Privacy Policy

Canali S.p.A. a socio unico ("CANALI" or the "Data Controller"), with registered office in Sovico (MB), at via Lombardia 17/19 – Attn. DPO/Privacy Committee, recognises the importance of personal data and makes every reasonable effort to protect them.

CANALI wishes to inform you, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), as well as any other applicable data protection laws and regulations, about the processing of personal data collected through the CANALI website https://www.canali.com (the "Website") and in connection with the newsletter service available through the Website.

CANALI S.p.A. has appointed a Data Protection Officer (DPO), who can be contacted at the following e-mail address: dpo[AT]canali.it.

CANALI processes the following categories of personal data:

2.1 Contact details: e-mail address;

2.2 Web browsing data: as described in section 3.a below.

The data may be provided directly by you or collected automatically when you use the Website.

3.a. DATA PROCESSING FOR BROWSING THE WEBSITE

For this purpose, your personal data are processed by Canali SpA acting as Data Controller.

The servers and computer systems used to operate the Website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

Although these data are not collected in order to be associated with identified individuals, by their nature they could, through processing and association with data held by third parties, allow users to be identified.

This category of personal data includes the IP addresses of the devices used to connect to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

These data, which are necessary for the proper functioning and security of the Website, are also processed in order to:

• obtain statistical information on the use of the Website and its services (for example, the most visited pages, number of visitors by time slot or day, and geographical areas of origin);

• monitor and ensure the proper functioning, integrity and security of the Website.

For more information on the use of cookies and other tracking technologies on the Website, please see CANALI’s Cookie Policy available on the Website.

3.b. PROCESSING OF DATA FOR THE SENDING OF NEWSLETTERS

For this purpose, your personal data are processed by Canali SpA acting as Data Controller.

Your contact details referred to in section 2.1 above may be used, with your consent, to send you newsletters by e-mail concerning CANALI products, services and initiatives.

For the sending of newsletters, CANALI uses systems that provide reports which enable CANALI to organise and, where necessary, improve the effectiveness of its communications.

a. DATA PROCESSING FOR BROWSING THE WEBSITE

Legal basis

For the purposes described in section 3.a above, the legal basis for the processing is CANALI’s legitimate interest pursuant to Article 6(1)(f) GDPR, consisting in ensuring the security, integrity and proper functioning of the Website and in preventing and detecting any abusive or unlawful use of it. Browsing data may also be made available to competent public authorities where required by law, including for the investigation of offences committed against the Website.

b. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS

Legal basis

For the purposes described in section 3.b above, the legal basis for the processing is your consent pursuant to Article 6(1)(a) GDPR, provided through the relevant consent mechanism. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

a. DATA PROCESSING FOR BROWSING THE WEBSITE

Retention period

Browsing data are retained for the period strictly necessary to ensure the proper functioning and security of the Website and, where applicable, for any longer period required by law or necessary to investigate security incidents or unlawful activity.

b. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS

Retention period

Your personal data processed for the purposes described in section 3.b above will be retained for no longer than 5 (five) years from the date of your subscription to the newsletter service, unless you withdraw your consent earlier. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Your personal data may be communicated, in compliance with applicable data protection laws, to:

• CANALI employees and staff who are expressly authorised to process personal data;

• CANALI Group companies, acting as data processors or independent data controllers, as applicable;

• external professionals and service providers (including technology partners), acting as data processors or independent data controllers, as applicable;

• competent public authorities, where required by applicable law.

Your data may be stored in CANALI's Customer Relationship Management system, hosted on servers located within or outside the jurisdiction in which the data were collected, and may be accessible to CANALI Group companies worldwide, including Canali S.p.A., Canali Retail France SAS, Canali USA Inc., Canali Madison LLC, Canali Belmont LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Far East Ltd and Canali Macau Ltd.

CANALI's Customer Relationship Management system is currently hosted on servers located in the following jurisdictions: Italy, United Kingdom, France, United States, Mainland China, Hong Kong and Macau.

The complete list of third parties to whom personal data may be disclosed or transferred may be requested at any time through: https://privacycanali.whistlelink.com.

Where personal data are transferred outside the European Economic Area to countries for which the European Commission has not adopted an adequacy decision, CANALI implements the appropriate safeguards required by Article 46 GDPR, including, where applicable, the Standard Contractual Clauses approved by the European Commission and any supplementary measures considered necessary in light of the specific transfer.

Further information on the safeguards applicable to international transfers, including information on how to obtain a copy of them, may be requested from CANALI using the contact details set out in this Privacy Policy.

a. DATA PROCESSING FOR BROWSING PURPOSES

Nature of the provision of personal data and consequences of refusing to provide them

The transmission of browsing data is automatic and therefore necessary when you access and use the Website. For further information on cookies and other tracking technologies, please see CANALI’s Cookie Policy available on the Website.

b. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS

Nature of the provision of personal data and consequences of refusing to provide them

Subscription to the newsletter is entirely voluntary. Newsletters will be sent only after you have given your free, specific and optional consent. If you do not provide your e-mail address and/or do not consent to receiving the newsletter, you will simply not receive CANALI newsletters; this will not affect your ability to browse and use the Website.

Under Articles 15–21 GDPR, subject to any applicable restrictions, you have the right to:

• obtain confirmation as to whether personal data concerning you are being processed and access such data (right of access);

• obtain the rectification of inaccurate personal data and have incomplete personal data completed (right to rectification);

• request the erasure of your personal data or restriction of processing where the conditions provided by law are met (right to erasure and right to restriction);

• object to the processing of your personal data where the conditions provided by law are met (right to object);

• withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;

• receive the personal data you have provided in a structured, commonly used and machine-readable format and, where technically feasible and the legal requirements are met, have those data transmitted directly to another controller (right to data portability).

Where applicable under French law, you may also issue instructions concerning the processing of your personal data after your death.

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. You may also seek an effective judicial remedy in accordance with applicable law.

You may exercise the rights described above at any time by:

• contacting CANALI’s Data Protection Officer at dpo[AT]canali.it;

• if you wish to withdraw your consent to receive newsletters, clicking the “unsubscribe” link included at the bottom of each newsletter;

• using CANALI’s privacy rights platform available at: https://privacycanali.whistlelink.com.

CANALI reserves the right to amend or update this Privacy Policy, in whole or in part, at any time. You are therefore invited to review this section periodically in order to access the most up-to-date version.

Material changes will be brought to your attention through appropriate channels. Where a change requires a new consent, CANALI will obtain that consent before carrying out the relevant processing.