PRIVACY POLICY
(ver. 07/02/2024)

Pursuant to Article 37 of the GDPR, the Data Controller has designated the Data Protection Officer, who can be contacted at the following address: DPO@versace.it.

(A) Information You Provide To Us

If you choose to engage in certain services offered on the Platform, we will collect the following Data directly from you such as identification data (name, surname, age, country of residence, title) and contact details (e-mail, telephone number).

(B) Information Collected Automatically

In addition to the Data you provide directly, we may also collect information from you automatically as you use the Platform. This information includes the following internet or other electronic network activity information and location information:

• Browsing data: such as IP addresses or domain names of computers you use when you connect to the Platform, URI (Uniform Resource Identifier) addresses of requested resources, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with you although through processing and association with other data held by third parties, may allow us to identify you. These data are used only to obtain anonymous statistical information on the use of the Platform and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of potential computer crimes against the Platform: to this end, the data on web contacts could be kept in accordance with and limited to this purpose. Starting from the IP address and the domain name of the computers you use, it will be possible, limited to the purpose of ascertaining responsibility, to trace back further identification data pertaining to you (in particular, name, surname, e-mail address, telephone number, etc.).
• Usage information: This includes information regarding your interaction with the Platform, such as, how many times you access the Platform, how much time you spend on each page, what you click on while on the Platform, and referring website addresses. 
• Device information:This includes certain information about your device that you use to access the Platform, such as browser type, browser language, hardware model, operating system, and your preferences.
• Location Information: This includes information about your location, which may be determined through your IP address.

To collect this information, we use cookies and other tracking technologies. For any information on the cookies installed on the Platform, please refer to the Cookie Policy.

The protection of the safety and privacy of minors is very important to us. By signing in and/or registering on the Platform, you confirm that you are 16 years of age or, in any case, that you are not younger than the age indicated by the legislation of the country of your residence that may provide for other age limits.

Your Data are processed for the following purposes and legal bases:

A. without your prior consent for the purposes of the service and, in particular, to:

1. the execution of the contract and/or pre-contractual commitments, namely:

• the use of the Platform and any technical assistance;
• the management of any of your contact requests;
• your registration to the "My Versace" reserved area;
• service purposes (product authentication).

2. the fulfillment by Versace of legal obligations, such as:

• compliance with the obligations provided for by laws, regulations or national and European legislation or imposed by the competent authorities;

3. the pursuit of a legitimate interest of Versace:

• the management and maintenance of the Platform: our interest relates to the general interest of guaranteeing our business operations, also through the operation of the Platform, and possible improvements in the service offered;
• to carry out statistics - carried out by means of the analytical cookies described in the Cookie Policy of the Platform, to which reference should be made - aimed at optimizing and improving the Platform navigation without identifying you: our interest lies in the general interest to get acquainted with any critical points or suggestions for improving our company operations;
• to send you, if you are already our customer, commercial communications relating to our services and products similar to those you have already used; our interest refers to the general interest of a company to promote its services and is considered legitimate because it is in line with your reasonable expectations of the consumers, taking into account the relationship between them and the Versace itself. Each e-mail sent will allow you to refuse further sending by clicking on the appropriate link.

 

B. Only upon your prior consent to:

1. Marketing purposes, in particular to:
   • First party marketing, namely to send promotional messages following the activation of the newsletter service, and commercial proposals (by mail, e-mail, operator telephone, fax, SMS, MMS, social media, social chat) relating to Versace products and services, for the sending of advertising material on Versace products and services, as well as catalogs and brochures or invitations to events, and in general commercial communications on Versace and its initiatives, as well as for carrying out market research and surveying the degree of customer satisfaction.
2. Profiling purposes, namely:
   • First party profiling, namely to analyze the Data collected, including by automated means, and use it to process, communicate and allow you to take advantage of services, initiatives and personalized offers designed according to your interests, habits and propensity to consume. We may also use your Data to create "clusters" (homogeneous groups made up of profiles that present a degree of correlation) depending on the habits and propensities of consumption in order to develop targeted digital campaigns in line with the preferences of individual users. We may analyze the Data also to carry out surveys. To this end, we can also use dedicated automated software (e.g., CRM).

Providing your Data for the purposes referred to in paragraph 5 let. A) is mandatory and any refusal will prevent us from performing the contractual obligations undertaken and the execution of legal obligations, or to respond to your requests. As regards the purposes referred to paragraph 5, let. B), providing your Data is optional and their use is conditional on the release of your explicit consent. If you choose not to provide your Data for marketing and profiling purposes or if you choose to withdraw your consent at a later stage, this will not compromise the fulfillment of the other purposes indicated above. You may withdraw your consent at any time.

The processing of your Data is carried out - with electronic means - by way of the operations of collection, registration, updating, organization, conservation, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, cancellation and destruction of the Data. Data will be processed by Versace and its employees using computer systems (as well as manual means) in accordance with the principles of fairness, loyalty and transparency provided for by the applicable legislation on personal data protection and protecting your confidentiality and your rights through the adoption of appropriate technical and organizational measures to ensure a level of security appropriate to the risk. Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorized access.

With reference to the purposes set forth in par. 5 let. A) (Purposes of the processing), IP address will be stored for 30 days from the collection. Unless you have provided your consent for the purposes indicated in par. 5 let. B), your identification data (name, surname, age, country of residence, title) and contact details (e-mail, telephone number) will be stored for 3 years. Upon expiry of this period, the Data will be deleted or made anonymous. Data functional to the fulfilment of any legal obligations will be stored also afterwards, in compliance with such obligations and in accordance with the retention periods provided for by the applicable regulations from time to time.

As concerns Data provided for the purposes of par. 5 let. B) nos. 1. (marketing) and 2. (profiling), due to the fact that the personal data stored relate purchases of 'high-end' products and that the average annual frequency of purchase, for each customer, is spaced out over time, Data you have provided  will be retained for a maximum period of 7 years, considering that this time span is appropriate and proportionate to both the purposes that are intended to be achieved and the type of personal data being processed. Upon expiry of this period, the Data will be deleted or made anonymous and, in any case, you may always provide Versace with new consent for the Data processing for the same purposes.

Data processing is carried out by Versace's internal staff appointed for this purpose as Data Processor or person in charge of processing. The Data collected for the execution of the above-mentioned purposes will also be processed by third parties appointed for this purpose as external Data Processors, or, as the case may be, communicated to the same as independent Data Controllers, and namely to:

RECIPIENT/SCOPE OF DATA COMMUNICATION	WHAT WE MAY SHARE
Companies that are part of Capri Holdings Group for service purposes and/or marketing/profiling only prior consent	Name, email address, residence, phone number, age, title
Persons, companies, associations, or professional firms providing assistance and consultancy to Versace, as well as accounting, administrative, legal, tax and financial matters	Name, email address, residence, phone number, age, title
Public administrations for the performance of institutional functions within the limits established by law and regulations	Name, email address, residence, phone number, age, title

 

Furthermore, your Data may be made accessible, communicated and transferred to Public Bodies, Judicial Authorities, Police Bodies, who will process Data as independent controllers in order to follow up on requests for verification or where expressly provided for by law.

We may transfer Data outside the European Union. To this end, in accordance with Privacy Regulations, Versace assesses the impact of data transfers and adopts, if applicable, the most appropriate safeguards (for example, adequacy decisions or Standard Contractual Clauses). 

For information any potential transfer of personal data collected by means of cookies, including those of third parties, please refer to Versace's Cookie Policy and the privacy policies of each third party, available on their websites and linked in the tables included in Versace's Cookie Policy.

You may exercise the rights provided for by the GDPR (Articles 15-21), including the right:

• To receive confirmation of the existence of your Data and access to their content (rights of access);
• To update, modify and/or correct your personal data (right of rectification);
• To request the deletion or limitation of Data processed in violation of the law, including Data whose retention is unnecessary for the purposes for which such Data were collected or otherwise processed (right to be forgotten and right to limitation);
• To object the processing of Data (right to object);
• To withdraw your consent, where given, without prejudice to the lawfulness of the processing based on the consent given before withdrawal;
• To lodge a complaint with the Supervisory Authority in the event of breach of privacy laws;
• To receive a copy of the Data provided to Versace in a structured, commonly used and machine-readable format, and request that such Data is transmitted to another data controller (right to data portability).

 

Requests should be addressed to Versace by sending an e-mail message to dpo@versace.it and/or by mail to the following address: Gianni Versace S.r.l., Piazza Einaudi 4, 20124 Milan, Italy.

Consistent with applicable privacy laws and further to our commitment to honor the trust you place in us regarding your information, you have certain rights in relation to our processing of your Data. These rights are explained below along with the applicable processes you may follow to exercise your rights. We will not discriminate against you for exercising any of your applicable privacy rights.

For a description of additional rights that are afforded to residents of specific countries, provinces, states or locations (and the processes to follow in order to exercise those), please refer to the Additional Specific Privacy Rights section below.

Accessing, Correcting, and Deleting your Data

• Access to Your Data: You have the right to confirm whether or not we have collected or otherwise process Data about you and to request a copy of the Data we collect about you, which we will provide back to you in electronic form.
• Data Correction: You have the right to request we correct factually incomplete or inaccurate Data that we process about you. Note that you can make certain corrections to some of your Data directly through your online account.
• Deletion of Data: You have the right to request that we delete Data that we process about you, except under certain circumstances (i.e. if we need to retain such Data in order to fulfill an order or a contract, comply with a legal obligation or to establish, exercise or defend legal claims).
• Process to Submit an Access, Deletion or Correction Request: You may submit an access, deletion, or correction request directly or through an Authorized Agent as follows:

1. Directly by You:

• Submitting a Request at dpo@versace.it; or
• Calling us at +1 8887217219 and providing the requested information.

 

2. Authorized Agent: If you designate an authorized agent to submit a request on your behalf using the above-indicated channels, you must (1) complete and sign a power of attorney or written authorization and (2) have the authorized agent attach the signed documents when they submit a request on your behalf.

 

For your own privacy and security, and in our discretion, we may require you to verify your identity before providing copies of your personal information, deleting or correcting the requested information. Additionally, we will only provide a copy of your personal information to you, even where you utilize an Authorized Agent to submit the request.

Managing Marketing Communications

• Opt-Out / Unsubscribe– Direct Mail: If you would like to opt out of receiving direct mail from us, please contact us at dpo@versace.it (for US customers and Canadian customers) and specify “Opt-Out of Direct Mail” in the subject line.

Please note we may still contact you via direct mail in connection with your account, relationship, activities, transactions and communications with us.

• Unsubscribe from Email Marketing: If you would like to unsubscribe from receiving promotional emails from us, you should follow the unsubscribe instructions located in each promotional email you receive from us.

Please note we may still contact you in connection with your accounts, relationship, activities, transactions and communications with us.

• Opt-Out – Text Messages (SMS or MMS): Please note that Versace will not carry out any promotional and/or marketing activity via SMS or MMS in the US and Canada.

 

Additional Specific Privacy Rights

Browser Do-Not-Track Signals

Some web browsers and devices permit you to broadcast a preference that you not be “tracked” online. At this time, we do not modify your experience based on whether such a signal is broadcast. To learn more about browser tracking signals and “Do Not Track,” please visit http://allaboutdnt.org.

Canadian Residents

Withdrawal of Consent to Process: Canadian Residents have the right to withdraw consent to processing similar to the deletion right. To withdraw consent to processing, please submit a deletion request using the process described above (Process to Submit an Access, Deletion or Correction Request).

Colorado, Connecticut, Virginia and Utah Residents

Right to Opt-Out of Targeted Advertising. In addition to the rights listed above, residents of Colorado, Connecticut, Virginia and Utah have the right to opt-out of our Targeted Advertising. To opt-out of targeted advertising, you or your Authorized Agent may submit a request using the process described above (Process to Submit an Access, Deletion or Correction Request).

California Residents

• California Shine the Light: Residents of California may request that we stop sharing their personal information with third parties for their direct marketing purposes. Such request will apply as of the date of your request, and we will not be responsible for any communications that you may receive from third parties that received your personal information prior to that request. In these cases, please opt out from or contact that third party directly.
  Process to Submit a Request under CA’s Shine the Light Law:
  1) Please submit a written request via email to: dpo@versace.it
  2) Include the following:
  • Email Subject Line Must Contain: Exercising my rights under CA Shine the Light
  • Email Body Must Contain: your first name, last name and email address associated with your Versace account


• California Privacy Rights (CCPA and CPRA) Notice Rights: The California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) require that businesses provide certain notice to consumers about their information practices concerning personal information. The information specified in such notice requirements can be found follows:
  1) a list of the categories of personal information that we collect is located in Section 3 “Personal Data processed”;
  2) details regarding the sources from which we obtain personal information can be obtained by writing at dpo@versace.it or via mail to Gianni Versace S.r.l., Piazza Luigi Einaudi 4, 20124, Milan, Italy;
  3) details regarding the business or commercial purposes for which we collect or process personal information can be found in Section 5. “Purposes and legal bases of data processing” and
  4) details regarding what personal information we share with other parties and the purpose of the sharing can be found in Section 9. “Scope of processing, communication, dissemination.”


• Right to Opt-Out of the Sale or Share of Personal Information for Targeted Advertising: In addition to your rights regarding Accessing, Correcting, and Deleting your Personal Information listed above, a California consumer has the right, at any time, to direct us to not sell or share their PI with third parties for the purpose of Targeted Advertising. To opt-out of targeted advertising, you or your Authorized Agent may submit a request using the process described above (Process to Submit an Access, Deletion or Correction Request).

This Privacy Policy may be modified over time and we therefore invite you to periodically consult this page. To this end, this policy highlights above the date of update.