Last updated on March 23rd, 2023
This confidentiality and data protection policy (the “Policy”) sets out the policy of BERLUTI SA, 120, rue du Faubourg Saint-Honoré, 75008 Paris, France, and its affiliates (you can obtain the name and the address of the data controller entity in your area by visiting www.berluti.com or by sending an e-mail to contact@berluti.com) (“BERLUTI”) in terms of data protection and cookies on the www.berluti.com web site (the “Site”), or any other web site operated by BERLUTI (the “Sites”). This Policy applies to all the information that you (the “User”) provide to us directly, or that is gathered indirectly while you browse our Site. BERLUTI respects your concerns about the confidentiality of the information that you disclose to us. We have therefore drawn up this policy in a bid to foster transparency, in order to inform you about the policies and practices that we apply to the personal data that you provide to us or that you share with us through the various points of contact via which you interact with us. This Policy informs you about the terms under which we use, analyse, and disclose the personal data that you disclose to us, where applicable with your consent when the latter is required by law, for the purposes mentioned below. We therefore urge you to read this Policy carefully.
Some of our BERLUTI stores or e-commerce web sites selling our BERLUTI branded products are operated by distributors, i.e. independent entrepreneurs. This Policy does not apply to either our distributors or their web sites or mobile applications. To find out how they use their clients’ personal data, please see their own confidentiality policies.
This Policy comprises the following sections below.
The data protection officer of BERLUTI may be contacted at contact@berluti.com.
You may from time to time have to disclose personal data to BERLUTI via the Site, for instance when creating a client account “My Berluti Space”, placing orders for BERLUTI products or registering for our newsletter. Any personal data that you disclose to BERLUTI to use specific services is covered by the provisions of the data protection regulations (France’s data protection law no. 78-17 of 6 January 1978, as subsequently modified, and the European General Data Protection Regulation of 27 April 2016 (“GDPR”) as well as any complementary national law. BERLUTI may also gather information concerning your browsing of our Site, with your consent, under terms that are described in greater detail in the Cookies section below.
The term “personal data” covers any information that may be used to identify you, either directly (such as your name), or indirectly (such as by way of a unique client number).
The personal data that we gather about you may include information regarding:
We may gather and receive personal data from you when you interact with us as part of our relationship:
Under the following circumstances:
Via the following points of contact:
BERLUTI processes your personal data on the Site only to the extent that is strictly necessary for the following purposes:
You may withdraw your consent at any point in time by clicking on the appropriate link featuring in the e-mails that we send you, or by modifying your account directly on the Site. The withdrawal of your consent shall not affect the lawfulness of any processing of your personal data based on your consent prior to the withdrawal of your consent.
The information that we gather for these purposes and that is vital for us to be able to meet your requirements (primarily your family name, first names, postal addresses, e-mail address and bank account details, where applicable, and your telephone number for delivery purposes) is marked with an asterisk on the forms used to gather data, to indicate that it is mandatory, and is processed in order to enable BERLUTI to perform the contract between BERLUTI and yourself, or because you consented to this for some of the abovementioned purposes, or in order to improve the way in which we provide services to you. Should you not provide the requisite information in these mandatory fields, we shall not be able to respond to your requests.
Sharing with third parties
For the purposes described in this Policy, we may share your personal information with the following third parties to the extent necessary to provide products and services to you:
Entrusted Processing
For the purposes described in this Policy, we may engage third-party service providers to assist us in providing relevant operation and service support, in which process such third-party service providers may process your personal information to help us to provide the functions of our products and/or services, including:
Transfer of your personal information
If BERLUTI is merged or otherwise involved in a merger, division, liquidation or bankruptcy, we may transfer your personal information in connection with such transaction. Before transferring your personal information, we will send you appropriate notice to inform you of the name and contact information of the recipient and ensure that your personal information will be protected in a way that is consistent with this Policy. In case the recipient changes the purpose and method of processing, we will require such data recipient to obtain your consent again.
Disclosure of your personal information
We may disclose personal information about you only with your separate consent, or to the extent permitted by applicable laws and regulations or where compulsorily required by government competent authorities.
Cross-border transfer of your personal information
In order to manage our global business, offer you global services and improve our service level, we may use the facilities located abroad to process, store or backup certain personal information we have collected about you, only to the extent necessary and subject to compliance with applicable laws. However, this does not change our commitments in this Policy to safeguard your personal information.
You can check the basic information about the BERLUTI Paris that processes your personal information, the purposes of processing, the types of personal information involved and the ways to exercise your rights as a personal information subject by clicking on the list of BERLUTI’s affiliates , as well as the range of other BERLUTI affiliates that may have access to your relevant personal information. We may update and adjust the list as actual changes occur in response to new service requests and adjustments to entities and business functions. In addition, for the purpose of verifying your My Berluti account information and handling and responding to your queries about BERLUTI products and services and subject to applicable legal requirements, your My Berluti account information and order information may be accessed or queried by the LVMH CSC in France, only where you contact the LVMH CSC by phone or email. You can make a request to the LVMH CSC via contact.cn@berluti.com to exercise your rights in relation to your personal information.
The Sites may contain links to other third-party websites. You may also choose to disclose your personal information to our partners, advertisers and affiliates by following a link to and from their websites. Please note that these websites have their own privacy policies, which you will be subject to when you provide personal information to such third-party websites and their processing of your personal information.
BERLUTI may disclose your personal data where this is needed for the purposes of this Policy:
- To other entities of the LVMH Group, some of which may act as data processors;
- To trusted third party service providers, including:
Transfers of your personal data outside the European Economic Area are protected by personal data transfer agreements based on the standard terms adopted by the European Commission, which are signed with the abovementioned recipients so as to ensure that all the personal data that is transferred to them is covered by a suitable level of protection as per the meaning of this term in the data protection regulations, and that appropriate technical and organisational security measures have been implemented to protect the data against accidental or malicious destruction, accidental loss, alteration, disclosure or unauthorised access and against all other forms of malicious or unlawful processing. You may obtain a copy of these terms by contacting: contact@berluti.com.
You may also choose to disclose your personal data to our partners, advertisers and affiliates by following a link to and from their web sites. Please note that these web sites apply their own confidentiality and data protection policies.
We may also give you the possibility to use your connection data to the social networks. Please note that in that case, you shall be sharing with us the information about your profile. The personal data that is shared depends on the configuration of the platform of the social network. Please note that these social networks each have and apply their own personal data confidentiality policies.
In any event, BERLUTI shall only transfer your personal data to a third party when:
BERLUTI endeavours to take all useful and necessary precautions to preserve the confidentiality and the security of the personal data that it processes and to prevent it from being distorted, damaged, destroyed or accessed by unauthorised third parties. We implement technical and organisational security measures that comply with the highest standards of the profession, covering our information systems in particular.
Upon creating your “My Berluti Space” account, you shall be prompted to choose a password that is personal to you. This is a mandatory requirement that constitutes a cornerstone of our Policy. This password must consist of at least 12 characters of 4 different types: lower-case letters, upper-case letters, figures and special characters.
However, BERLUTI has no control over all the risks linked to the operation of the Internet and hereby draws your attention to the existence of potential risks inherent in its use and its operation.
Your personal data that is held by BERLUTI shall be stored on the servers of our hosting company, which are located in Sweden.
We consider the protection and the security of our information systems to be of the greatest importance. We have accordingly implemented a number of tools to enable us to detect any security breaches. These tools may result in incidental access to your personal data by our security teams. This data shall be gathered and processed for the sole purposes of the management of any vulnerabilities, in keeping with the applicable data protection regulations.
Your rights
We are highly aware of the importance of protecting your personal data and of your rights over same. Please find below a summary of your rights over the personal data that we hold about you under the data protection regulations:
How to contact us to exercise your rights:
Should you have any questions about the way in which we process and use your personal data, or should you wish to exercise any of the abovementioned rights, please contact us:
BERLUTI Data Protection
120 rue du Faubourg Saint Honoré
75008 Paris, France
Please note that we may ask you for evidence of your identity as well as the full details of your request prior to dealing with it.
BERLUTI may modify its Policy from time to time. We shall ensure that you are informed about these changes either by a special announcement on our Site, or by a personal warning, for instance in our newsletters.