Welcome to the VALENTINO S.p.A. website, located at www.redvalentino.com (the “Site”).
Please read this Privacy Policy carefully, it applies every time you access the Site, even if you do not purchase the products sold on it. Please also read the General Terms and Conditions of Use if you haven't already done so, as they contain important information about the security systems used by the Site.
The online store within the Site (“E-Store”), which offers VALENTINO products for sale, is managed by the company YOOX NET-A-PORTER GROUP S.p.A., which is directly responsible for sales and general transactions carried out in the context of the Online Store (e.g. order management, sales, product delivery, returns and warranty management, after-sales activities, cross channel activities, etc.), coordinating all the above directly with VALENTINO S.p.A., in order to provide customers with the best service and the best online shopping experience.
Remember that this Privacy Policy is governed by Italian law and in particular by the Code on the Protection of Personal Data (Legislative Decree no.196 of 30 June 2003) regulating the processing of personal data - including data held abroad - carried out by anyone who is resident or based in Italy. The Italian Personal Data Protection Code guarantees that processing of Personal Data will be carried out in compliance with fundamental rights and freedom of individuals, as well as of their dignity, with particular reference to confidentiality, identity and to the right to Personal Data protection.
Data controller of the data collected and processed on the Site and within the E-Store
With reference to the processing of data collected and processed through the Site, you are informed that:
- VALENTINO S.p.A. (hereinafter also just “VALENTINO”) is the autonomous controller of the processing of personal data of users who visit the Site, including browsing data, marketing data and profiling.
- VALENTINO S.p.A. and YOOX NET-A-PORTER GROUP S.p.A. (hereinafter also just “YOOX NET-A-PORTER GROUP”) are joint controllers of the data processing connected and correlated to the sales made through the E-Store within the Site and to the related pre and post-sales support activities.
Below you will find more specific information regarding the processing of data collected and processed through the Site.
Privacy policy provided by VALENTINO S.p.A. as autonomous Controller
1. Information about the Data Controller and the appointed Data Processors
The Data Controller is VALENTINO S.p.A. with registered office at Via Turati 16/18, 20121 Milano, Italy.
2. Information and contact details of the Data Protection Officer
VALENTINO has appointed its own Data Protection Officer (hereinafter also referred to as "DPO") who can be contacted by sending an email to the following address: privacy@valentino.com.
3. Type and purpose of the processing carried out on the Site
Different types of personal data are collected and processed through the Site, for different purposes and in different ways. More specifically:
(a) personal data related to browsing, processed both for the purpose of allowing the Site to function properly, and for marketing purposes. In this regard, please read the "Cookie Policy" in the Legal Area of the Site;
(b) personal data provided voluntarily by the user (such as, for example, e-mail address, personal details, password given when completing the "My Account" registration form), or otherwise lawfully acquired during the user's interaction with the site, to respond to the user's requests and to provide the services, assistance and information requested regarding VALENTINO products and brand. Please note that registration and access through social network profiles involves the disclosure of certain data (including First name, Last name, Email and any other data relating to the user and present on the same social network) by the chosen social network. This data, as well as browsing data collected using cookies, will complement and enhance your profile and your customer record in order to allow VALENTINO to know you better. In any case, this will only occur if you have previously accepted the disclosure of some of your data by the social media platform during the use of the registration function through a social network login and/or if you have authorized the use of analytical and marketing cookies through the methods present on the site. In some cases, social media also requests some feedback and information about the use of log-in. For more information, please refer to the relevant privacy documentation on the social media network;
(c) with the express consent of the user, VALENTINO may process the user's personal data for marketing purposes, i.e. to send the user (using traditional tools and telematic tools such as newsletters, e-mails, text messages, mms and smart messages) information and updates on products, sales, promotional campaigns, events and other initiatives promoted by VALENTINO;
(d) with the express consent of the user, VALENTINO may also process the user's personal data for the purpose of studying shopping habits and choices in order to make products and initiatives more in line with the tastes and demands of its customers.
With the exception of browsing data, which is covered by the Cookie Policy, personal data processing is based on:
1. the user's consent, if any, for the purposes referred to in point b) - with exclusive reference to social network logins - and in points d) and e); 2. the legitimate interest of both VALENTINO in providing the services of the Site and of the user in browsing the Site properly and/or the legitimate interest of VALENTINO in responding to any requests from customers.
Please note that, based on the principle of legitimate interest, VALENTINO may contact you in order to offer you services and products similar to those you have previously purchased. Please also note that, based on current legislation, this type of contact (known as "soft spam") does not require consent. However, you may at any time ask for the processing to be discontinued and VALENTINO will do so without delay.
4. Sources of personal data
The personal data collected by VALENTINO is provided directly by the user, with the exception of the browsing data referred to in paragraph 2(a) above and data collected during registration and access via social network profiles, as described in paragraph 2(b) above.
5. Research of users' purchasing habits and choices
As described in paragraph 2 (d) above and with the express consent of the user, VALENTINO may process the user's personal data for the purpose of studying the habits and choices of users in order to make VALENTINO products and initiatives more responsive to the tastes and demands of its customers. With the help of automated tools, VALENTINO will process data relating to the value and frequency of purchases ( including if the purchases were made during the sales period) as well as the type of products purchased (such as accessories, clothing, haute couture, ready-to-wear) over a specific period of time. The sole objective of this research is to offer customers and users products, services and initiatives that are better suited to their tastes and demands. In this respect, please note that research into the behavior of users and customers will be carried out in a non-intrusive manner.
As described in paragraph 2 (a) above and with the express consent of the user, VALENTINO may process the user's personal data, using automated tools, to study cookies in order to monitor browsing on the Site and to suggest products and services in line with the browsing activity.
6. Methods that VALENTINO use to process personal data
Personal data collected by VALENTINO through the Site is processed using primarily IT and telematic methods and tools, adopting security measures to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access or unauthorized processing or processing that does not comply with the purposes of collection stated in this Privacy Policy.
However, due to the nature of the online environment, such measures cannot completely limit or exclude any risk of unauthorized access or loss of data. To this end, it is recommended that you periodically check that your computer is equipped with adequate software to protect the network transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has taken appropriate measures to ensure the security of network data transmission (such as firewalls and spam filters).
On www.redvalentino.com each purchase is made in the utmost security due to the use of the most advanced technological systems and coding (SSL).
7. Compulsory or optional nature of providing data
With the exception of browsing data, the provision and collection of which is regulated by the Cookie Policy (section 7 of this page "Cookies"), the provision to VALENTINO of personal data collected through the Site, both to respond to requests and queries from users, and for marketing and research into consumer habits and preferences is free, voluntary and optional. Failure to do so does not prevent use of the Site, but may make it impossible for VALENTINO to respond to requests for information and queries, or to send information, updates, newsletters and invitations to VALENTINO events.
8. Categories of personal data recipients
VALENTINO only discloses the personal data of Site users to the extent permitted by law and in accordance with the provisions set out below. In addition to that stated in point 2 b. above (i.e. Social media login), personal data may be disclosed to:
1. VALENTINO employees and consultants, who act as authorized processors for the purposes of the internal organization of the company's activities;
2. companies in the same Group as the appointed data processors, in order to carry out contractual activities and services (such as the in-store collection service) as well as to carry out specific marketing activities (such as inviting the user to local events); and
3. companies that carry out specific technical and organizational services related to the Site (IT services and marketing services) for VALENTINO, as data processors.
Personal data may also be disclosed to:
1. the police or the courts, in accordance with the law and following a formal request by such parties, or where there are substantial grounds to believe that the provision of such data is reasonably necessary in order to (1) investigate, prevent, or take action regarding suspected illegal activities or assist the government's supervisory and monitoring authorities; (2) defend against any claims or allegations made by any third party, or protect the security of its website and the company; or (3) exercise or protect the rights, property, or security of VALENTINO, companies in the same group, its affiliates, customers, employees, or any other party.
Your data will not be shared and will be transferred abroad only if adequate levels of data protection and safeguarding are guaranteed, in accordance with current legislation. The data centers used by VALENTINO to process the data collected are located in the European Union (Varese - Italy, Ireland and the Netherlands). In order to allow data to be processed for contractual and marketing purposes by companies in the same Group, the data will be transferred to the relevant countries (including non-EU countries). In this regard, VALENTINO has entered into standard contractual clauses with subsidiaries based outside the EU, in accordance with national and international legislation on the protection of personal data. Personal data may be transferred to IT service providers (such as, for example, AWS) in order to allow companies in the Group to have access to the transferred data. Please note that, also in this regard, VALENTINO has entered into the necessary Standard Contractual Clauses with suppliers in order to protect the personal data subject to transfer (verifying in advance the security of the measures used by suppliers acting as appointed data processors).
9. Data retention period
Personal data provided for marketing and profiling purposes are kept for the period necessary for the specific processing, also based on the particular sector of activity (luxury products) and bearing in mind the customer's interest in receiving updates about products, events and fashion shows organized by VALENTINO.
10. User rights acknowledged by the privacy law
The user is entitled to obtain, at any time, confirmation from VALENTINO as to whether or not Personal Data relating to him/her is being processed, whether the data is not yet registered, and the communication in intelligible form of the data undergoing processing. He/she is also entitled to obtain information about the source of the personal data; the purposes and methods of processing; the logic involved in any electronic data processing; details of the data controller and of the data processors; the names of the entities and categories of entities to whom your Personal Data may be disclosed or who may access your Personal Data, for example, as a data processor or any other party authorized to process the data. The user also has the right to request the updating, rectification or amendment of personal data, its erasure, anonymisation or restriction of personal data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed; confirmation that the actions referred to above and their content have been made known to those to whom the data was disclosed, unless this requirement proves impossible or involves means that are manifestly disproportionate to the protected right. The user also has the right to data portability.
However, the user has the right to object, in whole or in part, for legitimate reasons, to the processing of his/her personal data, even if relevant to the purpose of collection, to the processing of his/her personal data for the purpose of sending advertising or direct marketing materials or for carrying out marketing surveys or commercial communications and he/she also has the right to request the restriction of the processing of his/her personal data. The right of opposition may also be exercised specifically, with regard to one or more methods of sending marketing communications. The user also has the right to lodge a complaint with the relevant supervisory authority as well as the right to withdraw consent previously given.
The above rights may be exercised by contacting the DPO by sending an email to privacy@valentino.com.
Privacy policy provided by VALENTINO S.p.A. and by YOOX NET-A-PORTER GROUP S.p.A. as joint data controllers
1. Information about the joint Data Controllers and the appointed Data Processors
With reference to data related to sales made through the E-store within the Site and to related activities, the companies VALENTINO S.p.A. with registered office at Via Turati 16/18, 20121 Milano, Italy and YOOX NET-A-PORTER GROUP S.p.A., company subject to the management and coordination of Compagnie Financière Richemont S.A., with registered office at via Morimondo, 17 – Milano 20143, Italy operate in conjunction as joint controllers of the processing (hereinafter, for the sake of brevity, the "Joint controllers").
VALENTINO has appointed a Data Protection Officer (hereinafter the “REDValentino DPO”), who can be contacted by sending an email to privacy@valentino.com.
YOOX NET-A-PORTER GROUP has appointed a Data Protection Officer (hereinafter the “YNAP DPO”) domiciled for this purpose at the registered office of the same.
Furthermore, for organizational and functional purposes only, the Controllers have appointed specific external parties as personal data processors, for purposes strictly connected with and related to the sale of the products and to functional and instrumental activities (such as, for example, delivery). The above mentioned processors have been chosen because of their experience in processing Personal Data and they provide sufficient guarantees regarding compliance with data processing laws (including the technical security measures governing the processing to be carried out). Processors will process the personal data of www.redvalentino.com users in accordance with the instructions given by the Controllers. Processors are regularly checked to ensure compliance with instructions and that they continue to provide sufficient guarantees regarding their full compliance with the provisions on Personal Data processing. To obtain the complete list of data processors, you can contact Customer Service by selecting "Privacy" as a category or send a request to the Controllers at the address of their respective registered offices as stated above.
2. Type and purpose of the processing carried out by the Controllers
The Joint Controllers collect personal data directly from users during the processes of online registration to the Site, sending order forms to purchase products on the E-Store for the conclusion of e-commerce transactions and interaction with users for functional activities and for the purpose of the sale, as well as for any necessary pre and after-sales assistance. Further specific purposes may be better explained by means of specific information displayed from time to time on the Site.
The legal basis for the processing lies in the sales contract and the requirement to perform the related obligations.
3. Methods of processing personal data
Personal data collected through the Site during activities concerning and instrumental to the sale of products and all related matters, is processed using primarily IT and telematic methods and tools, adopting security measures to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access or unauthorized processing or processing that does not comply with the purposes of collection stated in this Privacy Policy.
However, due to the nature of the online environment, such measures cannot completely limit or exclude any risk of unauthorized access or loss of data. To this end, it is recommended that you periodically check that your computer is equipped with adequate software to protect the network transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has taken appropriate measures to ensure the security of network data transmission (such as firewalls and spam filters).
On www.redvalentino.com each purchase is made in the utmost security due to the use of the most advanced technological systems and coding (SSL).
4. Compulsory or optional nature of providing data
The provision of your personal data, in particular personal details, e-mail address, postal address and telephone number is necessary with regard to the conclusion of the contract of purchase of products through the E-Store.
Some of this data may, on the other hand, be required for the provision of other services provided on the Site and related to the sale or to fulfill obligations arising from laws or regulations.
Refusal to provide the necessary data for these purposes may make it impossible to execute the contract for the purchase of products on the E-Store or to provide other related services - such as customer service, use of the Wish List - or to properly comply with legal and regulatory obligations. Failure to provide such data may therefore, in some cases, constitute a legitimate and justified reason for not fulfilling the contract for the purchase of products from the E-Store and the provision of related services.
The disclosure of further data, other than that of compulsory provision, for the purposes of fulfilling their legal or contractual obligations or for the provision of certain services on request is, however, optional and does not bear any consequences with regard to the use of the Site and its services or the purchase of products in the Online Store.
Depending on the case and from time to time as necessary the mandatory or optional nature of the disclosure of data will be indicated, by placing a special character (*) next to compulsory information or only the data necessary for the provision of services and for the purchase of products on the Site. Failure to provide optional personal data will not result in any obligation or disadvantage.
5. Scope of disclosure of personal data
Personal data may be made available to third party companies that carry out specific services on behalf of the Joint Controllers, in their capacity as Data Processors (such as logistics and IT services for example) and or disclosed to other recipients of data collected by the Joint Controllers - whose names will be specified from time to time -, who autonomously process the data solely to fulfill the contract for the purchase of products on the Site (such as, for example, the credit institution for the performance of remote electronic payment services by credit/debit card) and only when such purpose is not incompatible with the purposes for which the data was collected and subsequently processed and, in any event, in a manner consistent with the law.
The data will not be disclosed, divulged or otherwise transferred to any other third parties, without users being informed in advance and, with their consent, when required by law. The data will not be disclosed in any way and will be transferred abroad only if adequate levels of protection and safeguards are guaranteed in accordance with the law.
6. Data retention period
The personal data provided for the above purposes is stored for the period necessary to complete the sale and related services and for the subsequent period of time required by civil and tax legislation.
7. User rights acknowledged by the privacy law
The user is entitled to obtain, at any time, confirmation from YOOX NET-A-PORTER GROUP and VALENTINO as to whether or not data relating to him/her is being processed, whether the data is not yet registered, and the communication in intelligible form of the data undergoing processing. Moreover, he/she is entitled to receive from YOOX NET-A-PORTER GROUP and VALENTINO information on the source of his/her Personal Data, the purposes and methods of processing his/her Personal Data; the logic involved in any electronic data processing; details of the data controller and of the data processors; the names of the entities and categories of entities to whom his/her Personal Data may be disclosed or who may access his/her Personal Data, for example, as a data processor or a party so appointed. Some of this information is contained in this Privacy Policy; for more information, you can always contact the DPOs at the above addresses. In addition, the user always has the right to obtain from the Controllers:
a. the update, correction or when relevant the supplementation of your personal data;
b. Data portability and the right to be forgotten
c. the erasure, transformation into an anonymous form or blocking of his/her unlawfully processed personal data, including data which does not need to be stored for the purposes for which it was collected and subsequently processed;
d. the confirmation that the operations under letters a) and b) have been reported (together with the contents of the same) to whom the data was disclosed or disseminated, except if this should prove impossible or if the means used are clearly disproportionate to the protection of the right.
You will, however, have the right to object in whole or in part, for legitimate reasons, to the processing of your personal data, even if it is related to the purposes for which it was collected; It will also be possible to lodge a complaint with the Supervisory Authority.
It will be possible at any time to exercise the rights listed above, provided that this is within the bounds of the law, by sending a request to the Data Protection Officers at the above addresses.
This Privacy Policy was updated in May 2018