PRIVACY POLICY – MY.DERIGO
In accordance with the European General Data Protection Regulation (GDPR) (EU) 679/2016, with this Privacy Policy De Rigo Vision S.p.A.
explains the purposes and methods used to process the personal data of users of the website my.derigo.com, as well as how they can exercise
their privacy rights. By reading this Privacy Policy, you authorise De Rigo to process your personal data as described below.

ABOUT USDe Rigo is, first and foremost, a family with a fascinating history that is well worth telling and sharing. It is synonymous with experience, reliability andentrepreneurship. Founded in 1978 by brothers Ennio and Walter De Rigo as a small artisan company in the Belluno area, today De Rigo is a world leader
in the design, production and distribution of high-end and high-quality eyewear. It is one of the most important retailers in the global optics industry. The
Group’s products are sold in around 80 countries worldwide through 16 commercial branches, 4 retail divisions and over 100 independent distributors.
This Privacy Policy is applicable to all De Rigo Vision users as regards the personal data provided by them to De Rigo.
The Data Controller for the processing of personal data is De Rigo Vision S.p.A. with registered office in Z.I. Villanova, 12 32013 Longarone (BL), Italy VAT no. IT01001050259, in the person of its legal representative. If data subjects have any requests regarding this Privacy Policy or, more generally, theways in which their personal data are processed, they can contact the Data Controller at: privacy@derigo.com

WHICH DATA WE PROCESS AND WHY
Personal data which relate to you and are collected by De Rigo are processed for the following purposes:1.
2.
3.
4.

to manage the administrative aspects of business relations (e.g. to acquire precontractual data and information, client and contract administration,orders, shipments and invoices);to perform market analyses for De Rigo and the companies in the Group;
to manage back office activities to meet client requests (e.g. enquiries, product promotions and claims);
to publicise De Rigo products and brands by sending notifications or organising events.

It is not necessary to obtain consent to process your personal data for the purposes mentioned in points 1 and 3, as De Rigo is pursuing these purposesin accordance with contractual and/or legal obligations. It is not necessary to obtain consent to process your personal data for the purposes mentioned inpoint 2, as De Rigo has established these purposes meet a legitimate interest (Art. 6 and Recital 47 of the GDPR).
As regards processing to fulfil purpose no. 4, if De Rigo collects personal data to manage corporate events, clients will be asked to provide their explicit
consent for the event itself.

HOW WE USE YOUR DATA
The data processed for the purposes indicated are collected from the data subject, from specialised third parties or processed internally by De Rigo.
Data are processed using manual, IT and electronic means with logic strictly related to the aforesaid purposes and all necessary precautions, guarantees
and measures will be taken in accordance with regulatory requirements regarding the protection of personal data to guarantee confidentiality. Moreprecisely, De Rigo will:•••

accurately record the data to ensure they correspond with the information provided by the data subject;update the data every time it is notified of a variation by the data subject;ensure the adequacy and relevance of the data in relation to the purposes for which they have been collected and processed.

De Rigo also undertakes to process data according to the principle of fairness, lawfulness and transparency and in compliance with the GDPR. To this end,
De Rigo undertakes to configure its IT systems and programmes to reduce the use of your data to a minimum.

HOW WE SHARE YOUR DATAInternal and external staff are entitled to process your data according to their assigned roles and duties within the limits of their capabilities andaccording to the instructions given to them by the Data Controller.
Data may also be communicated to companies and external suppliers according to the purposes in the section “WHICH DATA WE PROCESS AND WHY”,
and in particular to:•••

suppliers of IT services we use (e.g. web agencies);
our sales network or other companies in the Group, if necessary to process your requests;
market analysis companies (e.g. Google Analytics).

If third parties located within the EU act as external data processors, De Rigo shall be responsible for ensuring that these parties process your data in anappropriate manner. To ensure this happens, De Rigo will make sure the third party presents suitable processing measures and will provide the latter withprecise instructions, supervising their operations. To fulfil the aforesaid purposes, your data may be transferred to countries which do not belong to theEuropean Union. It they are, De Rigo undertakes to guarantee a suitable level of protection, establishing appropriate guarantees in accordance with theGDPR.

OUR OBLIGATIONS AND YOUR RIGHTSOUR OBLIGATIONS - The data supplied by you will be retained for the time necessary to fulfil contractual obligations and other purposes and for nolonger than 10 years from the processing of the last order or the conclusion of any existing procedures. As regards the purpose of point 3, to ensure weprocess your personal data in accordance with your wishes, in every commercial message we will give you the chance to tell us if you no longer wish toreceive our communications.

YOUR RIGHTS - By contacting us at privacy@derigo.com you can ask us to delete the personal data referring to you (e.g. if you no longer need ourservices), alter, update and correct your data, especially if they are inaccurate, restrict the use of your personal data, access the personal data we areholding and obtain and/or have your personal data transferred into a legible format, or request we stop using all or part of your personal data. If you
believe your rights have been infringed, you may lodge a complaint with the Data Protection Authority following the instructions on its website
www.garanteprivacy.it