Go to main content

start layer

end layer

Legal Area

Privacy Policy

Welcome to the website www.karl.com.
For us your privacy and the security of your personal data are very important; therefore we collect and manage your personal data with the utmost care and take specific measures to keep them secure. Below, you will find the main information on the processing by us of your personal data in relation to your browsing on www.karl.com and the use of the services offered. For detailed information on how we manage your personal data, please read our Privacy Notice.
. Please also read the ‘Cookie Policy’ and the ‘General Terms of Use’ of the site www.karl.com, which contain detailed information regarding the conditions of our services. Some services may be subject to specific legal terms, in which case we will give you all the appropriate information from time to time.

Who are the Data Controllers?

The Data Controllers are:

  • KARL LAGERFELD B.V. (Besloten vennootschap) with headquarters at ​Herengracht 182, 1016 BR, The Netherlands, Amsterdam, Tax Code and VAT no. NL 850960678B01 (KARL LAGERFELD),

  • and

  • YOOX NET-A-PORTER GROUP S.p.A., company subject to the management and coordination of Compagnie Financière Richemont S.A., with registered office at via Morimondo 17, 20143– Milano (MI), Italia ("YNAP")


In particular, KARL LAGERFELD is the owner of the www.karl.com website and the 'Karl Lagerfeld' brand and the autonomous controller of the data processed for marketing, profiling for marketing activities and management of the CVs.
KARL LAGERFELD and YNAP are, instead, joint controllers of the data processing related to online purchase and after-sales assistance, as well as "pick up in store", "return in store" and "click from store" services (hereinafter, also "Omni-Channel Services") offered on the www.karl.com website.
For the information about the joint controller agreement between KARL LAGERFELD and YNAP, please read our Privacy Notice.
For any clarification, questions or requirements related to your privacy and the processing of your personal data, you can contact us at any time by sending a request to our ‎Customer Care or by writing to the addresses of Data Controllers above.



What data do we process and why?

The personal data that we manage are those that you provide when you complete an order and purchase goods, and those that we collect while you browse or when you use the services offered on www.karl.com. We can then collect data about you, such as personal data including name and surname, shipping address and billing address, browsing data and your purchase habits.
Your personal data is processed for the following purposes:

  • Conclude and execute the purchase contract for goods offered on www.karl.com;
  • Provide you with the services of www.karl.com such as signing up for the newsletter;
  • Allow registration to the site and use of services reserved for registered users;
  • Manage your curriculum vitae (CV) sent to KARL LAGERFELD;
  • Manage your requests forwarded to our Customer Care.


In the aforementioned cases, the processing of your personal data is legitimate as it is necessary to execute an agreement with you or to provide you with the service you have specifically requested. We also conduct statistical surveys and analyses with data in aggregate form to understand how users interact and use the site, to improve our offer and our services.
Only with your express consent, however, we process your personal data to:

  • Carry out commercial communications activities;
  • Customise the site according to your interests.



Who will process your data?

Your personal data is processed by the duly trained personnel of our company and, for organisational and functional needs related to the provision of services on www.karl.com, by our suppliers. The latter have been evaluated and chosen by us for their proven reliability and competence. Some of these subjects may also be based in non-EU countries and, in these cases, the transfer of your personal data in these countries is carried out in compliance with the guarantees established by law.



How long do we keep your data?

We keep your personal data for a limited period of time depending on the purpose for which it was collected, at the end of which your personal data will be deleted or otherwise rendered anonymous in an irreversible way. The retention period is different depending on the purpose of the processing: for example, the data collected during the purchase of goods on www.karl.com are processed until the conclusion of all administrative and accounting formalities, so they are filed in accordance with tax legislation local (ten years), while those used to send our newsletter are retained until you ask us to stop sending.
For more information see our Privacy Notice.



What are your rights?

At any time, depending on the specific processing, you can: withdraw consent to the processing, know which of your personal data we have in our possession, its origin and how it is used, request the update, correction or integration as well, in the cases provided for by the current provisions, the cancellation, the limitation of processing or oppose their processing. If you wish, you can request to receive personal data held by us that concern you in a format readable by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you. If you believe that the processing of your personal data has been carried out illegitimately, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/).
This information may undergo changes and additions over time, so we invite you to periodically check the contents. Where possible, we will try to inform you promptly of any changes made.



Privacy Notice

1. General information

Who are the Data Controllers?

The Data Controllers are:

  • KARL LAGERFELD B.V. (Besloten vennootschap), with headquarters at ​Herengracht 182, 1016 BR, The Netherlands, Amsterdam, Tax Code and VAT no. NL 850960678B01 (KARL LAGERFELD),

  • and

  • YOOX NET-A-PORTER GROUP S.p.A., company subject to the management and coordination of Compagnie Financière Richemont S.A., with registered office at via Morimondo 17, 20143– Milano (MI), Italia ("YNAP").


In particular, KARL LAGERFELD is the owner of the www.karl.com website and the 'Karl Lagerfeld' brand and the autonomous controller of the data processed for marketing, profiling for marketing activities and management of the CVs.
KARL LAGERFELD and YNAP are, instead, joint controllers of the data processing related to online purchase and after-sales assistance, as well as "pick up in store", "return in store" and "click from store" services (hereinafter, also "Omni-Channel Services") offered on the www.karl.com website.

KARL LAGERFELD and YNAP have signed a joint controller agreement to determine their respective responsibilities about data protection laws, whose essence is summarised in the following table:

Joint Controllers - Respective responsibilities
Data processing activities KARL LAGERFELD YNAP Each Party

Online Purchase

  • Sell online (purpose of the processing)
  • Choice of the markets (territory)

  • Online sale
  • Invoicing
  • Logistics
  • Payments
  • Shipping
  • E-commerce platform and technology means for online Store (means of the processing)
  • Fraud prevention
  • Statistical analysis
After-sales assistance
  • Managing of User’s requests about:
    • Product information
    • Corporate
    • Retail store purchase
    • Press
  • Anti-counterfeit
  • Managing of User’s requests about:
    • Shopping
    • Returns and Refunds (legal guarantee)
    • Size guide
    • My Account
    • Payments
    • Shipping
    • Privacy
    • Technical help
    • Watches
  • Fraud prevention
  • Statistical analysis

Omni-Channel Services
  • Decision to activate the services (purpose of processing)
  • Choice of the markets (Territory)
  • Decision on and relationship with the Points of Store/physical stores
  • Privacy and Data protection appointment to Points of Store/physical store
  • Privacy and Data protection instructions and training to Points of Store/physical store staff
  • Anti-counterfeit
  • E-commerce platform and technology means for online Store (means of the processing)
  • Web tool "Store in Touch"
  • Training to Points of Store/physical store staff on "Store in Touch" tool
  • Fraud prevention
  • Statistical analysis



If you wish, for any request regarding the protection of your personal data and the exercise of your rights, you can contact us at any time by sending a request to our Customer Care, as our contact point, or by writing to the addresses of Data Controllers above‎‎.

How to contact the Data protection officers?
KARL LAGERFELD has appointed a Data Protection Officer (DPO) who can be contacted directly at the addresses below:

Data Protection Officer - DPO c/o KARL LAGERFELD B.V. Looiersgracht 43, 1016 VR Amsterdam, Netherlands;
E-mail: privacy.officer@karllagerfeld.com

YNAP has appointed a Data Protection Officer (DPO) who can be contacted directly at the addresses below:

Data Protection Officer - DPO c/o YNAP S.p.A., via N. Nannetti n. 1, 40069 – Zola Predosa, Bologna (BO), Italy;
E-mail:DPO@ynap.com

2. What personal data do we collect?

The categories of personal data that we collect and process when you browse or purchase on www.karl.com, are as follows:

  1. the personal data necessary to conclude and execute your purchase or to use the Omni-Channel Services on www.karl.com such as name and surname, email address, shipping address, billing address, telephone and payment details;
  2. your email address when you sign up for our newsletter service;
  3. the personal data you provide when you contact our Customer Care to provide the assistance requested or when you send your curriculum vitae (CV) to KARL LAGERFELD;
  4. with your consent, your personal data for commercial communications;
  5. for the registration of your My Account, your name and surname, your email address, password and your date of birth. If you are a registered user, we collect information about your access to the reserved area of the site. By express consent, through the analysis of your personal data, we can process information regarding your interests and preferences with respect to our products and services, in order to present proposals and offers in line with your tastes.
  6. information about your browsing on www.karl.com, such as the pages you visit and how you interact with the single page and we save this information on our servers. We inform you that we do not process personal data relating to minors. If you access www.karl.com and use the services offered by us you declare that you are of legal age.

3. How do we use personal data collected?

We collect and process your personal data for the following purposes:

  1. Conclude and execute the purchase agreement for the products offered on www.karl.com. When you complete your purchase, we ask you for the personal data necessary for the execution of the agreement, such as payment, anti-fraud checks if you choose to pay by credit or debit card, billing, shipping of the product and possible management of the return.
  2. Registration on the site and use of the services offered to registered users. Registration on the site is possible through the inclusion of some personal information, necessary to ensure your identification and the performance of the services offered to registered users.
  3. Provision of services offered on www.karl.com. For this purpose, we need to collect the personal data necessary to perform the specific service requested by you in relation to each service and its characteristics.
  4. Management of requests to Customer Care, which uses the personal data you provide to meet your requests for information and requests for assistance.
  5. Sending CVs. If you send your CV to be considered for an open job position, KARL LAGERFELD will use the information in your CV exclusively for this purpose. The personal data relating to your application may be transferred to third-party providers of recruiting and application software. In case of an open application, your CV will be kept for a maximum period of six months. Otherwise your CV will be kept for a maximum of 4 weeks after closing of the application procedure, after which it will be deleted: if you want, you can of course send KARL LAGERFELD a new updated version.
  6. statistical analysis and surveys. We use some information about your use of the site, your browsing and use of the related services to perform analysis and statistical surveys in order to improve our offer and our services.
  7. Sending commercial communications following the purchase of one of our products, so-called soft spam. Following the purchase of one of our products on the site, KARL LAGERFELD will send you communications containing commercial proposals on products and related services to the email address you provided during the conclusion of the order.
  8. Subject to your express consent, KARL LAGERFELD may use the contact details you have provided for commercial communications on products and services, in order to update you on news, new arrivals, exclusive products, offers and promotions. In addition, always with your consent, KARL LAGERFELD will be able to use your contacts as part of market research and surveys for the detection of satisfaction in order to improve services and the relationship with users.
  9. Only with your consent, KARL LAGERFELD can personalise your experience as a registered user on www.karl.com, proposing previews and offers in line with your tastes and sending you commercial communications tailored to your interests. The personalisation will be done by analysing your previous purchases and other information described in the previous paragraph 'What personal data do we collect?'. For more information on this data and on the activity that allows it to be processed, please refer to the paragraph 'My Account'.


If you wish to authorise the activities referred to in points h) and i) and then do not wish to receive further communications from KARL LAGERFELD or if you wish to limit the way in which you are contacted, you can interrupt these communications at any time by simply clicking on the appropriate 'unsubscribe' link at the bottom of each communication, or by accessing your My Account or you can always contact KARL LAGERFELD through our Customer Care or by writing to the address above. We inform you that you may receive further communications from KARL LAGERFELD even after submitting your unsubscription request, as some submissions may have already been planned, our systems may take some time to process your request.
In relation to all the activities mentioned above, we will process your personal data mainly through IT and electronic tools; the tools we use guarantee high safety standards, in full compliance with current legislation.

4. My Account

When creating your My Account we offer you the opportunity to use the following services:

  1. My profile: manage your personal data and your consent
  2. My orders: follow the shipment and check the history of your orders
  3. My cards: save your credit card details to quickly complete your purchases
  4. Address Book: save all your addresses to quickly complete your purchases
  5. Wish List: create your wish list: you can save up to 50 items, be notified of their availability and add them to the Shopping Bag at any time.


With your express consent, KARL LAGERFELD may use your contact details for commercial communications on products and services, in order to update you on news, new arrivals, exclusive products, and for the conduct of opinion polls and market research, in order to update you on news, new arrivals, exclusive products, and on offers and promotions, and for market research and surveys to determine your level of satisfaction and improve services (e-mail, Whatsapp, SMS, post mail etc.).

Only with your prior consent, KARL LAGERFELD will be able to customise your experience and the contents of commercial communications and offers that you will see when you navigate to www.karl.com as a registered user. This activity allows you to facilitate the search for products and services that are in line with your interests and at the same time allows us to improve our offering for you. Personalisation is made possible by the analysis of your personal data in our possession, described in the previous paragraph 'What personal data do we collect?'. In particular, the information on purchases you have made in the past and those relating to the sections of the site you visit most often or the services you use most often help us to understand which products and services you are most interested in. To ensure that the information in our possession is correct and allow us to perform the activities described above, we invite you to access the 'My profile' section of your My Account and, if you deem it necessary, to update them.

5. Cookies

KARL LAGERFELD and YNAP use automatic systems of data collection, such as cookies. A cookie is a device transmitted to the hard drive of an Internet user. While cookies do not contain intelligible information, they allow us to link an Internet user to personal information provided by such user through the US Site. Cookies are disseminated by our servers and no one may gain access to the information contained therein. KARL LAGERFELD and YNAP process information collected by cookies in order to optimize its services and the US Site for the needs and preferences of its users. We disseminate cookies in connection with functions such as browsing the catalogue, purchasing products on-line and supplying "My Account" services. As you may know, each Internet browser allows the deletion of cookies after each session. Your Internet browser contains instructions on how to carry out these procedures of deletion. Please access the appropriate instructions section on your Internet browser if you wish to delete cookies. Your acceptance of our automatic procedures of collection of data and the use of cookies is necessary to take advantage of many features and services offered by the US Site, including the purchase of products. If you set your browser to block or delete cookies, we cannot guarantee that you will have access to all the features and services offered by the US Site (for example, your computer may not be able to display the image of the product you are in the process of purchasing). You can easily activate the “Do Not Track Signal” by accessing the DNT instructions section of your browser through the following links:

IE: https://support.microsoft.com/en-us/help/17288/windows-internet-explorer-11-use-do-not-track
Safari:https://support.apple.com/kb/PH21416?locale=en_US
Chrome:https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
Firefox: https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature

6. Legal basis of the processing

We only process your personal data in the presence of one of the legal requirements established by current legislation, and specifically:

  1. For the conclusion and execution of an agreement of which you are a part or in order to take steps at your request prior to entering into a contract. This basis legitimises the processing of personal data that takes place in the following activities:
    • Conclusion and execution of a purchase agreement for the products offered on www.karl.com. When we process your data for the conclusion of the purchase agreement of which you are a part, we ensure that we only use the minimum information necessary for the execution of this;
    • Registration on the site and use of services reserved for registered users;
    • Provision of services offered on www.karl.com (e.g. Omni-Channel Services);
    • Management of your curriculum vitae (CV);
    • Management of your requests by our Customer Care.


    The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data, it will not be possible to conclude or execute the agreement and your requests. This means that you will not be able to purchase products and you will not be able to use our services and that we will not be able to handle your requests.


  2. To comply with a legal obligation.
    In the event of conclusion of an agreement for the purchase of goods on www.karl.com, the processing of the user's data will take place in order to fulfill the legal obligations to which we comply with. You are free to decide whether to conclude an agreement and whether or not to disclose your data, but if you conclude it, your data will be necessary and will be processed to effect the aforementioned legal obligations.


  3. for our legitimate interest.
    If you purchase products on www.karl.com by credit or debit card, some of your personal data may be processed to carry out anti-fraud activities: we have a legitimate interest in carrying out this activity to prevent and pursue any fraudulent activity. For internal administrative purposes, data may be processed by companies belonging to the business group to which KARL LAGERFELD or YNAP belongs.


  4. Based on your consent.
    KARL LAGERFELD will carry out the following processing only if you have given us your express consent:

    • Carrying out marketing activities and opinion polls and market research;
    • Analysis of your browsing and consumption habits in the use of your My Account profile, in order to personalise your experience on www.karl.com.

    Providing your consent for these activities is optional. You are free to give your consent or not, but without it, it will not be possible for KARL LAGERFELD to carry out marketing activities, opinion polls and market research, and to analyse your habits.

7. Who will process your data?

Your personal data will be processed by KARL LAGERFELD and YNAP internal staff who are specifically trained and authorised to process it. In carrying out the processing, the data may also be transmitted to companies belonging to the business group to which KARL LAGERFELD or YNAP belongs.
Your personal data will also be transmitted to third parties that we use to provide our services www.karl.com; these subjects have been adequately selected and offer a guarantee of compliance with the rules on the processing of personal data. These subjects have been designated as responsible for the processing and carry out their activities according to the instructions given by KARL LAGERFELD or YNAP and under its control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specialised in IT and telematic services, couriers, agencies that carry out marketing activities, companies specialised in market research and data processing.
In particular, KARL LAGERFELD use a third party called CrossEngage. The purpose of the data processing is provision of services in connection with the CrossEngage platform to activate customers, prevent churn and increase loyalty. The nature and extent of the data processing is that CrossEngage GmbH provides a SaaS platform for user-specific cross-channel marketing campaigns. Personal and non-personal data are collected by online tracking solutions on karl.com to create customer profiles, do dynamic segmentation based on your device, you preferred channel, your customer journey, socio-demographic and historical purchase data, cross-channel campaign management. The types of personal data involved are people Master Data (name and address), Communication data (telephone, e-mail), Contract master data (contractual relationship, product or contract interest), Customer history, User-related click-stream data and Contract accounting data. The categories of data subjects are customers, prospects, subscribers and employees. The personal data will be deleted upon completion of the processing operations by Cross Engage. In the event KARL LAGERFELD received the personal data from CrossEngage, the personal data shall be deleted after 2 years after the last contact moment between you and KARL LAGERFELD’s websites or stores, unless there is an obligation to store personal data under European Union (EU) or Member State law.
Lastly, your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow KARL LAGERFELD and YNAP to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.

8. Transfer of extra EU/EEA data

Some of the third parties listed in the previous paragraph no. 6 'Who will process your data?' may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).

The transfer of your personal data to countries that do not belong to the European Union (EU) or European Economic Area (EEA) and that do not ensure adequate levels of protection will be performed only after conclusion with said subjects of specific agreements, containing safeguard clauses and appropriate guarantees for the protection of your personal data, the so-called 'standard contractual clauses', also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of an agreement between you and us (for the purchase of goods offered on our website, for registration on the website or use of services on the website) or for the management of your requests.

9. How long do we keep the data?

We keep your personal data for a limited period of time, different depending on the type of activity that involves the processing of your personal data. After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way.
Your personal data is stored in compliance with the terms and criteria specified below:

  1. data collected to conclude and execute agreements for the purchase of goods on www.karl.com: until the completion of administrative and accounting formalities. The billing data will be kept for ten years from the billing date;
  2. Data of the registered user: the data will be stored until you request cancellation of your My Account;
  3. Data relating to the payment: up to the certification of the payment and the conclusion of the related administrative and accounting formalities resulting from the expiration of the right of withdrawal and the terms applied for the contestation of the payment;
  4. Data collected in the context of the use of services offered on www.karl.com (e.g. Omni-Channel Services): this data is retained until the termination of service or request for cancellation of the subscription to the service by the user;
  5. Data related to user requests to our Customer Care: the data useful to assist you will be kept until your request is met;
  6. CV: for six months from receipt by KARL LAGERFELD;
  7. Data used for commercial communication to users who purchase products on www.karl.com (soft spam): this data is retained until the termination of service or the exercise of the opposition by unsubscription from the service by the user;
  8. Data used to personalise the site and to show customised commercial offers: as long as the user does not request the termination of the activity and in any case within two years from the last interaction of any kind of user with KARL LAGERFELD;
  9. Data used to personalise the site and to show customised commercial offers: as long as the user does not request the termination of the activity and in any case within two years from the last interaction of any kind of user with KARL LAGERFELD;


In any case, for technical reasons, the termination of the processing and the consequent definitive cancellation or anonymity of the related personal data in an irreversible way will be final within thirty days from the terms indicated above.

10. Your rights

You can exercise your rights with reference to the specific processing of your personal data at any time. Find below their general description and how to exercise them.

  1. Access your data and modify it: you have the right to access your personal data and to request that it be correct, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession.
  2. Revoke your consent: you can revoke a consent you have given for the processing of your personal data in relation to any activity for marketing purposes at any time. In this regard, we remind you that marketing activities are considered the sending of commercial and promotional communications, the conduct of opinion polls and market research, in order to detect your degree of satisfaction and improve the services offered. Once KARL LAGERFELD receive your request, it will be his duty to promptly cease to process your personal data based on this consent, while different processing or that which is based on other assumptions will continue to be carried out in full compliance with the provisions in force.
  3. Opposition to the processing of your data: you have the right to object at any time to the processing of your personal data made on the basis of our legitimate interest, explaining the reasons that justify your request; before accepting it, we will have to evaluate the reasons for your request.
  4. Delete your data: you may request the cancellation of your personal data in the cases provided for by current legislation. Once your request has been received and examined and if it is legitimate, it will be our duty to timely cease to process your personal data and to delete it.
  5. Request that the processing of your personal data is temporarily limited: in this case, we will continue to keep your personal data but will not process it, unless it is subject to your different request and the exceptions established by law. Processing of your personal data can be limited when you dispute the accuracy of your personal data, when the processing is illegal but you oppose the cancellation of your data, when we no longer need your personal data but you need to exercise your right in court and when you oppose your processing, in the period in which we evaluate the reasons for your request.
  6. Request your data or transfer it to a party other than us (right to data portability). You can ask to receive your data that we process based on your consent or on the basis of an agreement with you in a standard format. If you wish, where technically possible and at your request, we may transfer your data directly to a third party that you indicate.


In order to exercise some of your rights described above, you can access your My Account or alternatively you can contact our ‎Customer Care‎‎ or write to the address of the Data Controllers above. In order to ensure that our users' data is not illegitimately used or infringed upon by third parties, we may ask you for some information to be sure of your identity before accepting your request to exercise one of the rights indicated.

11. Security measures

We protect your personal data with specific technical and organisational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudonymisation or the encryption of your data; the confidentiality, integrity, availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. In addition, we agree to test, verify and regularly evaluate the effectiveness of our technical and organisational measures in order to guarantee continuous improvement in the security of processing.

12. Complaints

If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the competent control authorities for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data. More information on how to present them is available on the website of the Guarantor, at http://www.garanteprivacy.it/.

13. Changes to this information

The constant development of our services may lead to changes in the characteristics of the processing of your personal data described up to now. Consequently, this privacy policy may be subject to changes and additions over time, which may also be necessary with regard to new regulatory measures regarding the protection of personal data.
Therefore, we invite you to periodically check the contents: where possible, we will try to inform you promptly on the changes made and their consequences. In any case, the updated version of the privacy statement will be published on this page, with indication of the date of its last update.

14. Legislative references and useful links

The processing of your personal data is carried out in full compliance with the regulations on the matter pursuant to General Data Protection Regulation (EU) 2016/679 The rules on the processing of Italian personal data and the provisions of the Italian Supervisory Authority (http://www.garanteprivacy.it/) and, where applicable, the competent foreign control authorities.

Last updated 26/06/2019

Back to top
Most recently updated notifications