Privacy Policy

Canali S.p.A. a socio unico (“Canali SpA”), with registered office in Sovico (MB), at via Lombardia 17/19 – Attn. DPO/Privacy Committee, and Canali UK Retail Ltd (“Canali UK”) with registered office in 3rd Floor East Unit, 12 Bridewell Place, London EC4V 6AP, United Kingdom (CANALI and Canali UK are jointly defined as “CANALI”) recognize the importance of personal data and make every reasonable effort to guarantee the protection thereof. CANALI wishes to inform you about the processing of personal data collected through the CANALI website https://www.canali.com (the “Website”), CANALI stores, customer relationship management systems, applications used by sales staff, and other digital tools employed to manage and personalise the customer experience..

CANALI S.p.A. has also appointed a data protection officer to be contacted at the following e-mail address: dpo[AT]canali.it

CANALI processes the following categories of your common personal data:

2.1 Identifying data: such as, by way of example, name and surname, date of birth;

2.2 Contact details data: such as by way of example, residence address, e-mail address, telephone/mobile number;

2.3 Accounting data: such as, by way of example, data necessary for invoicing, payment method, transaction outcome and transaction identifiers and, where applicable, bank account details;

2.4 Data relating to purchases, boutique visits and interactions with CANALI: including, by way of example, the customer’s usual point of sale, purchase history and frequency, products purchased or of interest, preferences and needs communicated, as well as relevant information and observations collected during boutique visits and interactions with sales staff.;

2.5 Web surfing data: as per section 3.b below.

The data may be provided directly by the data subject, derive from purchases and previous interactions with CANALI, or be collected through the Website, boutiques and tools used by sales staff.

3.a. DATA PROCESSING FOR CONTRACTUAL PURPOSES

For this purpose, your personal data are processed by Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.

More specifically, they may process your personal data as those indicated under points 2.1, 2.2 and 2.3 above for contractual purposes, more specifically, in order to sell Canali products and to provide after-sales services and related activities (e.g., administrative-accounting activities, organization and management of orders, shipping of orders, tailoring services, customer services, credit collection, etc..).

3.b. DATA PROCESSING FOR SURFING THE WEBSITE

The servers and computer systems used to operate the Website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

These data, although not collected to be associated with identified data subjects, by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of personal data includes the IP addresses of the devices used by Users who connect to the Website, as well as the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used for submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and computer environment.

These data, necessary for the proper functioning of the Website, are also processed for the purpose of:

- obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);

- to control the correct functioning of the services themselves.

It is understood that no use is made of cookies while browsing the Website for the transmission of personal information. For more information on the use of cookies and other tracking technologies on the Website, please see the Cookie Policy available on the Website.

The above data are processed by Canali SpA acting as Data Controller.

3.c. PROCESSING OF DATA FOR THE SENDING OF NEWSLETTERS

For this purpose, your personal data are processed by Canali SpA acting as Data Controller.

Your common personal data as those indicated under point 2.2 above, may also be used, upon your consent, for the sending of newsletters via email, concerning CANALI’s products or services.

To send its newsletters, CANALI uses systems that provide reports, which enable Canali to organise, and where needed improve the results of said communications.

3.d. DATA PROCESSING FOR MARKETING PURPOSE

For this purpose, your personal data are processed by:

- for HQ Marketing Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;

- for Boutique Marketing Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.

. Your common personal data as those indicated under points 2.1, 2.2 and 2.4 above, may also be used, upon your consent, for the sending of communications concerning CANALI’s products, services and/or events via mail, e-mail, newsletter, telephone, and/or text messages (including instant messaging services) and social media.

To send its newsletters and communications via email, CANALI furthermore uses systems that provide reports, which allow CANALI to analyse and where needed improve the results of its communications.

The communications may be personalised on the basis of the customer’s previous interactions with CANALI and may be prepared or translated with the support of automated systems and artificial intelligence. The content is reviewed by CANALI staff before being sent.

Where the personalisation uses information processed for preference analysis purposes, it will only be carried out where the customer has also given the profiling consent required for that purpose.

3.e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES

For this purpose, your personal data are processed by:

- for HQ Preference Analyses’ Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;

- for Boutique Preference Analyses’ Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.

Should you be a Customer of CANALI’s boutiques or a user of CANALI, common personal data such as those indicated under points 2.1, 2.2. and 2.4 above, may also be used, upon your consent to analyse your preferences.

This purpose includes analysing information relating to purchases, boutique visits, stated preferences and needs, interactions with CANALI and online behaviour, in order to understand your interests and purchasing habits, improve the service, and personalise subsequent interactions and communications.

The analysis may also be carried out using automated systems. It does not involve decisions based solely on automated processing that produce legal effects concerning the data subject or similarly significantly affect them.

To send said communications, CANALI uses systems that provide reports which enable CANALI to analyse, and, where needed, improve the results of its communications.

3.f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

For this purpose, your personal data are processed by:

- for HQ Classification Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;

- for Boutique Classification Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.

Your common personal data, including the data listed under points 2.1, 2.2, and 2.4 above, may also be used by CANALI for classification purposes.

This purpose consists in the creation of homogenous groups of data subjects by conducting a mere extraction from the data subjects’ database, whereby data subjects are grouped based on their being part of common macro-categories, including age group, gender, geographical area of residence, nationality, etc.

3.g. PROCESSING OF DATA FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES AND CUSTOMER SATISFACTION SURVEYS

Personal Data and Purposes

For this purpose, your personal data are processed by:

- for HQ Statistical Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;

- for Boutique Statistical Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.

CANALI uses its customers’ personal data to carry out statistical analyses aimed at improving its products and services. The data may initially be processed in identifiable or pseudonymised form; where possible, the results of the analyses are produced in aggregated form and cannot be directly linked to an individual customer. CANALI may also use its customers’ contact details to send surveys aimed at measuring satisfaction with the products and services offered and improving their quality. These communications do not contain promotional content and participation in the surveys is voluntary.

3.h. PROCESSING FOR THE SO CALLED SOFT SPAM PURPOSES

For this purpose, your personal data are processed by Canali SpA acting as Data Controller.

Your common personal data such as those indicated under point 2.2 above, can be used for sending of e-mail communications concerning products and services similar to the CANALI’s products ordered, known as - Soft Spam (as per Article 130, paragraph 4, of Italian Privacy Code). You may object to such communications at any time by clicking the unsubscribe button in the footer of the email.

a. DATA PROCESSING FOR CONTRACTUAL PURPOSES

Legal basis

For the pursuit of the purposes indicated under paragraph 3.a above, the legal basis of the processing of your personal data consisting in the implementation of pre-contractual and contractual measures and/or compliance with legal requirements to which Data Controller is subject, is to be found both in Article 6 letters b) and c) GDPR.

b. DATA PROCESSING FOR BROWSING THE WEBSITE

Legal basis

For the pursuit of the purposes indicated under paragraph 3.b above, the legal basis for the processing is CANALI’s legitimate interest pursuant to Article 6(1)(f) GDPR, consisting in ensuring the security, integrity and proper functioning of the Website, as well as preventing and detecting any abusive or unlawful use thereof. Please note that such data may also be used by public security authorities to ascertain responsibility in the event of any computer crimes committed against the Website.

c. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS

Legal basis

For the pursuit of the purposes indicated under paragraph 3.c above, the legal basis of the processing of your personal data consisting in the sending of information material(newsletters) is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.

d. DATA PROCESSING FOR MARKETING PURPOSE

Legal basis

For the pursuit of the purposes indicated under paragraph 3.d above, the legal basis of the processing of your personal data consisting in the sending of commercial communications is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.

e. DATA PROCESSING FOR THE PURPOSES OF CONDUCTING PREFERENCE ANALYSES

Legal basis

For the pursuit of the purposes indicated under paragraph 3.e above, the legal basis of the processing of your personal data consisting in the conducting preference analyses, is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.

f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

Legal basis

To pursue the purposes listed under paragraph 3.f above, the legal basis for processing your personal data is CANALI’s legitimate interest pursuant to Article 6(1)(f) GDPR, consisting in organising information relating to its customers into general macro-categories in order to support the analysis and planning of the services offered. CANALI’s legitimate interest is appropriately balanced against the need to protect your rights.

g. DATA PROCESSING FOR STATISTICAL ANALYSES AND CUSTOMER SATISFACTION SURVEYS

Legal basis

For the pursuit of the purposes indicated under paragraph 3.g above, the legal basis for the processing is CANALI’s legitimate interest pursuant to Article 6(1)(f) GDPR, consisting in analysing and improving the quality of its products, services and customer experience. This interest is pursued with due regard for the rights and freedoms of data subjects and, as regards customer satisfaction surveys, without sending promotional content.

h. DATA PROCESSING FOR THE SO CALLED SOFT SPAM PURPOSES

Legal basis

For the pursuit of the purposes indicated under paragraph 3.h above, the legal basis for the processing is CANALI’s legitimate interest pursuant to Article 6(1)(f) GDPR, consisting in informing its customers by e-mail about products or services similar to those already purchased, within the limits set out in Article 130(4) of the Italian Privacy Code. You retain the right to object at any time to receiving such communications.

. DATA PROCESSING FOR CONTRACTUAL PURPOSES

Storage period

The common personal data of the users and customers collected for the purposes indicated under paragraph 2.a above, will be stored for as long as necessary for the performance of the contract, or as per the provision of statutory or contractual guarantees, and following termination of the contract no longer than 10 years, unless further retention periods are provided for by applicable law.

b. DATA PROCESSING FOR SURFING THE WEBSITE

Storage period

Your personal data collected for the purposes indicated under paragraph 2.b above, will be stored for the entire session and until the browser is closed.

c. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS

Storageperiod

Your personal data collected for the purposes indicated under paragraph 2.c above, will be stored for a period of no more than 5 (five) years starting from the date of your subscription to our newsletter service, unless you have withdrawn the consent previously provided in such respect. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.

d. DATA PROCESSING FOR MARKETING PURPOSES

Storage period

Your personal data collected for the purposes indicated under paragraph 2.d above, will be stored for a period of no more than 5 years starting from the date of your last purchase, without prejudice to the exercise of your right to object to the processing of your data for such purpose. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.

e. DATA PROCESSING FOR THE PURPOSE OF PREFERENCE ANALYSES

Storage period

Your personal data collected for the purposes indicated under paragraph 2.e above, will be stored for a period of no more than 5 (five) from the date of your last purchase, unless you have withdrawn your consent or you have exercised your right to object to the processing of your data for this purpose. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.

f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

Retention period

Your personal data collected for the purposes indicated in paragraph 3.f above shall be retained for a period not exceeding 5 (five) years from the date of your last purchase, unless you have exercised your right to object to the processing of your data for said purpose. In addition, we invite you to read and acknowledge Canali’s Cookie Policy for more information on how the Controller may use tracking technologies.

g. PROCESSING OF AGGREGATE DATA FOR STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS

Retention period

Your personal data collected for the purposes indicated under paragraph 2.g above, are stored for a period of no more than 5 (five) years from the data of your last purchase, without prejudice to your right to object to the processing of your data for this purpose.

h. PROCESSING FOR SOFT SPAM PURPOSES

Retention period

Your personal data collected for the purposes of sending soft spam communications, will be stored by the Data Controller for a period of 5 years from your last purchase, unless you exercise your objection right as per Article 21 GDPR.

Your data may be communicated to:

· CANALI’S employees/staff, expressly and duly authorized to process your data, as per Article 29 GDPR

· CANALI Group companies, in their capacity as data processors, pursuant to Article 28 of the GDPR, or as independent data controllers as the case may be;

· external professionals or firms (such as technology partners / Social Media), in the capacity as Processors under Article 28 of the GDPR, or as independent data controllers, as the case may be.

· Competent Public Authorities.

Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and shall be accessible to the CANALI Companies worldwide, including Canali SpA a Socio Unico, Canali Retail France, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.

CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, France, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.

The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.

Where personal data are transferred outside the European Economic Area to countries for which the European Commission has not adopted an adequacy decision, CANALI implements the appropriate safeguards provided for under Article 46 GDPR, including, where applicable, the standard contractual clauses approved by the European Commission and any supplementary measures considered necessary in relation to the specific transfer. Further information on the safeguards applicable to transfers, as well as on how to obtain a copy of them, may be requested from CANALI using the contact details provided in this Privacy Policy.

DATA PROCESSING FOR CONTRACTUAL PURPOSES

Nature of the Provision of personal data and consequences of refusing to do so

The provision of personal data necessary for the performance of the purchase or the requested service is mandatory only to the extent required for the specific transaction.

For purchases made at CANALI boutiques, certain personal data, in particular contact details, may not be necessary to complete the purchase, unless additional services are requested, such as shipment of the product. For purchases made through the Website, the data indicated as mandatory are necessary to manage the order and provide the requested services. Failure to provide such data may make it impossible to complete the purchase or provide the related service.

The provision of your personal data as those indicated under point 2.3 is optionalif you do not want to receive an invoice, while it is necessary if you ask to receive an invoice. In this last case, a refusal to provide us your personal data may result in an impossibility for us to provide the service you requested.

b. DATA PROCESSING FOR BROWSING PURPOSES

Nature of the Provision of personal data and consequences of refusing to do so

The provision of your browsing data is automatic (therefore, necessary) when you browse the Website. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.

c. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS

Nature of the Provision of personal data and consequences of refusing to do so

Newsletters will be sent only after you have given your free, express and optional consent to subscribe to our newsletter. Refusal to provide your data and/or subscribe to the newsletter will only make it impossible to receive it and will not adversely affect your use of the services provided on the Website, including sales, after-sales and related services, or your browsing of the Website and related services.

d. DATA PROCESSING FOR MARKETING PURPOSES

Nature of the Provision of personal data and consequences of refusing to do so

Marketing activities will be carried out exclusively with your free, express and optional consent. If you refuse to provide your data and consent to marketing activities, this will only make it impossible to receive promotional communications and will not affect your use of the services provided on the Website, including sales, after-sales and related activities, or your browsing of the Website and related services.

e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES

Nature of the Provision of personal data and consequences of refusing to do so

Preference analyses will be carried out exclusively with your free, express and optional consent. Refusal to provide your data and consent to preference-analysis activities will only make it impossible to analyse your preferences and will not affect your use of the services provided on the Website, including sales, after-sales and related activities, or your browsing of the Website and related services.

f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

Nature of the provision of personal data and consequences of refusing to do so

The processing of your personal data for classification purposes is based on CANALI’s legitimate interest in organising information relating to its customers into general macro-categories in order to support its analysis and planning activities. You may exercise your right to object at any time.

g. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES AND SENDING CUSTOMER SATISFACTION SURVEYS

Nature of the Provision of personal data and consequences of refusing to do so

The processing of personal data for statistical analysis purposes and for sending customer satisfaction surveys is based on CANALI’s legitimate interest in measuring and improving the quality of its products and services. Participation in customer satisfaction surveys is voluntary. You may exercise your right to object to the processing at any time pursuant to Article 21 GDPR.

h. PROCESSING FOR SOFT SPAM PURPOSES

Nature of the processing of personal data and consequences of refusing to do so

The processing of your personal data for the purpose of sending communications concerning products or services similar to those you have already purchased is based on CANALI’s legitimate interest. You may exercise your right to object at any time.

6.a According to article 15-21 GDPR, subject to some restrictions which may apply, you are entitled to:

· receive confirmation of the existence of personal data and access to their content (access rights);

· update, modify and/or correct your personal data (right of rectification);

· request cancellation or limitation of the processing of personal data processed in violation of law, including data whose storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to cancellation and right to limitation);

· object to the processing (right to object);

· withdraw consent, where granted, without prejudice to the lawfulness of the processing based on the consent granted before the withdrawal (right to withdraw consent);

· request the Data Controllers to directly transfer the portable data to another data controller, only in certain situations (right to portability);

· decide on post mortem as per related applicable French directive.

6.b Should you believe that the processing of your personal data is in violation of the provisions of the GDPR, you have the right to lodge a complaint before the Garante per la Protezione dei Dati Personali, as provided for under Articles 13 and 77 GDPR, as well as art. 140 bis of the Privacy Code, or to take legal action pursuant to Article 79 GDPR or before the UK competent authority, Information Commissioner's Office ( known as ICO).

You may at any time exercise the above mentioned rights by:

· accessing the specific section of Your personal account on this website;

· should you want to withdraw your consent, clicking on the “unsubscribe” link at the foot of each newsletter in your mailbox, to unsubscribe to the newsletter service only;

· accessing a platform available on the Website to exercise your privacy rights, available at: https://privacycanali.whistlelink.com.

Children under the age of 18 are not allowed to provide their personal data on CANALI’s website. CANALI shall not be responsible for any false statements made by minors, and in any case, should any statements be found to be false, any personal data and any material acquired shall be immediately erased. CANALI shall provide its assistance to parents and/or legal guardians in any requests concerning the personal data of minors, pursuant to the applicable laws.

The Data Controllers reserve the right to amend or simply update this Privacy Policy, in whole or in part, at any time.

We therefore invite you to visit this section regularly for the most up-to-date version. Material changes will be brought to the attention of data subjects through appropriate channels. Where such changes require renewed consent, CANALI will obtain it before carrying out the new processing activity.

If you are a European resident, European law may provide you with additional rights regarding our use of your personal information. To learn more, please click here