Canali S.p.A. a socio unico (“Canali SpA”), with registered office in Sovico (MB), at via Lombardia 17/19 – Attn. DPO/Privacy Committee, >Canali USA Inc. (“Canali USA”) with office at 415 West 13th Street 2nd Floor, New York, NY 10014, USA, Canali Madison LLC, with office at 415 West 13th Street, 2nd Floor, New York, NY 10014, USA, (“Canali Madison”), Canali Beverly Hills LLC (“Canali Beverly Hills”) (Canali SpA, Canali USA, Canali Madison, Canali Beverly Hills are jointly defined as “CANALI”) recognize the importance of personal data and make every reasonable effort to guarantee the protection thereof. This policy describes the types of information we may collect from you or that you may provide when you visit Canali’s website at https://www.canali.com (the “Website”) or our Canali boutiques.
CANALI S.p.A. has also appointed a data protection officer to be contacted at the following e-mail address: dpo[AT]canali.it
CANALI processes the following categories of your common personal data:
2.1 Identifying data: such as, by way of example, name and surname, date of birth;
2.2 Contact details data: such as by way of example, residence address, e-mail address, telephone/mobile number;
2.3 Accounting data: such as, by way of example, fiscal/tax code, credit card number, debit card number, payment details, bank account;
2.4 Purchase data: such as, by way of example, tailoring measures and measurements for customising Canali’s products, habitual point of sale, amount spent and frequency of purchases, products purchased, products added in the “wish lists” or to the shopping cart;
2.5 Web surfing data: as per section 3.b below.
3.a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
For this purpose, your personal data are processed by:
3.b. DATA PROCESSING FOR SURFING THE WEBSITE
For this purpose, your personal data are processed by Canali SpA acting as Data Controller.
The servers and computer systems used to operate the Website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data, although not collected to be associated with identified data subjects, by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of personal data includes the IP addresses of the devices used by you to connect to the Website, as well as the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used for submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and computer environment.
These data, necessary for the proper functioning of the Website, are also processed for the purpose of:
3.c. PROCESSING OF DATA FOR THE SENDING OF NEWSLETTERS
For this purpose, your personal data are processed by Canali SpA acting as Data Controller. Your common personal data, as those indicated under point 2.2 above, may also be used, upon your consent, for the sending of newsletters via email, concerning CANALI’s products or services.
To send its newsletters, CANALI uses systems that provide reports, which enable CANALI to organise, and where needed improve the results of said communications.
3.d. DATA PROCESSING FOR MARKETING PURPOSE
For this purpose, your personal data are processed by:
Your common personal data, as those indicated under points 2.1, 2.2 and 2.4 above, may also be used, upon your consent, for sending communications concerning CANALI’s products, services and/or events, or satisfaction surveys or market surveys, via mail, e-mail, newsletter, telephone, and/or text messages (including instant messaging services) and social media.
To send its newsletters and communications via email, CANALI furthermore uses systems that provide reports, which allow CANALI to analyse and where needed improve the results of its communications.
3.e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES
For this purpose, your personal data are processed by:
3.f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
For this purpose, your personal data are processed by:
3.g. PROCESSING OF AGGREGATE DATA FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS, OR MARKET SURVEYS
Personal Data and Purposes
For this purpose, your personal data are processed by:
CANALI aggregates its customers’ personal data, such as those indicated under points 2.1, 2.2 and 2.4 above, to conduct statistical analyses, for the purpose of constantly improving its services and product. CANALI adopts technical and organisational measures to ensure that statistical analysis data cannot be attributed to single clients. Please note that such personal data are not processed on an anonymous basis.
Your common personal data, such as the data under point 2.1 and 2.2 above, may be used for the purpose of sending and processing customer satisfaction surveys or market surveys via post, e-mail, phone, and/or text (including instant messaging).
3.h. PROCESSING FOR THE SO-CALLED SOFT SPAM PURPOSES
For this purpose, your personal data are processed by Canali SpA acting as Data Controller.
Your common personal data, such as those indicated under point 2.2 above, can be used for sending of e-mail communications concerning products and services similar to the CANALI’s products ordered, known as - Soft Spam.
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.a above, the legal basis of the processing of your personal data consisting in the implementation of pre-contractual and contractual measures and/or compliance with legal requirements to which Data Controller is subject, is to be found both in Article 6 letters b) and c) GDPR.
b. DATA PROCESSING FOR BROWSING THE WEBSITE
Legal basis
For the pursuit of the purposes indicated under paragraph 3.b above, the legal basis of the processing of your personal data consisting in the monitoring of the proper functioning of the Website is to be found in Article 6.1 letter f) of the GDPR, i.e. for the pursuit of the legitimate interest of the Data Controller. Please note that such data could, in addition, be used by public security authorities to ascertain responsibility in the event of any computer crimes to the detriment of the Website. Without prejudice to the foregoing, the data themselves will be stored for the period of time provided for by applicable laws and, in any case, for the time strictly necessary to provide the user with the requested service as well as to ensure the transmission of communication through the Website.
c. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.c above, the legal basis of the processing of your personal data consisting in the sending of information material(newsletters) is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
d. DATA PROCESSING FOR MARKETING PURPOSE
Legal basis
For the pursuit of the purposes indicated under paragraph 3.d above, the legal basis of the processing of your personal data consisting in the sending of commercial communications is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
e. DATA PROCESSING FOR THE PURPOSES OF CONDUCTING PREFERENCE ANALYSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.e above, the legal basis of the processing of your personal data consisting in the conducting preference analyses, is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Legal basis
To pursue the purposes listed under paragraph 3.f, the legal basis for processing your data can be found in Article 6.1 letter f) of the GDPR. It is understood that the legitimate interest of CANALI to carry out the activities listed in paragraph 3.f above is suitable balanced against the need to protect your rights.
g. DATA PROCESSING FOR CONDUCTING STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS, OR MARKET SURVEYS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.g above, the legal basis of the processing of your personal data consisting in the conduction of statistical analyses, is to be found in Article 6.1 letter f) GDPR. It is understood that CANALI’s legitimate interest in conducting the activities listed under paragraph 3.f above, is suitably balanced against your need to protect your rights.
h. DATA PROCESSING FOR THE SO-CALLED SOFT SPAM PURPOSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.h above, the legal basis of the processing of your personal data consisting in the so-called soft spam, is to be found in Article 6.1 letter f) GDPR, without prejudice to your right to object as per Article 21 GDPR.
Your data may be communicated to:
• CANALI’S employees/staff, expressly and duly authorized to process your data, as per Article 29 GDPR
• CANALI Group companies, in their capacity as data processors, pursuant to Article 28 of the GDPR, or as independent data controllers as the case may be;
• external professionals or firms (such as technology partners / Social Media), in the capacity as Processors under Article 28 of the GDPR, or as independent data controllers, as the case may be.
• Competent Public Authorities.
Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and shall be accessible to the CANALI Companies worldwide, including Canali SpA a Socio Unico, Canali Retail France, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.
CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, France, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.
The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.
These transfers of data are compliant to the terms and conditions provided by applicable data protection laws (for European Residents: compliance to sections 45 and/or 46 lett.c GDPR)
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data as those indicated under point 2.1 is optional for the above purposes. As a matter of fact, either at our Canali boutiques and on the Website, you could finalize the purchase of Canali products both with or without providing these data.
The provision of your personal data as those indicated under point 2.2 is optional if you want to finalize the purchase of Canali products at our Canali Boutiques unless in case you require the shipping of products at a shipping address in the USA; while it is necessary if you want to finalize the purchase of Canali products on the Website. In this latter case, a refusal to provide us your personal data may result in an impossibility for us to provide the service you requested.
The provision of your personal data as those indicated under point 2.3 is optional if you do not want to receive an invoice, while it is necessary if you ask to receive an invoice. In this latter case, a refusal to provide us your personal data may result in an impossibility for us to provide the service you requested.
b. DATA PROCESSING FOR BROWSING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your browsing data is automatic (therefore, necessary) when you browse the Website. Additionally, we invite you to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
c. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS
Nature of the Provision of personal data and consequences of refusing to do so
Newsletters shall be sent only after you have given your free, express, and optional consent to subscribing to our newsletter. Should you refuse to provide your data and/or subscribe to our newsletter, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related services (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) as well as your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels, etc.).
d. DATA PROCESSING FOR MARKETING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
Marketing activities shall be conducted exclusively with your free, express, and optional consent, Should you refuse to provide your data and consent to marketing activities, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related activities (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) and your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels).
e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES
Nature of the Provision of personal data and consequences of refusing to do so
Preference analyses shall be conducted exclusively with your free, express, and optional consent. Should you refuse to provide your data and consent to preference analysis activities, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related activities (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) and your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels).
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Nature of the provision of personal data and consequences of refusing to do so
The provision of your personal data for classification purposes is necessary to the pursuit of CANALI’s legitimate interest, appropriately balanced with the requirement to protect your rights. It is understood that you may exercise your right to object to processing at any time.
g. PROCESSING OF AGGREGATE DATA FOR STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS, OR MARKET SURVEYS
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for statistical analyses of your aggregate data is necessary to pursuing the legitimate interest of the Data Controllers, suitably balanced against the need to protect your rights.
The provision of your personal data for the purpose of sending and processing customer satisfaction surveys or market surveys is necessary to pursue the legitimate interest of CANALI, suitably balanced against the need to protect your rights. Once you receive a customer satisfaction questionnaire, you have the option to decide whether or not you wish to voluntarily provide your answers.
h. PROCESSING FOR SOFT SPAM PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for the sending of spam e-mails is necessary to pursuing the legitimate interest of CANALI. It is understood that you can exercise your objection right any time.
Children under the age of 18 are not allowed to provide their personal data on CANALI’s Website. CANALI shall not be responsible for any false statements made by minors, and in any case, should any statements be found to be false, any personal data and any material acquired shall be immediately erased. CANALI shall provide its assistance to parents and/or legal guardians in any requests concerning the personal data of minors, pursuant to the applicable laws.
The Data Controllers reserve the right to amend or simply update this Privacy Policy, in whole or in part, at any time.
We therefore invite you to visit this section regularly for the most up-to-date version. Use of the Website after the date of publication will imply assumed acceptance of the Privacy Policy. However, in the event of substantial changes to this privacy policy or in the event of amendments affecting the consents you have provided, Data Controllers will notify such amendments to you, as the case may be by e-mail and as may be needed, your consent sought again.
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, please click here.
Your data may be communicated to:
• CANALI’S employees/staff, expressly and duly authorized to process your data, as per Article 29 GDPR
• CANALI Group companies, in their capacity as data processors, pursuant to Article 28 of the GDPR, or as independent data controllers as the case may be;
• external professionals or firms (such as technology partners / Social Media), in the capacity as Processors under Article 28 of the GDPR, or as independent data controllers, as the case may be.
• Competent Public Authorities.
Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and shall be accessible to the CANALI Companies worldwide, including Canali SpA a Socio Unico, Canali Retail France, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.
CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, France, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.
The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.
These transfers of data are compliant to the terms and conditions provided by applicable data protection laws (for European Residents: compliance to sections 45 and/or 46 lett.c GDPR).