Your privacy and the security of your personal data are very important to us; we therefore collect and manage your personal data with the utmost care and take specific measures to keep them secure. Below, you will find the main information regarding our processing of your personal data in relation to your browsing on www.karl.com and the use of the services offered. For detailed information on how we manage your personal data, please read our Privacy Notice.
. Please also read the ‘Cookie Policy’ and the ‘General Terms of Use’ of the site www.karl.com, which contain detailed information regarding the conditions of our services. Some services may be subject to specific legal terms, in which case we will give you all the appropriate information from time to time.
Who are the Data Controllers?
The Data Controllers are:
- KARL LAGERFELD B.V. (Besloten vennootschap) with headquarters at Herengracht 182, 1016 BR, The Netherlands, Amsterdam, Tax Code and VAT no. NL 850960678B01 (KARL LAGERFELD),
- YOOX NET-A-PORTER GROUP S.p.A., company subject to the management and coordination of Compagnie Financière Richemont S.A., with registered office at via Morimondo 17, 20143– Milano (MI), Italia ("YNAP")
and
In particular, KARL LAGERFELD is the owner of the www.karl.com website and the 'Karl Lagerfeld' brand and the autonomous controller of the data processed for marketing, profiling for marketing activities and management of résumés.
KARL LAGERFELD and YNAP are, however, joint controllers of the data processing related to online purchase and after-sales assistance, as well as "pick up in store", "return in store" and "click from store" services (hereinafter also referred to as "Omni-Channel Services") offered on the www.karl.com website.
For the information about the joint controller agreement between KARL LAGERFELD and YNAP, please read our Privacy Notice.
For any clarifications, questions or requirements related to your privacy and the processing of your personal data, you can contact us at any time by sending a request to our Customer Care or by writing to the addresses of Data Controllers above.
What data do we process and why?
The personal data that we manage are those that you provide when you complete an order and purchase goods, and those that we collect while you browse or when you use the services offered on www.karl.com. We can then collect data about you, such as personal data including name and surname, shipping address and billing address, browsing data and your purchase habits.
Your personal data is processed for the following purposes:
- To conclude and execute the purchase contract for goods offered on www.karl.com;
- To provide you with the services of www.karl.com such as signing up for the newsletter;
- To allow site registration and use of services reserved for registered users;
- To manage any résumé you send to KARL LAGERFELD;
- To manage any requests forwarded to our Customer Care.
In the aforementioned cases, the processing of your personal data is legitimate as it is necessary to execute an agreement with you or to provide you with the service you have specifically requested. We also conduct statistical surveys and analyses with data in aggregate form to understand how users interact and use the site, to improve our offer and our services.
Only with your express consent, however, we process your personal data to:
- Carry out commercial communications activities;
- Customize the site according to your interests.
Who will process your data?
Your personal data is processed by the duly trained personnel of our company and, for organizational and functional needs related to the provision of services on www.karl.com, by our suppliers. The latter have been evaluated and chosen by us for their proven reliability and competence. Some of these subjects may also be based in non-EU countries and, in these cases, the transfer of your personal data to these countries is carried out in compliance with the guarantees established by law.
How long do we keep your data?
We keep your personal data for a limited period of time depending on the purpose for which it was collected, at the end of which your personal data will be deleted or otherwise rendered anonymous in an irreversible way. The retention period is different depending on the purpose of the processing: For example, the data collected during the purchase of goods on www.karl.com are processed until the conclusion of all administrative and accounting formalities, so they are filed in accordance with local tax legislation (ten years), while those used to send our newsletter are retained until you ask us to stop sending.
For more information see our Privacy Notice.
What are your rights?
At any time, depending on the specific processing, you can: Withdraw consent to the processing, know which of your personal data we have in our possession, its origin and how it is used, request its update, correction or integration as well as, in the cases provided for by the current provisions, the cancellation, the limitation of processing or oppose their processing. If you wish, you can request to receive personal data held by us that concern you in a format readable by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you. If you believe that the processing of your personal data has been carried out illegitimately, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/).
This information may undergo changes and additions over time, so we invite you to periodically check the contents. Where possible, we will try to inform you promptly of any changes made.
Privacy Notice 1. General information Who are the Data Controllers? The Data Controllers are: Online Purchase 2. What personal data do we collect? The categories of personal data that we collect and process when you browse or purchase on www.karl.com, are as follows: 3. How do we use personal data collected? We collect and process your personal data for the following purposes: 4. My Account When creating your My Account we offer you the opportunity to use the following services: 5. Cookies 6. Legal basis of the processing We only process your personal data in the presence of one of the legal requirements established by current legislation, and specifically: 7. Who will process your data? Your personal data will be processed by KARL LAGERFELD and YNAP internal staff who are specifically trained and authorized to process it. In carrying out the processing, the data may also be transmitted to companies belonging to the business group to which KARL LAGERFELD or YNAP belongs. 8. Transfer of extra EU/EEA data Some of the third parties listed in the previous paragraph no. 6 'Who will process your data?' may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1). 9. How long do we keep the data? We keep your personal data for a limited period of time, which differs depending on the type of activity that involves the processing of your personal data. After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way. 10.Children's rights KARL LAfxGERFELD and YNAP do not sell products or services for purchase by children, but by adults. If you are under 18, you may use the Site only with the involvement of a parent or guardian. In accordance with the Federal Children's Online Privacy Protection Act of 1998 (COPPA), the US site www.karl.com does not knowingly collect, solicit or use personal data of children under the age of 13 provided without parental consent. Therefore, if you are not 18 years or older, you are not authorized to use our US Site. 12. Rigths of California residents Pursuant to California Civil Code Sec. 1789.3, California resident users are entitled to know that they may file grievances and complaints with the California Department of Consumer Affairs, 400 R Street, STE 1080, Sacramento, CA 95814. For more information about protecting your privacy, you may wish to visit: www.ftc.gov. 13. Your rights You can exercise your rights with reference to the specific processing of your personal data at any time. Find below their general description and how to exercise them. 14. Security measures We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: The pseudonymization or encryption of your data; the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. In addition, we agree to test, verify and regularly evaluate the effectiveness of our technical and organizational measures in order to guarantee continuous improvement in the security of processing. 15. Complaints If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the competent control authorities for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data. More information on how to present them is available on the website of the Guarantor, at http://www.garanteprivacy.it/. 16. Changes to this information The constant development of our services may lead to changes in the characteristics of the processing of your personal data described up to now. Consequently, this privacy policy may be subject to changes and additions over time, which may also be necessary with regard to new regulatory measures regarding the protection of personal data. 17. Legislative references and useful links The processing of your personal data is carried out in full compliance with the regulations on the matter pursuant to General Data Protection Regulation (EU) 2016/679, the rules on the processing of Italian personal data and the provisions of the Italian Supervisory Authority (http://www.garanteprivacy.it/) and, where applicable, the competent foreign control authorities.
and
In particular, KARL LAGERFELD is the owner of the www.karl.com website and the 'Karl Lagerfeld' brand and the autonomous controller of the data processed for marketing, profiling for marketing activities and management of résumés.
KARL LAGERFELD and YNAP are, however, joint controllers of the data processing related to online purchase and after-sales assistance, as well as "pick up in store", "return in store" and "click from store" services (hereinafter also referred to as "Omni-Channel Services") offered on the www.karl.com website.
KARL LAGERFELD and YNAP have signed a joint controller agreement to determine their respective responsibilities about data protection laws, the essence of which is summarized in the following table:
Joint Controllers - Respective responsibilities Data processing activities KARL LAGERFELD YNAP Each Party
After-sales assistance
Omni-Channel Services
For any request regarding the protection of your personal data and the exercise of your rights, you can contact us at any time by sending a request to our Customer Care, as our contact point, or by writing to the addresses of Data Controllers above.
How to contact the Data protection officers?
KARL LAGERFELD has appointed a Data Protection Officer (DPO) who can be contacted directly at the addresses below:
Data Protection Officer - DPO c/o KARL LAGERFELD B.V. Herengracht 182, 1016 BR Amsterdam, The Netherlands;
E-mail: privacy.officer@karllagerfeld.com
YNAP has appointed a Data Protection Officer (DPO) who can be contacted directly at the addresses below:
Data Protection Officer - DPO c/o YNAP S.p.A., via N. Nannetti n. 1, 40069 – Zola Predosa, Bologna (BO), Italy;
E-mail:DPO@ynap.com
If you wish to authorize the activities referred to in points h) and i) and then do not wish to receive further communications from KARL LAGERFELD, or if you wish to limit the way in which you are contacted, you can interrupt these communications at any time by simply clicking on the appropriate 'unsubscribe' link at the bottom of each communication, or by accessing your My Account. Alternatively, you can always contact KARL LAGERFELD through our Customer Care or by writing to the address above. We inform you that you may receive further communications from KARL LAGERFELD even after submitting your unsubscription request, as some submissions may have already been planned and our systems may take some time to process your request.
In relation to all the activities mentioned above, we will process your personal data mainly through IT and electronic tools; the tools we use guarantee high safety standards, in full compliance with current legislation.
With your express consent, KARL LAGERFELD may use your contact details for commercial communications on products and services, in order to update you on news, new arrivals, exclusive products, offers and promotions, and for market research and surveys to determine your level of satisfaction and improve services (e-mail, Whatsapp, SMS, post mail etc.).
Only with your prior consent, KARL LAGERFELD will be able to customize your experience and the contents of commercial communications and offers that you will see when you navigate to www.karl.com as a registered user. This activity allows facilitates your search for products and services that are in line with your interests and at the same time allows us to improve our offering for you. Personalization is made possible by analyzing your personal data in our possession, as described in the previous paragraph 'What personal data do we collect?'. In particular, the information on purchases you have made in the past and those relating to the sections of the site you visit most often or the services you use most often help us to understand which products and services you are most interested in. To ensure that the information in our possession is correct and allow us to perform the activities described above, we invite you to access the 'My profile' section of your My Account and, if you deem it necessary, to update them.
IE: https://support.microsoft.com/en-us/help/17288/windows-internet-explorer-11-use-do-not-track
Safari:https://support.apple.com/kb/PH21416?locale=en_US
Chrome:https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
Firefox: https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature
The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data, it will not be possible to conclude or execute the agreement and your requests. This means that you will not be able to purchase products and you will not be able to use our services and that we will not be able to handle your requests.
In the event of the conclusion of an agreement for the purchase of goods on www.karl.com, the processing of the user's data will take place in order to fulfill the legal obligations with which we comply. You are free to decide whether to conclude an agreement and whether or not to disclose your data, but if you conclude it, your data will be necessary and will be processed to effect the aforementioned legal obligations.
If you purchase products on www.karl.com by credit or debit card, some of your personal data may be processed to carry out anti-fraud activities: We have a legitimate interest in carrying out this activity to prevent and pursue any fraudulent activity. For internal administrative purposes, data may be processed by companies belonging to the business group to which KARL LAGERFELD or YNAP belongs.
KARL LAGERFELD will carry out the following processing only if you have given us your express consent:
Providing your consent for these activities is optional. You are free to give your consent or not, but without it, it will not be possible for KARL LAGERFELD to carry out marketing activities, opinion polls and market research, and to analyze your habits.
Your personal data will also be transmitted to third parties that we use to provide our services at www.karl.com; these subjects have been adequately selected and offer a guarantee of compliance with the rules on the processing of personal data. These subjects have been designated as responsible for the processing and carry out their activities according to the instructions given by KARL LAGERFELD or YNAP and under its control.
The third parties in question belong to the following categories: Banking operators, Internet providers, companies specialized in IT and telematic services, couriers, agencies that carry out marketing activities, companies specialized in market research and data processing.
In particular, KARL LAGERFELD use a third party called CrossEngage. The purpose of the data processing is provision of services in connection with the CrossEngage platform to activate customers, prevent churn and increase loyalty. The nature and extent of the data processing is that CrossEngage GmbH provides a SaaS platform for user-specific cross-channel marketing campaigns. Personal and non-personal data are collected by online tracking solutions on karl.com to create customer profiles, carry out dynamic segmentation based on your device, your preferred channel, your customer journey, socio-demographic and historical purchase data, and cross-channel campaign management. The types of personal data involved are Master Data (name and address), Communication data (telephone, e-mail), Contract master data (contractual relationship, product or contract interest), Customer history, User-related click-stream data and Contract accounting data. The categories of data subjects are customers, prospects, subscribers and employees. The personal data will be deleted upon completion of the processing operations by Cross Engage. In the event that KARL LAGERFELD receives personal data from CrossEngage, the personal data shall be deleted after 2 years after the last contact moment between you and KARL LAGERFELD’s websites or stores, unless there is an obligation to store personal data under European Union (EU) or Member State law.
Lastly, your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow KARL LAGERFELD and YNAP to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
The transfer of your personal data to countries that do not belong to the European Union (EU) or European Economic Area (EEA) and that do not ensure adequate levels of protection will be performed only after conclusion with said subjects of specific agreements, containing safeguard clauses and appropriate guarantees for the protection of your personal data, the so-called 'standard contractual clauses', also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of an agreement between you and us (for the purchase of goods offered on our website, for registration on the website or use of services on the website) or for the management of your requests.
Your personal data is stored in compliance with the terms and criteria specified below:
In any case, for technical reasons, the termination of the processing and the consequent definitive cancellation or anonymization of the related personal data in an irreversible way will be final within thirty days from the terms indicated above.
If you are a resident of California, you may request that KARL LAGERFELD not share your information with certain affiliates or third parties providers for marketing purposes, and/or you may inquire as to how KARL LAGERFELD has shared your information with third parties providers for marketing purposes. In connection with such request, KARL LAGERFELD will identify the types of information shared and provide you with the names and addresses of the third parties with whom the information was shared. Please contact our Customer care through the appropriate form selecting “Privacy” as the topic on our contact form.
In order to exercise some of your rights described above, you can access your My Account: Alternatively, you can contact our Customer Care or write to the address of the Data Controllers above. In order to ensure that our users' data is not illegitimately used or infringed upon by third parties, we may ask you for some information to be sure of your identity before accepting your request to exercise one of the rights indicated.
Therefore, we invite you to periodically check the contents: Where possible, we will try to inform you promptly on the changes made and their consequences. In any case, the updated version of the privacy statement will be published on this page, with an indication of the date of its last update.
Last updated 28/06/2019