Privacy Policy

This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, the “GDPR” or the “Regulation”) and the applicable national legislation on the protection of personal data to those who interact with the services available on the website “Tailoor.com” (hereinafter also the “Website”), which enables companies/brands to create, offer and sell personalised and customised products to their customers. This Privacy Policy applies to each access to the Website and, more generally, to any browsing activity carried out thereon and any use of its services.

1. DATA CONTROLLER

The data controller is TAILOOR S.p.A. (Tax Code and VAT No. 02804610026), with registered office in Valdilana (BI), Fraz. Robiolio No. 25, represented by its pro tempore legal representative, Jacopo Thun Hohenstein. Contact details: [email protected].

2. PERSONAL DATA PROCESSED

The Controller may process:

Automatically collected information: information regarding the user’s use of and navigation on the Website, such as the user’s IP address and other device identifiers, operating system, browser type, and information concerning the pages of the Website visited, collected by means of cookies or other tracking technologies.

User personal data: personal data (such as first name and surname, shipping address and billing address, payment details, email address, telephone number and other personal data) provided by the user by completing the forms available on the Website.

Data voluntarily provided by the user: personal data that may be contained in communications sent by the user in order to submit any type of request and/or communication.

Third-party data: it may happen that Tailoor processes personal data relating to third parties communicated directly by its users. In such cases, the user shall be responsible for obtaining the consent of the person to whom such data relate before communicating them to Tailoor and for informing that person of this Privacy Policy, since the user shall be the sole party responsible for the communication of information and data relating to third parties without their consent, or for any incorrect or unlawful use thereof. Please note that the consent of such persons is not required where the data of such third party are communicated to Tailoor for the purpose of concluding the contract with the user in favour of the third party.

3. COOKIES

The website “Tailoor.com” uses cookies. For further information on cookies, please consult the dedicated page. (link)

4. PURPOSES AND LEGAL BASES

4.1. Purposes of processing

The data provided are collected and processed for the following purposes:

1. management and fulfilment of purchase orders for the products and/or services offered, and related activities (“Pre-Contractual and Contractual Purposes”);
2. management of payments, including anti-fraud checks in the event of payment by credit/debit card (“Pre-Contractual and Contractual Purposes”);
3. management of commercial enquiries or enquiries relating to the progress status of orders, as well as requests for information in the broadest sense (“Pre-Contractual and Contractual Purposes”);
4. making contact with the points of contact for our services (Press Office, Business Development, Web Marketing, Purchasing Department, Customer Service) (“Pre-Contractual and Contractual Purposes”);
5. to book appointments at the Atelier or join the Loyalty Programme (“Pre-Contractual and Contractual Purposes”);
6. compliance with legal and regulatory obligations (“Legal Purposes”);
7. subject to your prior express and specific consent, for marketing, analysis and profiling activities (“Marketing and Profiling Purposes”), such as:
8. sending newsletters, commercial communications and advertising material by email and/or by post, as well as information regarding the organisation of exclusive events (“Marketing Purposes”);
9. sending commercial proposals in line with your profile (determined on the basis of your preferences and interests). Profiling is carried out, for example, through the use of cookies (“Profiling Purposes”);
10. analysis of aggregated data regarding user behaviour or analysis of user behaviour on the website.

4.2. Legal basis

The legal basis for processing for Pre-Contractual and Contractual Purposes is Article 6(1) lett. b) of Regulation (EU) 2016/679.

The legal basis for processing for Legal Purposes is Article 6(1) lett. c) of Regulation (EU) 2016/679.

The legal basis for processing for Legal Purposes is Article 6(1) lett. f) of Regulation (EU) 2016/679.

5. WHETHER THE PROVISION OF DATA IS MANDATORY OR OPTIONAL

5.1. Mandatory processing

The processing of certain personal data is mandatory for the performance of the service contract with Tailoor. Without such data, we will not be able to provide you with full access to our platform and the related services. Mandatory data include:

• Identification data: such as first name, surname and email address, which are necessary to create and manage your account.
• Transaction data: necessary to process purchases or other transactions carried out on the platform.
• Communication data: required to respond to your support requests and to communicate important service updates.

5.2. Optional processing of personal data

Other personal data processing activities are optional and require your explicit consent. These include:

• Marketing and profiling: we would like to send you updates and special offers regarding products and services that may be of interest to you. To stop receiving the newsletter, it will be sufficient to click on the relevant “unsubscribe” link at the bottom of each communication (you may continue to receive further communications from us even after submitting the unsubscribe request, as certain mailings may already have been scheduled and our systems may require some time to process the unsubscribe request). In other cases, you may change your preferences at any time through the cookie settings.
• Service personalisation: we collect data regarding your preferences and your use of the 3D configuration engine in order to improve your experience. Participation in these activities is entirely voluntary.

The user may amend or withdraw his or her consent to the processing of optional data at any time. This shall not affect the lawfulness of processing based on consent before its withdrawal, but it may affect the user experience on the Website and the functionality of the services that we are able to offer.

6. RECIPIENTS

The disclosure of your personal information is limited to the following recipients or categories of recipients, who need access to such data in order to provide services and support. All recipients are required to maintain the confidentiality and security of the information:

• external parties appointed as data processors pursuant to Article 28 of the Regulation, as well as internal personnel such as employees and managers who need to access personal data in order to perform tasks relating to the operation of the platform, including customer service, administration and IT operations;
• parent companies and subsidiaries: your personal data may be shared within our corporate group, which includes parent companies, subsidiaries or affiliates, for internal purposes such as centralised management, strategic decision-making and operational support;
• external service providers, such as information technology providers and cloud platforms: these support the IT infrastructure and data security by managing software, hardware, technical support and hosting services;
• marketing and communications agencies assisting with advertising campaigns, email marketing and other promotional activities, only where you have consented to receive such communications;
• professional advisers, including accountants, lawyers and other legal and financial advisers, who require access to your data in order to provide legal, financial or business advice and assistance on our behalf;
• business partners such as clothing manufacturers and garment makers: companies that collaborate with us in the production, manufacture and distribution of the garments that you configure and order through our platform. These companies receive order-related data in order to produce and ship the finished products;
• logistics partners: to manage the logistics of shipping and delivery of finished products to our users;
• third parties in the event of corporate restructuring: in the event of sale, merger, acquisition or other forms of corporate restructuring, personal data may be transferred as part of the company assets;
• judicial and regulatory authorities in response to lawful requests by the competent authorities; we may be required to disclose your personal data in order to comply with applicable laws, legal proceedings or governmental requests.

7. TRANSFER OF DATA OUTSIDE THE EU

Your personal data shall not be transferred abroad to countries other than those belonging to the European Union that do not ensure an adequate level of protection for individuals. Where this should be necessary in order to provide the requested services (for example, for certain processing activities that may be outsourced to suppliers located outside the European Union) or to conclude a contract for the purchase of products, we assure you that any transfer of personal data to countries outside the European Union that do not ensure an adequate level of protection shall be carried out only after the execution, between Tailoor S.p.A. and such parties, of specific agreements containing safeguard clauses and appropriate safeguards for the protection of personal data (e.g. Standard Contractual Clauses approved by the European Commission), or only where another requirement compliant with the applicable Italian and European legislation exists.

8. DATA RETENTION

The data collected shall be processed by electronic, IT and telematic means, or by manual processing operations applying logic strictly related to the purposes for which the personal data were collected and, in any event, in such a way as to ensure the security thereof at all times.

All user data shall be retained in compliance with civil and tax obligations (for example, the civil law obligation to retain accounting records and further business correspondence for 10 years) and, in any event, only for the duration of the contractual relationship in force. Once the relationship has ended, in order to protect the Company’s rights, the data shall be retained – in such a manner that they are accessible only where necessary – for a period corresponding to the limitation period applicable to any rights that the user may assert against the Company. Such period varies depending on the type of data and on whether any grounds for interruption or suspension of the applicable limitation period occur.

Data processed for Marketing Purposes and Profiling Purposes are retained for a period of 24 months and 12 months respectively, without prejudice to the right to withdraw consent to the processing (the “opt-out” option) at any time.

Upon expiry of the above retention periods, the data shall be automatically deleted or irreversibly anonymised on a permanent basis.

9. DATA SUBJECTS’ RIGHTS

Please note that, with regard to the personal data processed, the user may exercise the following rights at any time (Articles 15 et seq. of the Regulation):

• right of access to personal data;
• right to obtain rectification, erasure or restriction of personal data;
• right to object to the processing at any time;
• right to data portability (this right applies only to data in electronic format);
• right to lodge a complaint with the Supervisory Authority or to bring proceedings before the competent courts where the user considers that personal data have been processed unlawfully (Articles 77 and 79 of the Regulation).

With regard to the manner in which the above rights may be exercised, the data subject may write to [email protected]. Before responding to the request, we may ask the Data Subject for details in order to verify his or her identity.