U.S. Privacy Policy
Last Revised: January 2021
This Privacy Policy describes how Fendi S.r.l. and Fendi retail companies (collectively, “Fendi,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information. This Privacy Policy also tells you about your rights and choices with respect to your personal information, and how you can reach us to get answers to your questions. You can jump to particular topics by going to the headings below:
Types Of Information We Collect.
We collect information as described in the specific policies provided by the Website. For details, please refer to the following:
- for general website collections, see the Website Privacy Policy
- for the subscription to the newsletter service, see the Newsletter Privacy Policy
- for access to the reserved area FENDI & ME, see the FENDI & ME Privacy Policy,
- for sending requests through the “Contact us” section see the Contact Us Policy,
- for the online purchase of FENDI branded products, see the Online Shop Privacy Policy,
- for the purchase of FENDI branded products in FENDI retail locations, see Privacy Policy Retails, and
- for the “Localise me” service, see the Localise Me Policy.
- for tracking and analyzing website behavior, see the Cookie Policy
If you apply for a job posting we also collect information necessary to process your application or to retain you as an employee. This may include, among other things, contact information and information regarding your employment history. We use this information to respond to employment applications and in anticipation of your potential employment with us.
In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check.
Sharing Of Information.
We do not sell your personal information. In addition to the specific situations discussed elsewhere in our privacy policies, we disclose information in the following situations:
- Acquisitions. If another company acquires, or plans to acquire, our company, business, or our assets, we will share information with that company, including at the negotiation stage.
- Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
- Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
- Service Providers. We may share your information with service providers and affiliates who handle personal information on our behalf. Among other things service providers and affiliates may help us to administer our website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.
Your Choices.
You can make the following choices regarding your personal information:
- Access To or Correction Of Your Personal Information. You may request access to your personal information, or may correct your personal information in our records, by contacting us at the address described below. If required by law, upon request, we will grant you reasonable access to the personal information that we have about you or will correct your personal information (as applicable). Note that California residents may be entitled to ask us for a notice describing what categories of personal information (if any) we share with third parties or affiliates for direct marketing.
- Deletion Of Your Personal Information. You may request that we delete your personal information by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
- Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include "Do Not Track" instructions.
Please address written requests and questions about your rights to Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, Tax Code, VAT number and Rome Companies’ Register No. 03897971002, tel. +39 06 33 450 970, or email customerprivacy@fendi.com.
Note that, as required by law, we will require you to prove your identity. We may conduct an identity verification by phone call or email. Depending on your request, we will ask for information such as your name, the last item you purchased from us, or the date of your last purchase from us. We may also ask you to provide a signed declaration confirming your identity or to provide copy of your identity document. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.
In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.
If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:
- The agent must provide us with a copy of a written and signed permission from you giving the agent permission to submit requests on your behalf; and
- If you are a business, proof that you are registered with the Secretary of State to conduct business in California.
How We Protect Personal Information
No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
Some of our websites permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.
If we do not receive both pieces of information, the request will be denied.
Where We Process Personal Information
We may process your personal information in the United States or Italy, as well as other countries/regions. Please note that where your personal information is processed outside your country/region of residence, it may be subject to the laws of the country/region in which it is processed, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country/region, pursuant to the laws of such country/region. If you would like more information about our policies and practices regarding processing of personal information outside your country/region of residence, please make a request to the contact in point 11 below.
Miscellaneous
The following additional information relates to our privacy practices:
- Changes To This Privacy Policy. We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. We will note the effective date of the latest version at the beginning of the Privacy Policy.
- Information for California Residents. California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicate that organizations should disclose whether certain categories of information are collected, “sold” or transferred for an organization’s “business purpose”(as those terms are defined under California law). You can find a list of the categories of information that we collect and share here in below. Please note that because this list is comprehensive it may refer to types of information that we share about people other than yourself. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing please submit a written request to us using the information in the "Contact Information" section below. We do not discriminate against California residents who exercise any of their rights described in this Privacy Policy.
Contact Information
If you have any questions, comments, or complaints concerning our privacy practices please contact us at Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, Tax Code, VAT number and Rome Companies’ Register No. 03897971002, tel. +39 06 33 450 970, email customerprivacy@fendi.com.
****************
California Personal Information Disclosure
California Civil Code 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicates that companies should disclose whether the following categories of information are collected, “sold,” or transferred for an organization’s “business purpose” as those terms are defined under California law. You can find details about the information that we collect from California residents in the chart below. Note that while a category may be marked that does not necessarily mean that we have information in that category about you. Please also note that nothing in this disclosure should be construed to concede that we or any of or affiliates are a “business” as that term is defined under the California Consumer Protection Act (the “CCPA”).
In addition, we may disclose information when requested to government entities, auditors, lawyers, consultants, and other parties as required by law concerning any category (e.g., in response to a subpoena).”
Categories of Personal Information We Collect |
To Whom We Disclose Personal Information for a Business Purpose |
Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name |
|
Additional categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information |
|
Characteristics of protected classifications – this may include age, sex, race, ethnicity, physical or mental handicap, etc. |
|
Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
Audio, visual, or similar information – this may include photographs, video feeds, audio recordings, and similar information. |
|
Internet or other electronic network activity information – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement. |
|
Geolocation data |
|
Professional or employment-related information |
|
Inferences drawn from any of the information listed above |
|
a) Who processes your personal data:
FENDI North America Inc., with registered office in 555 Madison Avenue, 15th floor, New York, NY 10022, USA , VAT Number 13-3485176 and Registry Code 133485176, telephone number 212-920-8100, e-mail address: customercare@fendi.us, which deals with the sale of the Fendi branded products in your country/region, is the company that, in its capacity as Data Controller, collects and processes your personal data.
b) Why we process your personal data:
The data you provide us with by completing your purchase order on the www.fendi.com website is required for:
- completing the sale of the products selected by you and for fulfilling the agreement signed with you, as well as for exercising our related rights, even in Court;
- fulfilling the statutory obligations, the regulation and the Community provisions regarding your purchase (e.g. in tax, accounting, anti-money laundering, anti-fraud matters);
- managing the services related to your purchase at the post-sale stage (e.g. Customers Service).
The legal basis for the processing of your data will be the execution of the sale agreement signed with you and its related services, as well as of the fulfilment of the related statutory obligations (for EU residents, this is pursuant to Article 6, paragraph 1, letters b) and c) of Regulation (EU) 679/2016 General Data Protection Regulation (the “Regulation”).
c) Your consent:
The processing of your data will be performed without the need for your consent (for EU residents, this is in accordance with Article 6, paragraph 1, letters b) and c) of the Regulation).
d) All data requested are necessary:
Please provide us with all the data required as “compulsory” (*), since it is necessary for the management of your purchases and related services (e.g. delivery); in case of missing or incomplete compilation, your purchases cannot be completed. Failure to compile the data indicated as “optional” will have no consequences.
e) How we process your data:
Your data will be processed mainly electronically in order to manage your purchases. Your data will be processed pursuant to the applicable laws. We use reasonable and appropriate security measures to ensure the confidentiality of personal data and the prevention of unauthorised disclosure, use, alteration or deletion thereof.
f) Duration of your personal data’s storage:
Your data will be processed for the time necessary to manage your purchases and related services (e.g. Customers Service), as well as - limited to the necessary data - for the time required to fulfil the statutory tax and accounting obligations; subsequently, the data will be deleted or anonymised.
g) Who processes your personal data:
In order to manage your purchases, your data will be disclosed (within their respective roles) to the people authorised to process it in the CRM, Digital and E-commerce, Finance and Legal Departments of Fendi Italia S.r.l., as well as, in case you choose to pick up your purchase at the store, to the appointed sales staff. Moreover, your data may be made known to our commercial partners and to the companies that provide us with services [1] useful to manage your purchases and related services.
h) Management and transfer of data outside the European Union:
In order to allow us to correctly manage your purchases and related services, your personal data may be subject to transfer to countries/regions outside the European Union that host Fendi stores, the list of which is published on our website www.fendi.com or to countries/regions where our sales related service providers are established, and/or in countries/regions within or outside of the European Union where our commercial partners are established.
The applicable provisions establish that your specific consent is not required to transfer data to third party countries/regions since the transfer is carried out based on the adoption of adequate guarantees pursuant to Articles 46 and 47 of the Regulation, such as the adoption of standard contract clauses approved by the European Commission as applied to the relations with the retail companies that manage the Fendi stores worldwide and with our service providers.
The transfer of your data to any other third party country/region, where applicable, shall be compliant with the guarantees, measures and rights established under the Regulation. Through a simple request to the references indicated in paragraph j), EU residents may receive further information about the transfer of your data and the guarantees regarding their protection, as well as about the means for obtaining a copy of such data or the place where they were made available.
i) Your rights:
By means of notice to be sent to the internal Officer of the CRM Department, email customerprivacy@fendi.com, Fendi Italia S.r.l., Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, EU residents may, at any time, exercise their rights[2] under the Articles from 15 to 22 of the Regulation, which include the right to know what data we are processing, the procedures we are following and the purposes we are using them for, as well as the right to change the data you have provided us with or to delete it, to request us to limit the use of your data, to request to receive or to transfer your data to another data controller.
j) Who you can file a complaint with:
We hereby remind EU residents that, in case you consider that the processing of your personal data infringes the regulatory provisions, you may file a complaint with the Authority for personal data protection (www.garanteprivacy.it), or with the Authority for personal data protection with jurisdiction in the country/region you reside habitually, work in, or in the place where the alleged infringement took place.
Footnotes
[1] Your data will be made known, in their capacity as External Processing Officers, to FENDI S.r.l., with registered office in Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, Fiscal Code and Register of Companies of Rome n. 00466430584, VAT Number no. 00900541004, which manages the website www.fendi.com and the “Customers Service”, also with the use of external service providers;
Your data will be communicated to:
- payment management companies;
- product shipping and delivery companies;
- legal, tax and auditing experts;
- Service providers;
- Commercial partners.
We may also disclose personal information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
[2] Articles from 15 to 22 of the Regulation provide for specific rights, which include:
- the right to obtain confirmation of whether or not your personal data is being processed;
- the right to be granted access to your personal data and the information indicated by Article 15 of the Regulation;
- the right to correct your inaccurate personal data without undue delay or to supplement your incomplete personal data;
- the right to delete your personal data without undue delay;
- the right to be granted restrictions on the processing of your personal data;
- the right to be informed of any corrections or deletion or restrictions concerning the processing carried out in relation to your personal data;
- the right to receive your personal data on an automatic device in a structured, ordinary and legible format;
- the right to oppose, at any time, for reasons related to a particular situation, the processing of your personal data.
SYNTHETIC PRIVACY NOTICE FENDI & ME
By registering with Fendi & Me, FENDI S.r.l., as Data Controller, will process the data you provide us by filling in the present electronic form (e.g. title, name, surname, e-mail, age range, country/region of residence, nationality), to create your personal area within the Fendi web site, allow you to join our loyalty program and access the services and facilities reserved to the registered members and manage your purchases faster.
Furthermore, if you wish to provide your consent, FENDI S.r.l. may use your data, including those related to your purchases (e.g., boutique where the sale took place, number, type and price of purchased products), those eventually communicated to FENDI by third parties authorized resellers and/or provided by you when visiting Fendi stores (e.g. age, favourite products, colours and materials, style, hobbies, most visited countries/regions, size), in order to:
- learn more about your purchase habits and your preferences, so as to customize our offer of products and services in the Fendi world and offer you a tailored treatment at each Fendi store;
- contact you, also by sending customized communications (e.g. newsletter, mail, e-mail, calls via operator, text messages, instant messaging such as WhatsApp, WeChat and Social networks in general, posts, messages or communication on initiatives on social networks, etc.) and keep you updated on Fendi brand products, services (e.g. new purchasing methods, home delivery, etc.), initiatives and events), or to have you participate in market surveys.
Should you not wish to provide your consent you can still subscribe to Fendi & Me and take advantage of the related services offered by us. Your consent can be freely withdrawn.
In general, personal data will be retained for no longer than is necessary for the purposes for which the data were collected. Your data necessary for managing your purchases and the related services will be processed for the time necessary to reach such purposes and, subsequently, to comply with the related legal requirements (e.g. tax and accounting requirements), after which the data will be deleted or anonymized.
For customer loyalty, your data will be processed for the entire duration of your registration to our loyalty program.
Processing of data collected for the purposes of contacting you, also by sending customized communications on our products, services and events and to participate in market surveys and to know your preferences will be based on the consents you will provide us with, which can be in any case withdrawn at any given time. With limited reference to data collected for purposes of learning about your habits and preferences, data will be retained for a maximum period of 7 years. At the time when consent will be revoked or, as the case may be, when the term above mentioned expires, data will be deleted or anonymized.
Please note that by sending an e-mail to customerprivacy@fendi.com you will always be able to withdraw from your registration with Fendi & Me. Pursuant to applicable law, you may have a right to access your personal data, update and delete them, withdraw or modify the consent you provided us with, and receive or ask for the transmission of your data to another data controller. Furthermore you will always be able to object at any time to the processing of your personal data for marketing purposes and/or for analysis of your preference purposes; EU residents will have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or, if different, with the supervisory authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
If you would like more detailed information, please read the full text that follows in the Fendi & Me Extended Privacy Policy.
a) Who processes your personal data:
FENDI S.r.l., with registered office in Palazzo della Civiltà, Quadrato della Concordia n.3, 00144, Rome (RM), Italy, Fiscal Code and Register of Companies of Rome n. 00466430584, VAT Number no. 00900541004, telephone number +39 06 334501, e-mail address: customerprivacy@fendi.com ("FENDI"), is the company which, as Data Controller, collects and processes your personal data.
b) How we collect and why we process your data:
We process the data you are providing to us:
- by filling in the Fendi & ME electronic form and
- the data relating to your purchases or data provided by you when visiting Fendi stores (e.g. favourite products, colours and materials, style, hobbies, most visited countries/regions, size), and
- those eventually communicated to FENDI by third parties authorized resellers will be processed, as the case, in order:
- to allow you to access to all the services and facilities reserved by FENDI to the registered members of its loyalty program, even though the creation of your personal online account, such as: to manage your purchases faster, to take advantage, depending on the initiatives/campaigns undertaken from time to time by FENDI, of benefits and free services (e.g. personal shopping, tailoring, home delivery, gadget and/or discounts on your birthday and/or based on your purchase threshold), check your purchase history, create your Wish Lists and view on your online profile – if you wish – also your purchase history at Fendi stores and the Wish Lists created for you at the stores;
- to analyze your interests, preferences and purchase habits, also on the basis of the data provided by you when visiting and purchasing at Fendi stores in Italy and abroad and on Fendi web site, in order to allow FENDI to customize its offer of products and services and allow you to receive a tailored treatment at each Fendi store;
- to keep you updated by sending you promotional material, also customized (e.g. by mail, e-mail, calls via operators, text message, instant messaging, such as WhatsApp, WeChat and Social networks in general), posts, messages or communications on initiatives on social networks, etc.) on Fendi brand products (e.g. clothing, leather goods, accessories, home, etc.), services of Fendi world (e.g. purchasing methods, home delivery, etc.), initiatives and events organized by FENDI or to which FENDI adheres (e.g. new opening of Fendi stores), as well as to have you participate in market surveys (in order to learn more about your interests and to improve our offer);
- to send you our Newsletter on Fendi brand products.
The legal basis [1] for the processing of your data will be, depending on the case, the performance of the contract or your consent, if provided. For EU residents, this is in accordance with Article 6, paragraph 1, letters a) and b) of Regulation (EU) 679/2016 General Data Protection Regulation (the “Regulation”).
c) Your consent:
In order to learn more about your interests and purchase preferences (so as to improve our offer of services and products), keep you updated on our products, services, initiatives and events, send you promotional material, even customized, or have you participate in market surveys (purposes no. 2, 3 and 4 paragraph b) we need your explicit consent. Should you not wish to provide your consent you can still subscribe to Fendi & Me and take advantage of the facilities offered to the registered members (purpose no.1 paragraph b). Your consent can be freely withdrawn (as set forth in lett. j) of this Privacy Notice) at any time simply by accessing your personal area in Fendi & Me or even by sending an e-mail to customerprivacy@fendi.com; the withdrawal of your consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Please note that, in case of withdrawal of your consent for sending updates, promotional communications or market surveys (purposes no. 3 and 4 paragraph b), you will no longer be the recipient of any type of communication. If you wish, you may withdraw your consent only to the receipt of communications via electronic means (e.g. newsletter, e-mail, sms, instant messaging), continuing to receive commercial communications only by mail or calls via operators, if provided and vice versa.
d) Which data are processed and which ones are mandatory
For the purposes indicated above, FENDI shall process the following categories of personal data:
- Personal details (title, name, surname, date of birth and nationality);
- Contact details (Country/Region of residence, e-mail address, mobile telephone number);
- Data related to the delivery of goods (address, telephone number, gift box);
- Data related to the purchases you made (boutique where you made the purchase, number, type and price of products purchased);
- Additional personal data useful to carry out marketing and analysis activities (age, favourite product categories, favourite colour, style, other brands purchased, hobbies, most visited countries/regions, as the client knows Fendi, size, measures, marital status, number of children, anniversary, notes related to purchase preferences or special needs expressed by the client – e.g. favourites materials), if you have a Personal Sales Assistant, Fendi events to which you participated.
We ask you to provide all the data requested as “mandatory” (e.g. name, surname, e-mail address, date of birth, address) as needed for your registration and creation of your profile in Fendi & Me; in case of missing or incomplete compilation of such data, your registration will not be completed. Failure to provide the data marked as “optional” (that are the additional personal data useful to carry out the marketing and analysis activities listed above), will simply not allow us to use your data for the purposes no. 2 e 3 paragraph b) for which you have provided your consent; any refusal will have no consequences on your possibility of proceeding with the purchase of our products, but it will not be possible for us to inform you about our products and services, our initiatives and events or analyze your preference and interests.
e) How do we process your data:
Your data will be processed with and without the aid of electronic tools and stored on servers located in Italy. In particular, if you provide us with your consent to use your data for the purposes no. 2 and 3 paragraph b) above, your data will be organized and processed using automated methods based on your preferences, enabling us to know your interests and propensities to purchase (e.g. by checking which products you purchased), adjust our products and services offer and update you on our products (e.g. new collections), services (e.g. purchase methods, home delivery, etc.), initiatives and events (e.g. invitations to events organized by FENDI or to which FENDI adheres), send promotional material that can also meet your tastes and interests (e.g. if you have purchased women's footwear in the past, we could send you our new women's catalogue, or send you promotions related to matching products or the same style), or contact you to participate in market surveys (e.g. through interviews, telephone contact, e-mail, etc.).
We specify that none of our analysis activities of your data and preferences will be based solely on automated processing but will always involve the intervention and evaluation of our persons in charge of the processing.
Your data will be processed pursuant to the applicable laws. We use reasonable and appropriate security measures to ensure the confidentiality of personal data and the prevention of unauthorised disclosure, use, alteration or deletion thereof. In the event that we are required by law to inform you of a breach to your personal data we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
f) Data entry into our CRM (Customer Relationship Management) system:
The insertion of your data into FENDI CRM system – for the purposes no. 2), 3) and 4) of paragraph b) above - is optional and will only take place if you provide us with your consent to the processing of your data. The insertion of your data into our CRM system, will entail the possibility of reading, inserting and amending them by employees and staff (at the offices and stores) of FENDI, FENDI Italia S.r.l. and other retail companies of Fendi brand products in Italy and abroad (each for its respective field of competence) specifically authorized to data processing, pursuant to art. 29 of the Regulation.
Furthermore, the LVMH Group, to which Fendi belongs, includes many famous Maisons offering high quality products and services throughout all sectors, including Fashion and Leather Goods, Perfumes and Cosmetics, Watches and Jewellery, Wines and Spirits, Hotelerie, and Culture and Leisure (a list of all LVMH Maisons is available at https://www.lvmh.com). If you are a FENDI customer, you may also be a customer of one or more of the other LVMH Maisons. Our desire is to always improve your customer experience by providing you with personalised offers and services and marketing communications that most closely match your expectations. For this purpose, data relating to purchases you have made with us over the past 18 months will be disclosed to LVMH as the parent company in pseudonymised form (and thus without unencrypted indication of your name and your further contact details). Your purchase data will be analysed and combined with data on other purchases you may have made with other LVMH Group Maisons during the same time period and for which you have provided similar consent. On the basis of the analysis and combination performed on such data, FENDI will receive additional information regarding your purchasing habits and preferences (without knowing, however, from which other Maison the data comes from). FENDI shall remain the sole data controller. LVMH shall act as a data processor and will not use your data for any purpose other than the one stated above, and under no circumstances will it share your data with other LVMH Group Maisons of which you are not a customer or to which you have not given your consent.
g) How long do we store your data:
In general, personal data will be retained for no longer than is necessary for the purposes for which the data were collected. For the purposes No. 1, 2 and 3 paragraph b) your data will be processed, as the case may be, for the entire duration of your registration to our loyalty program and on the basis of the consents you will provide us with, which can be withdrawn at any given time (as set forth in lett. j) of this Privacy Notice). With limited reference to data collected for purposes No. 2 paragraph b) data will be processed for a maximum period of 7 years (pursuant to the Data Protection Authority’s decision dated 22 December 2015). At the time when consent will be revoked or, as the case may be, when the term above mentioned expires, data will be deleted or anonymized.
h) By whom your data are processed:
To manage your registration with Fendi & Me and, if you give your consent, to pursue the further purposes no. 2, 3 and 4 paragraph b), your data will come to knowledge (limited to the respective field of competence) of the persons in charge of the processing at FENDI CRM Department and of the companies acting as external Data Processors which provide us with services useful for the management of our website, of the purchases or that carry out marketing activities on our behalf[2], as well as to our commercial partners..
i) Your data are transferred to Extra EU country/region:
To allow us to provide you with a tailored service also in the event of purchases made at Fendi stores abroad, your personal data may be transferred to the extra-EU countries/regions where Fendi stores are located, and/or in countries/regions within or outside of the European Union where our commercial partners are established..
The transfer of your data will take place in full compliance with the safeguards, measures and rights provided by the privacy legislation [3]. By simple request to be made to the contacts indicated in paragraph j), EU residents will receive more information on the transfer of your data and on the safeguards provided for their protection.
j) Your rights:
By sending an email to FENDI CRM Department, e-mail customerprivacy@fendi.com, FENDI S.r.l., Palazzo della Civiltà, Quadrato della Concordia n.3, 00144 - Roma (RM), Italy, EU residents may exercise at any time their rights [4] provided for by Articles from 15 to 22 of the Regulation, such as access which data we are processing, with which methods and for what purposes we process them, rectify the data you provided to us or delete them, ask us to restrict the processing of your data, request to receive or ask for the transmission of your data to another data controller, without prejudice to the possibility of changing or withdrawing your consent.
In particular, EU residents have the right to withdraw at any time the consents provided to the processing and to object to the processing of your personal data especially for marketing purposes and/or for the analysis of your preference.
We remind you that, by sending an e-mail to customerprivacy@fendi.com you will be able to withdraw your registration with Fendi & Me.
k) Who you can contact to lodge a complaint:
We remind EU residents that, should you consider the processing of your data infringes the Regulation, you may in any event lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), or, if different, the Data Protection Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
l) Data Protection Officer (DPO):
You can contact the Data Protection Officer appointed by FENDI S.r.l. at the e-mail address dpo@fendi.com.
Footnotes
[1] The processing of your data:
- for purposes listed under point 1 paragraph b) shall take place without your consent, pursuant to art. 6, paragraph 1, letter b) of the Regulation;
- for purposes listed under points 2, 3, and 4 paragraph b) shall take place based on your consent, pursuant to art. 6, paragraph 1, letter a) of the Regulation.
[2] Your data may become to knowledge, as external Data Processors, of the following recipients:
- retail companies which manage Fendi stores in Italy and abroad (if you have made purchases in our stores);
- companies that are commercial partners of Fendi;
- companies which carry out the analysis of your purchases on our behalf;
- companies responsible for managing Fendi "Customer Service" on our behalf;
- companies in charge of processing, managing and sending newsletters and promotional material;
- companies that organize and manage market research and surveys on our behalf;
- companies entrusted with the management of our website and the related databases;
- companies that deal with the management and technical maintenance of the CRM system.
The names of all the external Data Processors can be requested via email to customerprivacy@fendi.com.
[3] Pursuant to the applicable legislation, we do not need your specific consent to transfer your data to third countries/regions since the transfer is made on the basis of appropriate safeguards pursuant to articles 46 and 47 of the Regulation, such as the adoption of the standard data protection contractual clauses adopted by the EU Commission as it happens in the relationships with the retail companies that manage the Fendi stores in the world.
The transfer of your data to any additional third countries/regions, if necessary, will take place in full compliance with the safeguards, measures and rights as provided for by the Regulation. By simple request to be made to the contacts indicated in paragraph j), you will receive more information on the transfer of your data and on the safeguards provided for their protection as well as on the means to obtain a copy of the data or the place where they were made available.
The data will still be stored on servers in Italy.
[4] The articles from 15 to 22 of the Regulation recognize specific rights including:
- obtaining confirmation as to whether or not personal data concerning you is being processed;
- obtaining access to your personal data and to the information set out in Article 15 of the Regulation;
- obtaining the rectification of the inaccurate personal data that concern you without undue delay or the supplementing of incomplete personal data;
- obtaining the erasure of the personal data that concern you without undue delay;
- obtaining the restriction of processing the personal data that concern you;
- being informed of any rectifications or erasures or restrictions of processing in relation to the personal data that concern you;
- receiving in a structured, commonly used and machine-readable format the personal data that concern you;
- objecting at any time, on grounds associated with your specific situation, to the processing of the personal data that concern you.
In particular, you have the right to withdraw at any time the consents provided to the processing and to object to our market analysis activities.
a) Who processes your personal data:
FENDI S.r.l., with registered office in Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, Fiscal Code and Register of Companies of Rome n. 00466430584, VAT Number no. 00900541004, tel. +39 06 334501, email customerprivacy@fendi.com (hereinafter, “FENDI”), is the company that, in its capacity as Data Controller.
b) Why we process your personal data:
We process the data related to your location through our website www.fendi.com in order to allow you to identify the nearest FENDI stores.
The legal basis for the processing of your data will be your consent. For EU residents, this is in accordance to Article 6, paragraph 1, letter a) of Regulation (EU) 679/2016 General Data Protection Regulation (the “Regulation”).
c) Your consent:
The recognition of your geographical location requires your consent that will be requested for when activating the “Localise me” service on the FENDI website.
d) How, and for what duration, we process your personal data:
Your data will be processed pursuant to the applicable laws. We use reasonable and appropriate security measures to ensure the confidentiality of personal data and the prevention of unauthorised disclosure, use, alteration or deletion thereof. In the event that we are required by law to inform you of a breach to your personal data we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
In order to permit you to use the “Localise me” service, namely the possibility to identify the location of the nearest FENDI stores, our website will access the data related to your location in real time (geolocalisation data), without accessing any other personal data stored on your device. The data found will be deleted once you have finished browsing our website.
e) Who processes your personal data:
Any data related to your geographical location during the use of the “Localise me” service will not be disclosed or communicated to third parties. No party appointed by FENDI may access such data, neither in real time nor subsequently.
f) Your rights:
By means of notice to be sent to the internal Officer of the CRM Department, email customerprivacy@fendi.com, FENDI, Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, EU residents may, at any time, exercise their rights [1] under Articles from 15 to 22 of the Regulation, among which is the right to know what data we are processing, the procedures we are following and the purposes we are using them for, as well as the right to change the data you have provided us with or to delete them, to request us to limit the use of your data, to request us to receive or to transmit your data to another data controller, without prejudice to your right to change or to revoke your consents.
g) Who you may file a complaint with:
We hereby remind EU residents that, if you think that the processing of your personal data infringes the regulatory provisions, you may file a complaint with the Authority for personal data protection (www.garanteprivacy.it), or with the Authority for personal data protection with jurisdiction in the country/region you reside habitually, work in or in the place where the alleged infringement took place.
h) The Data Protection Officer:
The Data Protection Officer appointed by the Data Protection Officer appointed by FENDI may be contacted at the following email address dpo@fendi.com.
Footnotes
[1] Articles 15 to 22 of the Regulation provide for specific rights, which include:
- the right to obtain confirmation of whether or not your personal data are being processed;
- the right to be granted access to your personal data and the information indicated by Article 15 of the Regulation;
- the right to correct your inaccurate personal data without undue delay or to supplement your incomplete personal data;
- the right to delete your personal data without undue delay;
- the right to be granted restrictions on the processing of your personal data;
- the right to be informed of any corrections or deletion or restrictions concerning the processing carried out in relation to your personal data;
- the right to receive your personal data on an automatic device in a structured, ordinary and legible format;
- the right to oppose, at any time, for reasons related to a particular situation, the processing of your personal data.
You have the right to revoke, at any time, the consent provided for any processing. Moreover, pursuant to Article 21 of the Regulation, you shall be entitled to oppose at any time, for reasons related to your particular situation, the processing of your personal data carried out to pursue the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1, letter f) of the Regulation.
a) Who processes your personal data:
FENDI S.r.l., with registered office in Palazzo della Civiltà, Quadrato della Concordia n.3, 00144, Rome (RM), Italy, Fiscal Code and Register of Companies of Rome n. 00466430584, VAT Number no. 00900541004, telephone number +39 06 334501, e-mail address: customerprivacy@fendi.com ("FENDI"), is the company which, as Data Controller, collects and processes your personal data.
b) How we collect and why we process your data:
The data you provide to us by filling in the electronic form available in the section “Contact us” (title, name, surname, date of birth, e-mail address, mobile phone number, country/region of residence) or by using the contact services through e-mail or phone available on www.fendi.com will be processed in order to:
1. reply to and handle your request or claim.
The legal basis for the processing of your data will be the management of your requests (for EU residents, this is pursuant to Article 6, paragraph 1, letter b) of Regulation (EU) 679/2016 General Data Protection Regulation (the “Regulation”).
c) Your consent:
Your consent is not required in order to manage your request or claim pursuant to art. 6, paragraph 1, letter b) of the Regulation.
d) Which data are processed and which ones are mandatory
For the purposes indicated above, FENDI shall process the following categories of personal data:
- Personal details (title, name, surname, date of birth);
- Contact details (Country/Region of residence, e-mail address, mobile telephone number);
- Data related to the purchases you made, only in case the request relates to the purchases you made (boutique where you made the purchase, number, type and price of the purchased products).
We ask you to provide all the data requested as “mandatory” (e.g. title, name, surname, e-mail address, mobile telephone number, country/region of residence) as needed in order to better manage your request; in case of missing or incomplete filling in of such data, we could not be able to process your request.
e) How do we process your data:
Your data will be processed with and without the aid of electronic tools and stored on servers located in Italy.
Your data will be processed pursuant to the applicable laws. We use reasonable and appropriate security measures to ensure the confidentiality of personal data and the prevention of unauthorised disclosure, use, alteration or deletion thereof. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
f) How long do we store your data:
In general, personal data will be retained for no longer than is necessary for the purposes of duly handle your request.
g) By whom your data are processed:
For the purposes of managing your request (within the limits of their respective tasks) data will come to knowledge of the persons in charge of the processing at FENDI CRM Department, Retail Department and other Departments in charge of handling your requests, your purchase and relevant services; your data will also be processed by companies that provide us with services[1] to manage our web site, the clients services, the purchases or that carry out related services on our behalf, as well as to our commercial partners.
h) Your data is transferred outside the European Union:
To allow us to provide you with a tailored service also in the event of purchases made at Fendi stores abroad, your personal data may be transferred to the extra-EU countries/regions where Fendi stores are located, and/or in countries/regions within or outside of the European Union where our commercial partners are established.
The transfer of your data will take place in full compliance with the safeguards, measures and rights as provided for by the data protections laws [2]. By simple request to be made at the contacts indicated in paragraph i), EU residents will receive more information on the transfer of your data and on the safeguards provided for their protection.
i) Your rights:
By sending an email to FENDI CRM Department, e-mail customerprivacy@fendi.com, FENDI S.r.l., Palazzo della Civiltà, Quadrato della Concordia n.3, 00144 - Roma (RM), Italy, EU residents may exercise at any time their rights[3]provided for by Articles from 15 to 22 of the Regulation, such as access which data we are processing, with which methods and for what purposes we process them, rectify the data you provided to us or delete them, ask us to restrict the processing of your data, request to receive or ask for the transmission of your data to another data controller.
In particular, EU residents have the right to withdraw at any time the consents provided to the processing (if any) and to object to the processing of your personal data especially for marketing purposes and/or for the analysis of your preference.
j) Who you can contact to lodge a complaint:
We remind EU residents that, should you consider the processing of your data infringes the Regulation, you may in any event lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), or, if different, the Data Protection Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
k) Data Protection Officer (DPO):
You can contact the Data Protection Officer appointed by FENDI at the e-mail address dpo@fendi.com.
Footnotes
[1] Your data may become to knowledge, as external Data Processors, of the following recipients:
i. retail companies which manage Fendi stores in Italy and abroad (if you have made purchases in our stores);
ii. companies that are commercial partners of Fendi;
iii. companies which carry out the analysis of your purchases on our behalf;
iv. companies responsible for managing Fendi "Customer Service" on our behalf;
v. companies entrusted with the management of our website and the related databases;
vi. companies that deal with the management and technical maintenance of the CRM system.
The names of all the external Data Processors can be requested via email to customerprivacy@fendi.com.
[2] Pursuant to the applicable legislation, we do not need your specific consent to transfer your data to third countries/regions since the transfer is made on the basis of appropriate safeguards pursuant to articles 46 and 47 of the Regulation, such as the adoption of the standard data protection contractual clauses adopted by the EU Commission as it happens in the relationships with the Retail companies that manage the Fendi stores in the world.
The transfer of your data to any additional third countries/regions, if necessary, will take place in full compliance with the safeguards, measures and rights as provided for by the Regulation. By simple request to be made to the contacts indicated in paragraph i), EU residents will receive more information on the transfer of your data and on the safeguards provided for their protection as well as on the means to obtain a copy of the data or the place where they were made available.
[3] The articles from 15 to 22 of the Regulation recognize specific rights including:
- obtaining confirmation as to whether or not personal data concerning you is being processed;
- obtaining access to your personal data and to the information set out in Article 15 of the Regulation;
- obtaining the rectification of the inaccurate personal data that concern you without undue delay or the supplementing of incomplete personal data;
- obtaining the erasure of the personal data that concern you without undue delay;
- obtaining the restriction of processing the personal data that concern you;
- being informed of any rectifications or erasures or restrictions of processing in relation to the personal data that concern you;
- receiving in a structured, commonly used and machine-readable format the personal data that concern you;
- objecting at any time, on grounds associated with your specific situation, to the processing of the personal data that concern you.
In particular, you have the right to withdraw at any time the consents provided to the processing (if any) and to object to our market analysis activities.
Last Revised: January 2020
This Privacy Policy describes how Fendi S.r.l. and Fendi retail companies (collectively, “Fendi,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information. This Privacy Policy also tells you about your rights and choices with respect to your personal information, and how you can reach us to get answers to your questions. You can jump to particular topics by going to the headings below:
Types Of Information We Collect.
We collect information as described in the specific policies provided by the Website. For details, please refer to the following:
- for the subscription to the newsletter service, see the Newsletter Privacy Policy
- for access to the reserved area FENDI & ME, see the FENDI & ME Privacy Policy,
- for sending requests through the “Contact us” section see the Contact Us Policy,
- for the online purchase of FENDI branded products, see the Online Shop Privacy Policy,
- for the purchase of FENDI branded products in FENDI retail locations, see Privacy Policy Retails, and
- for the “Localise me” service, see the Localise Me Policy.
- for tracking and analyzing website behavior, see the Cookie Policy
If you apply for a job posting we also collect information necessary to process your application or to retain you as an employee. This may include, among other things, contact information and information regarding your employment history. We use this information to respond to employment applications and in anticipation of your potential employment with us.
In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check.
Sharing Of Information.
We do not sell your personal information. In addition to the specific situations discussed elsewhere in our privacy policies, we disclose information in the following situations:
- Acquisitions. If another company acquires, or plans to acquire, our company, business, or our assets, we will share information with that company, including at the negotiation stage.
- Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
- Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
- Service Providers. We may share your information with service providers. Among other things service providers may help us to administer our website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.
Your Choices.
You can make the following choices regarding your personal information:
- Access To Your Personal Information. You may request access to your personal information by contacting us at the address described below. If required by law, upon request, we will grant you reasonable access to the personal information that we have about you. Note that California residents may be entitled to ask us for a notice describing what categories of personal information (if any) we share with third parties or affiliates for direct marketing.
- Deletion Of Your Personal Information. You may request that we delete your personal information by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
- Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include "Do Not Track" instructions.
Please address written requests and questions about your rights to Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, Tax Code, VAT number and Rome Companies’ Register No. 03897971002, tel. +39 06 33 450 970, or email customerprivacy@fendi.com.
Note that, as required by law, we will require you to prove your identity. We may conduct an identity verification by phone call or email. Depending on your request, we will ask for information such as your name, the last item you purchased from us, or the date of your last purchase from us. We may also ask you to provide a signed declaration confirming your identity or to provide copy of your identity document. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.
In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.
If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:
1. The agent must provide us with a copy of a written and signed permission from you giving the agent permission to submit requests on your behalf; and
2. If you are a business, proof that you are registered with the Secretary of State to conduct business in California.
How We Protect Personal Information
No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
Some of our websites permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.
If we do not receive both pieces of information, the request will be denied.
Miscellaneous
The following additional information relates to our privacy practices:
- Changes To This Privacy Policy. We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. We will note the effective date of the latest version at the beginning of the Privacy Policy.
- Information for California Residents. California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicate that organizations should disclose whether certain categories of information are collected, “sold” or transferred for an organization’s “business purpose”(as those terms are defined under California law). You can find a list of the categories of information that we collect and share here in below. Please note that because this list is comprehensive it may refer to types of information that we share about people other than yourself. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing please submit a written request to us using the information in the "Contact Information" section below. We do not discriminate against California residents who exercise any of their rights described in this Privacy Policy.
Contact Information
If you have any questions, comments, or complaints concerning our privacy practices please contact us at Palazzo della Civiltà, Quadrato della Concordia No. 3, 00144, Rome (RM), Italy, Tax Code, VAT number and Rome Companies’ Register No. 03897971002, tel. +39 06 33 450 970, email customerprivacy@fendi.com.
****************
California Personal Information Disclosure
California Civil Code 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicates that companies should disclose whether the following categories of information are collected, “sold,” or transferred for an organization’s “business purpose” as those terms are defined under California law. You can find details about the information that we collect from California residents in the chart below. Note that while a category may be marked that does not necessarily mean that we have information in that category about you. Please also note that nothing in this disclosure should be construed to concede that we or any of or affiliates are a “business” as that term is defined under the California Consumer Protection Act (the “CCPA”).
In addition, we may disclose information when requested to government entities, auditors, lawyers, consultants, and other parties as required by law concerning any category (e.g., in response to a subpoena).”
Categories of Personal Information We Collect |
To Whom We Disclose Personal Information for a Business Purpose |
Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name |
|
Additional categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information |
|
Characteristics of protected classifications – this may include age, sex, race, ethnicity, physical or mental handicap, etc. |
|
Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
Internet or other electronic network activity information – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement. |
|
Geolocation data |
|
Professional or employment-related information |
|
Inferences drawn from any of the information listed above |
|