supervisory Authority if you believe that one or more of your rights or any rules of the Regulation have been violated.
You may exercise these rights at any time, by writing to our Data Protection Officer (DPO) to the following addresses:
by e-mail: email@example.com.
by post: Data Protection Officer - Tod's S.p.A., Via Filippo Della Valle n. 1, 63811 Sant’Elpidio a Mare (FM) – Italy (EU).
We shall not discriminate against you, neither in service nor in price, if you exercise your privacy rights; any existing relationships with the Tod’s Group shall not be affected.
You can also contact the DPO to request further information or clarification, or to obtain specific information about who is authorized to access your personal data.