Privacy Policy
WHO PROCESSES MY DATA?
Canali S.p.A. Unipersonale (“CANALI” or “Data Controller”) recognizes the importance of personal data and makes every reasonable effort to guarantee the protection thereof.
CANALI wishes to inform you, in accordance with Article 13 of Regulation (EU) 2016/67(“GDPR”) as well as with applicable national, EU and/or international mandatory laws, on the processing of personal data collected by CANALI boutiques and/or when accessing the CANALI’s website https://www.canali.com/ (the “Website”).
Therefore, the Data Controller is CANALI S.P.A. Unipersonale, with registered office in Sovico (MB), at via Lombardia 17/19 – Attn. DPO/Privacy Committee. The Data Controller has also appointed a data protection officer to be contacted at the following e-mail address: dpo[AT]canali.it
CANALI processes the following categories of your common personal data:
2.1 Contact details data: e-mail address;
2.2 Web surfing data: as per section 3.a. below.
3.a. DATA PROCESSING FOR SURFING THE WEBSITE
The servers and computer systems used to operate the Website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data, although not collected to be associated with identified data subjects, by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of personal data includes the IP addresses of the devices used by Users who connect to the Website, as well as the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used for submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and computer environment.
These data, necessary for the proper functioning of the Website, are also processed for the purpose of:
- obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
- to control the correct functioning of the services themselves.
It is understood that no use is made of cookies while browsing the Website for the transmission of personal information.
3.b. PROCESSING OF DATA FOR THE SENDING OF NEWSLETTERS
Your common personal data as those indicated under point 2.1 above, may also be used, upon your consent, for the sending of newsletters via email, concerning CANALI’s products or services.
To send its newsletters, CANALI uses systems that provide reports, which enable Canali to organise, and where needed improve the results of said communications.
a. DATA PROCESSING FOR BROWSING THE WEBSITE
Legal basis
For the pursuit of the purposes indicated under paragraph 3.a above, the legal basis of the processing of your personal data consisting in the monitoring of the proper functioning of the Website is to be found in Article 6.1 letter f) of the GDPR, i.e. for the pursuit of the legitimate interest of the Data Controller. Please note that such data could, in addition, be used by public security authorities to ascertain responsibility in the event of any computer crimes to the detriment of the Website. Without prejudice to the foregoing, the data themselves will be stored for the period of time provided for by applicable laws and, in any case, for the time strictly necessary to provide the user with the requested service as well as to ensure the transmission of communication through the Website.
b. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.b above, the legal basis of the processing of your personal data consisting in the sending of information material(newsletters) is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
a. DATA PROCESSING FOR SURFING THE WEBSITE
Storage period
Your personal data collected for the purposes indicated under paragraph 2.a above, will be stored for the entire session and until the browser is closed.
b. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS
Storage period
Your personal data collected for the purposes indicated under paragraph 2.b above, will be stored for a period of no more than 5 (five) years starting from the date of your subscription to our newsletter service, unless you have withdrawn the consent previously provided in such respect. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
Your data may be communicated in compliance to applicable data protection laws to:
• CANALI’s employees/staff, expressly and duly authorized to process your data;
• Canali Companies / Professional experts / External companies (e.g., technology partners), in their capacity as data processors, or as autonomous data controller as the case may be;
• Competent Public Authorities.
Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and accessible to the CANALI Companies worldwide, being Canali SpA Unipersonale, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.
CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.
The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.
These transfers of data are compliant to the terms and conditions provided by applicable data protection laws (for European Residents: compliance to sections 45 and/or 46 lett.c GDPR).
a. DATA PROCESSING FOR BROWSING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your browsing data is automatic (therefore, necessary) when you browse the Website. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
b. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS
Nature of the Provision of personal data and consequences of refusing to do so
Newsletters shall be sent only after you have given your free, express, and optional consent to subscribing to our newsletter. Should you refuse to provide your data and/or subscribe to our newsletter, this shall not negatively affect your utilisation of the services provided on the Website, including your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels, etc.).
8.a According to article 15-21 GDPR, subject to some restrictions which may apply, you are entitled to:
• receive confirmation of the existence of personal data and access to their content (access rights);
• update, modify and/or correct your personal data (right of rectification);
• request cancellation or limitation of the processing of personal data processed in violation of law, including data whose storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to cancellation and right to limitation);
• object to the processing (right to object);
• withdraw consent, where granted, without prejudice to the lawfulness of the processing based on the consent granted before the withdrawal (right to withdraw consent);
• request the Controller to directly transfer the portable data to another data controller, only in certain situations (right to portability);
• decide on post mortem as per related applicable French directive.
8.b Should you believe that the processing of your personal data is in violation of the provisions of the GDPR, you have the right to lodge a complaint before the Garante per la Protezione dei Dati Personali, as provided for under Articles 13 and 77 GDPR, as well as art. 140 bis of the Privacy Code, or to take legal action pursuant to Article 79 GDPR.
You may at any time exercise the above mentioned rights by:
• accessing the specific section of Your personal account on this website;
• should you want to withdraw your consent, clicking on the “unsubscribe” link at the foot of each newsletter in your mailbox, to unsubscribe to the newsletter service only;
• accessing a platform available on the Website to exercise your privacy rights, available at: https://privacycanali.whistlelink.com