Golden Goose Website Privacy Policy

Welcome to the Golden Goose website. Please read this Privacy Policy carefully, as it applies whenever you use the website, regardless of whether you make a purchase.

1. Data Controller

Golden Goose S.p.A. is the independent Data Controller responsible for handling users' personal data related to website browsing, marketing, sales, and any pre-sale or post-sale activities.

2. Types of Data Processed and Legal Basis

The website processes various types of personal data for different purposes:

• Browsing Data: Data collected to ensure the website functions properly and for marketing purposes (refer to the Cookie Policy).
• User-Provided Data: This includes email addresses, phone numbers, and personal details provided during registration or customer service interactions. These are processed to respond to requests and offer services.
• Purchase Data: Personal information related to purchases, used to complete transactions and provide support.
• Marketing Data: With the user’s consent, data may be processed to send newsletters, promotional offers, and updates.
• Profiling Data: Data regarding purchases and preferences may be processed, with the user’s consent, to offer tailored products and services.
• E-marketing: Data provided during purchases may be used to offer similar products, with an option to opt-out at any time.

Processing is based on the following:

• Legitimate interest: For providing website services, responding to customer requests, and sending product recommendations.
• Contract obligations: For fulfilling sales and related services.
• User consent: For marketing, profiling, and optional data disclosures during social log-ins.

3. Data Sources

Data is provided directly by the user during website registration, purchase, or interaction with customer service, except for browsing data collected via cookies.

4. Analysis of User Preferences

With consent, personal data may be analyzed to understand customer preferences and improve product offerings. This may include data from purchases, interactions, and voluntary information such as hobbies or lifestyle preferences.

5. Data Processing Methods

Personal data is primarily processed using IT systems and security measures to protect against unauthorized access. However, the inherent nature of online data transmission means there is always some risk, so users should ensure they have adequate protection on their devices.

6. Data Retention Period

Data is retained for the necessary period based on the purpose:

• Sales-related data is stored for up to 10 years in line with legal requirements.
• Marketing and profiling data are stored for up to 7 years, depending on user interest.

7. User Rights

Users have the right to:

• Access their data.
• Request updates, corrections, or deletions.
• Restrict or object to the processing of their data.
• Withdraw consent at any time, particularly for marketing communications.