We shall process your personal data both by means of paper- and IT-based tools, and such processing shall be based on the principles of fairness, lawfulness, and transparency, in order to protect your rights and privacy.

We make use of industry-standard physical, organizational, contractual and technological security measures to protect your personal data from unauthorized access, public disclosure, use, modification, damage or loss.

We shall not disseminate your personal data.

To the extent permitted by law and where required with your consent, your Personal information may be disclosed, for the purposes described in the Privacy Policy herein:

     i.       with our service providers, included other companies belonging to Tod’s Group who perform technical and organizational tasks on our behalf, always in compliance with achieving the purposes described above;

    ii.       with other belonging to Tod’s Group acting on our behalf: in order to contact you again to learn more about the assessments released through the Customer Survey, so as to overcome any issues encountered;

   iii.       to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other shift in all or in any given part of our business, assets or stock (also in connection with bankruptcy or similar outcomes);

   iv.       in connection with the essential purposes described above (that is to say in order to comply with legal obligations or to execute a lawful request of public authorities).

We guarantee that we shall transfer your personal data towards a country outside the European Economic Area (EEA) not having an Adequacy Decision by the European Commission (EC), only after the adoption of at least one of the  cross-border transfer mechanisms the Regulation recognizes as being able to ensure an adequate protection of the personal data being transferred:

     i.       specific  “Standard Contractual Clauses” are to be drafted, issued by the European Commission, in order to ensure that the protection level of the personal data processed by our partners outside the EU shall comply with the EU's data protection level;

    ii.       adoption of Company Binding Rules, approved by the competent Public Authorities, in compliance with the data transfer within a group of undertakings or enterprises is done through binding corporate rules, approved by the competent data protection authority in the UE, pursuant to the consistency mechanism referred to in art. 63 and to the conditions detailed under art. 47 of the Regulation.

We also undertake to carry out, in accordance with laws in force, any possible prior risk assessment concerning the data transfer; adopting, if necessary, any additional security measures, complementary to the safeguards guaranteed by the aforementioned transfer mechanisms.

At any rate, we shall transfer your personal information, only if the protection level, guarantee by the Regulation, is not compromised.

Your personal data shall only be processed by parties being duly instructed and able to provide adequate technical and organizational safeguards, as well as bound to the strictest confidentiality by us.

We shall process your personal data at different times depending on the purpose.

Specifically, the personal data that you will give us when filling in the questionnaire, so that we can understand your degree of satisfaction, will be stored for a maximum period of 24 months from their release.

If you have expressed your willingness to be contacted to give more details about your assessment of satisfaction, your personal data will be stored for a maximum period of 24 months from their release.

If you have already agreed to your personal data being processed for profiling purposes in the past, such data will be retained for a period of 7 years from the date of your last purchase, with automatic renewal each time you make a new purchase at a Tod's Group boutique / shop or on our web-stores, in accordance with the privacy policy issued when you gave your consent to profiling purposes.

We would also like to inform you that we are further required to store your personal data in order to comply with specific law provisions, in the manner and within the timeframe established by said regulations.

Should the processing of your personal data be based on any legitimate interest, be it ours or belonging to third parties, the processing of your personal data shall be strictly limited to the time required to achieve the legitimate interest, on a case-by-case basis.