Need help? Call us  +39 0695225885

Tel +39 0695225885

Free shipping on ordes over £160

CountryNorth America - English

Privacy Policy

Privacy Policy

IN ACCORDANCE WITH THE PROVISIONS OF EU REGULATION 679/2016 Last updated: April 2024

This Privacy Policy explains how personal data provided by the customer or user (hereinafter referred to as "User") is collected, used, and transferred through the website ("Site"), social media pages, and other platforms when visiting a physical store of GrandTour Roma S.r.l. (“GrandTour”), contacting customer support by phone, or interacting with us via social media.

1. DATA CONTROLLER

The User's personal data is collected, used, and/or transferred by GrandTour Roma S.r.l., with legal headquarters in Italy, via dei Coronari, n. 32, VAT no. 17402791002, Rome (RM).

2. PURPOSES OF PROCESSING

GrandTour processes the User's data for the following purposes:

(a) Contractual Purposes: (i) managing the sale of its products and providing sales and post-sales services (such as product warranties, returns, customer support, and fraud prevention); (ii) in the context of online activities, creating and maintaining the User’s personal account; (iii) providing services available on the Site, including newsletters if the User subscribes; and (iv) responding to information requests.

(b) Marketing and Profiling Purposes: (i) sending commercial communications about products, services, and exclusive activities of GrandTour, via paper (mail) and/or electronic means (email, SMS, mobile, social networks, and chat); (ii) determining the User's satisfaction with products and/or services offered by GrandTour or third parties; (iii) detecting the User's purchasing preferences and habits at GrandTour to improve the service offered; (iv) using data related to the spending amount, product category, purchase location, birthdate, number of family members to provide personalized services that better meet the customer's needs and send commercial communications of interest.

3. LEGAL BASIS FOR PROCESSING

The collection and processing of personal data for the purposes described in paragraph 2(a) are necessary for the conclusion and/or execution of a contract between the User and GrandTour, and are required to carry out the contractual services requested, which, if refused by the User, cannot be fulfilled.

For the purposes described in paragraph 2(b), providing data is voluntary and optional, and the use of data is subject to the consent of the interested party. Refusal to provide data will prevent GrandTour from pursuing the indicated purposes.

4. TYPES OF PERSONAL DATA COLLECTED

GrandTour collects and processes the following personal data:

(a) Identification and demographic data such as name, surname, birthdate, identification document, and payment information for purchases both online and in stores;

(b) Interaction data collected (i) during store visits, events, online purchases, or when signing up for loyalty programs (e.g., birthdate, family event dates, profession, hobbies, purchases, use of certain social networks, phone number, email address, photos, nationality, gender, language, favorite products, details of purchased products, measurements, price, discounts, statistically attributed spending level, abandoned shopping carts, ways of using the services), (ii) through preferences and interests that the User chooses to share with consultants in-store (including preferences related to our collections or other brands, measurements, lifestyle, or basic family circle information), or in response to customer service contact activities;

(c) Data collected during navigation or the use of media applications, such as User behavior data recorded through cookies or similar technologies, as detailed in the Cookie Policy available on the Site, or data contained in the "Wishlist".

5. CONDITIONS APPLICABLE TO THE CONSENT OF MINORS

The processing of personal data of minors is lawful provided that the minor is at least 14 years old. Where the minor is under 14 years old, processing is lawful only if, and to the extent that, such consent is given or authorized by the holder of parental responsibility. We do not knowingly collect any personal identification data from a minor without the consent of a parent or guardian, except in cases permitted by law.

6. METHODS OF PROCESSING

Personal data will be processed using computer tools and/or manual processing for the time necessary to achieve the purposes for which they were collected. Specifically, personal data collected for the purposes described in paragraph 2(b) will also be processed using automated tools, according to procedures and logics strictly related to the above-mentioned purposes.

7. DISCLOSURE OF DATA

The collected personal data is not disclosed or shared, except with GrandTour, controlling companies, subsidiaries, and affiliates. The processing of personal data is carried out exclusively by personnel authorized to access and thus assigned or responsible for processing.

The User's personal data may also be processed by companies that perform services on our behalf (such as, but not limited to, companies providing shipping/delivery of catalogs and/or products; companies that send newsletters, advertising materials, 

and promotional communications; companies that offer customer support; companies that conduct market research and analysis; companies that maintain computer systems; companies managing tools to reproduce browsing sessions to ensure an optimal end-user experience).

User data may also be processed by third parties, acting as independent data controllers, such as:

(a) Banks or other companies that provide credit card payment management services and Tax-Free services;

(b) Individuals, companies, associations, or professional firms that provide assistance and consultancy services (lawyers, accountants, auditors, etc.);

A complete list of the companies and third parties responsible for processing personal data on behalf of GrandTour, or as independent data controllers, can be requested via email at: [email protected]. The personal data will not be disclosed in any case.

8. DATA RETENTION

User's personal data will not be retained in a form that allows identification for a period longer than is reasonably necessary by GrandTour for achieving the purposes for which they were collected or processed, or as set by the applicable data retention laws.

Data collected for the purposes described in paragraph 2(a) will be retained by GrandTour and/or by affiliated and/or connected companies for the time necessary to execute the contract, with the legal and conventional guarantees provided for this purpose, or in accordance with legal obligations on data retention.

Data collected for the purposes described in paragraph 2(b) will be retained until the withdrawal of consent by the User and, in any case, limited to data collected for the purposes described in paragraph 2(b), for a period not exceeding ten (10) years. In the event of withdrawal of consent or early termination of the retention term for data collected for the purposes described in paragraph 2(b), the data will be automatically deleted or permanently anonymized.

9. RIGHTS OF DATA SUBJECTS (ACCESS, RECTIFICATION, OBJECTION, AND ERASURE)

At any time, the User may request information about the processing of their personal data and its modalities, ask for rectification of the collected data, their deletion, or the limitation of their processing. Furthermore, the User may object to the processing and/or request the transmission of the data to another data controller.

GrandTour is obligated to respond to requests within the terms set by current regulations and has the obligation to correct erroneous data, integrate incomplete data, and update data no longer accurate. Upon the User's request, GrandTour has the obligation to delete the data and limit and/or stop its processing, or ensure, where technically feasible, its transmission to another data controller. For any information regarding this, to exercise the above-mentioned rights and/or report any problems or issues, the interested party can send an email to [email protected]. If the response is not deemed satisfactory, the interested party may contact the Data Protection Authority.