Are you a new customer?
Sign into your account to see your favourite items
Are you a new customer?Create your account
Last updated in: November 2023
Your privacy and the security of your personal data is very important to the Tod's Group. For this reason, we take the utmost care in collecting and managing the personal data that you provide us with or that we automatically acquire, adopting specific measures to guarantee their security, confidentiality, and integrity, in compliance with the provisions of Regulation (EU) 2016/679 (hereinafter the "Regulation") and the Singapore Personal Data Protection Act (hereinafter “PDPA”).
- 1. Who we are?The Organization for the collection, use and disclosing of your personal data (hereinafter “Data Controller” or "Controller") is Tod's S.p.A. - company number 01113570442 - (hereinafter also "Company", "we", “us” or "our"), with registered office in Via Filippo Della Valle n.1, Sant'Elpidio a Mare (FM) - Italy (EU), contactable at the following e-mail address: firstname.lastname@example.org.
- 2. What kind of personal data do we collect?
When consulting the pages of our website, some of your personal data will be collected or, in connection with some services, you will be requested to provide additional personal data.
Automatically acquired data
Browsing Data - The computer systems and software procedures used to operate the Website acquire, in the course of their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.
Geo-localisation data - The Site's internal search system collects data, exclusively when used and subject to your confirmation, relating to your geographical location, in order to obtain the appropriate search results (e.g., when searching for the boutique nearest to you via the dedicated functionality).
Learn more about the geo-localization process
In order to recommend nearby shops to you, based on your separate consent, we will request your location permission and collect your location data. If you do not provide this information, it will not affect your normal browsing and use of our products/services. If you do not enable location permission, the information of the store closest to you will not be displayed automatically, but you can still manually enter and view the information of the corresponding store.
Data voluntarily provided by you
In order to enable you to take advantage of the various features offered by our website, you may be requested to provide other personal data, such as:
personal data: first name, surname, date of birth, gender, nationality;
contact details: e-mail address, telephone number, address of residence or domicile; shipping address;
data relating to purchase made: date, quantity and type, product code, sale amount, VAT number where applicable, shipping/billing address, data relating to the payment method you wish to use, data on complaints, returns, guarantee, refunds, and other information relating to the sale of products;
information relating to your interests: services, events, or initiatives of the Tod's Group which you have joined, or expressions of appreciation for products or initiatives of the various Tod's Group brands;
username and password when purchasing our products online, subscribing to one of the services provided through the website or activating a Personal Account on our website;
information about your level of satisfaction if you decide to rate our products or services.
Please note that your payment data, such as your credit card number, will NOT be processed by us.
Personal data collected through social media pages
We may also collect some of your personal data when you interact with our social pages. Some data is submitted directly by you, when you decide to share - through your profile - images published on our social pages, comment on our posts and/or express your approval of one of our products, one of our initiatives or one of our events by selecting the appropriate features, as well as when you decide to write us a message using the private chat or other channels made available on the various social media.
We may also become aware of some data that is indirectly collected as a result of your interaction with our social pages; for example, we may know the time and day when you express your liking to one of our posts or send a request through a mail message.
Personal data relating to minors
We would like to point out that the protection of the safety and privacy of minors is very important to the Tod's Group. Therefore, we do not intend to collect and do not intend to voluntarily use any personal data of persons under sixteen (16) years of age, or under any other age limit imposed by the laws in force in your country of residence. We therefore request you to refrain from providing us with any of your personal data if you are under the age of sixteen (16) years or under the age of majority in your country of residence.
In the case of collecting personal data from minors, we will only use the data when the law permits, if the guardian expressly consents, or it is necessary to protect the minor.
If you believe that we have unintentionally collected personal data from a child without the consent of the guardian, please inform us immediately and we will try to delete the relevant data as soon as possible.
- 3. How we use your personal data?Whenever we acquire and process your personal data, this will be done exclusively in accordance with the principles of legitimacy envisaged in the legislation. We may use personal data for the following business purposes.
With your explicit CONSENT, we will process your personal data to:
conduct marketing activities, both through automated tools (SMS, MMS, messaging platforms, e-mail, push notifications) and through traditional channels (paper mail, telephone call with operator). The marketing activities may take the form of sending newsletters, promotions, discounts, facilitations, commercial data, and other dedicated services, by paper mail, call with operator, direct sale, through e-mail, pre-recorded calls, 'social' or messaging platforms and SMS/MMS.
In this context, we may also process your personal data in order to invite you to participate in shows and events, to involve you in market research or to notify you of special initiatives dedicated to TOD'S Group customers, in the manner and at the times that we deem most effective based on the various initiatives mentioned. We will not transfer and/or sell your personal data to third parties for use in direct marketing;
analysing some of your personal tastes to identify your preferences, interests, and consumption choices, in order to provide you with services that better meet your expectations and needs.
The profiling activities may take the form of the analysis of data regarding your interests and preferences with regard to our products and services and your consumption choices: for example, by surveying the type and frequency of the purchases you make on our e-commerce sites, through your Personal Account and in "guest" mode, and at our boutiques, in order to be able to guarantee you a personalised service during your future visits to TOD'S Group boutiques. If you have also given your consent to the processing of your personal data for marketing purposes, it will allow us to send you promotions and/or invitations to initiatives that are more in line with your profile, preferences, and expectations.
The provision of your personal data is entirely voluntary, but failure to provide some of them may result in your partial or total inability to be involved in our marketing initiatives.
Please note that, should you decide not to consent to the processing of your personal data for marketing purposes, this would prevent us from being able to involve you in our promotional initiatives, including our periodic newsletter updates.
Should you decide not to consent to the processing of your personal data for profiling purposes, this would have no impact on your participation in our promotional communications plan, but would simply result in our inability to send you personalised promotional communications.
Learn more about how our consent request works
When giving your consent, you will be requested to tick the checkbox for each purpose for which you wish to authorise us to process your personal data:
if you tick the consent check box, we will process your personal data for the chosen purpose;
in the event that you do not tick the consent check box, we will maintain the previous situation, i.e.,
if you have previously given us your consent, it shall remain valid until revoked or until the defined 'expiry date';
if you have not previously given us your consent, we will continue NOT to use your personal data for the purpose in question.
We will process your personal data to fulfil contractual obligations or pre-contractual measures, in order to:
enable you to purchase products on our website, as well as to fulfil our contract obligations to you. Failure to provide your personal data will result in the impossibility of completing the purchase process, as such data is necessary for us to fulfil our contract obligations;
Learn more about our purchasing process
When placing an order for our products, you can choose to pay quickly as a guest or choose to register a member account and establish yourself as a member to enjoy more membership benefits (see section 3.2 (ii.) “Create a Personal Account” for more details). When you choose to pay as a guest, you must provide us with your email address to complete the purchase process and receive transactional communications relating to the purchase order made.
When you order our products by choosing to collect in store, you must provide us with the recipient's name, mobile number and choose the store where you wish to collect the goods. When ordering our express delivery products, you must provide us with your title ("Mr." or "Ms."), recipient's name, mobile phone number, location, detailed delivery address, code postal address, e-mail address for receiving electronic invoices (optional) and invoice header data (optional) to complete the transaction smoothly and ensure the security of the transaction. If you do not provide the above data, the transaction may not be completed.
At checkout, we will generate an order for the products you have purchased, which will include your order number, data about the product you purchased, the time of your order, payment status, the amount you should pay, and logistics information to help you complete the purchase process. By providing your personal data you agree that we use them to manage your purchase operation.
allow you to create a Personal Account on our Website and use the related dedicated services. The list of services dedicated to holders of a Personal Account may be amended and/or supplemented over time at the discretion of the Data Controller.
Some of the personal data that we request you to submit to us when creating your Personal Account are compulsory, as they are indispensable for us to be able to process your request to open a Personal Account; the communication of other personal data is optional, but failure to submit them may make it impossible for us to provide you with some of the services, or part of some of them, dedicated to those who have a Personal Account on our website;
Learn more about registering and logging into your personal account
When you activate an account on our website, you must provide us with your email address, name, gender, date of birth (mandatory, we need this data to make sure you are not under the age of 16) and secret password to create a Tod's account. If you do not provide the above data, you may not be able to complete the personal account activation process on our website.
To access your Personal Account on our website you will be asked to enter your email address and the password you chose when activating your Personal Account.
After logging in, you can complete or edit your personal data, including your name, gender, date of birth, country/region, state, detailed address, email address, and account password. By completing your personal data and clicking save, you agree to provide us with the above data. By providing your personal data you agree that we use them to allow you to create your Personal Account on our Site and to provide you with the related dedicated services.
enable us to respond to your contact request and allow us to provide you with the necessary assistance. The personal data we request you for when filling in the on-line form and/or which will be requested from you by our operators are indispensable to enable us to handle your request;
Learn more about our customer assistance
When communicating with customer service or handling disputes, you may need to provide us with your name, order data (including payment time, payment amount, payment channel), contact number and delivery address, etc., so to verify your identity data, check your order data and reply in time. If you do not provide this data, we may not be able to provide you with adequate assistance. By providing your personal data you agree that we use them to provide you with our customer care services.
enable us to provide you with the services on the Website (hereinafter “Services”) to which you have subscribed. The personal data that we request you to provide when you subscribe to a given service are indispensable for the provision of that service; therefore, failure to provide them may make it impossible, in whole or in part, for you to benefit from them.
The provision of any personal data is voluntary. However, failure to disclose certain personal data could prevent you from partially or fully using Service. Please note that the services available on our website may vary depending on your country of residence. Any and all further processing of your personal data, performed by the point of sale you selected, both preparatory and related to the purchase of Tod’s Group products shall be carried out by each retail company of Tod's Group, which, in its role as the Data Controller will provide you with, the necessary information concerning your privacy and the processing of your personal data.
Learn more about the web site services
When you subscribe to one of our website services you may need to give us your name, contact details and any other data we need to be able to provide you with the service you are subscribing to. We will ask you to communicate only the data strictly necessary for the optimal provision of the service, therefore if you do not provide this data, we may not be able to provide you with the requested service. By providing your personal data you agree that we use them to provide you with our website services.
We will process your personal data in order to comply with compulsory regulatory provisions to which the Company is subject (legal obligations).
Subject to legal restrictions and provisions, we may also use your personal data to purpose a legitimate interest of ours or of third parties, as:
detecting, preventing, or investigating potential security incidents or frauds;
facilitating the functionality of our mobile applications and websites;
improve our services and business processes;
enforcing our terms and conditions;
exercise or defend a right of us or of a third party.
- 4. How we protect your personal data?The processing will be carried out with the aid of telematic, paper and computer tools; such processing will be based on the principles of correctness, lawfulness, transparency and protection of your rights and confidentiality.
In particular, the processing of your data, including for profiling purposes, may be carried out by means of automated processes, for instance through the comparison and comparative analysis of your purchasing choices (types, quantities, frequency, etc.), during a given period and/or season, and through the analysis of the type and number of your possible requests for information on products made in a predetermined timeframe.
The data will be processed in such a way as to minimise the risks of destruction, loss, unauthorised access, or processing that is not permitted or not in accordance with the purposes of collection.
- 5. How we share your personal data?
Your personal data will not be disclosed or sold.
Internal Third Parties: other Tod’s Group companies acting on our behalf:
to provide us with technical and organizational services, with the ultimate aim of pursuing the purposes described above;
in order to involve you in local marketing initiatives;
to provide you with a tailored service and a better purchasing experience when you visit Tod’s Group shops.
External Third Parties: our service providers that assist us with a variety of functions including with research, mail and delivery, security, insurance, professional advisory (including legal, accounting and auditing advice), banking, payment processing, fraud checks, data storage, data processing, order tracking, marketing, product reviews, responding to customer queries and complaints or technology services.
Public Authorities, in response to formal and lawful requests from the latter or in execution of regulatory obligations;
Persons authorised by the Company to process personal data necessary to perform activities strictly related to the provision of services, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (e.g., employees of the Company);
When providing personal data to third parties, as data processors, we will only select partners who have implemented adequate safeguards to prevent personal data from being retained by them longer than necessary for the data processing; and to prevent unauthorized or accidental access, processing, deletion, loss, or use.
- 6. Where we transfer your personal data?Your personal data will be transferred to Italy (EU country). We would like to point out that the Regulation, to which we are subject, provides a standard of protection to personal data that is comparable to the protection under the PDPA.
Should it become necessary to transfer your personal data outside the European Economic Area (EEA), to companies of the Tod's Group and/or to third parties who carry out tasks of a technical and organizational nature on our behalf which are consistent with the pursuit of the purposes for which your data have been collected and processed, this will only take place where it is possible to guarantee a level of protection of personal data equivalent to that of the European Community.
In fact, we guarantee that your personal data may only be transferred to a country outside the European Economic Area if at least one of the instruments recognized by the Regulation as guaranteeing an adequate level of protection for the personal data transferred has been adopted, namely:
the Adequacy Decisions adopted by the European Commission pursuant to Article 45 of the Regulation;
the provision of specific Standard Contract Clauses, approved by the European Commission, in order to ensure that the level of protection of personal data processed by our partners outside the EEA complies with that guaranteed within the European Economic Area.
We also undertake to carry out, in accordance with the law, any prior risk assessment regarding the transfer of personal data, adopting, where appropriate, any additional security measures in addition to the protections already guaranteed by the aforementioned transfer instruments.
- 7. How long we keep your personal data?
Your personal data will be processed for varying periods of time depending on the different purposes of the processing; in any event, only for the period of time strictly necessary to achieve the purposes for which the data were collected and processed. Reached the maximum terms of retention of personal data, based on the deadlines detailed below, these will be deleted or if made anonymous.
For the processing purposes set out below, the processing and storage of your personal data will be as follows:
- Article 1
- Article 2
- Article 3
- Article 4
- Article 5
- Article 6
- Article 7
Marketing activities: until consent is revoked;
Profiling activities: 7 years from the date of issue of your consent, with automatic renewal in the event of a new purchase at a Tod's Group shop or website.
Sale of Tod's Group products: until complete fulfilment of the contract obligations arising from the sale;
Provision of services dedicated to Personal Account holders: until you close your Personal Account or 7 years from your last interaction with your Personal Account, whichever is earlier. With the closure of your personal account, all personal data contained therein will be deleted;
Provision of support services to users of the Web Site: until complete fulfilment of the commitments undertaken following your request for assistance, support, or contact;
Other services available on the Website: until we have fully discharged our obligations in respect of your membership of the chosen service.
Should the legitimate interest pursued lie in the exercise and defence of a right of ours in a court of law, the retention of your personal data may extend up to the last instance.
- 8. What are your privacy rights?
We would like to remind you that you have the right at any time to know what personal data we hold about you and how they are being processed, to request that they be updated or corrected and, in the cases provided for by current legislation, to obtain their deletion, restriction of processing or to object to their processing. If you wish, you may also receive your personal data in electronic format for the purpose of transfer to a third party indicated by you.
Request to access your personal data as well as receive information on the purpose of the processing, the categories of data processed, the recipients or categories of recipients to whom your personal data may be disclosed, the planned retention period, the application or non-application of profiling mechanisms and automated decision-making processes.
Request to rectify your personal data. This right allows you to correct or complete the data concerning you, although in some cases a prior verification of the correctness of the new data provided by you is necessary.
Request to delete your personal data. This right allows you to request the deletion or removal of your personal data if there are no valid reasons for continuing the processing. You also have the right to request the deletion or removal of your personal data if you have exercised your right to object to the processing and there is no other legal basis for us to keep it, or if we have processed your data in violation of the law or if we are obliged to delete your personal data in order to comply with a specific legal provision. Please note that we may not be able to comply with your request for deletion or may only be able to comply with it partially; for example, because of legal, juridical, or fiscal constraints beyond our control that prevent us from deleting all or part of your personal data. The reasons for our total or partial impossibility of fulfilling your request will be submitted to you promptly.
Please note that when we decide to execute your deletion request, we will delete your data from the server as soon as possible, but due to applicable technological, legal and security restrictions, we may not be able to delete the corresponding data from the system. backup right away. In such cases, we will hold your personal data securely and isolate it from any further processing until the backup is deleted or anonymised.
Request for restriction of personal data processing. Said right enables you to request the suspension of the processing of your personal data in the following cases:
if you request us to determine the correctness of your data.
if you do not wish your data to be deleted, despite the fact that the use of the data by us is in breach of a regulation.
if you wish your data to be retained even if the reasons for their retention by us have ceased to exist, because you wish to ascertain, exercise, or defend a legally protected right.
if you have objected to the use of your data but it is necessary for us to ascertain the existence of legal grounds for their use.
You have the right to restrict our processing of your personal data under certain circumstances, and the right to object us to use your personal data for automated decision-making, profiling, or the right to object us to process your publicly available personal data, or to opt-out the share of your personal data with third parties if required by applicable law.
Request to object to the processing of your personal data. By exercising such right, you may obtain the cessation of the processing of your personal data in relation to the purpose(s) indicated by you. We would like to point out that our granting of your request for objection may or may not take place on the basis of the lawfulness of the processing itself.
Request for portability of your personal data. You have the right to obtain a copy of your personal data. Without prejudice to the limits defined by the applicable legislation, upon your request, we will send a copy of your personal data to a third party indicated by you, in the manner prescribed by current legislation / governmental authorities.
Revocation of consent. If the processing is carried out against your explicit consent, we will, within the timeframe provided for by the law, execute your request for revocation and cease the processing in question. For personal data obtained by us based on your consent, you have the right to change the scope of your consent or withdraw your consent by disabling device functions, setting privacy Settings, cancelling corporate customer identity authentication, or cancelling your account. Please understand that after you withdraw your consent, we will no longer process the personal data obtained based on your consent, which will affect the products or services provided to you corresponding to this part of personal data. However, your decision to withdraw your consent or authorization will not affect the prior processing of personal data based on your consent before.
With regard to revoking your consent to the processing of your personal data for marketing and/or profiling purposes, without prejudice to the possibility of exercising this right by writing to the e-mail address email@example.com, we would like to point out that in each of our communications, by e-mail or SMS, of a promotional nature, there is a function through which you may autonomously
proceed to block one or more of the communication channels used by us to contact you;
withdraw consent to the processing of your data for marketing purposes. In this case, any communication from us of an advertising and/or promotional nature will cease, and any active newsletter service (relating to any Tod's Group brand) will be automatically deactivated;
withdraw consent for profiling purposes.
The same functions are available within your Personal Account, if you have activated one.
In addition, a functionality is available in each of our newsletters through which you can unsubscribe from the newsletter service.
Please note that you will not be discriminated against in any way for having exercised one or more of the rights recognised by the legislation, nor will such exercise have any repercussions on any existing relationship with the Company.
We would like to remind you that you may at any time decide to lodge a complaint with the Supervisory Authority, or appeal before the Judicial Authority, in the event of a breach of the rules on the protection of personal data and/or if you consider that one or more of your rights have been violated.
by post: Data Protection Officer - Tod's S.p.A., Via Filippo Della Valle n. 1, 63811 Sant'Elpidio a Mare (FM) - Italy (EU).
by e-mail: firstname.lastname@example.org.
When exercising the aforementioned rights, we reserve the right to request you, in the manner we deem most appropriate, for specific information to help us confirm your identity, in order to be reasonably sure that only you have access to your personal data and that they are not disclosed to third parties not entitled to receive them.
We undertake to answer and follow up your request, where well-founded, without delay, by and no later than 30 (thirty) days of receipt of the request to exercise one or more rights. Occasionally, within the time limits granted by law, we may take longer if the request is particularly complex or if you have made several requests. In that case, we will notify you and keep you updated.
The exercise of your rights is completely free of charge.
Should your claims, however, be manifestly unfounded or excessive, particularly due to their repetitive nature, we reserve the right to
the right to charge you a reasonable fee based on the administrative costs incurred in providing you with the information or communication or taking the requested action;
to refuse to comply with your request.
We may also need to contact you to obtain your consent in order to allow you to continue using the services, if this is necessary due to changes in applicable law.