We would like to inform you that we will process your personal data in compliance with the provisions of EU Regulation 679/2016 (hereinafter: “Regulation”), of California Consumer Privacy Act of 2018 (CCPA) and any other specific local rules applicable to the protection of personal data.
Below you will find all the information regarding our processing of your personal data to allow you to create your own personal page and avail of the services reserved for account holders on our website (hereinafter, “Site”).
We would like to point out that the protection of children's safety and privacy is very important to the Tod's Group. Therefore, we do not intend to collect and voluntarily use the personal data of individuals below the age of sixteen (16), or below any other minimum legal age limits in force in your country of residence. Consequently, we ask that you refrain from providing us with any personal data if you are below 16 years of age or if you are not of legal age in your country of residence.
1. Data Controllers
a) Joint Controllers:
· Tod’s S.p.A., with registered office in 1, Via Filippo Della Valle, S. Elpidio a Mare FM – Italy (EU).
· ItalianTouch S.r.l., with registered office in 171, Corso Umberto I, Civitanova Marche MC – Italy (EU), a company within the Tod’s Group, directly controlled by Tod’s S.p.A.
The relationship between the joint controllers applies to all the processing of your personal data prior to or as it relates to the creation of your personal account and to the use of services reserved for account holders.
b) Data Controller: Tod’s S.p.A., with registered office in 1, Via Filippo Della Valle, S. Elpidio a Mare FM – Italy (EU), for the processing of your personal data for marketing and customer profiling purposes (which do not include the sale of your personal data).
c) Data Controller: ItalianTouch S.r.l., with registered office in 171, Corso Umberto I, Civitanova Marche MC – Italy (EU), a company within the Tod’s Group, for the processing of your personal data to provide you a smoother check out process when you purchase Tod’s Group products on its online store (hereinafter, “Store”).
d) Legal Basis and Purpose of Processing
We will process your personal data as joint controllers as indicated in the previous section to comply with your request to create a personal account and to avail of the services that come with it, which necessitates said processing for the performance of a contract and/or adoption of pre-contractual measures at your request. Failure to disclose certain personal data could in some cases prevent you from creating a personal account and from fully availing the services reserved to personal account holders.
ItalianTouch S.r.l. will process your personal data to provide you the services reserved for personal account holders when you purchase Tod’s Group products on the Store, which necessitates said processing for the performance of a contract and/or adoption of pre-contractual measures at your request. Failure to disclose certain personal data could in some cases prevent you from using specific services at all or from using them to the full extent.
Tod’s S.p.A. will also process your personal data but only with your explicit and specific consent to do so to:
i. conduct marketing activities (which do not include the sale of your personal data) through newsletters, promotions, discounts, incentives, commercial information, and other related marketing schemes, via paper mail, phone calls, direct sales, email, automatic voice calls or sms/mms, and to send invitations to shows or events, perform market research and send notifications on special initiatives dedicated to TOD’S Group customers;
ii. perform customer profiling activities, such as analyzing your interests and preferences concerning our products and services, and your shopping habits. Also, by looking into the type and frequency of purchases you make online (via your personal account or as guest) and/or at our boutiques/points of sale, we can better guarantee a personalized service for your future visits to the TOD'S Group boutiques. Likewise, if you also have consented to processing your personal data for marketing purposes (which do not include the sale of your personal data), we will be able to send you promotional information and/or invitations to initiatives that fit best your profile, preferences and expectations as a shopper.
Providing your consent to any or both of these purposes is entirely optional. Likewise, a refusal to provide consent will not in any way affect any existing relationship with the Tod’s Group, or the successful creation of your personal account on our Site.
If you do not wish to authorize the processing of your personal data for any of the indicated purposes, please do not mark the selection box associated with the specific purpose, and we will assume that:
i. you do not consent to processing your personal data for that specific purpose if you have not previously authorized the Company to do so.
ii. you are withdrawing the consent you have previously given the Company to process your personal data for that specific purpose.
Therefore, the Company (i) will not process in any way your personal data for the specific purpose indicated or (ii) will cease all processing activities that up until then had been lawfully performed.
Finally, we may also process your personal data to comply with any legal obligations that we may have and to pursue our rights or those of third parties, in compliance with the conditions and limits set forth by the current applicable laws.
e) Processing Procedures
We will process your personal data by means of telematic, paper and computer tools, and such processing will be based on the principles of fairness, lawfulness, and transparency to protect your rights and privacy. In particular, the processing of your data, also for purposes of customer profiling, may be automated, for example through a comparative analysis of your purchases (types, quantities, frequency, timing etc.), and through the analysis of the type and number of your requests for product information within a given timeframe.
We will also process your data in a manner that will minimize the risk of destruction, loss, and unauthorized access to your data or any unauthorized or non-compliant processing.
f) Disclosure and Dissemination of Personal Data
We will not disseminate your personal data.
We will not sell your personal data to third parties.
We will disclose your personal data only for the purposes described above to other companies within the Tod’s Group, therefore including companies directly or indirectly controlled or owned by Tod’s S.p.A., with headquarters in countries both within and outside the European Union or the US.
Your data may also be accessible to companies, organizations or associations that perform technical and organizational tasks on our behalf, again consistent with attaining the purposes previously described, as well as to public authorities that make it lawful and legally required.
Any transfers of your personal data to entities outside the European Economic Area (EEA) or the US will be made only if the level of protection of personal data, guaranteed by the Regulation, is not compromised.
At any event, your personal data will only be processed by parties, duly instructed and able to provide adequate technical and organizational safeguards, as well as bound to the strictest confidentiality by the Data Controllers.
g) Duration of Processing
We will process your personal data at different times depending on the purpose. At any event, we will retain your personal data only for the period strictly necessary to achieve the purpose for which it was collected and processed, except when specific provisions of the law require longer retention periods.
Your personal data, processed to create a personal account and to use the services reserved for personal account holders, whether performed by ItalianTouch S.r.l. as joint controller or as sole data controller, will be kept and processed until you close your personal account. Also, your personal data will be deleted automatically (or made anonymous) after 7 years from the last time you interacted with your personal account (for instance, when you access or update your data, create new orders, etc.).
To protect you further, near the end of the 7-year time frame as mentioned above, we will notify you that your account is soon to expire. If you wish to keep your personal account active, you need only to interact with it.
If you decide to consent to processing your personal data for marketing purposes (which do not include the sale of your personal data), the duration of said processing will not exceed 7 years from the date of consent.
With regard to our newsletter service, we will send you an email before your consent expires inviting you to renew your consent so you can continue receiving our newsletters. If you do not respond to said email, we will cease to send you any promotional and/or commercial communication at the end of the seventh year.
If you have consented to processing your personal data for customer profiling purposes, said processing will be performed no more than 7 years from the date of consent, automatically renewed each time you make a purchase at any boutique/point of sale of the Tod’s Group, or at the Store.
If the processing of your personal data is based on legal provisions or on any our rights or those of third parties, the processing of your personal data will be strictly limited to the time required to achieve the purposes for which the data was collected and/or processed.
h) Your Rights
You have the right to access your personal data, to request disclosure of such data and additional details, including its use purposes and any third parties with which such data may have been shared, to correct or update it, or to delete or transmit it in a readily useable format to you or any third party. You may also request to limit or object to its processing.
Especially with regards to processing for marketing and/or customer profiling purposes (which do not include the sale of your personal data), we would like to remind you that you may at any time exercise your right to withdraw the consent you have given us.
Tod’s S.p.A. and ItalianTouch S.r.l., have appointed a Data Protection Officer, whom you may email at firstname.lastname@example.org to exercise your rights with regard to each or both data controllers.
Remember that through your personal account you are always free to correct and/or update your personal data once your account is created and on your own, withdraw (or provide) your consent to process your personal data for marketing and/or customer profiling purposes (which do not include the sale of your personal data) if you so wish.
Also, if you have consented to processing your personal data for marketing purposes (which do not include the sale of your personal data), and therefore, receive our periodic newsletter, in there is a web link through which you can:
i. deactivate your subscription to our newsletter.
ii. withdraw your consent to processing your personal data for marketing purposes (which do not include the sale of your personal data). In which case, we will cease to send you any advertising and/or promotional communications and automatically deactivate your newsletter subscription.
iii. withdraw your consent to processing for customer profiling purposes.
We will make sure to comply with your request to exercise your rights always within the limits of the law.
Remember that you can file a complaint with competent authorities if you believe that we have violated any rules concerning the protection of personal data.