FURLA PRIVACY NOTICE
a) WHEN DO WE COLLECT PERSONAL DATA?
Your personal data may be collected:
at one of our stores and/or franchisee integrated in our CRM system (“Point of Sale”), by Furla, and/or any subsidiary and/or affiliated company integrated in our CRM system (“Affiliates”) - Affiliates and Points of Sale shall act as data processors - and
on our Online Channels (as better defined below),
on the following occasions:
if your personal data is necessary for the purchase of the product you have chosen, through Furla's websites or mobile applications or through any other online channel or social media related to Furla (the
) along with the customer service and after-sale support, if the purchase is made through a Furla Online Channel or at a Furla Point of Sale;
if you wish to receive information about our products, services, offers and promotions (
(3) if you give your consent to Data Profiling in order to enable us to personalize your shopping experience in our Points of Sale, on our Online Channels and receive offers in line with your taste and preferences.
b) WHO IS THE DATA CONTROLLER?
The data controller is Furla S.p.A., with legal office in Via Bellaria 3/5, 40068 San Lazzaro di Savena (Bologna), Italy (“Furla”).
Your personal data may also be processed by our Affiliates and Points of Sale as independent data controllers for the specific purposes provided for by local legislation, for billing purposes and/or for all the activities falling under their competence based on Furla’s corporate global decisions. More specific information is available at the following link:
c) WHAT ARE THE PERSONAL DATA WE COLLECT, THE PURPOSES AND THE LEGAL FOUNDATIONS FOR DATA PROCESSING?
Your personal data shall be processed for the following purposes and based on the following legal foundations:
Category of personal data
First name, last name, date of birth, address, country of residence, nationality, telephone number, e-mail address, purchase data (including payment and billing data) and purchase-related data
Fulfilling Furla’s legal obligations including, for instance, obligations regarding product liability or product warranty and other obligations deriving from investigations or instructions provided by authorities, tax-related obligations, contribution and consumer law obligations (“Legal obligations”)
Compliance with a legal obligation to which Furla is subject (article 6, par. 1, letter c) of GDPR)
First name, last name, address, country of residence, nationality, telephone number, e-mail address, payment and/or billing data, purchase data and purchase-related data
If the data is necessary to fulfil obligations strictly related to the purchase of a Furla product and any service correlated* to it, including, for instance: home delivery or in-store delivery of products, the “book an appointment” service, if you request an invoice to be released or wish to benefit from the advantages that would enable you to more easily access our warranty and customer service (e.g. also in the case in which you don’t have a fiscal receipt available) for the management of returns and repairs, to remind you of the availability of products in your online shopping cart and access our post-sale service (“Performance of contract”).
*The regulation of the individual purchase-related services shall be provided by Furla, from time to time, through its Online Channels or at the Points of Sale.
Performance of a contract in which the subject is a party or application of measures to be adopted at the request of the data subject prior to entering into a contract (article 6, par. 1, letter b), of GDPR)
First name, last name, address, telephone number, e-mail address, country of residence, nationality, payment and/or billing data, purchase data and purchase-related data, navigation data
Needs relating to possible disputes that may arise with the data subject as a result of the performance of the contract
Legitimate interest of the data controller in case of dispute (article 6, par. 1, letter f), of GDPR)
First name, last name, date of birth, gender, address, country of residence, nationality, telephone number, e-mail address, navigation and purchase data, products displayed on the Online Channels
Performance of targeted marketing and promotional activities, including, for instance, the forwarding of the newsletter relating to products, offers and discounts generally applied by Furla, events organized by Furla for all its customers and to send you special messages of greetings on the occasion of holidays and anniversaries (“Marketing”). The communications shall be made by Furla through the channels specified by the data subject (e.g. mail, e-mail, telephone, web applications, text messaging or social media, also using automated tools. To modify your communication channel preferences, we invite you to write to the following address:email@example.com
Your consent to data processing for these specific purposes (article 6, par. 1, letter a), GDPR)
First name, last name, date of birth, gender, address, country of residence, nationality data relating to hobbies, job, interests, purchase data and chronology (e.g. purchased products, place, date and time of purchase, delivery data), products visualized and data regarding your purchase behaviour on our Online Channels
Your consent to data processing for these specific purposes (article 6, par. 1, letter a) of GDPR)
First name, last name, date of birth, gender, address, country of residence, nationality, hobbies, job, interests, purchase data (e.g. products purchased, place, date and time of purchase, delivery data), products visualized and data regarding your purchase behaviour on our Online Channels
Only if you have given your consent to Data Profiling, to enable Furla to process, render anonymous and aggregate data deriving from Data Profiling to obtain information about its business performance, the performance of its Affiliates and Points of Sale integrated in the CRM system in order to carry out market research analyses and manage and plan business activities
Furla’s legitimate interest to obtain statistical data on its business performance with a view to optimizing and improving management and planning business activities (article 6, par. 1, letter f) of GDPR) Furla believes that data processing in this case does not imply a high level of risk for your rights and freedoms, as a result of the fact that Profiling data is rendered anonymous and aggregated in such a manner that the data subject is not or no longer identifiable
If you have given your consent to both Marketing and Data Profiling, the Marketing activity will consider the results of data processing based on the information we have acquired in order to provide you with personalized offers always in line with your taste and preferences.
d) HOW ARE YOUR PERSONAL DATA PROCESSED AND PROTECTED?
Since it is not possible to guarantee security of data transmission over the Internet nor the 100% security of data storage systems, we invite you to avoid sending information in excess of that which is strictly required by Furla for the purposes described above, as it will be immediately erased.
It is your responsibility to protect your passwords and related access codes to the services offered by Furla, as indicated in the relevant terms and conditions. Furla will never ask you to communicate such information.
e) HOW LONG DOES FURLA KEEP YOUR PERSONAL DATA?
Furla shall keep your personal data, collected in order to fulfil a legal obligation, execute the contract and in case of dispute, for a period not exceeding the period necessary for such purposes to be completed and, in any case, not exceeding the statutory limitation periods, after which it will be destroyed or rendered anonymous.
Furla shall keep your personal data collected for Marketing and Data Profiling purposes for a period of 7 years (as authorized by the Data Protection Authority), after which it will be destroyed or rendered anonymous.
f) IS THE PROVISION OF ONE’S PERSONAL DATA MANDATORY OR OPTIONAL AND WHAT ARE THE POSSIBLE CONSEQUENCES IF A DATA SUBJECT REFUSES TO PROVIDE IT?
You must provide your personal data for the purposes indicated in point c) 2. (Performance of the Contract). If you do not give your consent to Furla to the processing of your personal data for said purposes, it will not be possible to proceed with the execution of the contracts and access the related services.
The provision of your personal data for the purposes set out in point c) 4. (Marketing) and 5. and 6. (Data Profiling) is instead optional. The failed provision of this data shall not result in any negative consequence for the data subject.
If you give your consent to Furla to the processing of your personal data for said purposes, you reserve the right to withdraw your consent at any time by sending an e-mail to firstname.lastname@example.org.
g) HOW DOES FURLA SHARE THE PERSONAL DATA COLLECTED; HOW DO FURLA GLOBAL SERVICES WORK AND WITH WHOM OUTSIDE THE EEA CAN YOUR PERSONAL DATA BE SHARED?
Furla shall not disseminate, transfer and/or communicate your personal data to third parties who have not been appointed as data processors; with the exception of external suppliers, who provide consultancy services that require a large degree of operational autonomy and Public Authorities that may require access to the data and will process your personal data as independent data controllers.
Furla may share your personal data with specialized companies carrying out technical and organizational tasks necessary to manage relations with customers on behalf of Furla as data processors. These include companies that provide assistance, payment, shipping or storage services for the purchase of products or documentation relating to customer relations and companies that assess the quality of service and customer satisfaction, or carry out marketing and profiling activities on behalf of Furla, including re-targeting activities also on a local basis.
The data you provide online, like your credit card details, will be processed exclusively by external suppliers acting as independent data controllers or data processors on behalf of Furla, according to the service offered.
If you give your consent to the processing of your personal data for Marketing and Data Profiling purposes, your personal data will be included in Furla's CRM database. The CRM data servers are located in Ireland, Microsoft Azure.
The CRM system allows Furla to share your personal data with the Affiliates and/or Points of Sale integrated in the CRM system – the latter being appointed data processors - both inside and outside the country of residence and also both inside and outside the EEA. Furla provides its customers with the opportunity to receive offers in line with their interests and needs in all of the countries in which it operates. In particular, your personal data shall be automatically accessible by the staff of the Affiliates and/or of Points of Sale.
For example: if you visit a Furla store in another country, your personal data shall also be accessible in that store, too.
In the case in which your personal data is transferred to countries other than your country of residence or to countries outside the EEA, your personal data shall be protected by appropriate security systems that are constantly updated and maintained in compliance with the applicable Privacy Regulations (e.g. availability of specific agreements on personal data processing and the non-EEA data processors have signed the Standard Contractual Clauses of the European Commission).
You can find a list of the subjects with whom your personal data is shared at the following link.
You can request a copy of the Standard Contractual Clauses of the European Commission by sending an email to:email@example.com or by visiting the European Commission's website.
h) AVAILABILITY OF AUTOMATED DECISION MAKING PROCESSES, INCLUDING DATA PROFILING
If you give your consent to Data Profiling, Furla may process your personal data using automated tools. Please read carefully the table below to understand the rationale, relevance and expected consequences of this type of data processing:
Rationale and description of personal data processing
Rationale:the products visualized, purchase data and the purchase frequency are analyzed in order to create client clusters (explorer, fan, classic, conosseur and elitist). Based on the cluster, customers shall receive profiled marketing communications promoting Furla products sold at certain prices;
Data processed:name, date of birth, address, data relating to hobbies, job, interests, purchase data (e.g. products purchased, place, date and time of purchase, delivery data), products visualized
Source of information:when you give your consent to Data Profiling, Furla shall process your personal data after logging in as a registered client and when you purchase products on the Online Channels;
How does your personal data influence decision-making?:data profiling is exclusively based on the data provided; therefore, the result entirely depends on it;
Measures to mitigate possible risks:a specific DPIA activity is carried out on data profiling in order to ensure impartial and effective results with no damaging consequences. You can request a copy of the main risk mitigation summary at the following e-mail address:firstname.lastname@example.org
Relevance of data processing and envisaged consequences
Your visits on the Online Channels and your purchase habits as a customer who has given his/her consent to data profiling will determine the types of products that Furla will offer you.
Therefore, if you visualize or purchase products that are:
- - less expensive than those generally visualized or purchased (or if your visualizations or purchases are more frequent), you will receive promotional communications in line with the products above described;
- - more expensive than those generally visualized or purchased (or if your visualizations or purchases are less frequent), you will receive promotional communications in line with the products described above.
i) YOUR RIGHTS TO PRIVACY
You have the right to:
obtain confirmation of the storage of your personal data (right to access);
request Furla to have your personal data rectified;
request that your personal data is erased;
request that Furla limits the processing of your personal data;
oppose the processing of your personal data (for marketing and data profiling purposes, such right may be exercised at any time);
request the portability of your personal data in a structured and machine-readable format and transmit it to another Internet Service Provider;
oppose being subject to a decision making solely based on automated data processing producing legal effects on the data subject, recalling the always available possibility to rely on the assistance of one of our employees;
withdraw the consent previously given (in any case, this shall not prejudice the legitimacy of data processing prior to your consent withdrawal).
You have the right to lodge a complaint with the Data Protection Authority and/or other competent supervisory authority if you believe that your personal data have been processed in violation of the Privacy Regulations.
To exercise these rights, you may contact Furla by sending a request to the following e-mail address: email@example.com.
With regard to any matter relating to the processing of your personal data and the exercise of your rights under the GDPR, you may contact Furla S.p.A., Via San Raffaele, 5 -20121 Milan (Italy), e-mail address:firstname.lastname@example.org
j) Sharing of data scheme (for Japanese customers)
If you give your consent to the processing of your personal data for Marketing and Data Profiling purposes, your personal data will be included in Furla's CRM database. The CRM system allows Furla to share your personal data with the Affiliates and/or Points of Sale integrated in the CRM system – the latter being appointed data processors – both inside and outside the country of residence and also both inside and outside the EEA. Furla provides its customers with the opportunity to receive offers in line with their interests and needs in all of the countries in which it operates. In particular, your personal data shall be automatically accessible by the staff of the Affiliates and/or of Points of Sale.
For example: if you visit a Furla store in another country, your personal data shall also be accessible in that store, too.
You can find a list Furla Affiliates and/or Points of Sale here/below.
Furla will share the following personal data: name, date of birth, gender, address, country of residence, nationality, data relating to hobbies, job, interests, purchase data and chronology (e.g. purchased products, place, date and time of purchase, delivery data), products visualized and data regarding your purchase behaviour on our Online Channels.
Furla S.p.A. is the data controller and the entity in charge of management of the personal data.
k) Data sharing scheme (for Australian customers)
If you reside in Australia, you have a legal right under the Privacy Act 1988 (Cth) to request access to your personal data which is held by us. You also have a right to seek correction (including correction of any errors) of your personal data. If you would like to request access to, or correction of, your personal data, please contact us using our contact details in Section (i) above. If you request access to, or the correction of, your personal data, we will respond to your request within a reasonable period after the request is made. Access to your personal data will be provided in accordance with any applicable laws and is subject to any exemptions which might apply under those laws.
If you believe that we have breached this privacy notice or have otherwise interfered with your privacy, you may write to us with your complaint using the contact details in Section (i) above. We take all privacy complaints seriously and will endeavour to resolve any issues in a timely and fair manner. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner.
l) Data sharing scheme (for Canadian customers)
If you reside in Canada, you have a right to request access to your personal data which is held by Furla and the right to request its modification (including the correction of any errors). If you would like to request access to, or correction of, your personal data, please contact Furla’s privacy compliance contact point, based in Milan, Via San Raffaele n. 5 at the following e-mail address:email@example.com. We will respond to your request within a reasonable period after the request is made. To protect against fraudulent requests for access to your personal data, we may ask you for additional information to confirm that the person making the request is you or is authorized to access your personal data. For example, we may require you to verify your identity before you access your personal data. Access to your personal data will be provided in accordance with applicable laws and is subject to any exemptions which might apply under those laws.
We reserve the right to transfer all personal data we have about you in the event of mergers or acquisitions with third parties.
Some or all of the personal data we collect may be sent to or stored on servers located outside of Canada, in particular, in the European Union. Data protection laws in EU or other non- EU countries may differ from those in Canada. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to laws in those jurisdictions.
By providing us with personal data, you understand and expressly agree that we may transfer your data outside of Canada or your jurisdiction of residence. If you do not agree to this transfer, we ask that you do not provide us with personal data.
We reserve the right to modify this Privacy Notice at any time. By accessing or using Furla’s website or providing us with your personal data after such changes, the user consents to this Privacy Notice, as amended. Please periodically review this Privacy Notice so that you are continuously updated on the personal data we collect, how we use it, and with whom we share it.
m) Data sharing scheme (for Californian customers)
We provide this section pursuant to the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws.
The CCPA and other California privacy laws provide California residents with specific rights regarding California Personal Information. This section describes the rights California residents have and explains how California residents can exercise those rights.
Access to California Personal Information and Data Portability Rights
California residents may request that we disclose certain information about our collection, use, process and disclosure of their California Personal Information over the past twelve months. If we receive and confirm a verifiable consumer request from a California resident pursuant to the Exercising CCPA Rights section below, we will disclose to that California resident one or all of the following depending on the scope of the request:
The categories of personal information we collected about that California resident over the past twelve months.
The categories of sources for the personal information we collected about that California resident over the past twelve months.
Our business or commercial purpose for collecting that personal information over the past twelve months.
The categories of third parties with whom we share that personal information over the past twelve months.
The specific pieces of personal information we collected about that California resident over the past twelve months.
The categories of personal information about that California resident that we disclosed for a business purpose, to the extent we have made such disclosures over the past twelve months.
Deletion Request Rights
Subject to certain exceptions, California residents may request that we delete the California Personal Information we collected about them. If we receive and confirm a verifiable consumer request from a California resident pursuant to the Exercising CCPA Rights section below, we will delete and direct our service providers to delete that California resident’s California Personal Information, unless an exception applies.
Exercising CCPA Rights
To request that we exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by emailing us at firstname.lastname@example.org.
We will deliver our written response through email. Any disclosures we provide will only cover the 12-month period preceding the date we receive your verifiable request. For data portability requests, we will select an industry-acceptable format to provide your California Personal Information.
Unless a request is manifestly unfounded or excessive, we will not charge a fee to process or respond to your verifiable consumer request. If we determine that a request is manifestly unfounded or excessive, we will tell you why we made that decision and reserve the right to either refuse to act on your request or charge you a reasonable fee to complete your request.
In order to protect your California Personal Information, please note that:
Only you or an authorized agent registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your California Personal Information;
You may only make a verifiable consumer request for access or data portability twice within a 12-month period;
The request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected California Personal Information or an authorized representative; and
The description of the request must provide sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with California Personal Information if we cannot verify your identity or authority to make the request and confirm the California Personal Information relates to you. Although you may use an authorized agent to submit a request to opt-out on your behalf, we may deny a request from an authorized agent that does not submit proof with the request that they have been authorized by you to act on the consumer’s behalf.
You are not required to create an account with us to make a verifiable request. We will only use California Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
As described above, where we are processing personal information received from or collected on behalf of our business customers, we may act as a “service provider” as defined in the CCPA and have no direct relationship with the individuals whose personal information we process under these circumstances. If we receive your personal information from or on behalf of one of our business customers or if we process your personal information on behalf of one of our business customers and you would like to make an inquiry or complaint, please contact the business customer that you interact with directly.
Direct Marketing Disclosure Request Rights
California residents who have an established business relationship with us may request information regarding third parties, if any, to whom Furla may have disclosed personal information (as defined by Cal. Civ. Code § 1798.83(e)(7)) for the direct marketing purposes of those third parties during the preceding calendar year. Any such disclosures that we may have made over the prior calendar year are not inconsistent with our statement that we do not and will not ‘sell’ your California Personal Information as the CCPA defines ‘sell’. Any disclosures we make are invariably done with your knowledge or following your request that we do so.
If you have questions about how Furla complies with applicable California privacy law, would like to submit a request, or would like to make a complaint about this notice, please contact us via email at: email@example.com
AFFILIATES INTEGRATED IN FURLA CRM SYSTEM
Via Bellaria 3/5 40068 San Lazzaro di Savena, Bologna IT
KENT SA FURLA
Space num 41 Maasmechelen Village Zatellan 100, Maasmechelen Belgium
FURLA UK LTD
Regent Street 221, W1B 4NU, London UK
FURLA ESPANA SL
Paseo de Gracia, 59 08007 Barcellona, España
FURLA IRELAND ACCESSORIES LTD
6th floor South Bank House, Barrow street, Dublin, Ireland
FURLA GERMANY GMBH
Theatinerstr. 30 80333 Munchen, Germany
FURLA FRANCE SAS
7/9 Rue La Boétie 75008 Paris, France
FURLA AUSTRIA GMBH
Designer Outlet Strasse 1 Parndorf A-7111 Austria
FURLA HOLLAND B.V.
Stadsweide 438, Unit 320, 6041TP Roermond - The Netherlands
FURLA PORTUGAL, LDA
Edifício Premium | R. Miguel Serrano, nº 9 - 6º - Miraflores - 1495-173 Algés
FURLA POLSKA SP. Z.O.O.
Ul. Floriańska 2 - 03-707 Warszawa, Poland
FURLA PRAGUE S.R.O.
Jindřišská 937/16, New Town, 110 00 Praga 1
FURLA JAPAN CO., LTD
Jingumae Tower Building 10F, 1-5-8, Jingumae, Shibuya-ku, Tokyo 150-0001, Japan
FURLA (U.S.A.), INC.
432 Park Avenue South 14th Floor New York, NY 10016
FURLA SWITZERLAND SA
Beroldingen 26 CH- 6850 Mendrisio
FURLA AUSTRALIA PTY LTD
Level 10, 379
Collins Street, Melbourne Vic 3000, Australia
FURLA CANADA INC.
1635 Sherbrooke Street West, #210 Montréal, Québec h6H 1E2
POINTS OF SALE INTEGRATED IN FURLA CRM SYSTEM
THE RIVER SRL
ITALY – MONZA – Via Italia, 37
ITALY - PORDENONE - C.so Vittorio Emanuele, 42/C
MARK G.C. SRL
ITALY - ROMA - Galleria A. Sordi
ASAR S.A.S. DI VANESSA STELLA & C.
ITALY - ROMA - Viale Libia, 203 - 205
LIFE STYLE SRL
ITALY - SAN GIMIGNANO – P.zza della Cisterna, 16
LOOK BOUTIQUE DI LYUBCHENKO OLGA
ITALY - SAN MARINO – Via Basilicius, 6
ITALY – TAORMINA – C.so Umberto I, 48
ETRUSCA SRL SOCIO UNICO
ITALY - TORINO - P.zza CLN, 255
To receive a list of all data processors, send a request to the following e-mail address: firstname.lastname@example.org