Privacy Policy

At YOOX NET-A-PORTER GROUP we are committed to protecting and respecting your privacy. This notice describes what personal data we collect, how we will use that data and how we keep your data safe when you navigate on www.ynap.com (“Website”).

If you have a question that is not answered here, or if you would like more information about how we collect and use your personal data, you can contact us at any time by emailing GDPR .

If you wish, you may also contact our Data Protection Officer (DPO), by writing to “Data Protection Officer” c / o YOOX NET-A-PORTER GROUP SPA via Morimondo n. 17 – 20143 Milan (Italy), or by e-mail at DPO .

What data we process and for what purposes

We collect and process:

• personal data you provide to us when you send a communication to our addresses on the Website;
• personal data you provide to us when you send your application to YOOX NET-A-PORTER GROUP by filling in the appropriate forms referred to in the “Careers” section of the Website. In particular, we collect personal data, contact details and the information you choose to include in your curriculum vitae (“CV”).

We process your personal data for the following purposes:

• to manage the relationship between you and YOOX NET-A-PORTER GROUP when you request information or assistance;
• to evaluate your application and make a selection in view of the possible start of a working collaboration with you;

To whom your personal data will be disclosed

We share your information with:

• internal personnel of YOOX NET-A-PORTER GROUP specifically authorized for their processing;
• companies belonging to the YOOX NET-A-PORTER GROUP business group;
• third parties that we use to carry out our business, belonging to the following categories: internet and telecommunications operators, recruitment agency.

Data retention period

We keep your personal data for a limited period of time, the duration of which will depend on the type of activity for which your personal data is being processed. At the end of this period, the data will be deleted or otherwise rendered anonymous in an irreversible way, unless it is necessary to keep them for legal obligations or to protect a legitimate interest of YOOX NET-A-PORTER GROUP.

In particular, the personal data we collect when you send a request for information or assistance are kept until the time when this request has been satisfied and for the next 12 months if further assistance is needed, while the personal data we process when you send your application for a job position, including your CV, are deleted after 24 months from the moment of its reception.

Your rights

At any time, you can exercise the rights with reference to the specific processing of your personal data by YOOX NET-A-PORTER GROUP:

• the right to be informed on how we use your information and to obtain a copy of your personal data;
• the right to have your information up to date, rectified or completed with other information;
• in the cases foreseen by the law, the right to obtain the erasure of your personal without undue delay;
• in the cases foreseen by the law, the right to object to the processing of your data;
• in the cases foreseen by the law, the right to obtain the temporary restriction of the processing;

in the cases foreseen by the law, the right to have the personal data you provided to us on an automated basis returned to you in a commonly used and machine-readable format, or sent directly to another company, where technically feasible (“data portability”).

To exercise these rights you can contact us at the addresses indicated above.

You can lodge a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be filed to the “Italian Data Protection Authority” (http://www.garanteprivacy.it/).

Privacy Policy

1. General information

• Who is the Data Controller?

YOOX NET-A-PORTER GROUP S.p.A., having an address at Via Morimondo n. 17, 20143 Milano (MI), Italy (“YOOX NET-A-PORTER GROUP”) is the Data Controller, the subject who decides how and why to process your personal data through the Website.

• Who is the Data Protection Officer?

YOOX NET-A-PORTER GROUP has appointed a Data Protection Officer (DPO). If you wish, for any matter concerning the protection of your personal data and the exercise of your rights, you may contact our Data Protection Officer (DPO), by writing to “Data Protection Officer” c / o YOOX NET-A-PORTER GROUP SPA via Morimondo n. 17 – 20143 Milan (Italy), or by e-mail at DPO.

2. What data do we process?

The following are the categories of personal data that we process:

• personal data you provide to us when you send a communication to our addresses on the Website;
• personal data you provide to us when you send your application to YOOX NET-A-PORTER GROUP by filling in the appropriate forms referred to in the “Careers” section of the Website; in particular, we collect personal data, contact details and the information you choose to include in your CV.

3. How do we use your data?

We use your personal information only to the extent strictly necessary to achieve the following purposes:

• management of the relationship between you and YOOX NET-A-PORTER GROUP when you request information or assistance. We use the information you provide us when you send us a communication to the addresses indicated on the Website (by form) to follow up your specific requests or provide assistance to you.
• evaluation of your application and make a selection in view of the possible start of a working collaboration with you.

We use the information you provide to us when you send us your application (via specific forms referred to by the Website, letter, e-mail, telephone) to evaluate your application and make a selection in view of the possible start of a working collaboration with you. For further details, please read our Candidate Privacy Notice.

Under certain circumstances, the legislation on personal data protection requires us to use your contact information to provide you with specific information on the processing of your data (for example, to inform you of security breaches that have affected your data and of measures from us taken to cope with it).

In relation to all the activities mentioned above, we will process your personal data mainly through automated means; the instruments and tools we use guarantee high safety standards, in full compliance with the current legislation.

4. Lawful basis for processing

We process your personal data only on the basis of one of the conditions provided for by current legislation, namely:

1. A) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

This lawful basis legitimizes the processing of your personal data carried out for the following activities:

• follow up on the requests you have brought to our attention. You are free to tell us your data or not, but in the absence, it will not be possible to fulfill your requests. This means that we will not be able to provide you with the information or assistance you need;
• evaluate your spontaneous application and make a selection in view of the possible start of an employment relationship with you. The provision of your personal data for this activity is a necessary requirement for the possible future conclusion of a contract of employment with YOOX NET-A-PORTER GROUP.

You are free to provide us your data or not, but in the absence we will not be able to evaluate your application. This means that you will not be able to be selected to start a working partnership with us.

• B) you have given the consent to the processing of your personal data.

To follow up on your specific requests for information or assistance, sent to our addresses indicated on the Website, your free, specific, informed and unequivocal consent to the processing will be required. The provision of your personal data for these activities is not an obligation deriving from the law or from a contract. You are free to tell us your data or not, but in the absence it will not be possible to fulfill these requests. This means that we will not be able to provide you with the information or assistance you need.

• C) processing is necessary for the purposes of the legitimate interest of YOOX NET-A-PORTER GROUP.

In some cases, YOOX NET-A-PORTER GROUP has a legitimate interest in the processing of your data, for example to ensure the security of the Website and for fraud prevention purposes.

5. To whom your personal data will be disclosed?

Your personal data will be disclosed to:

• internal personnel of YOOX NET-A-PORTER GROUP specifically authorized for their processing and data processors appointed by YOOX NET-A-PORTER GROUP;
• companies belonging to the YOOX NET-A-PORTER GROUP business group;
• third parties that we use to carry out our business, belonging to the following categories: Internet and telecommunications operators, recruitment agency;

6. Transfer of data outside of the European Union

Also depending on where you are, some of the third parties listed in the previous section n. 5 could be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

The transfer of your personal data to countries that do not belong to the European Union and that do not ensure an adequate level of protection will be executed only after the conclusion between YOOX NET-A-PORTER GROUP and said subjects of specific agreements, containing safeguard clauses and appropriate guarantees for the protection of your personal data (so called “standard data protection clauses”, also approved by the European Commission) alongside any additional appropriate measures where needed, or with your explicit consent or to initiate pre-contractual measures taken at your request.

7. Data retention period

We keep your personal data for a limited period of time, depending on the type of activity that involves the processing of your personal data. After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way, unless it is necessary to keep them for legal obligations or to protect a legitimate interest of YOOX NET-A-PORTER GROUP.

Your personal data is stored in compliance with the terms and criteria specified below:

• the personal data we collect when you send a request for information or assistance are kept until the time when this request has been satisfied and for the next 12 months if further assistance is needed;
• the personal data we collect when you send your application for a job position, including your CV, are deleted after 24 months from the moment of its reception.

In any case, due to technical reasons, the termination of the processing and the subsequent definitive deletion or irreversible anonymisation of the data will take place within 30 days from the terms referred above.

8. Your rights

You may exercise your rights related to the specific processing of your personal data by YOOX NET-A-PORTER GROUP at any time. Below you will find a general description of these rights and information on how to exercise them.

• Accessing your data, rectifying it, updating it and obtaining a copy. You have the right to access your personal data and to obtain specific information on the characteristics of the processing of your data. You can ask that your personal data be rectified, modified or updated. If you wish, we will provide you with a copy of your personal data in our possession.

• Erasing your information. In the cases foreseen by the law, you can request the erasure of your personal data. If we will evaluate your request as legitimate, we will promptly cease the processing of your personal data, except for those that we will have to continue processing to fulfill any legal obligations.
• Objecting to the processing of your data. You have the right to object to the processing of your personal data carried out on the basis of one of our legitimate interests at any time, explaining the reasons on which your request is founded. Unless there are any reasons for rejecting your request as provided for by law, we shall then proceed to terminate the processing to which you object.

• Obtaining the temporary restriction of the processing. In this case, YOOX NET-A-PORTER GROUP shall continue to keep your personal data but will not process it beyond the storage itself, unless requested otherwise by you or provided for by any legal exceptions. You may obtain the restriction of processing if you contest the accuracy of your personal data, if the processing is unlawful but you oppose the erasure of your personal data, if we no longer need your personal data but you need it for the exercise or a right in court, or if you object to the processing of your data during the period in which we are assessing the grounds of your request.

• Transmitting it to a subject other than YOOX NET-A-PORTER GROUP (“right to data portability”). If the processing is based on consent or on a contract, you have the right to obtain your personal data in a commonly used and machine-readable format; this right will make you able to transfer your data to a company different from YOOX NET-A-PORTER GROUP. We will send your data directly to another company if you ask so, where technically feasible.
• We do not use automated decision-making processes, including profiling, that would have a potentially damaging effect on you. But if we did, you would have the right to obtain human intervention, express your point of view, obtain an explanation of the decision and challenge it.

To exercise the above mentioned rights you can:

• contact us via the email address: GDPR;
• contact our Data Protection Officer (DPO) at the address indicated above or by e-mail at DPO.

To ensure that your personal data are not subject to violations or illegitimate use by third parties, before accepting your requests to exercise one of the above rights we may need to ask to you some additional information to be sure of your identity.

9. Complaints.

You can lodge a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, the complaint can be filed to the “Italian Data Protection Authority” (http://www.garanteprivacy.it/).

10. Changes to the Privacy Policy.

This Privacy Policy is updated to 29 April 2024.

This policy may be subject to changes and additions over time, which may be necessary as a result of changes to the characteristics of the processing of personal data described above, as well as in relation to new regulatory provisions in the field of personal data protection.

We therefore invite you to periodically check the contents of this Privacy Policy.

11. Cookies

Cookies are small text files that the sites visited by the user send and record on his computer or mobile device, to be then re-transmitted to the same sites at the next visit. Thanks to cookies, a website can remember the user’s actions and preferences (such as login data, the chosen language, font size, other display settings, etc.) so that they do not have to be indicate again when the user returns to visit said site or browse from one page to another.

During navigation on a site, the user can also receive on his computer or mobile device website or web server cookies other than the one he / she is visiting (c.d. “third party” cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the same functioning of the site.

There are various types of cookies, depending on their characteristics and functions, and these can remain in the user’s computer or mobile device for different periods of time: c.d. session cookies, which are automatically deleted when the browser is closed; persistent cookies, which remain on the user’s equipment until a pre-established expiry date.

YOOX NET-A-PORTER GROUP processes the information collected through cookies where possible in anonymous and aggregate form, in order to optimize our services and our Website in relation to the specific requirements and preferences of our users. The following types of cookies are used on this Website:

• Essential (strictly necessary) cookies: some of the cookies are technically necessary for us to operate the core functions of our Website, so that you may visit it and use its features. The Website cannot be used properly without such cookies. We do not require your consent to use these cookies.
• Analytical (performance) cookies: these cookies are used to prepare statistical analyses on the browsing methods of our Website’s users. We will only set such where you have provided us with your consent to do so by either choosing to ‘Accept All’ or by adjusting your cookie settings via the “Cookie settings” popup.

You may at any moment select your preferences in the Cookie Settings available on the left side of the footer of the Website by activating or disabling the single cookie category or, as an alternative option, through your browser settings.

The majority of browsers are configured to accept, control, or potentially disable cookies through the settings. We nevertheless remind you that disabling of the essential cookies may affect the functioning of the Website and/or limit the service we offer.

Below is the procedure to follow to manage cookies from the following browsers:

• Internet Explorer: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Chrome: https://support.google.com/chrome/answer/95647?hl=en-EN&hlrm=fr&hlrm=en
• Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US

Last update: 29 April 2024