Privacy Policy
WHO PROCESSES MY DATA?
Canali S.p.A. a socio unico (“Canali SpA”), with registered office in Sovico (MB), at via Lombardia 17/19 – Attn. DPO/Privacy Committee, and Canali UK Retail Ltd (“Canali UK”) with registered office in 3rd Floor East Unit, 12 Bridewell Place, London EC4V 6AP, United Kingdom (CANALI and Canali UK are jointly defined as “CANALI”) recognize the importance of personal data and make every reasonable effort to guarantee the protection thereof. This policy describes the types of information we may collect from you or that you may provide when you visit Canali’s website at https://www.canali.com (the “Website”) or our Canali boutiques.
CANALI S.p.A. has also appointed a data protection officer to be contacted at the following e-mail address: dpo[AT]canali.it
CANALI processes the following categories of your common personal data:
2.1 Identifying data: such as, by way of example, name and surname, date of birth;
2.2 Contact details data: such as by way of example, residence address, e-mail address, telephone/mobile number;
2.3 Accounting data: such as, by way of example, fiscal/tax code, credit card number, debit card number, payment details, bank account;
2.4 Purchase data: such as, by way of example, tailoring measures and measurements for customising CANALI’s products, habitual point of sale, amount spent and frequency of purchases, products purchased, products added in the “wish lists” or to the shopping cart;
2.5 Web surfing data: as per section 3.b below.
3.a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
For this purpose, your personal data are processed by Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.
More specifically, they may process your personal data as those indicated under points 2.1, 2.2 and 2.3 above for contractual purposes, more specifically, in order to sell Canali products and to provide after-sales services and related activities (e.g., administrative-accounting activities, organization and management of orders, shipping of orders, tailoring services, customer services, credit collection, etc..).
3.b. DATA PROCESSING FOR SURFING THE WEBSITE
The servers and computer systems used to operate the Website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data, although not collected to be associated with identified data subjects, by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of personal data includes the IP addresses of the devices used by Users who connect to the Website, as well as the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used for submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and computer environment.
These data, necessary for the proper functioning of the Website, are also processed for the purpose of:
- obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
- to control the correct functioning of the services themselves.
It is understood that no use is made of cookies while browsing the Website for the transmission of personal information.
The above data are processed by Canali SpA acting as Data Controller.
3.c. PROCESSING OF DATA FOR THE SENDING OF NEWSLETTERS
For this purpose, your personal data are processed by Canali SpA acting as Data Controller.
Your common personal data as those indicated under point 2.2 above, may also be used, upon your consent, for the sending of newsletters via email, concerning CANALI’s products or services.
To send its newsletters, CANALI uses systems that provide reports, which enable Canali to organise, and where needed improve the results of said communications.
3.d. DATA PROCESSING FOR MARKETING PURPOSE
For this purpose, your personal data are processed by:
- for HQ Marketing Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;
- for Boutique Marketing Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.
. Your common personal data as those indicated under points 2.1, 2.2 and 2.4 above, may also be used, upon your consent, for the sending of communications concerning CANALI’s products, services and/or events via mail, e-mail, newsletter, telephone, and/or text messages (including instant messaging services) and social media.
Sending of customer satisfaction surveys or market surveys.
To send its newsletters and communications via email, CANALI furthermore uses systems that provide reports, which allow CANALI to analyse and where needed improve the results of its communications.
3.e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES
For this purpose, your personal data are processed by:
- for HQ Preference Analyses’ Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;
- for Boutique Preference Analyses’ Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.
Should you be a Customer of CANALI’s boutiques or a user of CANALI, common personal data such as those indicated under points 2.1, 2.2. and 2.4 above, may also be used, upon your consent to analyse your preferences.
This purpose consists in processing your personal data through automated means, to analyse and/or predict some of your personal aspects, including, for example, your purchasing preferences and/or habits, your on-line behaviour, your interests, etc., in order to create your profile including for the purpose of sending you customised communications via mail, e-mail, newsletter, phone and/or text (including instant messaging services), and social media, to promote your participation in exclusive programmes and events.
To send said communications, CANALI uses systems that provide reports which enable CANALI to analyse, and, where needed, improve the results of its communications.
3.f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
For this purpose, your personal data are processed by:
- for HQ Classification Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;
- for Boutique Classification Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.
Your common personal data, including the data listed under points 2.1, 2.2, and 2.4 above, may also be used by CANALI for classification purposes.
This purpose consists in the creation of homogenous groups of data subjects by conducting a mere extraction from the data subjects’ database, whereby data subjects are grouped based on their being part of common macro-categories, including age group, gender, geographical area of residence, nationality, etc.
3.g. PROCESSING OF AGGREGATE DATA FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS, OR MARKET SURVEYS
Personal Data and Purposes
For this purpose, your personal data are processed by:
- for HQ Statistical Activities: Canali SpA acting as Data Controller; and Canali UK acting as Data Processor;
- for Boutique Statistical Activities: Canali UK acting as Data Controller; and Canali SpA acting as Data Processor.
CANALI aggregates its customers’ personal data such as those indicated under points 2.1, 2.2 and 2.4 above, to conduct statistical analyses, for the purpose of constantly improving its services and product. CANALI adopts technical and organisational measures to ensure that statistical analysis data cannot be attributed to single clients. Please note that such personal data are not processed on an anonymous basis.
Your common personal data, such as the data under point 2.1 and 2.2 above, may be used for the purpose of sending and processing customer satisfaction surveys or market surveys via post, e-mail, phone, and/or text (including instant messaging).
3.h. PROCESSING FOR THE SO CALLED SOFT SPAM PURPOSES
For this purpose, your personal data are processed by Canali SpA acting as Data Controller.
Your common personal data such as those indicated under point 2.2 above, can be used for sending of e-mail communications concerning products and services similar to the CANALI’s products ordered, known as - Soft Spam (as per Article 130, paragraph 4, of Italian Privacy Code).
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.a above, the legal basis of the processing of your personal data consisting in the implementation of pre-contractual and contractual measures and/or compliance with legal requirements to which Data Controller is subject, is to be found both in Article 6 letters b) and c) GDPR.
b. DATA PROCESSING FOR BROWSING THE WEBSITE
Legal basis
For the pursuit of the purposes indicated under paragraph 3.b above, the legal basis of the processing of your personal data consisting in the monitoring of the proper functioning of the Website is to be found in Article 6.1 letter f) of the GDPR, i.e. for the pursuit of the legitimate interest of the Data Controller. Please note that such data could, in addition, be used by public security authorities to ascertain responsibility in the event of any computer crimes to the detriment of the Website. Without prejudice to the foregoing, the data themselves will be stored for the period of time provided for by applicable laws and, in any case, for the time strictly necessary to provide the user with the requested service as well as to ensure the transmission of communication through the Website.
c. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.c above, the legal basis of the processing of your personal data consisting in the sending of information material(newsletters) is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
d. DATA PROCESSING FOR MARKETING PURPOSE
Legal basis
For the pursuit of the purposes indicated under paragraph 3.d above, the legal basis of the processing of your personal data consisting in the sending of commercial communications is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
e. DATA PROCESSING FOR THE PURPOSES OF CONDUCTING PREFERENCE ANALYSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.e above, the legal basis of the processing of your personal data consisting in the conducting preference analyses, is to be found in Article 6.1 letter a) GDPR, when you have given your consent by ticking the appropriate consent box.
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Legal basis
To pursue the purposes listed under paragraph 3.f, the legal basis for processing your data can be found in Article 6.1 letter f) of the GDPR. It is understood that the legitimate interest of CANALI to carry out the activities listed in paragraph 3.f above is suitable balanced against the need to protect your rights.
g. DATA PROCESSING FOR CONDUCTING STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS, OR MARKET SURVEYS
Legal basis
For the pursuit of the purposes indicated under paragraph 3.g above, the legal basis of the processing of your personal data consisting in the conduction of statistical analyses, is to be found in Article 6.1 letter f) GDPR. It is understood that CANALI’s legitimate interest in conducting the activities listed under paragraph 3.f above, is suitably balanced against your need to protect your rights.
h. DATA PROCESSING FOR THE SO CALLED SOFT SPAM PURPOSES
Legal basis
For the pursuit of the purposes indicated under paragraph 3.h above, the legal basis of the processing of your personal data consisting in the so called soft spam, is to be found in Article 6.1 letter f) GDPR, without prejudice to your right to object as per Article 21 GDPR.
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Storage period
The common personal data of the users and customers collected for the purposes indicated under paragraph 2.a above, will be stored for as long as necessary for the performance of the contract, or as per the provision of statutory or contractual guarantees, and following termination of the contract no longer than 10 years, unless further retention periods are provided for by applicable law.
b. DATA PROCESSING FOR SURFING THE WEBSITE
Storage period
Your personal data collected for the purposes indicated under paragraph 2.b above, will be stored for the entire session and until the browser is closed.
c. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS
Storage period
Your personal data collected for the purposes indicated under paragraph 2.c above, will be stored for a period of no more than 5 (five) years starting from the date of your subscription to our newsletter service, unless you have withdrawn the consent previously provided in such respect. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
d. DATA PROCESSING FOR MARKETING PURPOSES
Storage period
Your personal data collected for the purposes indicated under paragraph 2.d above, will be stored for a period of no more than 5 years starting from the date of your last purchase, without prejudice to the exercise of your right to object to the processing of your data for such purpose. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
e. DATA PROCESSING FOR THE PURPOSE OF PREFERENCE ANALYSES
Storage period
Your personal data collected for the purposes indicated under paragraph 2.e above, will be stored for a period of no more than 5 (five) from the date of your last purchase, unless you have withdrawn your consent or you have exercised your right to object to the processing of your data for this purpose. It is understood that the withdrawal of your consent shall not affect the lawfulness of the processing based on consent before its withdrawal. Additionally, we invite to read Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Retention period
Your personal data collected for the purposes indicated in paragraph 3.f above shall be retained for a period not exceeding 5 (five) years from the date of your last purchase, unless you have exercised your right to object to the processing of your data for said purpose. In addition, we invite you to read and acknowledge Canali’s Cookie Policy for more information on how the Controller may use tracking technologies.
g. PROCESSING OF AGGREGATE DATA FOR STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS OR MARKET SURVEYS
Retention period
Your personal data collected for the purposes indicated under paragraph 2.g above, are stored for a period of no more than 5 (five) years from the data of your last purchase, without prejudice to your right to object to the processing of your data for this purpose.
h. PROCESSING FOR SOFT SPAM PURPOSES
Retention period
Your personal data collected for the purposes of sending soft spam communications, will be stored by the Data Controller for a period of 5 years from your last purchase, unless you exercise your objection right as per Article 21 GDPR.
Your data may be communicated to:
• CANALI’S employees/staff, expressly and duly authorized to process your data, as per Article 29 GDPR
• CANALI Group companies, in their capacity as data processors, pursuant to Article 28 of the GDPR, or as independent data controllers as the case may be;
• external professionals or firms (such as technology partners / Social Media), in the capacity as Processors under Article 28 of the GDPR, or as independent data controllers, as the case may be.
• Competent Public Authorities.
Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and shall be accessible to the CANALI Companies worldwide, including Canali SpA a Socio Unico, Canali Retail France, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.
CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, France, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.
The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.
These transfers of data are compliant to the terms and conditions provided by applicable data protection laws (for European Residents: compliance to sections 45 and/or 46 lett.c GDPR).
a. DATA PROCESSING FOR CONTRACTUAL PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data as those indicated under point 2.1 is optional for the above purposes. As a matter of fact, either at our Canali boutiques and on the Website, you could finalize the purchase of Canali products both with or without providing these data.
The provision of your personal data as those indicated under point 2.2 is optional if you want to finalize the purchase of Canali products at our Canali Boutiques unless in case you require the shipping of products at a shipping address in the United Kingdom, while it is necessary if you want to finalize the purchase of Canali products on the Website. In this last case, a refusal to provide us your personal data may result in an impossibility for us to provide the service you requested.
The provision of your personal data as those indicated under point 2.3 is optional if you do not want to receive an invoice, while it is necessary if you ask to receive an invoice. In this last case, a refusal to provide us your personal data may result in an impossibility for us to provide the service you requested.
b. DATA PROCESSING FOR BROWSING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your browsing data is automatic (therefore, necessary) when you browse the Website. Additionally, we invite to read and acknowledge Canali’s Cookie Policy for more information on how the Data Controller uses tracking technologies.
c. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS
Nature of the Provision of personal data and consequences of refusing to do so
Newsletters shall be sent only after you have given your free, express, and optional consent to subscribing to our newsletter. Should you refuse to provide your data and/or subscribe to our newsletter, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related services (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) as well as your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels, etc.).
d. DATA PROCESSING FOR MARKETING PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
Marketing activities shall be conducted exclusively with your free, express, and optional consent, Should you refuse to provide your data and consent to marketing activities, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related activities (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) and your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels).
e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES
Nature of the Provision of personal data and consequences of refusing to do so
Preference analyses shall be conducted exclusively with your free, express, and optional consent. Should you refuse to provide your data and consent to preference analysis activities, this shall not negatively affect your utilisation of the services provided on the Website, including sales, after-sales, and related activities (e.g., administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, credit collection) and your browsing on the Website and related services (e.g., browsing, creation of personal accounts, requests of contact details and information, booking appointments with Shops Channels).
f. DATA PROCESSING FOR CLASSIFICATION PURPOSES
Nature of the provision of personal data and consequences of refusing to do so
The provision of your personal data for classification purposes is necessary to the pursuit of CANALI’s legitimate interest, appropriately balanced with the requirement to protect your rights. It is understood that you may exercise your right to object to processing at any time.
g. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES AND SENDING CUSTOMER SATISFACTION SURVEYS AND MARKET SURVEYS
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for statistical analyses of your aggregate data is necessary to pursuing the legitimate interest of the Data Controllers, suitably balanced against the need to protect your rights.
The provision of your personal data for the purpose of sending and processing customer satisfaction surveys or market surveys is necessary to pursue the legitimate interest of CANALI, suitably balanced against the need to protect your rights. Once you receive a customer satisfaction questionnaire, you have the option to decide whether or not you wish to voluntarily provide your answers.
h. PROCESSING FOR SOFT SPAM PURPOSES
Nature of the Provision of personal data and consequences of refusing to do so
The provision of your personal data for the sending of spam e-mails is necessary to pursuing the legitimate interest of CANALI. It is understood that you can exercise your objection right any time.
6.a According to article 15-21 GDPR, subject to some restrictions which may apply, you are entitled to:
• receive confirmation of the existence of personal data and access to their content (access rights);
• update, modify and/or correct your personal data (right of rectification);
• request cancellation or limitation of the processing of personal data processed in violation of law, including data whose storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to cancellation and right to limitation);
• object to the processing (right to object);
• withdraw consent, where granted, without prejudice to the lawfulness of the processing based on the consent granted before the withdrawal (right to withdraw consent);
• request the Data Controllers to directly transfer the portable data to another data controller, only in certain situations (right to portability);
• decide on post mortem as per related applicable French directive.
6.b Should you believe that the processing of your personal data is in violation of the provisions of the GDPR, you have the right to lodge a complaint before the Garante per la Protezione dei Dati Personali, as provided for under Articles 13 and 77 GDPR, as well as art. 140 bis of the Privacy Code, or to take legal action pursuant to Article 79 GDPR or before the UK competent authority, Information Commissioner's Office ( known as ICO).
You may at any time exercise the above mentioned rights by:
• accessing the specific section of Your personal account on this website;
• should you want to withdraw your consent, clicking on the “unsubscribe” link at the foot of each newsletter in your mailbox, to unsubscribe to the newsletter service only;
• accessing a platform available on the Website to exercise your privacy rights, available at: https://privacycanali.whistlelink.com.
Children under the age of 18 are not allowed to provide their personal data on CANALI’s website. CANALI shall not be responsible for any false statements made by minors, and in any case, should any statements be found to be false, any personal data and any material acquired shall be immediately erased. CANALI shall provide its assistance to parents and/or legal guardians in any requests concerning the personal data of minors, pursuant to the applicable laws.
The Data Controllers reserve the right to amend or simply update this Privacy Policy, in whole or in part, at any time.
We therefore invite you to visit this section regularly for the most up-to-date version. Use of the Website after the date of publication will imply assumed acceptance of the Privacy Policy. However, in the event of substantial changes to this privacy policy or in the event of amendments affecting the consents you have provided, Data Controllers will notify such amendments to you, as the case may be by e-mail and as may be needed, your consent sought again.
If you are a European resident, European law may provide you with additional rights regarding our use of your personal information. To learn more, please click here