PRIVACY POLICY

Welcome to the VALENTINO S.p.A. website, located at www.valentino.com (the “Site”).

 

Please read this Privacy Policy carefully, it applies every time you access the Site, even if you do not purchase the products sold on it. Please also read the General Terms and Conditions of Use if you haven't already done so, as they contain important information about the security systems used by the Site.

 

Please note that the Site is managed directly by Valentino S.p.A. VALENTINO Japan Ltd., is directly responsible for sales and general transactions carried out in the context of the online store within the Site (the “E-Store” or “Online Store”) - e.g. order management, sales, product delivery, returns and warranty management, after-sales activities, cross channel activities, etc.), coordinating all the above directly with VALENTINO S.p.A., in order to provide customers with the best service and the best online shopping experience.

 

Remember that this Privacy Policy is governed by Italian and Japanese law and in particular by the Code on the Protection of Personal Data (Legislative Decree no.196 of 30 June 2003) and the Act on the Protection of Personal Information (Act No. 57 of May 30, 2003). The Italian Personal Data Protection Code guarantees that processing of Personal Data will be carried out in compliance with fundamental rights and freedom of individuals, as well as of their dignity, with particular reference to confidentiality, identity and to the right to Personal Data protection.

Data controller of the data collected and processed on the Site and within the E-Store

With reference to the processing of data collected and processed through the Site, you are informed that:

• VALENTINO S.p.A. (hereinafter also just “VALENTINO”) is the autonomous controller of the processing of personal data of users who visit the Site, including browsing data, marketing data and profiling.

• VALENTINO S.p.A. and VALENTINO Japan Ltd. (hereinafter also just “VALENTINO COMPANIES”) are joint controllers of the data processing connected and correlated to the sales made through the E-Store within the Site and to the related pre and post-sales support activities.

 

Below you will find more specific information regarding the processing of data collected and processed through the Site. 

 

Privacy policy provided by VALENTINO S.p.A. as autonomous Controller

 

 

1. Information about the Data Controller and the appointed Data Processors

 

The Data Controller is VALENTINO S.p.A. with registered office at Via Turati 16/18, 20121 Milano, Italy.

2. Information and contact details of the Data Protection Officer

 

VALENTINO has appointed its own Data Protection Officer (hereinafter also referred to as "DPO") who can be contacted by sending an email to the following address: privacy@valentino.com.

 

3. Type and purpose of the processing carried out on the Site

 

Different types of personal data are collected and processed through the Site, for different purposes and in different ways. More specifically: 

(a) personal data related to browsing, processed both for the purpose of allowing the Site to function properly, and for marketing purposes. In this regard, please read the "Cookie Policy" in the Legal Area of the Site;

(b) personal data provided voluntarily by the user (such as, for example, e-mail address, personal data, password provided by filling out the registration form "My Account"), or otherwise lawfully acquired during the iteration of the site with the user or when the user contacts customer care by phone (it should be noted, in this regard, that upon explicit consent given by the user at the beginning of the phone call, the call may be recorded to enable Valentino to monitor its service offered to customers and to prove the consents required during the client registration by phone) or email, to meet the user's requests and offer the services, assistance and information requested about the products and the world of VALENTINO. 

Please note that registration and access through social network profiles involves the disclosure of certain data (including First name, Last name, Email and any other data relating to the user and present on the same social network) by the chosen social network. This data, as well as browsing data collected using cookies, will complement and enhance your profile and your customer record in order to allow VALENTINO to know you better. In any case, this will only occur if you have previously accepted the disclosure of some of your data by the social media platform during the use of the registration function through a social network login and/or if you have authorised the use of analytical and marketing cookies through the methods present on the site. In some cases, social media also requests some feedback and information about the use of log-in. For more information please refer to the relevant privacy documentation on the social media network; 

(c) with the express consent of the user, VALENTINO may process the user's personal data for marketing purposes, i.e. to send the user (using traditional tools and telematic tools such as newsletters, e-mails, text messages, mms and smart messages) information and updates on products, sales, promotional campaigns, events and other initiatives promoted by VALENTINO or to request to the user some information about the customer satisfaction and usability of the Site as well as messages aimed at ending unfinished purchases (reminders about products viewed and abandoned cart), ;

(d) with the express consent of the user, VALENTINO may also process the user's personal data for the purpose of studying shopping habits and choices in order to make products and initiatives more in line with the tastes and demands of its customers.

 

With the exception of browsing data, which is covered by the Cookie Policy, personal data processing is based on: 

1. the user's consent, if any, for the purposes referred to in point b) - with exclusive reference to social network logins - and in points c) and d); 2. the legitimate interest of both VALENTINO in providing the services of the Site and of the user in browsing the Site properly and/or the legitimate interest of VALENTINO in responding to any requests from customers.

 

4. Sources of personal data

 

The personal data collected by VALENTINO is provided directly by the user, with the exception of the browsing data referred to in paragraph 3(a) above and data collected during registration and access via social network profiles, as described in paragraph 3(b) above.

5. Research of users' purchasing habits and choices

 

Personal data may be made available to  

• third party companies that carry out specific services on behalf of the Joint Controllers, in their capacity as Data Processors (such as logistics and IT services for example) and/or  
• other recipients of data collected by the Joint Controllers - whose names will be specified from time to time -, who autonomously process the data as independent Data Controllers solely to fulfil the contract for the purchase of products on the Site (such as, the credit institution and the company Axerve S.p.A. for the performance of remote electronic payment services by credit/debit card and the company Riskified Ltd for all the relevant anti-fraud actions) and only when such purpose is not incompatible with the purposes for which the data was collected and subsequently processed and, in any event, in a manner consistent with the law; 
• the police or the Courts, in accordance with the law and following a formal request by such parties, or where there are substantial grounds to believe that the provision of such data is reasonably necessary in order to investigate, prevent, or take action regarding suspected illegal activities. 

Your data will not be shared and will be transferred abroad only if adequate levels of data protection and safeguarding are guaranteed, in accordance with current legislation. The datacenters used by VALENTINO to process the data collected are located in the European Union (Varese - Italy, Ireland and the Netherlands). Personal data may be transferred to IT service providers (such as, for example, AWS) in order to allow companies in the Valentino Group to have access to the transferred data. Please note that, also in this regard, VALENTINO has taken appropriate measures such as entering into the necessary Standard Contractual Clauses with suppliers in order to protect the personal data subject to transfer (verifying in advance the security of the measures used by suppliers acting as appointed data processors). If you want to know any further information about the above measures, please contact us through sending an email to privacy@valentino.com. Finally, in order to allow data to be processed for contractual purposes including the anti-fraud verifications, the data will be transferred to the relevant countries (including US and Israel) by the relevant independent Data Controllers (Axerve S.p.A. and Riskified Ltd.) in accordance with national and international legislation on the protection of personal data (please see the relevant privacy policy at: www.axerve.com/privacy-policy and www.riskified.com/privacy ).

 

VALENTINO may share personal data with parties outside Japan based on your consent. In this case, VALENTINO shall provide you with the principal information on: (i) the personal information protection system of the relevant foreign country; (ii) the action the third party takes for the protection of personal information; and (iii) other information, in advance of the consent.

6. Methods that VALENTINO use to process personal data

 

Personal data collected by VALENTINO through the Site is processed using primarily IT and telematic methods and tools, adopting security measures to minimise the risk of destruction or loss, even accidental, of the data, unauthorised access or unauthorised processing or processing that does not comply with the purposes of collection stated in this Privacy Policy.

However, due to the nature of the online environment, such measures cannot completely limit or exclude any risk of unauthorised access or loss of data. To this end, it is recommended that you periodically check that your computer is equipped with adequate software to protect the network transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has taken appropriate measures to ensure the security of network data transmission (such as firewalls and spam filters).

On www.valentino.com each purchase is made in the utmost security due to the use of the most advanced technological systems and coding (SSL).

 

If you want to know any further information about the above measures, please contact us through sending an email to privacy@valentino.com.

7. Compulsory or optional nature of providing data

 

With the exception of browsing data, the provision and collection of which is regulated by the Cookie Policy (section 7 of this page "Cookies"), the provision to VALENTINO of personal data collected through the Site, both to respond to requests and queries from users, and for marketing and research into consumer habits and preferences is free, voluntary and optional. Failure to do so does not prevent use of the Site, but may make it impossible for VALENTINO to respond to requests for information and queries, or to send information, updates, newsletters and invitations to VALENTINO events.

8. Categories of personal data recipients

 

VALENTINO only discloses the personal data of Site users to the extent permitted by law and in accordance with the provisions set out below. In addition to that stated in point 2 b. above (i.e. Social media login), personal data may be disclosed to:

 

1. VALENTINO employees and consultants, who act as authorised processors for the purposes of the internal organisation of the company's activities;

 

2. companies in the same Group as the appointed data processors, in order to carry out contractual activities and services (such as the in-store collection service) as well as to carry out specific marketing activities (such as inviting the user to local events); and

 

3. companies that carry out specific technical and organizational services related to the Site (IT services and marketing services) for VALENTINO, as data processors.

Personal data may also be disclosed to:

1. the police or the courts, in accordance with the law and following a formal request by such parties, or where there are substantial grounds to believe that the provision of such data is reasonably necessary in order to (1) investigate, prevent, or take action regarding suspected illegal activities or assist the government's supervisory and monitoring authorities; (2) defend against any claims or allegations made by any third party, or protect the security of its website and the company; or (3) exercise or protect the rights, property, or security of VALENTINO, companies in the same group, its affiliates, customers, employees, or any other party.

Your data will not be shared and will be transferred abroad only if adequate levels of data protection and safeguarding are guaranteed, in accordance with current legislation. The data centres used by VALENTINO to process the data collected are located in the European Union (Varese - Italy, Ireland and the Netherlands). In order to allow data to be processed for contractual and marketing purposes by companies in the same Group, the data will be transferred to the relevant countries (including non-EU countries). In this regard, VALENTINO has taken appropriate measures such as entering into standard contractual clauses with subsidiaries based outside the EU, in accordance with national and international legislation on the protection of personal data. Personal data may be transferred to IT service providers (such as, for example, AWS) in order to allow companies in the Group to have access to the transferred data. Please note that, also in this regard, VALENTINO has taken appropriate measures such as entering into the necessary Standard Contractual Clauses with suppliers in order to protect the personal data subject to transfer (carrying out the necessary impact and security assessment for the transfer of data). If you want to know any further information about the above measures, please contact us through sending an email to privacy@valentino.com.

9. Joint use of personal data

 

VALENTINO will jointly use your personal data as described below:

 

(a) Personal data subject to joint use: The personal data to be collected as described above; 

(b) Range of joint users: the VALENTINO COMPANIES as defined above and their affiliates. Please refer to the following URL; 

(c) Joint users’ purposes of use: To achieve the purposes of use described above; and

(d) The party responsible for managing your personal data is the marketing manager of the company (who can be for privacy purposes writing to privacy@valentino.com.

10. Acquisition of personally referable information

 

VALENTINO may acquire personally referable information obtained from other companies, such as advertising companies, research and analysis companies, media companies, database management companies, and affiliates, as personal data by linking it to the personal data VALENTINO already possesses and use it in accordance with the purposes of use described above.

 

11. Data retention period

Personal data related to the browsing of the Site are kept for the time indicated within the Cookie Policy and the data collected to respond to client’s requests are kept for the time strictly necessary to provide assistance and to manage the relevant follow-up.

The data collected during the iteration with Customer Care are kept for the time strictly necessary and any follow-up with the customer (records of phone calls will be kept for a maximum time of 30 days after recording, except for specific needs for in-depth and subsequent analysis and evaluation on the phone call and except for the records of consents which will be kept for the time strictly necessary to prove the client’s declaration).

 

Personal data provided for marketing and profiling purposes are kept for the period necessary for the specific processing, also based on the particular sector of activity (luxury products – 7 years) and bearing in mind the customer's interest in receiving updates about products, events and fashion shows organized by VALENTINO.

12. User rights acknowledged by the privacy law

 

The user is entitled to obtain, at any time, confirmation from VALENTINO as to whether or not Personal Data relating to him/her is being processed, whether the data is not yet registered, and the communication in intelligible form of the data undergoing processing. To the extent permitted by applicable law, he/she is also entitled to obtain information about the source of the personal data; the purposes and methods of processing; the logic involved in any electronic data processing; details of the data controller and of the data processors; the names of the entities and categories of entities to whom your Personal Data may be disclosed or who may access your Personal Data, for example, as a data processor or any other party authorised to process the data. To the extent permitted by applicable law, the user also has the right to request the updating, rectification or amendment of personal data, its erasure, anonymisation or restriction of personal data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed; confirmation that the actions referred to above and their content have been made known to those to whom the data was disclosed, unless this requirement proves impossible or involves means that are manifestly disproportionate to the protected right. The user also has the right to data portability.

However, the user has the right to object, in whole or in part, for legitimate reasons, to the processing of his/her personal data, even if relevant to the purpose of collection, to the processing of his/her personal data for the purpose of sending advertising or direct marketing materials or for carrying out marketing surveys or commercial communications and he/she also has the right to request the restriction of the processing of his/her personal data to the extent permitted by applicable law. The right of opposition may also be exercised specifically, with regard to one or more methods of sending marketing communications. The user also has the right to lodge a complaint with the relevant supervisory authority as well as the right to withdraw consent previously given to the extent permitted by applicable law. The above rights may be exercised by contacting the DPO by sending an email to privacy@valentino.com.

 

Privacy policy provided by VALENTINO S.p.A. and by VALENTINO Japan Ltd. as joint data controllers

 

1. Information about the joint Data Controllers and the appointed Data Processors

 

With reference to data related to sales made through the E-store within the Site and to related activities, the companies VALENTINO S.p.A. with registered office at Via Turati 16/18, 20121 Milano, Italy and VALENTINO Japan Ltd. operate in conjunction as joint controllers of the processing (hereinafter, for the sake of brevity, the "Joint controllers").

VALENTINO has appointed a Data Protection Officer (hereinafter the “Valentino DPO”),who can be contacted by sending an email to privacy@valentino.com.

Furthermore, for organizational and functional purposes only, the Controllers have appointed specific external parties as personal data processors, for purposes strictly connected with and related to the sale of the products and to functional and instrumental activities (such as, for example, delivery). The above mentioned processors have been chosen because of their experience in processing Personal Data and they provide sufficient guarantees regarding compliance with data processing laws (including the technical security measures governing the processing to be carried out). Processors will process the personal data of www.valentino.com users in accordance with the instructions given by the Controllers. Processors are regularly checked to ensure compliance with instructions and that they continue to provide sufficient guarantees regarding their full compliance with the provisions on Personal Data processing. To obtain the complete list of data processors, you can contact Customer Service by selecting "Privacy" as a category or send a request to the Controllers at the address of their respective registered offices as stated above.

2. Type and purpose of the processing carried out by the Controllers

 

The Joint Controllers collect personal data directly from users during the processes of online registration to the Site, sending order forms to purchase products on the E-Store for the conclusion of e-commerce transactions and interaction with users for functional activities and for the purpose of the sale, as well as for any necessary pre and after-sales assistance. Further specific purposes may be better explained by means of specific information displayed from time to time on the Site.

The legal basis for the processing lies in the sales contract and the requirement to perform the related obligations.

 

The Joint Controllers may also process personal data processed for the prevention and suppression of fraud and illegal behavior and/or contrary to current regulations, applicable contractual provision, as well as the rules of fairness and good faith. Such processing may also be carried out by third parties, such as companies specialized in the identification of online fraud, Public Authorities, Investigative Bodies, police officers and judicial authorities.

The legal basis for the processing lies in the legitimate interest of the Joint Controllers in carrying out security audits and activities and abusive behavior.

3. Methods of processing personal data

 

Personal data collected through the Site during activities concerning and instrumental to the sale of products and all related matters, is processed using primarily IT and telematic methods and tools, adopting security measures to minimize the risk of destruction or loss, even accidental, of the data, unauthorised access or unauthorised processing or processing that does not comply with the purposes of collection stated in this Privacy Policy.

However, due to the nature of the online environment, such measures cannot completely limit or exclude any risk of unauthorised access or loss of data. To this end, it is recommended that you periodically check that your computer is equipped with adequate software to protect the network transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has taken appropriate measures to ensure the security of network data transmission (such as firewalls and spam filters).

On www.valentino.com each purchase is made in the utmost security due to the use of the most advanced technological systems and coding (SSL).

If you want to know any further information about the above measures, please contact us through sending an email to privacy@valentino.com.

4. Compulsory or optional nature of providing data

 

The provision of your personal data, in particular personal details, e-mail address, postal address and telephone number is necessary with regard to the conclusion of the contract of purchase of products through the E-Store.

Some of this data may, on the other hand, be required for the provision of other services provided on the Site and related to the sale or to fulfil obligations arising from laws or regulations.

Refusal to provide the necessary data for these purposes may make it impossible to execute the contract for the purchase of products on the E-Store or to provide other related services - such as customer service, use of the Wish List - or to properly comply with legal and regulatory obligations. Failure to provide such data may therefore, in some cases, constitute a legitimate and justified reason for not fulfilling the contract for the purchase of products from the E-Store and the provision of related services.

The disclosure of further data, other than that of compulsory provision, for the purposes of fulfilling their legal or contractual obligations or for the provision of certain services on request is, however, optional and does not bear any consequences with regard to the use of the Site and its services or the purchase of products in the Online Store.

Depending on the case and from time to time as necessary the mandatory or optional nature of the disclosure of data will be indicated, by placing a special character (*) next to compulsory information or only the data necessary for the provision of services and for the purchase of products on the Site. Failure to provide optional personal data will not result in any obligation or disadvantage.

5. Scope of disclosure of personal data

 

Personal data may be made available to third party companies that carry out specific services on behalf of the Joint Controllers, in their capacity as Data Processors (such as logistics and IT services for example) and or disclosed to other recipients of data collected by the Joint Controllers - whose names will be specified from time to time -, who autonomously process the data solely to fulfil the contract for the purchase of products on the Site (such as, for example, the credit institution for the performance of remote electronic payment services by credit/debit card) and only when such purpose is not incompatible with the purposes for which the data was collected and subsequently processed and, in any event, in a manner consistent with the law.

Personal data may be disclosed to third parties specialized in the prevention of computer and online payment-related fraud in order to protect the companies from unlawful acts and damages.

 

2.The data will not be disclosed, divulged or otherwise transferred to any other third parties, without users being informed in advance and, with their consent, when required by law. The data will not be disclosed in any way and will be transferred abroad only if adequate levels of protection and safeguards are guaranteed in accordance with the law. If you want to know any further information about the above measures, please contact us through sending an email to privacy@valentino.com

 

VALENTINO may share personal data with parties outside Japan based on your consent. In this case, VALENTINO shall provide you with the principal information on: (i) the personal information protection system of the relevant foreign country; (ii) the action the third party takes for the protection of personal information; and (iii) other information, in advance of the consent.

6. Joint use of personal data

 

VALENTINO will jointly use your personal data as described below:

 

(a) Personal data subject to joint use: The personal data to be collected as described above; 

(b) Range of joint users: VALENTINO COMPANIES defined above and their affiliates. Please refer to the following URL 

(c) Joint users’ purposes of use: To achieve the purposes of use described above; and

(d) The party responsible for managing your personal data: data is the marketing e-commerce of the company (who can be for privacy purposes writing to privacy@valentino.com 

 

7. Acquisition of personally referable information

 

VALENTINO may acquire personally referable information obtained from other companies, such as advertising companies, research and analysis companies, media companies, database management companies, and affiliates, as personal data, by linking it to the personal data VALENTINO already possesses, and use it in accordance with the purposes of use described above.

8. Data retention period

 

The personal data provided for the above purposes is stored for the period necessary to complete the sale and related services and for the subsequent period of time required by civil and tax legislation.

The personal data provided for the prevention and suppression of fraud and illegal behavior and/or contrary to current regulations, applicable contractual provision, as well as the rules of fairness and good faith is stored for the time strictly necessary to achieve the purpose described above.

9. User rights acknowledged by the privacy law

 

The user is entitled to obtain, at any time, confirmation from VALENTINO Japan Ltd. and VALENTINO as to whether or not data relating to him/her is being processed, whether the data is not yet registered, and the communication in intelligible form of the data undergoing processing. Moreover, to the extent permitted by applicable law, he/she is entitled to receive from VALENTINO Japan Ltd. and VALENTINO information on the source of his/her Personal Data, the purposes and methods of processing his/her Personal Data; the logic involved in any electronic data processing; details of the data controller and of the data processors; the names of the entities and categories of entities to whom his/her Personal Data may be disclosed or who may access his/her Personal Data, for example, as a data processor or a party so appointed. Some of this information is contained in this Privacy Policy; for more information, you can always contact the DPOs at the above addresses. In addition, the user always has the right to obtain from the Controllers:

a. the update, correction or when relevant the supplementation of your personal data;

b. Data portability and the right to be forgotten

c. the erasure, transformation into an anonymous form or blocking of his/her unlawfully processed personal data, including data which does not need to be stored for the purposes for which it was collected and subsequently processed;

d. the confirmation that the operations under letters a) and b) have been reported (together with the contents of the same) to whom the data was disclosed or disseminated, except if this should prove impossible or if the means used are clearly disproportionate to the protection of the right.

You will, however, have the right to object in whole or in part, for legitimate reasons, to the processing of your personal data, even if it is related to the purposes for which it was collected; It will also be possible to lodge a complaint with the Supervisory Authority.

It will be possible at any time to exercise the rights listed above, provided that this is within the bounds of the law, by sending a request to the Data Protection Officer at the above addresses.

 

**consent declaration **

 

Your personal data will be processed by Valentino for the creation of your account and in order to offer you all the related services.

See the Privacy Policy for more information.

 

 

In addition, if you want to stay updated on the world of Valentino and receive personalised service, you can select the following options:

 

 I consent to the processing of my personal data for marketing purposes (newsletters, communications by phone, SMS and smart message) by Valentino

 I consent to the processing of my data for purposes of analysis of my preferences, habits and consumption choices by Valentino