Are you a new customer?
back
Sign into your account to see your favourite items
Are you a new customer?
Create your accountback
Website Privacy Policy
Last Udpated In: November 2023
Your privacy and the security of your personal information is very important to the Tod's Group. For this reason, we take the utmost care in collecting and managing the personal information that you provide us with or that we automatically acquire, adopting specific measures to guarantee their security, confidentiality, and integrity, in compliance with the provisions of Regulation (EU) 2016/679 (from here on, "Regulation") and the privacy legislation of your country of residence (the Privacy Act 1988, the Privacy Amendment Act 2012 and the Australian Privacy Principles).
- 1. Who we are?The entity that manages, collects, uses, processes, and discloses your personal information (hereinafter also "Data Controller” or “Controller") is Tod's S.p.A. (hereinafter also "Company", "we" or "our"), with registered office in Via Filippo Della Valle n.1, Sant'Elpidio a Mare (FM) - Italy (EU), contactable at the following e-mail address dataprivacyofficer@todsgroup.com.
- 2. What Kind Of Personal Information Do We Collect?
When consulting the pages of our website, some of your personal information will be collected or, in connection with some services, you will be requested to provide additional personal information.
- 1
- 2
- 1
- 2
Automatically acquired data
Browsing Data - The computer systems and software procedures used to operate the Website acquire, in the course of their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.
Cookies - to find out more, we invite you to read the section "Cookie Policy - Cookie Setting" available at the bottom of every page on our website.
This is information that is not collected in order to be associated with you, but which by its very nature could, through processing and association with data in possession of third parties, allow you to be identified. This category of data includes the IP addresses or domain names of the computers used for navigation and which connect to the Sites, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment. These data are not circulated, but are used only to obtain anonymous statistical information on the use of the Site and to check its correct operation, and are kept for the time periods defined by the relevant legal regulations. The data could, however, be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site. Except in the latter case, such data are not retained for more than fifteen days. For further information and to manage your preferences, we invite you to view the section "Cookie Policy - Cookie Settings", which can be reached via the link available at the bottom of each page of our website.
Geo-localisation data - The Site's internal search system collects data, exclusively when used and subject to your confirmation, relating to your geographical location, in order to obtain the appropriate search results (e.g., when searching for the boutique nearest to you via the dedicated functionality).
Personal Information voluntarily provided by you
In order to enable you to take advantage of the various features offered by our website, you may be requested to provide other personal information, such as:
personal data: first name, surname, date of birth, gender;
contact details: e-mail address, telephone number, address of residence or domicile;
information relating to purchases made: date, quantity and type, product code, sale amount, VAT number where applicable, shipping/billing address, data relating to the payment method you wish to use, information on complaints, returns, guarantee, refunds, and other information relating to the sale of products;
information relating to your interests: services, events, or initiatives of the Tod's Group which you have joined, or expressions of appreciation for products or initiatives of the various Tod's Group brands;
username and password: when purchasing our products online, subscribing to one of the services provided through the website or activating a Personal Account on our website.
Please note that your payment information, such as your credit card number, will NOT be processed by us.
Personal information collected through social media pages
We may also collect some of your personal information when you interact with our social pages. Some information is submitted directly by you, when you decide to share - through your profile - images published on our social pages, comment on our posts and/or express your approval of one of our products, one of our initiatives or one of our events by selecting the appropriate features, as well as when you decide to write us a message using the private chat or other channels made available on the various social media.
We may also become aware of some information that is indirectly collected as a result of your interaction with our social pages; for example, we may know the time and day when you express your liking to one of our posts or send a request through a mail message.
The knowledge of much of your personal information depends on your chosen social media settings and the content you choose to make public. This information could include your first name, last name, some contact details, and the image associated with your social profile and related information collected through social log-in. We therefore remind you that some of your information may be visible to us should you decide to follow our social pages. For this reason, we invite you to read the privacy policy of the different social media and to check the privacy settings.
Personal information relating to minors
We would like to point out that the protection of the safety and privacy of minors is very important to the Tod's Group. Therefore, we do not intend to collect and do not intend to voluntarily use any personal information of persons under sixteen (16) years of age, or under any other age limit imposed by the laws in force in your country of residence. We therefore request you to refrain from providing us with any of your personal information if you are under the age of sixteen (16) years or under the age of majority in your country of residence.
- 3. How we use your personal information?
Whenever we acquire and process your personal information, this will be done exclusively in accordance with the principles of legitimacy envisaged in the legislation. We may use personal information for the following business purposes.
3.
With your CONSENT, we will process your personal information to:
conduct marketing activities, both through automated tools (SMS, MMS, messaging platforms, e-mail, push notifications) and through traditional channels (paper mail, telephone call with operator). The marketing activities may take the form of sending newsletters, promotions, discounts, facilitations, commercial information, and other dedicated services, by paper mail, call with operator, direct sale, through e-mail, pre-recorded calls, 'social' or messaging platforms and SMS/MMS.
In this context, we may also process your personal information in order to invite you to participate in shows and events, to involve you in market research or to notify you of special initiatives dedicated to TOD'S Group customers, in the manner and at the times that we deem most effective based on the various initiatives mentioned;
analysing some of your personal tastes to identify your preferences, interests, and consumption choices, in order to provide you with services that better meet your expectations and needs.
The profiling activities may take the form of the analysis of information regarding your interests and preferences with regard to our products and services and your consumption choices: for example, by surveying the type and frequency of the purchases you make on our e-commerce sites, through your Personal Account and in "guest" mode, and at our boutiques, in order to be able to guarantee you a personalised service during your future visits to TOD'S Group boutiques. If you have also given your consent to the processing of your personal information for marketing purposes, it will allow us to send you promotions and/or invitations to initiatives that are more in line with your profile, preferences, and expectations.
The provision of your personal information is entirely voluntary, but failure to provide some of them may result in your partial or total inability to be involved in our marketing initiatives.
Please note that, should you decide not to consent to the processing of your personal information for marketing purposes, this would prevent us from being able to involve you in our promotional initiatives, including our periodic newsletter updates.
Should you decide not to consent to the processing of your personal information for profiling purposes, this would have no impact on your participation in our promotional communications plan, but would simply result in our inability to send you personalised promotional communications.
Learn more about how our consent request works
When giving your consent, you will be requested to tick the checkbox for each purpose for which you wish to authorise us to process your personal information:
if you tick the consent check box, we will process your personal information for the chosen purpose;
in the event that you do not tick the consent check box, we will maintain the previous situation, i.e.,
if you have previously given us your consent, it shall remain valid until revoked or until the defined 'expiry date';
if you have not previously given us your consent, we will continue NOT to use your personal information for the purpose in question.
We would like to remind you that you may revoke previously issued consents at any time by following the instructions given in the remainder of the privacy policy.
We will process your personal information to fulfil contractual obligations or pre-contractual measures, in order to:
enable you to purchase products on our website, as well as to fulfil our contract obligations to you. Failure to provide your personal information will result in the impossibility of completing the purchase process, as such information is necessary for us to fulfil our contract obligations;
allow you to create a Personal Account on our Website and use the related dedicated services. The list of services dedicated to holders of a Personal Account may be amended and/or supplemented over time at the discretion of the Data Controller.
Some of the personal information that we request you to submit to us when creating your Personal Account are compulsory, as they are indispensable for us to be able to process your request to open a Personal Account; the communication of other personal information is optional, but failure to submit them may make it impossible for us to provide you with some of the services, or part of some of them, dedicated to those who have a Personal Account on our website;
enable us to respond to your contact request and allow us to provide you with the necessary assistance. The personal information we request you for when filling in the on-line form and/or which will be requested from you by our operators are indispensable to enable us to handle your request;
enable us to provide you with the services on the Website (hereinafter “Services”) to which you have subscribed. The personal information that we request you to provide when you subscribe to a given service are indispensable for the provision of that service; therefore, failure to provide them may make it impossible, in whole or in part, for you to benefit from them.
The provision of any personal information is voluntary. However, failure to disclose certain personal information could prevent you from partially or fully using Service. Please note that the services available on our website may vary depending on your country of residence. Any and all further processing of your personal information, performed by the point of sale you selected, both preparatory and related to the purchase of Tod’s Group products shall be carried out by each retail company of Tod's Group, which, in its role as the Data Controller will provide you with, the necessary information concerning your privacy and the processing of your personal information.
In the event that communication channels such as messaging apps (WhatsApp, WeChat, Telegram, etc.) are used for the provision of services, please also read the privacy policy of the messaging platform used.
We will process your personal information in order to comply with compulsory regulatory provisions to which the Company is subject (legal obligations).
Subject to legal restrictions and provisions, we may also use your personal information to purpose a legitimate interest of ours or of third parties, as:
detecting, preventing, or investigating potential security incidents or frauds;
facilitating the functionality of our mobile applications and websites;
improve our services and business processes;
enforcing our terms and conditions;
exercise or defend a right of us or of a third party.
- 4. How we protect your personal information? The processing will be carried out with the aid of telematic, paper and computer tools; such processing will be based on the principles of correctness, lawfulness, transparency and protection of your rights and confidentiality.
In particular, the processing of your information, including for profiling purposes, may be carried out by means of automated processes, for instance through the comparison and comparative analysis of your purchasing choices (types, quantities, frequency, etc.), during a given period and/or season, and through the analysis of the type and number of your possible requests for information on products made in a predetermined timeframe.
The information will be processed in such a way as to minimise the risks of destruction, loss, unauthorised access, or processing that is not permitted or not in accordance with the purposes of collection.
We take all reasonable and practicable steps to protect your personal information, but unfortunately, no system or network can be guaranteed to be 100% secure. Should you have any reason to believe that your interaction with us is no longer secure, please notify us immediately as per the Section 9 “How To Contact Us?” of the privacy policy (please note that notifications by post will increase the time it takes for us to respond to the problem).
- 5. How we share your personal information? Your personal information will not be disclosed or sold.
To the extent permitted by law, your personal information may be accessible, according to each processing purpose, to:
our service providers, including other companies in the Tod's Group, that perform activities of a technical or organisational nature on our behalf. They assist us with a variety of functions including with research, mail and delivery, security, insurance, professional advisory (including legal, accounting and auditing advice), banking, payment processing, fraud checks, data storage, information processing, order tracking, marketing, product reviews, responding to customer queries and complaints or technology services. We have bound those providers to safeguard your personal information and to only use it for the purposes for which it was supplied; we will make all reasonable enquiries to ensure that this is the case.
third parties in the event of reorganisation, merger, sale, joint venture, assignment, transfer of our business or part thereof (including in connection with bankruptcy or similar proceedings);
public authorities, in response to formal and lawful requests from the latter or in execution of regulatory obligations;
persons authorised by the Company to process personal information necessary to perform activities strictly related to the provision of services, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (e.g., employees of the Company);
Tod's Group companies for internal administrative/organisational purposes.
Wherever possible, we will limit the information provided to independent third parties to that information required for those third parties to properly perform their functions. Further, our contracts with these third parties will always require the third parties to comply with the APPs (or equivalent standards).
By agreeing to accept the terms of this privacy policy or by providing your personal information to us, or both, you are taken to have consented to us disclosing your personal information to our third-party service providers.
- 6. Where We Transfer Your Personal information? Your personal information will be transferred from to Italy (EU).
Should it be necessary to transfer your personal information to third parties within the European Economic Area (EEA), prior to us disclosing your personal information to such recipients, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to your personal information, as required by APP 8.1.
As well as we only disclose your personal information to such recipients for the purposes for which that personal information was collected, in accordance with APP 6.
Should it become necessary to transfer your personal information outside the European Economic Area (EEA), to companies of the Tod's Group and/or to third parties who carry out tasks of a technical and organisational nature on our behalf which are consistent with the pursuit of the purposes for which your information have been collected and processed, this will only take place where it is possible to guarantee a level of protection of personal information equivalent to that of the European Community.
In fact, we guarantee that your personal information may only be transferred to a country outside the European Economic Area if at least one of the instruments recognised by the Regulation as guaranteeing an adequate level of protection for the personal information transferred has been adopted, namely:
the Adequacy Decisions adopted by the European Commission pursuant to Article 45 of the Regulation;
the provision of specific Standard Contract Clauses (EU Model Clauses), approved by the European Commission, in order to ensure that the level of protection of personal information processed by our partners outside the EEA complies with that guaranteed within the European Economic Area.
We also undertake to carry out, in accordance with the law, any prior risk assessment regarding the transfer of personal information, adopting, where appropriate, any additional security measures in addition to the protections already guaranteed by the aforementioned transfer instruments.
In any event, we will take such steps as are reasonable in the circumstances to ensure that the information that is transferred to third parties located outside of Australia will not be held, used, or disclosed by the recipient of the information in a manner that is inconsistent with the Australian Privacy Principles.
You can receive further information on data protection guarantees in case of transfer to countries outside the European Economic Area or Australia contacting our Data Protection Officer (DPO) to the addresses indicated in the Section 9 “How To Contact Us?” of the privacy policy.
- 7. How long we keep your personal information? Your personal information will be processed by the Company for varying periods of time depending on the different purposes of the processing; in any event, only for the period of time strictly necessary to achieve the purposes for which the information was collected and processed.
For the processing purposes set out below, the processing and storage of your personal information will be as follows:
Purposes of processing based on 'Consent', as referred to in paragraph 3.1 of the privacy policy:
Marketing activities: until consent is revoked. Concerning telemarketing communications alone, the validity of your consent is limited to 3 months since the relevant date, pursuant to the provisions of the “Do Not Call Register Act”.
Profiling activities: 7 years from the date of issue of your consent, with automatic renewal in the event of a new purchase at a Tod's Group shop or website.
Processing purposes based on 'fulfilment of contract obligations or pre-contract measures', referred to in paragraph 3.2 of the privacy policy:
Sale of Tod's Group products: until complete fulfilment of the contract obligations arising from the sale;
Provision of services dedicated to Personal Account holders: until you close your Personal Account or 7 years from your last interaction with your Personal Account, whichever is earlier;
Provision of support services to users of the Web Site: until complete fulfilment of the commitments undertaken following your request for assistance, support, or contact;
Other services available on the Website: until we have fully discharged our obligations in respect of your membership of the chosen service.
Purposes of processing based on 'legal obligations', as referred to in paragraph 3.3 of the privacy policy: the storage of your personal information may be further extended, with respect to the timeframe indicated above, should the storage of your personal information be required by compulsory legal regulations, within the time limits provided for by the latter.
Purposes of processing based on 'legitimate interest', as referred to in paragraph 3.4 of the privacy policy: should the processing activities be conducted on the basis of a legitimate interest, either ours or that of third parties, the retention of your personal information shall be limited to the time strictly necessary to achieve the legitimate interest pursued from time to time.
Should the legitimate interest pursued lie in the exercise and defence of a right of ours in a court of law, the retention of your personal information may extend up to the last instance.
- 8. What are your privacy rights?
We would like to remind you that you have the right at any time to know what personal information we hold about you and how they are being processed, to request that they be updated or corrected and, in the cases provided for by current legislation, to obtain their deletion, restriction of processing or to object to their processing. If you wish, you may also receive your personal information in electronic format for the purpose of transfer to a third party indicated by you.
You may do so at any time by writing to our Data Protection Officer (DPO) at the addresses indicated in the Section 9 “HOW TO CONTACT US?” of the privacy policy.
You may exercise the rights recognised by the law, with reference to the specific processing operations carried out by us:- 1
- 2
- 3
- 4
- 5
- 6
- 7
Request to access your personal information as well as receive information on the purpose of the processing, the categories of information processed, the recipients or categories of recipients to whom your personal information may be disclosed, the planned retention period, the application or non-application of profiling mechanisms and automated decision-making processes;
Request to rectify your personal information. This right allows you to correct or complete the information concerning you, although in some cases a prior verification of the correctness of the new information provided by you is necessary;
Request to delete your personal information. This right allows you to request the deletion or removal of your personal information if there are no valid reasons for continuing the processing. You also have the right to request the deletion or removal of your personal information if you have exercised your right to object to the processing and there is no other legal basis for us to keep it, or if we have processed your information in violation of the law or if we are obliged to delete your personal information in order to comply with a specific legal provision. Please note that we may not be able to comply with your request for deletion or may only be able to comply with it partially; for example, because of legal, juridical, or fiscal constraints beyond our control that prevent us from deleting all or part of your personal information. The reasons for our total or partial impossibility of fulfilling your request will be submitted to you promptly;
Request for restriction of personal information processing. Said right enables you to request the suspension of the processing of your personal information in the following cases:
if you request us to determine the correctness of your information.
if you do not wish your information to be deleted, despite the fact that the use of the information by us is in breach of a regulation.
if you wish your information to be retained even if the reasons for their retention by us have ceased to exist, because you wish to ascertain, exercise, or defend a legally protected right.
if you have objected to the use of your information but it is necessary for us to ascertain the existence of legal grounds for their use.
Request to object to the processing of your personal information. By exercising such right, you may obtain the cessation of the processing of your personal information in relation to the purpose(s) indicated by you. We would like to point out that our granting of your request for objection may or may not take place on the basis of the lawfulness of the processing itself;
Request for portability of your personal information. We will provide you or a third party indicated by you with your personal information in a structured, commonly used, and machine-readable format. This will only be done, if technically feasible, for personal information whose processing is carried out by automated means and if the processing is based on consent or the performance of a contract;
Revocation of consent. If the processing is carried out against your explicit consent, we will, within the timeframe provided for by the Regulation, execute your request for revocation and cease the processing in question.
With regard to revoking your consent to the processing of your personal information for marketing and/or profiling purposes, without prejudice to the possibility of exercising this right by writing to the e-mail address dataprivacyofficer@todsgroup.com, we would like to point out that in each of our communications, by e-mail or SMS, of a promotional nature, there is a function through which you may autonomously
proceed to block one or more of the communication channels used by us to contact you;
withdraw consent to the processing of your information for marketing purposes. In this case, any communication from us of an advertising and/or promotional nature will cease, and any active newsletter service (relating to any Tod's Group brand) will be automatically deactivated;
withdraw consent for profiling purposes.
The same functions are available within your Personal Account, if you have activated one.
In addition, a functionality is available in each of our newsletters through which you can unsubscribe from the newsletter service.
Should the processing be carried out on the basis of a legitimate interest of ours or of a third party, we reserve the right to assess the grounds for your request. Should the reasons for the processing legitimately override your interests, rights, and freedoms, or should it be necessary for us to process such information in order to initiate, execute legal proceedings or defend ourselves in court, we will be obliged to refuse your request, stating the reasons for the refusal. Please note that you will not be discriminated against in any way for having exercised one or more of the rights recognised by the legislation, nor will such exercise have any repercussions on any existing relationship with us.
You may also contact us for further information or clarification or to be informed of the persons authorised to access your personal information.
Finally, we would like to remind you that you may at any time decide to lodge a complaint with the Supervisory Authority, or appeal before the Judicial Authority, in the event of a breach of the rules on the protection of personal information and/or if you consider that one or more of your rights have been violated. The relevant contact details for data protection authorities are provided below.
Italian Data Protection Authority: protocollo@pec.gpdp.it or garante@gpdp.it;
Office of the Australian Information Commissioner: enquiries@oaic.gov.au.
- 9. How to contact us?If you want to know more information about this privacy policy, including exercising your rights, complaints, or the rules of the processing of your personal information, if you have any questions, you can contact our contact points below detailed:
by post: Data Protection Officer - Tod's S.p.A., Via Filippo Della Valle n. 1, 63811 Sant'Elpidio a Mare (FM) - Italy (EU).
by e-mail: dataprivacyofficer@todsgroup.com.
When exercising the aforementioned rights, we reserve the right to request you, in the manner we deem most appropriate, for specific information to help us confirm your identity, in order to be reasonably sure that only you have access to your personal information and that they are not disclosed to third parties not entitled to receive them.
We undertake to answer and follow up your request, where well-founded, without delay, by and no later than one month of receipt of the request to exercise one or more rights. Occasionally, within the time limits granted by law, we may take longer if the request is particularly complex or if you have made several requests. In that case, we will notify you and keep you updated.
The exercise of your rights is completely free of charge.
Should your claims, however, be manifestly unfounded or excessive, particularly due to their repetitive nature, we reserve the right to
the right to charge you a reasonable fee based on the administrative costs incurred in providing you with the information or communication or taking the requested action;
to refuse to comply with your request.
You can also file a complaint by writing to our Data Protection Officer (DPO). We will get back to you within a reasonable time, acknowledging your complaint and informing you of the next steps we will take to deal with your complaint. If you are not satisfied with our response, you have the right to lodge a complaint with the Supervisory Authority by writing to the addresses indicated in Section "8. What Are Your Privacy Rights?" of the privacy policy.
- 10. Amendment and updating of the privacy policy From time to time, we may make changes to the privacy policy, for example, to comply with new obligations imposed by applicable law or to meet technical provisions or as a result of new services provided by the Site or the Tod's Group.
We therefore invite you to visit this page periodically.
Please refer to the indication 'last updated' at the top of the privacy policy.
We may also need to contact you to obtain your consent in order to allow you to continue using the services, if this is necessary due to changes in applicable law.