Source: https://www.dsquared2.com/lt/Help/LegalArea/PrivacyPolicy
Timestamp: 2019-04-18 12:50:07+00:00

Document:
"Personal data" (e.g. Art. 4 number 1 of EU Regulation 2016/679) means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing", (e.g. Art. 4 number 2 of EU Regulation 2016/679) means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise providing access, alignment or combination, restriction, erasure or destruction.
Who is the Data Controller? And how can I contact them?
This website is managed by YOOX NET-A-PORTER GROUP S.p.A., company with sole shareholder subject to direction and coordination of Compagnie Financière Richemont S.A.
Dsquared2 S.p.A. can be contacted at the above addresses.
to register your Account we collect your name and surname, email address, password, gender, and date of birth. If you are a registered user, we collect information about your access to the reserved part of ​​the Website. By express consent, through the analysis of your personal data, we can process information regarding your interests and preferences with respect to our products and services, in order to present proposals and offers in line with your tastes.
in order to improve your shopping experience.
Please note that Dsquared2 S.p.A. does not process personal data relating to minors. If you access dsquared2.com and use the services offered by Dsquared2 S.p.A. you agree that you are over the age of majority.
Dsquared2 S.p.A. processes the data subject's data by electronic means, and possibly on paper for marketing purposes by sending promotional and informational material by email.
• Supervisory and oversight bodies.
(**) the list of the Recipients / external Processors with further data that may be used for identification is available from the Data Controller in charge of the processing of personal data.
The transfer of your personal data to countries that are not members of the European Union and that do not ensure adequate levels of protection will only be carried out after specific agreements have been entered into between Dsquared2 S.p.A. and said parties, containing safeguarding clauses and appropriate guarantees for the protection of your personal data, known as the 'standard contractual clauses', also approved by the European Commission, or if the transfer is necessary for the stipulation and fulfilment of a contract with Dsquared2 S.p.A. (for the purchase of goods offered on our Website, for registration on the Website or for the use of services on the Website) or for the management of your requests.
Personal data will be retained until a request is made to discontinue the service.
- right not to be subjected to automated decision-making [Art. 22 of the EU Regulation] (the data subject has the right not to be subject to a decision based solely on automated processing).
The above rights can be exercised in accordance with the EU Regulation by sending an email to privacy@dsquared2.com.
In accordance with Art. 19 of the EU Regulation, Dsquared2 S.p.A. informs the recipients to whom the personal data has been disclosed of any corrections, deletions or restrictions to the processing required, where this is possible.
If the purpose of the processing carried out by Dsquared2 S.p.A. has consent as its legal grounds, the data subject has the right to withdraw consent at any time by sending an e-mail to privacy@dsquared2.com.
Pursuant to Art. 7 of the EU Regulation, withdrawal of consent does not affect the legality of any processing carried out on the basis of consent prior to such withdrawal.
If the data subject considers that his/her rights have been compromised, he/she has the right to lodge a complaint with the Italian Data Protection Authority.
- it is based on the explicit consent of the data subject.
Personal data will be processed in paper, electronic and telematic form and entered in the relevant databases (potential customers, customers, users, etc..) which can be accessed by, and thus disclosed to, persons expressly designated by the Controller as Processors and Agents responsible for the processing of personal data, that may consult, use, process, compare, or perform any other appropriate operation, including automated operations, in compliance with the legal provisions necessary to guarantee, inter alia, the confidentiality and security of data as well as the accuracy, updating and relevance of the data with respect to the stated purposes.
Dsquared2 S.p.A. processes the data subject's data by electronic means, and possibly on paper, in order to respond to enquiries or requests submitted by you, to resolve problems relating to our goods or services, and to obtain useful advice aimed at improving our service.
The transfer of your personal data to countries that are not members of the European Union and that do not ensure adequate levels of protection will only be carried out after specific agreements have been entered into between Dsquared2 S.p.A. and said parties, containing safeguarding clauses and appropriate guarantees for the protection of your personal data, known as the 'standard contractual clauses', also approved by the European Commission, or if the transfer is necessary for the stipulation and performance of a contract with Dsquared2 S.p.A. (for the purchase of goods offered on our Website, for registration on the Website or for the use of services on the Website) or for the management of your requests.
Personal data will be retained until the request is completed.
- right not to be subjected to automated decision-making,[Art. 22 of the EU Regulation].
The above rights can be exercised in compliance with the Regulation by sending an email to dpo@dsquared2.com. Dsquared2 S.p.A., in accordance with Art. 19 of the EU Regulation, Dsquared2 S.p.A. informs the recipients to whom the personal data has been disclosed of any corrections, deletions or restrictions to the processing required, where this is possible. If the purpose of the processing carried out by Dsquared2 S.p.A. has consent as its legal grounds, the data subject has the right to withdraw consent at any time by sending an e-mail to dpo@dsquared2.com. Pursuant to Art. 7 of the EU Regulation, withdrawal of consent does not affect the legality of any processing carried out on the basis of consent prior to such withdrawal. If the data subject considers that his/her rights have been compromised, he/she has the right to lodge a complaint with the Italian Data Protection Authority.
The Company does not use any automated decision-making processes.
Personal data will be processed in paper, electronic and telematic form and entered in the relevant databases (potential customers, customers, users, etc.) which can be accessed by, and thus disclosed to, persons expressly designated by the Controller as Processors and Persons Responsible for the processing of personal data, that may carry out consultation, use, processing, comparison and any other appropriate operation, including automated operations, in compliance with the legal provisions necessary to guarantee, inter alia, the confidentiality and security of data as well as the accuracy, updating and relevance of the data with respect to the stated purposes.
During their normal operation, the computer systems and software procedures used to operate this website acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected in order to be linked to identified data subjects, but by its very nature it could, through its use and in conjunction with data held by third parties, allow users to be identified.
Among the information that may be collected are IP addresses, the type of browser or operating system used, URI (uniform resource identifier) addresses, the domain name and addresses of the websites from which you accessed or left the website (referring/exit pages), the time when the request was made to the server, the method used and information on the response obtained, additional information about your browsing on the website (see also the section on cookies) and other parameters regarding the operating system and computer environment.
This same data could also be used to identify and establish responsibilities in the event of any cyber crime against the website.
Minors under 18 years of age cannot provide personal data. Dsquared2 S.p.A. shall not be in any way responsible for any collection of personal data or false statements provided by a minor and in any case, if it is recognised that such data has been used, Dsquared2 S.p.A. shall grant the right of access to and deletion of the same to the legal guardian or to the person who has parental authority.
- Right of access by the data subject [Art. 15 of the EU Regulation]: the data subject has the right to obtain confirmation from the data controller as to whether or not personal data concerning him/her is being processed and, if so, has the right to access the information expressly referred to in the aforementioned article, including, for example but not limited to, the purposes of the processing, the categories of data and recipients, the retention period, the existence of the right of deletion, rectification or restriction, the right to lodge a complaint, all available information on the source of the data, any existence of an automated decision-making process pursuant to Art. 22 of the Regulation, as well as a copy of his/her personal data.
- Right not to be subjected to automated decision-making [Art. 22 of the EU Regulation]: the data subject has the right not to be subject to a decision, including profiling, based solely on automated processing (e.g. carried out solely by electronic means or by computer programs).
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2. If personal data is transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.
The data subject shall have the right to have the controller correct inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
f) the personal data has been collected in relation to the offer of information society services referred to in Article 8(1).
2. Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to delete it, said controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that the data subject has requested them to delete any links to, or copy or replication of, that personal data.
e) for the establishment, exercise or defence of legal claims.
d) the data subject has objected to processing pursuant to Article 21(1) pending the verification of whether the legitimate grounds of the controller override those of the data subject.
2. Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
The data controller shall provide notice of any correction or deletion of personal data, or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject so requests.
b) the processing is carried out by automated means.
2. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
3. The exercise of the right referred to in paragraph 1 of this article shall be without prejudice to Article 17. That right shall not apply to processing necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the controller.
4. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.
1. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
2. Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such purposes, which includes profiling to the extent that it is related to such direct marketing.
3. If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
4. At the latest at the time of the first communication with the data subject, the right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.
5. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
6. Where personal data is processed for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless such processing is necessary to perform a task carried out for reasons of public interest.
1. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or that similarly significantly affects him or her.
c) is based on the data subject's explicit consent.
3. In the cases referred to in points (a) and (c) of paragraph 2, the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view, and to contest the decision.
4. Decisions referred to in paragraph 2 shall not be based on special categories of personal data referred to in Article 9(1), unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard the data subject's rights and freedoms and legitimate interests are in place.

References: Art. 4
 Art. 4
 Art. 19
 Art. 7
 Art. 19
 Art. 7
 Art. 22