Canali S.p.A. Unipersonale (hereinafter, “CANALI” or “Data Controller”) recognizes the importance of personal data and makes every reasonable effort to guarantee its protection.
CANALI hereby informs You, in accordance with section 13 of EU 2016/679 General Data Protection Regulation (“GDPR”) and with national applicable law, about the processing of Your personal data collected in CANALI boutiques and/or during Your access to CANALI website.
Data Controller:CANALI S.P.A. Unipersonale, with registered office in Sovico (MB), via Lombardia 17/19 – Kind Attn. DPO/Privacy Committee.With regard to the specific above mentioned data processing, the internal subjects You could refer to are the persons in charge for the Retail and Digital Area as Privacy Managers.
Data Protection Officer (DPO):dpo@canali.it
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES AND FOR BROWSING ON CANALI WEBSITE
Personal data
Common personal data (For ex. identifying data:name, surname, date of birth; contact data:e-mail address, telephone number, residence/domicile, eventual payment details, sartorial measures, etc.)
For online activities (also):
Browsing Data (i.e. some personal data whose transmission is implicit in the use of the Internet communication protocols as for ex. IP addresses, pc domain names, URI/URL)
Purpose
Contractual purposes:Sale of CANALI products, after-sale services and related activities
(For ex. administrative-accounting activities, organization and management of orders, shipping of orders, sartorial services, customer service, credit recovery, subscription to CANALI newsletter - Soft Spam)
Browsing on Canali website and connected services (For ex. browsing, account creation, contact and information request, booking an appointment at Canali boutiques)
b. DATA PROCESSING FOR MARKETING PURPOSE
Personal data
Common personal data (For ex. identifying data:name, surname, date of birth; contact data:e-mail address, telephone number, residence/domicile; macro-linguistic area:Italian, English or Chinese)
Purpose
Marketing activities
Sending of communications related to CANALI products or services via mail, e-mail, newsletter, telephone and/or text messages
Sending of satisfaction survey or market research
Analysis and statistics on an anonymous basis
For sending newsletter and communications via email CANALI uses systems with report that enable CANALI to analyse and eventually improve the results of its communications
c. DATA PROCESSING FOR PROFILING PURPOSE
Personal data
For Clients of CANALI Boutiques:
Common personal data (For ex. identifying data:name, surname, date of birth; contact data:e-mail address, telephone number, residence/domicile; macro-linguistic area:Italian, English or Chinese; purchase data:habitual point of sale, amount and frequency of purchases)
For Clients/Users of CANALI website (also):
Your browsing history and behaviour
Purpose
Profiling activities
Creation of Your profile, analysis of Your interests and of Your preferences and shopping habits, also for sending of customized communications via mail, e-mail, newsletter, telephone and/or text messages
For sending newsletter and communications via email CANALI uses systems with report that enable CANALI to analyse and eventually improve the results of its communications
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES AND FOR BROWSING ON CANALI WEBSITE
Legal basis
Execution of pre-contractual and contractual measures and/or compliance with legal requirements to which Data Controller is subject to (art. 6 lett. b) e c) GDPR)
Legal provision which legitimates the sending of email related to products and services similar to the ones already bought - c.d. Soft Spam (art. 130 co. 4 D.Lgs. 196/03)
b. DATA PROCESSING FOR MARKETING PURPOSE
Legal basis
Consent to the processing of data
c. DATA PROCESSING FOR PROFILING PURPOSE
Legal basis
Consent to the processing of data
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES AND FOR BROWSING ON CANALI WEBSITE
Data retention
Common personal data are stored for 10 years from purchase year
Browsing data are stored for the time strictly necessary to fulfil the purpose
b. DATA PROCESSING FOR MARKETING PURPOSE
Data retention
Common personal data collected for Marketing purpose are stored for a period of maximum 7 years from the date of the consent without prejudice to the exercise of the right of cancellation
c. DATA PROCESSING FOR PROFILING PURPOSE
Data retention
Common personal data collected for Profiling purpose are stored for a period of maximum 7 years from the date of the consent without prejudice to the exercise of the right of cancellation
Data could be communicated to the following categories of subjects:
Data can be transferred abroad, in or outside the European Union, to external companies / CANALI companies to perform the Purpose, within the terms and conditions provided by applicable law and, in particular, by sections 44 and sub. GDPR.
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES AND FOR BROWSING ON CANALI WEBSITE
Nature of the provision and consequences of refusal
The provision of Data is necessary to enable Data Controller to offer You the requested products/services. The eventual refusal to provide Data may determine the impossibility to offer You the requested product/service
b. DATA PROCESSING FOR MARKETING PURPOSE
Nature of the provision and consequences of refusal
Marketing activities will be made by CANALI only in case You express Your free, specific and facultative consent.The eventual refusal to provide data and consent to Marketing activities won’t have any negative consequence on the possibility for You to obtain the requested products/services
c. DATA PROCESSING FOR PROFILING PURPOSE
Nature of the provision and consequences of refusal
Profiling activities will be made by CANALI only in case You express Your free, specific and facultative consent.The eventual refusal to provide data and consent to Profiling activities won’t have any negative consequence on the possibility for You to obtain the requested products/services
According to applicable law, You are entitled to:
How may i exercise my rights?
You may at any time exercise the rights provided by the data protection laws and regulation, withdraw or modify your privacy consent by:
To allow Data Controller to verify Your identity, please attach to You-r request a copy of Your passport/identity document and provide a valid email address, where You will be contacted to receive adequate answer.
In case You have decided not to send Your request directly while through the intermediation of a third party (for ex. mandate to a trade association, use of a platform and/or of an automated system for the exercise of rights, etc.), the request shall be accompanied by:
These data will be processed for the sole purpose of verifying Your identity and of processing Your request and will be retained for the sole time that is strictly necessary to fulfil the purpose.
This information shall be provided to the Data Controller whatever channel of communication You may use for presenting Your request.
Otherwise, it could be materially impossible for us answering to Your request.
We inform You that the systems of informative protection and security of the Data Controller could block the email, their annexes and/or the link to third parties’ websites eventually contained in the email, if received from suspicious senders and/or from automatic systems.
In that case, if consistent with the purpose of preserving the security and integrity of its informative systems, the Company will open Your request in a protected area and will correctly process it.
In case it is materially impossible for the Company to open the email, their annexes and/or the link to third parties’ websites eventually contained in the email, You will be promptly contacted by the Company with the request to exercise Your rights by using another method/channel of communication. It is also for this reason that the Company is asking You to always provide a valid email address where You could be contacted.
In case You have not provided a valid email address, it could be materially impossible for us to answer Your request.
Children under the age of 18 must not use CANALI online services. CANALI will not be responsible for false statements provided by persons under 18. If CANALI discovers to have collected personal information from a child under the age of 18, it will promptly delete such information. Data Controller will facilitate the requests concerning personal data of children under the age of 18 to the persons that have parental/legal responsibility pursuant to the applicable laws.