Information on privacy

W

We wish to inform you comprehensively and transparently about the processing that our company could carry on your personal data (hereinafter collectively, “Personal Data”) provided and/or collected by visiting our website www.viktor-rolf.com (hereinafter the “Site”) and during various contacts that you could have with us. 

Your privacy is extremely important for us and we kindly invite you to read the following information notice. 

By submitting your Personal Data you may enjoy the advantages and benefits reserved exclusively to our registered clients (subject to availability in your Country), and we offer to those who love our products, that visit our online store or other online services.


1.    Who collect the Personal Data

Subjects who collect and process the Personal Data, as data controller (hereinafter “Data Controllers” or “Controllers”) are:

  •      OTB S.p.A., with registered offices in Italy, Breganze (Vi), Via dell'Industria 2, 36042, telephone +390445306555, email privacy@otb.net, for marketing and profiling purposes;
  •      Viktor&Rolf B.V. with registered offices in the Netherlands, (1017 CA) Amsterdam, Herengracht 446, telephone +31204196188, email privacy@viktor-rolf.com, for marketing and profiling purposes and, in case of purchase through the Site, also for administrative and accounting purposes.

Data controllers appointed also data processors that could process the Personal Data on their behalf (hereinafter collectively “Data Processors”). A full list of data processors appointed by the Data Controllers can be contacted by writing to the email or to the postal addresses cited in the epigraph of this privacy policy.

2.    Why we collect the Personal Data 

Personal Data will be processed for the following purposes: 

a.     administrative and accounting purposes: execution of sales contract, accounting and fulfillment of legal obligations, after-sales services. The legal basis for this data processing is: execution of a contract of which you are a part. The Data collected for this purpose will be kept for the entire duration of the contractual relationship and for 10 years after the termination of the same.

b.    for marketing purposes: dispatch of advertising material or direct sales material, market research, commercial communication even customized with automated systems (e-mail, other communication systems via communication networks such as, by way of example but not limited to: SMS, MMS, Whatsapp, WeChat, etc.) and traditional (paper mail) contact methods, and offering of personalized sales services. The legal basis for this data processing is: your consent. The Data collected for this purpose will be retained until the withdrawal of your consent.

c.     for profiling purposes: that is analysis of your consumer choices consistent in automated processing of the Personal Data included data relating to purchases details. This processing is finalized to predict your purchase preferences and to create clients profiles. The legal basis for this data processing is: your consent. The Data collected for this purpose will be retained until the withdrawal of your consent;

d.    for information by e-mail (Newsletters) requesting this by inserting e-mail address in the relevant data form. The legal basis for this data processing is: execution of a contract of which you are a part. The Data collected for this purpose will be retained until newsletter recipients unsubscribe from the service. After this date the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures. 

For the purposes of letter a., data controllers could collect and process the following Personal Data:

  •       personal information: first name, middle name, surname, name and surname in the local alphabet, occupation, nationality;
  •       data concerning purchases: address of residence, city of residence, province of residence/state of residence, Country of residence, zip code, email address, phone number, mobile number, during a visit on online store we could collect shipping and invoicing address, method of delivery and payment, name of the holder of the credit card and expiration, requests made to customer service, building/apartment, preferred language, preferred contact method, additional addresses, secondary email, secondary phones, contact method(s) that the customer does not want to be used.

In addition to the Personal Data listed above, for the purposes of letters b. and c., data controllers could collect and process also the following Personal Data related to your profile and preferences:

  •      data concerning purchases: detail of the products purchased, size, price, discount, units, color, fit, model, collection, level of expenditure calculated, abandoned shopping cart, tax / VAT code or VAT exemption, passport number, Global Blue membership number, transaction address, notes related to the discount on a personal basis, purchase channel, purchase frequency, purchase preference (discount / full price), preferred season labels (first / second half);
  •     data regarding participation in prize contests;
  •     data collected during navigation or during online store purchases or the use of Apps: data related to browsing behavior and/or use held on data controllers websites by using, for example, cookies or information about pages that have been visited or searched or related to wishlist. 

For the purpose of letters d., data controllers collect your email address.

3. What happened if you do not provide the Personal Data

Some Personal Data that we will point out during the registration procedure or purchase are required in order to execute the purchase and to pursue the administrative and accounting purposes (letter a. of the Paragraph 2).

Providing and processing of Personal Data for profiling and marketing purposes (letters b. and c. of paragraph 2) is optional and therefore their inclusion in our Customer Relationship Management (CRM) systems that allow the processing of the Personal Data for marketing and profiling purposes will take place only with your consent.

You may at any time revoke your consent to the profiling and/or marketing purposes (letters b. and c. of Paragraph 2) contacting individually data controllers to the addresses above mentioned. Failing to provide the Personal Data and/or withhold your consent preclude the pursuit of profiling and marketing purposes but will not have any effect on your ability to finalize your purchases. 

4. How we will process the Personal Data

The Personal Data provided and/or collected by data controllers will be processed and stored by automated tools and, in some cases, they will be processed and stored on paper. In particular, Personal Data processed for profiling and marketing purposes will be stored in the CRM systems that allow the processing of Personal Data for marketing and profiling purposes of data controllers and/or data processors whose server is located in United States of America. You acknowledge that the Personal Data is being transferred abroad, also outside European Union, and may become accessible to governments under a lawful order made in that country.

The Personal Data collected for administrative and accounting purposes (paragraph 2, letter a.) shall be stored for the time necessary to perform the contract, or the provision of legal warranties in accordance with the terms of the retention required by the applicable law.

The Personal Data collected for marketing and profiling purposes (paragraph 2, letters b. and/or c.) will be stored until the client asks to revoke the registration or the consent to the processing of the Personal Data.

On expiry of the retention terms indicated above, the Personal Data will be automatically erased or made permanently and irreversibly anonymous.

5. Who will process the Personal Data

The Personal Data will be processed by:

  •    employees and associates of the data controllers designated as persons in charge of the processing;
  •     employees and associates of the data processors designated by data controllers including (i) subjects that manage the online stores and that may view, edit and update the Personal Data entered into the CRM systems by which the data controllers process for marketing and profiling purposes (ii) subjects that manage storing of the Personal Data on behalf of the data controllers in accordance to local agreements and laws;
  •    third party members in or outside the EU, data processors, used by the data controllers in particular for acquisition services and data entry of Personal Data, shipping, distribution of promotional material, after sales support, market research, management and maintenance of the CRM systems by which the data controllers process for marketing and profiling purposes and others data controllers IT systems.

A full list of data processors appointed by the data controllers can be communicated by writing to the email or to the postal addresses mentioned in the epigraph of this privacy policy. The Personal Data may also be disclosed to third parties, independent data controllers, in particular professionals or legal or tax advice and assistance firms and companies managing payments made by debit or credit card. The Personal Data will not be disseminated in any way. The Personal Data will be transferred outside of the country or of the European Union, in countries not providing for an adequate level of data protection, only in accordance with the safeguards set forth by applicable privacy laws and, in particular, with standard contractual clauses for the transfer of Personal Data to third countries provided by Commission of EU.

6. Your rights

According to Chapter III of Regulation (EU) 2016/679 and other local applicable data protection laws, you can at any time request information on personal data collected, used, disclosed or processed by the data controllers (right of access), as well as request for integration, rectification or erasure and object to their processing. Furthermore, starting from 25th of May 2018 (when the Regulation EU 2016/679 will apply), you will be able to exercise also the following rights: restriction of processing, data portability and lodge a complaint with a supervisory authority.

In particular, you have the right to object and withdraw your consent, in whole or in part, to the collection, use, disclosure or processing of your personal data for purposes of dispatch of advertising material, direct selling or for the fulfillment of market surveys or commercial communication both automated (e-mail, other systems of distance communication as, by way of example: SMS, MMS, Whatsapp, WeChat, etc.) and traditional (paper mail).

If you prefer that the processing of your personal data is carried out solely by means of traditional contact methods, you may object to the processing of your personal data by means of automated contact methods. 

In order to exercise your rights above and/or submit an inquiries or complaints with regard to the processing of your personal data, you may send a request to the data controllers by writing to privacy@viktor-rolf.com or to the postal addresses and contacts mentioned in the epigraph of this privacy policy. 

The Data Protection Officer is available at the email address dpo@otb.net