Privacy Policy

Dear Sir/Madam,
In accordance with applicable data protection regulations, including Regulation (EU) 2016/679 of April 27, 2016 (“GDPR”), Safilo Group S.p.A., as the data controller (“Controller”), informs you that it will process the following personal data, provided directly by you or collected from third parties.

Purpose and Legal Basis of Processing
1.1 Collection of pre-contractual information, including economic-financial assessment; negotiations; proper management of the contractual relationship and related obligations, management of correspondence (also through electronic communication) concerning your commercial relationship and related products and/or services, as well as any other activity necessary and related to the execution of the contract and protection of the Controller's rights.
1.2 Fulfillment of legal, regulatory, accounting, tax, contribution, or any other obligations connected to the above.
1.3 Establishment and management of financing relationships related to the contracts, including verifying the success of issued payment methods.
1.4 Sending communications regarding products and their technical features, related digital content, satisfaction surveys, and other market analyses.
1.5 Sending communications promoting commercial offers and promotions (direct marketing) through online, telephone, and/or email channels.
1.6 Provision of multidisciplinary e-learning modules.

The legal basis for purposes from 1.1 to 1.4 is, therefore, the execution of pre-contractual and contractual activities, and where not required by law, data provided will be used exclusively for accounting and administrative purposes. The legal basis for points 1.5 and 1.6 is the explicit consent of the data subject, which can be given or withdrawn on the specific consent page.

Categories of Data Processed
The processed data pertains only to company data (company name, shipping address, phone contacts, email, contract data, payment, tax, and bank details, etc.) of legal entities. Safilo does not handle or collect information about individuals, as all accounts and related services are relevant to commercial companies or legal entities. This also applies when Safilo manages, in the course of a professional activity, data related to individuals, such as company/organization employees, corporate email addresses like "name.surname@company.com," or employees' corporate phone numbers.

Recipients of Personal Data
Employees and collaborators of the Controller, as data processors, other Safilo Group companies involved in the logistical and commercial production cycle, as well as other third-party processors (data processing companies, banks, logistics service providers, professional consultants) or independent controllers (third parties counter to the Controller), may have access to the processed data.

Mandatory or Optional Nature of Data Provision and Consequences of Refusal
Providing data related to points 1.1, 1.2, 1.3, and 1.4 is optional but necessary for executing pre-contractual activities or mutual obligations under existing contracts; failure to provide such data will prevent contractual execution. Providing data related to points 1.5 and 1.6 is optional.

Data Transfer Outside the European Economic Area (EEA)
Data may be transferred to third countries outside the EEA, where Safilo companies are present for the above purposes, based on adequate intra-group safeguards. A list of companies (indicating whether a European Commission adequacy decision exists for each respective country) and copies of the aforementioned intra-group safeguards can be requested at dataprotection@safilo.com.

Data Retention Period
For a period of 10 years from the end of the contractual relationship.

Contact Details of the Controller and Data Protection Officer
Registered office in Padua, via Settima Strada n. 15, 35129, tel. +39 049 698 5111, fax +39 049 698 5360, email info@safilo.com.
The Controller has appointed a Data Protection Officer, reachable at dpo@safilo.com, tel. +39 335 6170368.

1. Your Rights
   As a data subject, you have the right to obtain confirmation of whether or not processing concerning you has occurred. You have the right, in accordance with the law, to request access, rectification, or deletion of data or restriction of processing concerning you, as well as to object to the processing or request the transmission in electronic format to you or third parties of the data provided by you.
   You can exercise these rights by sending a request to dataprotection@safilo.com. Additionally, you have the right to lodge a complaint with the Italian Data Protection Authority.