Privacy Policy

Prada S.p.A. (hereinafter also referred to as the “Company”, “we” or “us”), with its registered office in Milan (Italy), the operating holding company of the Prada Group (defined below), which directly manages the sale of the products offered on www.church-footwear.com/it/en.html (the “Website”), is committed to protecting the confidentiality, integrity and security of the personal data (“Personal Data”) that you may share with us, and hereby explains how we collect, use and disclose your Personal Data.

We will process your Personal Data in compliance with current applicable laws on data protection and with any specific local regulations applicable from time to time, including the European General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”), together with the principles and general rules of conduct contained in the Code of Ethics adopted by the Prada Group.

Prada S.p.A., together with its subsidiaries and affiliates companies, are hereinafter collectively referred to as the “Prada Group”.

This privacy policy applies to the Personal Data which we may collect through this Website and any mobile applications, cloud-based services, controlled widgets embedded in communication platforms or other locations where this privacy policy is located or referenced, as well as to Personal Data that you may provide us by phone, email, incoming text messages and/or in person at our stores, when you interact with our Client Service team or sales staff, purchase our products or use our services.

Browsing data
During their normal operation, the computer systems and software procedures used to operate our Website collect certain personal data (log files). The transmission of such data is inherent to the use of internet communication protocols. This information is not collected in order to be associated with specific data subjects. However, due to its nature, this information can allow users to be identified by means of its processing and integration with data held by third parties. Such information includes the IP addresses or domain names of the computers you use to visit our Website, URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical status code of the server reply (successful, error, etc.) and other parameters concerning the user's operating system and computer environment. This data is used with the sole purpose of obtaining anonymous statistical information on the use of our Website and to guarantee its correct operation.

Cookies
Our Website uses cookies and similar technology, including third-party cookies, to ensure its efficient functioning, perform statistical analysis, improve our services and send you online advertising messages in line with your preferences. Cookies are small text files that are sent to your terminal you use to access to the Internet (usually to your browser) by the websites you visit. Cookies are stored in your computer or device to be recognized by those websites on your subsequent visits. For more information on cookies, on the types of cookies used on our Website, on how to disable them and on how you can revoke your consent, see our Cookie Policy.

Personal Data voluntarily provided by the data subject
We collect and process the Personal Data that you directly and voluntarily provide through our Website, by phone, email or incoming text messages and/or at a Prada Group store, when you:

(i) purchase our products in store or place online, remote and/or other orders;
(ii) use other functionalities available on the Website (for example: to subscribe to our newsletter, to send a request to our Client Service, to book an appointment in store, to connect or interact with us through social networks, etc).
(iii) choose to register into the Prada Group customer database (e.g. by creating your online account on the Website or completing our customer card) in order to be provided with a personalised and tailored customer experience and exclusive services and benefits reserved for registered members,
(iv) interact with our Client Service team or our sales staff, and/or
(v) use our services.

Depending on what you provide us with, the items of Personal Data may include your first and last name, title, location, date of birth, email address(es), billing address(es), delivery address(es), telephone number(s), credit card information, details of purchases, and/or any other information regarding you that you may decide to provide during the interactions with our Client Service or with sales staff.
If you decide to register to the Website through the social login function, please be informed that we will have access to the Personal Data of your social account (for example, your email address and your public profile) in accordance with the privacy settings of the applicable social media platform. For more information, please refer to the related privacy statements on the applicable social media platform; We do not oversee or control such social media services or user profiles on these platforms and do not establish privacy settings or rules regarding how Personal Data is used on such platforms.
In addition, we may also obtain information about you as a result of authentication or identity checks (for example, you may be asked to present your identity document when you pick up your purchase in-store). We use this information to identify you as a customer, to process your order, to deliver products and services and/or to process payments.
Furthermore, when you call, send an e-mail or text to our Client Service team and/or sales staff, we collect your e-mail address and/or phone number you used to contact us, so that we can reply to any request, as well as any additional Personal Data contained in your message or provided by you within the course of your interactions with us.

Combinations
We may combine passively collected data with data that you actively submit to us so as to, for instance, provide better service to Website visitors, customize the Website based on your preferences, compile and analyze statistics and trends, to otherwise administer and improve the Website for your use, and to personalize offers (for example, combined information may allow us to recommend products to you based on what you have liked in the past). We may combine information collected on the Website with information collected by phone, email or incoming text message or from the in-store experience in order to provide a service customized to your needs. We may also combine information we collect about you from the different devices you use to access our Website and/or information we get from third parties with Personal Data we already have about you.

Personal Data of minors
You must be at least 16 years old (or older depending on your country or state of residence) in order to provide us with Personal Data and at least 18 years old to purchase products from our Website.
If we have actual acknowledge that a minor has provided, through the Website or otherwise, their Personal Data without a verifiable consent of parent of legal guardian, we will de-activate the minor’s account and take all reasonable measures to delete or make anonymous the minor’s Personal Data from our systems.

Your Personal Data may be processed and used for the following purposes:

(a) to provide you with products, services and information you request from us, communicate with you and manage your relationship with the Prada Group;
(b) to fulfil your online, remote and/or other purchase orders and perform all management activities connected with them (including administrative management of the contract, delivery of goods, payment processing, invoicing, management of any products exchanges and returns, handling of any claims and litigation, and fraud prevention), and to comply with any applicable legal or regulatory obligations;
(c) to provide you with post-sale services (including product warranty and repairs service);
(d) to send by email the newsletters and other marketing communication regarding the “Church’s” brand and other Prada Group’s products, services, initiatives and events as a result of your subscription to the service.

Furthermore, if you register to the Prada Group customer database (e.g. as a result of your registration on the Website or completion of our customer card), your Personal Data may be processed together with the details of your purchases online, remotely and/or in stores, for the following purposes:

(e) to manage your personal account, confirm your identity as a registered Prada Group customer and, consequently, to provide a customized customer care service and post-sales assistance and allow you to access exclusive services and benefits reserved for registered members (e.g. preservation of your purchase order history, faster online checkout, simplified procedures for product repair and warranty, invitations to events, pre-sale and other promotional initiatives and special projects, etc.);
(f) to offer you a personalized and tailored experience with regards to your preferences for “Church’s” and the other brands, products and services of the Prada Group, including by performing statistics, market research and surveys, and/or;
(g) marketing: to contact you and/or send you (by telephone, e-mail and any other form of electronic communication or digital means including social network platforms and other instant messaging applications) information and promotions, including commercial information, newsletters, advertising and catalogues concerning “Church’s” and the other brands, products and services of the Prada Group.

We collect and use your Personal Data based on one or many of the legal basis provided for by the applicable data protection laws, including:

• the processing is necessary in connection with any contract between the Company and you (for example, when you make a purchase) or for the taking of pre-contractual steps at your request;
• we have obtained your prior consent (for example, when you opt-in to receive our marketing communications). Please note that you have the right to withdraw your consent at any time, by sending an email to privacy@prada.com, or by using the “unsubscribe” link included in all of our commercial electronic communications, and/or by using any other appropriate procedures which may be made available to you by the Company (e.g. by logging into your online account);
• we have a legitimate interest in carrying out the processing and that legitimate interest is not overridden by your own interests, fundamental rights, or freedoms (for example, to prevent payment fraud);
• we have to process your personal data to comply with applicable laws and regulations;
  

the processing is necessary for claiming legal rights or as part of judicial or security procedures.

The provision of your Personal Data is optional.
However, if you wish to make a purchase order, register to the Prada Group customer database, receive information on Prada Group’s products and services, and/or use any other services offered on the Website, remotely and in store, you need to fill in all mandatory fields of the relevant forms and provide us with the required Personal Data as necessary in relation to the purposes for which they will be processed. If you do not provide this information, then it may delay or prevent us from processing your request, responding to your query or providing products or services to you.
You may withdraw your consent to receive our commercial communications and modify your communication preferences and/or opt-out from specific electronic communications at any time, by sending an email to privacy@prada.com, or by using the “unsubscribe” link included in all of our commercial electronic communications, and/or by using any other appropriate procedures which may be made available to you by the Company (e.g. by logging into your online account).
You also can withdraw from or cancel your registration in the Prada Group customer database at any time by contacting us at privacy@prada.com and/or by logging into your online account.

Your Personal Data will be processed by suitable electronic or automated means and computerized tools, or manually and on hard copy, exclusively for the purposes for which the data have been collected and guaranteeing the security and confidentiality of any processed information through the adoption of appropriate measures to prevent the alteration, cancellation, destruction, unauthorized access or processing or actions not in accordance with the purpose of collection.
Your Personal Data will be processed by our internal staff committed to the confidentiality and duly authorized to do so under their respective job duties.

Whenever necessary and/or instrumental to the abovementioned purposes, your Personal Data may be processed on behalf of the Company by other entities (third parties) engaged by us in the correct and regular pursuit of the described purposes, including:

• Related Companies: other Prada Group companies and franchisees that operate Prada Group stores;
• Service Providers: third party service providers, consultants and firms providing advisory and/or consulting activities, or performing related services that are instrumental to the processing on our behalf, including website analytic services, hosting, transaction and payment processing, promotional campaign management, fraud prevention, shipping of goods, IT maintenance, etc.

All entrusted third parties are bound by a strict confidentiality agreement including a contractual obligation to implement appropriate security measures to protect the Personal Data shared with them and to process such data solely within the scope of the work outsourced.
We may also disclose specific information when such disclosure appears necessary to comply with the law, a subpoena or other litigation process or to protect the interests or safety of our visitors and customers, our employees or others.
As the Company is part of an international network, your Personal Data may be transferred abroad, even temporarily, in accordance with applicable legislation, including to countries outside the European Union, by adopting all appropriate security measures and safeguards to ensure an adequate level of data protection and security.

Communication of data to the other Prada Group companies
As we operate globally, please also note that if you agree to register on the Prada Group customer database for the purposes referred to in Sections 2, letters (e)-(g), your Personal Data will be securely shared with all Prada Group stores globally to provide you with the same quality of service wherever you choose to interact with us around the world (i.e. when you travel and purchase our products or visit our stores). We will take all appropriate and suitable security and confidentiality measures as required by applicable legislation to ensure an adequate standard of data protection, as well as in compliance with article 49, paragraph 1 letter b) of the GDPR, where the data transfer is necessary for the implementation of pre-contractual and contractual measures adopted at the data subject’s request.

Your Personal Data will be processed and stored for: (i) as long as required to carry out the purposes for which the data were collected, (ii) in accordance with the storage periods required by the applicable laws, or (iii) until you revoke your consent to the processing/storage of your Personal Data, if applicable.  After the conclusion of such period(s), and where there is no legal or business purposes for retaining your Personal Data, it will be automatically and permanently erased or made anonymous.
In particular, regarding the data processing of registered members into Prada Group customer database:

• Personal Data of your membership account are kept for a period of 7 years from the date of your last interaction with the Prada Group or otherwise until you withdraw from or cancel your registration in the Prada Group customer database; and
• Purchase details are kept for a period of 7 years from the date of purchase.

Prada S.p.A.
Via Antonio Fogazzaro 28, Milan (Italy)

Group Data Protection Officer
E-mail: privacy@prada.com.

If you have any request regarding your Personal Data, have any enquiries regarding this Privacy Policy or you would like to exercise your rights, please contact (free on charge) the Data Controller or the Group Data Protection Officer by writing to the addresses listed above.

Please note that you may exercise the rights under the applicable data protection laws (and in particular under the articles 15 to 21 of the GDPR), including the right to request information as to whether your Personal Data is being processed and as to the characteristics of the processing, the right to rectification and erasure of your Personal Data, to limitation of the data processing and/or the right to object to the processing and/or request the transmission of your Personal Data to another controller, and/or the right to lodge a complaint with the competent supervisory authority, including the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or take legal action if you believe there is non-compliance with the provision of the applicable laws.
You also have the right to withdraw your consent for the processing of your Personal Data at any time, without charge. The withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.
We reserve the right to amend this Privacy Policy at any time. The Privacy Policy currently in force is the one published on the Website.