Go to main content
Don't miss this!
  • YOUR EXCLUSIVE GIFT
    Receive an exclusive travel-size toiletry kit with any purchase of €400 or more. *Terms and conditions apply. While stocks last.[IMG|https://www.karl.com/ytos/resources/KARLLAGERFELD/images/promobar/GWPflyout.jpg]
  • Receive free shipping on all orders over €200

Legal Area

Privacy Policy

Welcome to the website www.karl.com.
Your privacy and the security of your personal data are very important to us; we therefore collect and manage your personal data with the utmost care and take specific measures to keep them secure. Below, you will find the main information regarding our processing of your personal data in relation to your browsing on www.karl.com and the use of the services offered. For detailed information on how we manage your personal data, please read our Privacy Notice.
. Please also read the ‘Cookie Policy’ and the ‘General Terms of Use’ of the site www.karl.com, which contain detailed information regarding the conditions of our services. Some services may be subject to specific legal terms, in which case we will give you all the appropriate information from time to time.

Who are the Data Controllers?

The Data Controllers are:

  • KARL LAGERFELD B.V. (Besloten vennootschap) with headquarters at ​Herengracht 182, 1016 BR, The Netherlands, Amsterdam, Tax Code and VAT no. NL 850960678B01 (KARL LAGERFELD),

  • and

  • YOOX NET-A-PORTER GROUP S.p.A., company subject to the management and coordination of Compagnie Financière Richemont S.A., with registered office at via Morimondo 17, 20143– Milano (MI), Italia ("YNAP")


In particular, KARL LAGERFELD is the owner of the www.karl.com website and the 'Karl Lagerfeld' brand and the autonomous controller of the data processed for marketing, profiling for marketing activities and management of CVs.
KARL LAGERFELD and YNAP are, however, joint controllers of the data processing related to online purchase and after-sales assistance, as well as the "pick up in store", "return in store" and "click from store" services (hereinafter also referred to as "Omni-Channel Services") offered on the www.karl.com website.
For information about the joint controller agreement between KARL LAGERFELD and YNAP, please read our Privacy Notice.
For any clarification, questions or requirements related to your privacy and the processing of your personal data, you can contact us at any time by sending a request to our ‎Customer Care or by writing to the Data Controllers at the addresses provided above.



What data do we process and why?

The personal data that we manage are those that you provide when you complete an order and purchase goods, and those that we collect while you browse or when you use the services offered on www.karl.com. We can then collect data about you, such as personal data, including name and surname, shipping address and billing address, browsing data and your purchase habits.
Your personal data is processed for the following purposes:

  • To conclude and execute the purchase contract for goods offered on www.karl.com;
  • To provide you with the services of www.karl.com such as signing up for the newsletter;
  • To allow site registration and the use of services reserved for registered users;
  • To manage any curriculum vitae (CV) you send to KARL LAGERFELD;
  • To manage any requests forwarded to our Customer Care.


In the aforementioned cases, the processing of your personal data is legitimate as it is necessary to execute an agreement with you or to provide you with the service you have specifically requested. We also conduct statistical surveys and analyses with data in aggregate form to understand how users interact and use the site, to improve our offering and our services.
Only with your express consent, however, we process your personal data to:

  • Carry out commercial communications activities;
  • Customise the site according to your interests.



Who will process your data?

Your personal data is processed by our company’s duly trained personnel and, for organisational and functional needs related to the provision of services on www.karl.com, by our suppliers. The latter have been evaluated and chosen by us for their proven reliability and competence. Some of these subjects may also be based in non-EU countries and, in these cases, the transfer of your personal data to these countries is carried out in compliance with the guarantees established by law.



How long do we keep your data?

We keep your personal data for a limited period of time depending on the purpose for which it was collected, at the end of which your personal data will be deleted or otherwise rendered anonymous in an irreversible way. The retention period is different depending on the purpose of the processing: for example, the data collected during the purchase of goods on www.karl.com are processed until the conclusion of all administrative and accounting formalities, so they are filed in accordance with local tax legislation (ten years), while those used to send our newsletter are retained until you ask us to stop sending.
For more information see our Privacy Notice.



What are your rights?

At any time, depending on the specific processing, you can: withdraw consent to the processing, know which of your personal data we have in our possession, its origin and how it is used, request its update, correction or integration, and also, in the cases provided for by the current provisions, the cancellation, the limitation of processing or oppose their processing. If you wish, you can request to receive your personal data as held by us in a format readable by electronic devices, and where technically possible, we can transfer your data directly to a third party indicated by you. If you believe that the processing of your personal data has been carried out illegitimately, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/).
This information may undergo changes and additions over time, so we invite you to check the contents periodically. Where possible, we will try to inform you promptly of any changes made.



Privacy Notice

1. General information

Who are the Data Controllers?

The Data Controllers are:

  • KARL LAGERFELD B.V. (Besloten vennootschap) with headquarters at ​Herengracht 182, 1016 BR, The Netherlands, Amsterdam, Tax Code and VAT no. NL 850960678B01 (KARL LAGERFELD),

  • and

  • YOOX NET-A-PORTER GROUP S.p.A., company subject to the management and coordination of Compagnie Financière Richemont S.A., with registered office at via Morimondo 17, 20143– Milano (MI), Italia ("YNAP").


In particular, KARL LAGERFELD is the owner of the www.karl.com website and the 'Karl Lagerfeld' brand and the autonomous controller of the data processed for marketing, profiling for marketing activities and management of CVs.
KARL LAGERFELD and YNAP are, however, joint controllers of the data processing related to online purchase and after-sales assistance, as well as "pick up in store", "return in store" and "click from store" services (hereinafter also referred to as "Omni-Channel Services") offered on the www.karl.com website.

KARL LAGERFELD and YNAP have signed a joint controller agreement to determine their respective responsibilities about data protection laws, the essence of which is summarised in the following table:

Joint Controllers - Respective responsibilities
Data processing activities KARL LAGERFELD YNAP Each Party

Online Purchase

  • Online sale (purpose of the processing)
  • Choice of the markets (territory)

  • Online sale
  • Invoicing
  • Logistics
  • Payments
  • Shipping
  • E-commerce platform and technological means for online Store (means of processing)
  • Fraud prevention
  • Statistical analysis
After-sales assistance
  • Managing of User’s requests about:
    • Product information
    • Corporate
    • Retail store purchase
    • Press
  • Anti-counterfeit
  • Managing of User’s requests about:
    • Shopping
    • Returns and Refunds (legal guarantee)
    • Size guide
    • My Account
    • Payments
    • Shipping
    • Privacy
    • Technical help
    • Watches
  • Fraud prevention
  • Statistical analysis

Omni-Channel Services
  • Decision to activate the services (purpose of processing)
  • Choice of the markets (Territory)
  • Decision on and relationship with the Points of Sale/physical stores
  • Privacy and Data protection appointment in Points of Sale/physical stores
  • Privacy and Data protection instructions and training in Points of Sale/physical store staff
  • Anti-counterfeit
  • E-commerce platform and technological means for online Store (means of the processing)
  • Web tool "Store in Touch"
  • Training of Points of Sale/physical store staff on "Store in Touch" tool
  • Fraud prevention
  • Statistical analysis



For any request regarding protecting your personal data and exercising your rights, you can contact us at any time by sending a request to our Customer Care, as our contact point, or by writing to the addresses of Data Controllers above‎‎.

How can Data protection officers be contacted?
KARL LAGERFELD has appointed a Data Protection Officer (DPO) who can be contacted directly at the addresses below:

Data Protection Officer - DPO c/o KARL LAGERFELD B.V. Herengracht 182, 1016 BR Amsterdam, The Netherlands;
E-mail: privacy.officer@karllagerfeld.com

YNAP has appointed a Data Protection Officer (DPO) who can be contacted directly at the addresses below:

Data Protection Officer - DPO c/o YNAP S.p.A., via N. Nannetti n. 1, 40069 – Zola Predosa, Bologna (BO), Italy;
E-mail: DPO@ynap.com

2. What personal data do we collect?

The categories of personal data that we collect and process when you browse or purchase on www.karl.com are as follows:

  1. the personal data necessary to conclude and execute your purchase or to use the Omni-Channel Services on www.karl.com, such as name and surname, email address, shipping address, billing address, telephone and payment details;
  2. your email address when you sign up for our newsletter service;
  3. the personal data you provide when you contact our Customer Care to provide the assistance requested or when you send your curriculum vitae (CV) to KARL LAGERFELD;
  4. with your consent, your personal data for commercial communications;
  5. for the registration of your My Account, your name and surname, your email address, password and your date of birth. If you are a registered user, we collect information about your access to the reserved area of the site. By express consent, through the analysis of your personal data, we can process information regarding your interests and preferences with respect to our products and services, in order to present proposals and offers in line with your tastes.
  6. information about your browsing on www.karl.com, such as the pages you visit and how you interact with the single page. We save this information on our servers. We inform you that we do not process personal data relating to minors. If you access www.karl.com and use the services offered by us you declare that you are of legal age.

3. How do we use personal data collected?

We collect and process your personal data for the following purposes:

  1. To conclude and execute the purchase agreement for the products offered on www.karl.com. When you complete your purchase, we ask you for the personal data necessary for the execution of the agreement, such as payment, anti-fraud checks if you choose to pay by credit or debit card, billing, shipping of the product and possible management of the return.
  2. Registration on the site and use of the services offered to registered users. Registration on the site is possible through the inclusion of some personal information, necessary to ensure your identification and the performance of the services offered to registered users.
  3. Provision of services offered on www.karl.com. For this purpose, we need to collect the personal data necessary to perform the specific service requested by you in relation to each service and its characteristics.
  4. Management of requests to Customer Care, which uses the personal data you provide to meet your requests for information and requests for assistance.
  5. Sending CVs. If you send your CV to be considered for an open job position, KARL LAGERFELD will use the information in your CV exclusively for this purpose. The personal data relating to your application may be transferred to third-party providers of recruiting and application software. In case of an open application, your CV will be kept for a maximum of six months. Otherwise, your CV will be kept for a maximum of 4 weeks after closing the application procedure, after which it will be deleted: you can, of course, send KARL LAGERFELD a new, updated version if you desire.
  6. statistical analysis and surveys. We use some information about your use of the site, your browsing and use of the related services to perform analysis and statistical surveys in order to improve our offer and our services.
  7. Sending commercial communications following the purchase of one of our products, so-called soft spam. Following the purchase of one of our products on the site, KARL LAGERFELD will send you communications containing commercial proposals on products and related services to the email address you provided during the conclusion of the order.
  8. Subject to your express consent, KARL LAGERFELD may use the contact details you have provided for commercial communications on products and services, in order to update you on news, new arrivals, exclusive products, offers and promotions. In addition, always with your consent, KARL LAGERFELD will be able to use your contact details as part of market research and surveys to guage satisfaction, in order to improve services and the relationship with users.
  9. Only with your consent, KARL LAGERFELD can personalise your experience as a registered user on www.karl.com, proposing previews and offers in line with your tastes and sending you commercial communications tailored to your interests. The personalisation will be done by analysing your previous purchases and other information as described in the previous paragraph 'What personal data do we collect?'. For more information on this data and on the activity that allows it to be processed, please refer to the paragraph 'My Account'.


If you wish to authorise the activities referred to in points h) and i) and later do not wish to receive further communications from KARL LAGERFELD, or if you wish to limit the way in which you are contacted, you can interrupt these communications at any time by simply clicking on the appropriate 'unsubscribe' link at the bottom of each communication, or by accessing your My Account. Alternatively, you can always contact KARL LAGERFELD through our Customer Care or by writing to the address above. We inform you that you may receive further communications from KARL LAGERFELD even after submitting your unsubscription request, as some submissions may have already been planned and our systems may take some time to process your request.
In relation to all the activities mentioned above, we will process your personal data mainly through IT and electronic tools; the tools we use guarantee high safety standards, in full compliance with current legislation.

4. My Account

When creating your My Account we offer you the opportunity to use the following services:

  1. My profile: manage your personal data and your consent
  2. My orders: follow the shipment and check the history of your orders
  3. My cards: save your credit card details to quickly complete your purchases
  4. Address Book: save all your addresses to quickly complete your purchases
  5. Wish List: create your wish list: you can save up to 50 items, be notified of their availability and add them to the Shopping Bag at any time.


With your express consent, KARL LAGERFELD may use your contact details for commercial communications on products and services, in order to update you on news, new arrivals, exclusive products, offers and promotions, and for market research and surveys to determine your level of satisfaction and improve services (e-mail, Whatsapp, SMS, post etc.).

Only with your prior consent will KARL LAGERFELD be able to customise your experience and the contents of commercial communications and offers that you will see when you navigate to www.karl.com as a registered user. This activity facilitates your search for products and services that are in line with your interests and at the same time allows us to improve our offering for you. Personalisation is made possible by analysing your personal data in our possession, as described in the previous paragraph 'What personal data do we collect?'. In particular, information on purchases you have made in the past and relating to the sections of the site you visit most often or the services you use most often help us to understand which products and services you are most interested in. To ensure that the information in our possession is correct and allow us to perform the activities described above, we invite you to access the 'My profile' section of your My Account and, if you deem it necessary, to update them.

5. Legal basis of the processing

We only process your personal data in the presence of one of the legal requirements established by current legislation, and specifically:

  1. For the conclusion and execution of an agreement of which you are a part or in order to take steps, at your request, prior to entering into a contract. This basis legitimises the processing of personal data that takes place in the following activities:
    • Conclusion and execution of a purchase agreement for the products offered on www.karl.com. When we process your data for the conclusion of the purchase agreement of which you are a part, we ensure that we only use the minimum information necessary for the execution of this;
    • Registration on the site and use of services reserved for registered users;
    • Provision of services offered on www.karl.com (e.g. Omni-Channel Services);
    • Management of your curriculum vitae (CV);
    • Management of your requests by our Customer Care.


    The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data, it will not be possible to conclude or execute the agreement and your requests. This means that you will not be able to purchase products and use our services and that we will not be able to handle your requests.


  2. To comply with a legal obligation.
    In the event of the conclusion of an agreement for the purchase of goods on www.karl.com, the processing of the user's data will take place in order to fulfil the legal obligations with which we comply. You are free to decide whether to conclude an agreement and whether or not to disclose your data, but if you conclude it, your data will be necessary and will be processed to effect the aforementioned legal obligations.


  3. for our legitimate interest.
    If you purchase products on www.karl.com by credit or debit card, some of your personal data may be processed to carry out anti-fraud activities: we have a legitimate interest in carrying out this activity to prevent and pursue any fraudulent activity. For internal administrative purposes, data may be processed by companies belonging to the business group to which KARL LAGERFELD or YNAP belongs.


  4. Based on your consent.
    KARL LAGERFELD will carry out the following processing only if you have given us your express consent:

    • Carrying out marketing activities, opinion polls and market research;
    • Analysis of your browsing and consumption habits in the use of your My Account profile, in order to personalise your experience on www.karl.com.

    Providing your consent for these activities is optional. You are free to give your consent or not, but without it, it will not be possible for KARL LAGERFELD to carry out marketing activities, opinion polls and market research, and to analyse your habits.

6. Who will process your data?

Your personal data will be processed by KARL LAGERFELD and YNAP internal staff who are specifically trained and authorised to process it. In carrying out the processing, the data may also be transmitted to companies belonging to the business group to which KARL LAGERFELD or YNAP belongs.
Your personal data will also be transmitted to third parties that we use to provide our services at www.karl.com; these subjects have been adequately selected and offer a guarantee of compliance with the rules on the processing of personal data. These subjects have been designated as responsible for this processing and carry out their activities according to the instructions given by KARL LAGERFELD or YNAP and under its control.
The third parties in question belong to the following categories: banking operators, Internet providers, companies specialised in IT and telematic services, couriers, agencies that carry out marketing activities, companies specialised in market research and data processing.
In particular, KARL LAGERFELD use a third party called CrossEngage. The purpose of the data processing is for the provision of services in connection with the CrossEngage platform to activate customers, prevent churn and increase loyalty. The nature and extent of the data processing is that CrossEngage GmbH provides a SaaS platform for user-specific cross-channel marketing campaigns. Personal and non-personal data are collected by online tracking solutions on karl.com to create customer profiles, carry out dynamic segmentation based on your device, your preferred channel, your customer journey, socio-demographic and historical purchase data, and cross-channel campaign management. The types of personal data involved are Master Data (name and address), Communication data (telephone, e-mail), Contract master data (contractual relationship, product or contract interest), Customer history, User-related click-stream data and Contract accounting data. The categories of data subjects are customers, prospects, subscribers and employees. The personal data will be deleted upon completion of the processing operations by Cross Engage. In the event that KARL LAGERFELD receives personal data from CrossEngage, the personal data shall be deleted after 2 years after the last contact moment between you and KARL LAGERFELD’s websites or stores, unless there is an obligation to store personal data under European Union (EU) or Member State law.
Lastly, your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes and for the prevention of and protection from threats to public security, to allow KARL LAGERFELD and YNAP to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.

7. Transfer of extra EU/EEA data

Some of the third parties listed in the previous paragraph no. 6 'Who will process your data?' may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission ( http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).

The transfer of your personal data to countries that do not belong to the European Union (EU) or European Economic Area (EEA) and that do not ensure adequate levels of protection will be performed only after specific agreements have been established with said subjects, containing safeguard clauses and appropriate guarantees for the protection of your personal data, known as 'standard contractual clauses', also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of an agreement between you and us (for the purchase of goods offered on our website, for registration on the website or use of services on the website) or for the management of your requests.

8. How long do we keep the data?

We keep your personal data for a limited period of time which differs depending on the type of activity that involves the processing of your personal data. After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way.
Your personal data is stored in compliance with the terms and criteria specified below:

  1. data collected to conclude and execute agreements for the purchase of goods on www.karl.com: until the completion of administrative and accounting formalities. The billing data will be kept for ten years from the billing date;
  2. Data of the registered user: the data will be stored until you request to cancel your My Account;
  3. Data relating to payments: up to the certification of the payment and the conclusion of the related administrative and accounting formalities resulting from the expiration of the right of withdrawal and the terms applied for the contestation of the payment;
  4. Data collected in the context of the use of services offered on www.karl.com (e.g. Omni-Channel Services): this data is retained until the termination of service or the request for cancellation of the subscription to the service by the user;
  5. Data related to user requests to our Customer Care: the data useful to assist you will be kept until your request is met;
  6. CV: for six months from receipt by KARL LAGERFELD;
  7. Data used for commercial communication to users who purchase products on www.karl.com (soft spam): this data is retained until the termination of service or Data used for commercial communication to users who purchase products on www.karl.com (soft spam): this data is retained until the termination of service or until the user exercises opposition by unsubscribing from the service;
  8. Data used to personalise the site and to show customised commercial offers: as long as the user does not request the termination of the activity and in any case within two years from the last interaction of any kind of user with KARL LAGERFELD;


In any case, for technical reasons, the termination of the processing and the consequent definitive cancellation or anonymisation of the related personal data in an irreversible way will be final within thirty days from the terms indicated above.

9. Your rights

You can exercise your rights regarding the specific processing of your personal data at any time. Find below their general description and how to exercise them.

  1. Access your data and modify it: you have the right to access your personal data and to request that it be corrected, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession.
  2. Revoke your consent: you can revoke a consent you have given for the processing of your personal data in relation to any activity for marketing purposes at any time. In this regard, we remind you that marketing activities are considered the sending of commercial and promotional communications and the conduction of opinion polls and market research in order to detect your degree of satisfaction and improve the services offered. Once KARL LAGERFELD receive your request, it will be their duty to promptly cease to process your personal data based on this consent, while different processing or that which is based on other assumptions will continue to be carried out in full compliance with the provisions in force.
  3. Opposition to the processing of your data: you have the right to object at any time to the processing of your personal data made on the basis of our legitimate interest, explaining the reasons that justify your request; before accepting it, we will have to evaluate the reasons for your request.
  4. Delete your data: you may request the cancellation of your personal data in the cases provided for by current legislation. Once your request has been received and examined and if it is legitimate, it will be our duty, in a timely manner, to cease to process your personal data and to delete it.
  5. Request that the processing of your personal data be temporarily limited: in this case, we will keep your personal data but will not process it, unless it is subject to a different request by you and in the case of exceptions established by law. Processing of your personal data can be limited when you dispute the accuracy of your personal data, when the processing is illegal but you oppose the cancellation of your data, when we no longer need your personal data but you need to exercise your right in court, and when you oppose your data’s processing, in the period in which we evaluate the reasons for your request.
  6. Request your data or transfer it to a party other than us (right to data portability). You can ask to receive your data that we process based on your consent or on the basis of an agreement with you in a standard format. If you wish, where technically possible and at your request, we may transfer your data directly to a third party that you indicate.


In order to exercise some of your rights described above, you can access your My Account: alternatively, you can contact our ‎Customer Care‎‎ or write to the address of the Data Controllers above. In order to ensure that our users' data is not used illegitimately or infringed upon by third parties, we may ask you for some information to be sure of your identity before accepting your request to exercise one of the rights indicated.

10. Security measures

We protect your personal data with specific technical and organisational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. In addition, we agree to test, verify and regularly evaluate the effectiveness of our technical and organisational measures in order to guarantee continuous improvement in the security of processing.

11. Complaints

If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the competent control authorities for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data. More information on how to present them is available on the website of the Guarantor, at http://www.garanteprivacy.it/.

12. Changes to this information

The constant development of our services may lead to changes in the characteristics of the processing of your personal data described up to now. Consequently, this privacy policy may be subject to changes and additions over time, which may also be necessary due to new regulatory measures regarding the protection of personal data.
Therefore, we invite you to periodically check the contents: where possible, we will try to inform you promptly on the changes made and their consequences. In any case, the updated version of the privacy statement will be published on this page, with an indication of the date of its last update.

13. Legislative references and useful links

The processing of your personal data is carried out in full compliance with the regulations on the matter pursuant to General Data Protection Regulation (EU) 2016/679, the rules on the processing of Italian personal data and the provisions of the Italian Supervisory Authority (http://www.garanteprivacy.it/) and, where applicable, the competent foreign control authorities.

Last updated 28/06/2019

Back to top
Most recently updated notifications