Prada S.p.A., with registered office in Milan, the holding company of the Prada Group (hereinfater “PRADA”) hereby informs you that any personal information (hereinafter “Personal Data”) provided to PRADA to register as a member and to participate in the initiative called “Prada Mode” (hereinafter the “Event”), shall be processed by PRADA in compliance with the current applicable legislation on the protection of Personal Data and the principles and rules of conduct contained in the Prada Group Code of Ethics.
1. Type and source of Personal Data
PRADA collects and processes the Personal Data you directly and knowingly provide during your voluntary registration to and participation in the Event. The items of data collected include title, first and last name, city and email address.
You need to be over 16 years old in order to provide us with your Personal Data.
If you are a minor, you should obtain prior consent from your parent or legal guardian before providing your Personal Data. If PRADA becomes aware that a minor has inadvertently provided Personal Data, without the prior consent of a parent or legal guardian, such data will be deleted or made anonymous.
2. Purpose and legal basis of the processing
Your Personal Data may be processed and used by PRADA:
within the purposes of the Event,
and subject to your prior consent, your personal data may be registered into the Prada Group customer data base, managed by PRADA S.p.A. and shared with all Prada Group’s stores globally, and may processed for the following optional purposes:
- profiling: to perform individual or group studies, surveys, statistical analyses and market research with regards to your preferences for PRADA and the other brands, products and services of the Prada Group, so that a personalized service can be offered and cultural and recreational activities may be promoted based on customers’ interests.
- marketing: to contact you and/or send you (by post, telephone, e-mail and any other form of electronic communication or digital means including social network platforms and other instant messaging applications) information and promotions, including of a commercial nature, newsletters, advertising, catalogues and invitations to events concerning PRADA and the other brands, products and service of the Prada Group.
You may withdraw or modify your consent to the processing of your Personal Data at any time, by writing to us at the contact addresses indicated in Section 7, or by using the ”unsubscribe” link included in all of our commercial electronic communications as well as any other appropriate procedures which may be made available to you by PRADA.
3. Method of processing
Your Personal Data will be processed exclusively for the purposes for which they have been collected and according to criteria of lawfulness and correctness and protecting the security and confidentiality of data through the adoption of appropriate measures to prevent loss, alteration, cancellation, destruction, unauthorized access, processing or disclosure or processing beyond the purposes of collection.
Whenever necessary and/or instrumental to the abovementioned purposes, Personal Data may be processed by entities (third parties) engaged by PRADA in achieving the abovementioned purposes. These third parties (“Service Providers”) will act on behalf of PRADA as data processors and are under a contractual obligation of confidentiality in respect of the relevant personal information.
4. Disclosure and dissemination
As PRADA is part of an international network and uses global services your Personal Data may be transferred abroad in accordance with applicable legislation, including to locations outside the European Union by adopting all appropriate security measures and safeguards to ensure an appropriate level of data protection and security.
The Personal Data transferred to the Service Providers will be retained only to the extent necessary for the purposes of the service provided and to meet any regulatory requirements in accordance with any applicable laws. Your Personal Data will not be sell, disclosed or disseminated to unknown persons under any circumstances.
Communication of data to the other PRADA Group companies
Please also note that if you agree to register into the Prada Group customers database for the purposes referred to in Section 2 letters (b) and (c), your Personal Data may be shared with all Prada Group stores globally (also in countries not belonging to the European Union) to provide you with the same level of service around the world. PRADA will take all appropriate and suitable security and confidentiality measures as required by applicable legislation to ensure an adequate standard of data protection.
5. Data retention period
The data will be processed and stored (i) for the duration of the Event (ii) as long as required to carry out the purposes for which the Personal Data were collected or (iii) until you revoke your consent to the processing of your Personal Data, where applicable.
6. Your rights
Please note that you may exercise your rights under the European General Data Protection Regulation, Regulation EU 2016/679 (“GDPR”) at any time by contacting the Data Controller at the addresses indicated in the next paragraph.
In particular, you have the right to request information as to whether your Personal Data is being processed and as to the characteristics of the processing, the right to rectification and erasure of your Personal Data, to limitation of the data processing, and/or the right to object to the processing and/or to request the transmission of your Personal Data to another data controller and/or to lodge a complaint with the competent supervisory authority including the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or take legal action if you believe there is non-compliance with the provisions of the applicable laws.
You also have the right to withdraw your consent for the processing of your Personal Data by PRADA at any time, without charge. The withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.
7. Data controller and contacts
Via Antonio Fogazzaro 28, 20135 Milan (Italy)
Group Data Protection Officer
Paris, January 19, 2020