Canali S.p.A. a Socio Unico (“CANALI” or “Data Controller”), recognizes the importance of personal data and makes every reasonable effort to guarantee the protection thereof.
CANALI wishes to inform you, in accordance with Article 13 of Regulation (EU) 2016/67(“GDPR”) as well as with applicable national and EU laws, on the processing of personal data collected by CANALI boutiques and/or when accessing the CANALI’s website https://www.canali.com/ (the “Website”).
Therefore, the Data Controller is CANALI S.P.A. a Socio Unico, with registered office in Sovico (MB), at via Lombardia 17/19 – Attn. DPO/Privacy Committee. The Data Controller has also appointed a data protection officer to be contacted at the following e-mail address: dpo@canali.it
CANALI processes the following categories of your common personal data:
2.1 Identifying data: such as, by way of example, name and surname, date of birth;
2.2 Contact details data: such as by way of example, residence address, e-mail address, telephone/mobile number;
2.3 Accounting data: such as, by way of example, fiscal/tax code, credit card number, debit card number, payment details, bank account;
2.4 Purchase data: such as, by way of example, tailoring measures and measurements for customising CANALI’s products, habitual point of sale, amount spent and frequency of purchases, products purchased, products added in the “wish lists” or to the shopping cart;
2.5 Navigation data¸ as per section 3.b below.
3.a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Canali may process your personal data as those indicated under points 2.1, 2.2 and 2.3 above for contractual purposes, more specifically, in order to sell CANALI products and to provide after-sales services and related activities (e.g., administrative-accounting activities, organization and management of orders, shipping of orders, tailoring services, customer services, credit collection, etc.).
3.b. DATA PROCESSING FOR THE PURPOSE OF WEBSITE NAVIGATION
The servers and computer systems used to operate the Website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data, although not collected to be associated with identified data subjects, by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of personal data includes the IP addresses of the devices used by Users who connect to the Website, as well as the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used for submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and computer environment.
These data, necessary for the proper functioning of the Website, are also processed for the purpose of:
3.c. PROCESSING OF DATA FOR THE PURPOSE OF SENDING OF NEWSLETTERS
Your common personal data as those indicated under point 2.2 above, may also be used, upon your consent, for the sending of newsletters via email, concerning CANALI’s products or services.
To send its newsletters, CANALI uses systems that provide reports which enable Canali to organise, and, where needed, improve the results of said communications.
3.d. DATA PROCESSING FOR MARKETING PURPOSES
Your common personal data as those indicated under points 2.1, 2.2 and 2.4 above, may also be used, upon your consent, for the sending of communications concerning CANALI’s products, services and/or events via mail, e-mail, newsletter, telephone, and/or text messages (including instant messaging services), and social media.
Sending of customer satisfaction surveys or market surveys.
In order to send its newsletters and communications via email, CANALI furthermore uses systems that provide reports, which allow CANALI to analyse and where needed improve the results of its communications.
3.e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES
If you are a Customer of CANALI’s boutiques or a user of the CANALI’s website, common personal data such as those indicated under points 2.1, 2.2. and 2.4 above, may also be used, with your prior consent, to analyse your preferences.
This purpose consists in processing your personal data through automated means, to analyse and/or predict some of your personal aspects, including, for example, your purchasing preferences and/or habits, your on-line behaviour, your interests, etc., in order to create your profile including for the purpose of sending you customised communications via mail, e-mail, newsletter, phone and/or text (including instant messaging services), and social media, to promote your participation in exclusive programmes and events.
To send said communications, CANALI uses systems that provide reports which enable CANALI to analyse, and, where needed, improve the results of its communications.
3.f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Your common personal data, including the data listed under points 2.1, 2.2, and 2.4 above, may also be used by CANALI for classification purposes.
This purpose consists in the creation of homogenous groups of data subjects by conducting a mere extraction from the data subjects’ database, whereby data subjects are grouped based on their being part of common macro-categories, including age group, gender, geographical area of residence, nationality, etc.
3.g. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS, AND MARKET SURVEYS
CANALI aggregates its customers’ personal data such as those indicated under points 2.1, 2.2 and 2.4 above, to conduct statistical analyses, for the purpose of constantly improving its services and product. CANALI adopts technical and organisational measures to ensure that statistical analysis data cannot be attributed to single clients. Please note that such personal data are not processed on an anonymous basis.
Your common personal data, such as the data under point 2.1 and 2.2, may be used for the purpose of sending and processing customer satisfaction surveys or market surveys via post, phone, and/or text (including instant messaging).
3.h. DATA PROCESSING FOR “SOFT SPAM” PURPOSES
Your common personal data such as those indicated under point 2.2 above, can be used for sending e-mail communications concerning products and services similar to the CANALI’s products you ordered, a process known as Soft Spam (as per Article 130, paragraph 4, of Italian Privacy Code).
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.a above, the legal basis for processing your personal data, and namely implementation of pre-contractual and contractual measures and/or compliance with the legal requirements to which Data Controller is subject, can be found in Article 6 letters b) and c) GDPR.
b. DATA PROCESSING FOR THE PURPOSE OF WEBSITE NAVIGATION
Legal basis
For the pursuit of the purposes indicated under paragraph 3.b above, the legal basis for processing your personal data, and namely monitoring the proper functioning of the Website, can be found in Article 6.1 letter f) of the GDPR, i.e. the pursuit of the legitimate interest of the Data Controller. Please note that such data could, in addition, be used by law enforcement authorities to ascertain responsibility in the event of any cybercrimes harming the Website. Without prejudice to the foregoing, said data will be retained for the period of time provided for by applicable laws and, in any case, for the time strictly necessary to provide users the services they requested and to ensure the transmission of communication through the Website.
c. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.c above, the legal basis for processing your personal data consisting in the sending of information material(newsletters) can be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
d. DATA PROCESSING FOR MARKETING PURPOSE
Legal basis
For the pursuit of the purposes indicated under paragraph 3.d above, the legal basis for processing your personal data consisting in the sending of commercial communications can be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
e. DATA PROCESSING FOR THE PURPOSES OF CONDUCTING PREFERENCE ANALYSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.e above, the legal basis for processing your personal data consisting in the conducting preference analyses, can be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Legal basis
To pursue the purposes listed under paragraph 3.f, the legal basis for processing your data can be found in Article 6.1 letter f) of the GDPR. It is understood that the legitimate interest of CANALI to carry out the activities listed in paragraph 3.f above is suitable balanced against the need to protect your rights.
g. DATA PROCESSING FOR CONDUCTING STATISTICAL ANALYSES, CUSTOMER SAFISFACTION SURVEYS, OR MARKET SURVEYS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.f above, the legal basis for processing your personal data consisting in the conduction of statistical analyses, can be found in Article 6.1 letter f) GDPR. It is understood that CANALI’s legitimate interest in conducting the activities listed under paragraph 3.f above, is suitably balanced against your need to protect your rights.
h. DATA PROCESSING FOR “SOFT SPAM” PURPOSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.g above, the legal basis for processing your personal data, and namely to conduct “soft spam” activities, can be found in Article 6.1 letter f) GDPR, without prejudice to your right to object as per Article 21 GDPR.
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Storage period
The common personal data of the users and customers of CANALI’s website collected for the purposes indicated under paragraph 2.a above, will be stored for as long as necessary for the performance of the contract, or as per the provision of statutory or contractual guarantees, and for no more than 10 years after termination of the contract, unless additional retention periods are provided for by applicable law.
b. *DATA PROCESSING FOR THE PURPOSE OF WEBSITE NAVIGATION *
Storage period
Your personal data collected for the purposes indicated under paragraph 2.b above will be stored for the entire session and until the browser is closed.
c. DATA PROCESSING FOR THE PURPOSE OF SENDING OF NEWSLETTERS
Storage period
Your personal data collected for the purposes indicated under paragraph 2.c above, will be stored for a period of no more than 5 (five) years starting from the date of your subscription to our newsletter service, unless you have withdrawn the consent previously provided in such respect. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
d. DATA PROCESSING FOR MARKETING PURPOSES
Storage period
Your personal data collected for the purposes indicated under paragraph 2.d above, will be stored for a period of no more than 5 years starting from the date of your last purchase, without prejudice to the exercise of your right to object to the processing of your data for such purpose. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
e. DATA PROCESSING FOR THE PURPOSE OF PREFERENCE ANALYSES
Storage period
Your personal data collected for the purposes indicated under paragraph 2.e above, will be stored for a period of no more than 5 (five) from the date of your last purchase, unless you have withdrawn your consent or you have exercised your right to object to the processing of your data for this purpose. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Retention period
Your personal data collected for the purposes indicated in paragraph 3.f above shall be retained for a period not exceeding 5 (five) years from the date of your last purchase, unless you have exercised your right to object to the processing of your data for said purpose. In addition, we invite you to read and acknowledge Canali’s Cookie Policy for more information on how the Controller may use tracking technologies.
g. DATA PROCESSING FOR STATISTICAL ANALYSES, CUSTOMER SAFISFACTION SURVEYS, OR MARKET SURVEYS
Retention period
Your personal data collected for the purposes indicated under paragraph 2.f above, are stored for a period of no more than 5 (five) years from the data of your last purchase, without prejudice to your right to object to the processing of your data for this purpose.
h. PROCESSING FOR SOFT SPAM PURPOSES
Retention period
Your personal data collected for the purposes of sending soft spam communications, will be stored by the Data Controller for a period of no more than 5 (five) years from your last purchase, unless you exercise your objection right as per Article 21 GDPR.
Your data may be communicated to:
• CANALI’S employees/staff, expressly and duly authorized to process your data, as per Article 29 GDPR
• CANALI Group companies, in their capacity as data processors, pursuant to Article 28 of the GDPR, or as independent data controllers as the case may be;
• external professionals or firms (such as technology partners / Social Media), in the capacity as Processors under Article 28 of the GDPR, or as independent data controllers, as the case may be.
• Competent Public Authorities.
Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and shall be accessible to the CANALI Companies worldwide, including Canali SpA a Socio Unico, Canali Retail France, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.
CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, France, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.
The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.
These transfers of data are compliant to the terms and conditions provided by applicable data protection laws (for European Residents: compliance to Articles 45 and/or 46 letter c) GDPR).
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for the purposes indicated under point 2.1 is necessary to allow us to offer you the products/services you request. Indeed, at our Canali boutiques and on the Website, you can purchase Canali products by either providing or refusing to provide said data.
The provision of your personal data for the purposes indicated under point 2.2 is optional if you want to finalize the purchase of Canali products at our Canali boutiques, unless you request to have the products shipped to a shipping address in Italy, while it is necessary if you want to purchase Canali products through the Website. In this last case, a refusal to provide us with your personal data may make it impossible for us to provide you with the service you requested.
The provision of your personal data for the purposes indicated under point 2.3 is optional if you do not want to receive an invoice, while it is necessary if you ask to receive an invoice. In this last case, a refusal to provide us your personal data may result in an impossibility for us to provide the service you requested.
b. DATA PROCESSING FOR BROWSING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your browsing data is automatic (therefore, necessary) when you browse the Website. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
c. DATA PROCESSING FOR THE PURPOSE OF SENDING OF NEWSLETTERS
Nature of the Provision of personal data and consequences of refusing to do so
Newsletters shall be sent only after you have given your free, express, and optional consent to subscribing to our newsletter. Should you refuse to provide your data and/or subscribe to our newsletter, this shall not negatively affect your utilisation of the services offered on the Website, including sales, post-sales, and related services (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) as well as your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels, etc.).
d. DATA PROCESSING FOR MARKETING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
Marketing activities shall be conducted exclusively with your free, express, and optional consent, Should you refuse to provide your data and consent to marketing activities, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related activities (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) and your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels).
e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES
Nature of the Provision of personal data and consequences of refusing to do so
Preference analyses shall be conducted exclusively with your free, express, and optional consent. Should you refuse to provide your data and consent to preference analysis activities, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related activities (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) and your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels).
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Nature of the provision of personal data and consequences of refusing to do so
The provision of your personal data for classification purposes is necessary to the pursuit of CANALI’s legitimate interest, appropriately balanced with the requirement to protect your rights. It is understood that you may exercise your right to object to processing at any time.
g. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES AND SENDING CUSTOMER SATISFACTION SURVEYS AND MARKET SURVEYS
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for statistical analyses of your aggregate data is necessary to pursuing the legitimate interest of CANALI, appropriately balanced with the requirement to protect your rights.
The provision of your personal data for the purpose of sending and processing customer satisfaction surveys or market surveys is necessary to pursue the legitimate interest of CANALI, appropriately balanced with the requirement to protect your rights. Once you receive a customer satisfaction questionnaire, you have the option to decide whether or not you wish to voluntarily provide your answers.
h. PROCESSING FOR SOFT SPAM PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for the purpose of sending spam e-mails is necessary to pursue the legitimate interest of CANALI. It is understood that you can exercise your right to object to said processing at any time.
6.a According to article 15-21 GDPR, subject to any restrictions as may apply, you have the right to:
• receive confirmation of the existence of personal data and access their content (right to access);
• update, modify and/or correct your personal data (right of rectification);
• request cancellation or limitation of the processing of personal data processed in violation of law, including data whose storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to cancellation and right to limitation);
• object to the processing (right to object);
• withdraw consent, where granted, without prejudice to the lawfulness of the processing based on the consent granted before the withdrawal (right to withdraw consent);
• request the Controller to directly transfer the portable data to another data controller, only in certain situations (right to data portability);
6.b Should you believe that the processing of your personal data is in violation of the provisions of the GDPR, you have the right to lodge a complaint before the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), as provided for under Articles 13 and 77 GDPR, as well as art. 140 bis of the Privacy Code, or to take legal action pursuant to Article 79 GDPR.
You may at any time exercise the rights listed above by:
• accessing the dedicated section of Your personal account on this website;
• if you want to withdraw your consent, by clicking on the “unsubscribe” link at the bottom of every newsletter in your mailbox, to unsubscribe to the newsletter service only;
• accessing a platform available on the Website to exercise your privacy rights, available at: https://privacycanali.whistlelink.com
Children under the age of 18 are not allowed to provide their personal data on CANALI’s website. CANALI shall not be responsible for any false statements made by minors, and in any case, should any statements be found to be false, any personal data and any material acquired shall be immediately erased. CANALI shall provide its assistance to parents and/or legal guardians in any requests concerning the personal data of minors, in accordance with applicable law.
The Controller reserves the right to amend or simply update this Privacy Policy, in whole or in part, at any time.
We therefore invite you to visit this section regularly for the most up-to-date version. Using the Website after its date of publication will imply presumed acceptance of the Privacy Policy. However, in the event of significant changes to this Privacy Policy or in the event of amendments affecting the consents you have provided, Canali will inform you of such changes, as the case may be, via e-mail and, where needed, ask you to renew your consent.