Privacy Policy

[Last updated: September 2026]

WHO PROCESSES MY DATA?

Canali S.p.A. a socio unico (“CANALI” or the “Data Controller”) recognises the importance of protecting personal data and makes every reasonable effort to ensure their protection.

CANALI wishes to inform you, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), as well as other applicable laws and regulations, about the processing of personal data collected through CANALI’s website https://www.canali.com (the “Website”), CANALI stores, customer relationship management systems, applications used by sales staff and other digital tools used to manage and personalise the customer experience.

CANALI S.p.A. has also appointed a data protection officer to be contacted at the following e-mail address: dpo[AT]canali.it

WHICH TYPES OF PERSONAL DATA DOES CANALI PROCESS?

CANALI processes the following categories of your common personal data:

2.1 Identifying data: such as, by way of example, name and surname, date of birth;

2.2 Contact details data: such as by way of example, residence address, e-mail address, telephone/mobile number;

2.3 Accounting data: such as, by way of example, data necessary for invoicing, payment method, transaction outcome and transaction identifiers and, where applicable, bank account details;

2.4 Data relating to purchases, boutique visits and interactions with CANALI: including, by way of example, the customer’s usual point of sale, purchase history and frequency, products purchased or of interest, preferences and needs communicated, as well as relevant information and observations collected during boutique visits and interactions with sales staff.;

2.5 Web surfing data: as per section 3.b below.

The data may be provided directly by the data subject, derive from purchases and previous interactions with CANALI, or be collected through the Website, boutiques and tools used by sales staff.

WHICH TYPES OF PERSONAL DATA DOES CANALI USE, AND FOR WHAT PURPOSES?

3.a. DATA PROCESSING FOR CONTRACTUAL PURPOSES

CANALI may process your personal data, such as those indicated in Sections 2.1, 2.2 and 2.3 above, for contractual purposes and, more specifically, to sell CANALI products and provide after-sales services and related activities (for example, administrative and accounting activities, organisation and management of orders, shipment of orders, tailoring services, customer services, debt collection, etc.).

3.b. DATA PROCESSING FOR SURFING THE WEBSITE

The servers and IT systems used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

Although these data are not collected in order to be associated with identified data subjects, by their very nature they could, through processing and association with data held by third parties, allow users to be identified.

This category of personal data includes the IP addresses of the devices used by users who connect to the Website, as well as the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.

These data, which are necessary for the proper functioning of the Website, are also processed in order to:

- obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or per day, geographical areas of origin, etc.);

- check the proper functioning of the services themselves.

For further information on the use of cookies and other tracking technologies on the Website, please consult the Cookie Policy available on the Website.

3.c. PROCESSING OF DATA FOR THE SENDING OF NEWSLETTERS

Your common personal data, such as those indicated in Section 2.2 above, may also be used, with your prior consent, to send newsletters by e-mail concerning CANALI products or services. For the sending of newsletters, CANALI uses systems that provide reports which make it possible to organise and, where necessary, improve the results of such communications.

3.d. DATA PROCESSING FOR MARKETING PURPOSE

Your common personal data, such as those indicated in Sections 2.1, 2.2 and 2.4 above, may also be used, with your prior consent, to send communications concerning CANALI products, services and/or events by post, e-mail, newsletter, telephone and/or text messages (including instant messaging services), and through social media.

CANALI also uses systems that provide reports which make it possible to analyse and, where necessary, improve the results of the communications.

The communications may be personalised on the basis of the customer’s previous interactions with CANALI and may be prepared or translated with the support of automated systems and artificial intelligence. The content is reviewed by CANALI staff before being sent.

Where the personalisation uses information processed for preference-analysis purposes, it will only take place where the profiling consent required for that purpose has also been given.

3.e. DATA PROCESSING FOR THE PURPOSE OF CONDUCTING PREFERENCE ANALYSES

If you are a customer of CANALI boutiques or a user of the Website, your common personal data, such as those indicated in Sections 2.1, 2.2 and 2.4 above, may also be used, with your prior consent, to analyse your preferences. This purpose includes the analysis of information relating to purchases, boutique visits, preferences and needs communicated, interactions with CANALI and online behaviour, in order to understand your interests and purchasing habits, improve the service and personalise subsequent interactions and communications. The analysis may also be carried out using automated systems. It does not involve decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. For the sending of communications, CANALI uses systems that provide reports which enable CANALI to analyse and, where necessary, improve the results of the communications.

3.f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

Your common personal data, such as those indicated in Sections 2.1, 2.2 and 2.4 above, may also be used by CANALI for classification purposes. This purpose consists in the creation of homogeneous groups of data subjects by means of a simple extraction from the database of data subjects who share membership of common macro-categories such as, for example, age group, gender, area of residence, nationality, etc.

3.g. PROCESSING OF DATA FOR THE PURPOSE OF CONDUCTING STATISTICAL ANALYSES AND CUSTOMER SATISFACTION SURVEYS

Personal Data and Purposes

CANALI uses its customers’ personal data to carry out statistical analyses aimed at improving its services and products. The data may initially be processed in identifiable or pseudonymised form; where possible, the results of the analyses are produced in aggregated form and cannot be directly linked to an individual customer.

CANALI may also use its customers’ contact details to send surveys aimed at measuring satisfaction with the products and services offered and improving their quality. Such communications do not contain promotional content and participation in the surveys is voluntary.

3.h. PROCESSING FOR THE SO CALLED SOFT SPAM PURPOSES

Your common personal data, such as those indicated in Section 2.2 above, may be used to send e-mail communications concerning products and services similar to the CANALI products ordered, the so-called “Soft Spam” (pursuant to Article 130(4) of the Italian Privacy Code). You may object to such communications by clicking the unsubscribe button in the footer of the e-mail.

WHICH IS THE LEGAL BASIS OF THE PROCESSING OF MY PERSONAL DATA?

a. DATA PROCESSING FOR CONTRACTUAL PURPOSES

Legal basis

For the purposes indicated in Section 3.a above, the legal basis for the processing of your personal data, consisting in the performance of pre-contractual and contractual measures and/or compliance with legal obligations to which the Data Controller is subject, is Article 6(1)(b) and (c) GDPR.

b. DATA PROCESSING FOR BROWSING THE WEBSITE

Legal basis

For the purposes indicated in Section 3.b above, the legal basis for the processing is CANALI’s legitimate interest, pursuant to Article 6(1)(f) GDPR, in ensuring the security, integrity and proper functioning of the Website, as well as preventing and detecting any abusive or unlawful use thereof. It should also be noted that such data may be used by public security authorities to ascertain responsibility in the event of any cybercrimes affecting the Website.

c. DATA PROCESSING FOR THE PURPOSES OF SENDING NEWSLETTERS

Legal basis

For the purposes indicated in Section 3.c above, the legal basis for the processing of personal data consisting in the sending of information material (newsletters) is Article 6(1)(a) GDPR, where you have given your consent by ticking the relevant consent box.

d. DATA PROCESSING FOR MARKETING PURPOSE

Legal basis

For the purposes indicated in Section 3.d above, the legal basis for the processing of your personal data consisting in the sending of commercial communications is Article 6(1)(a) GDPR, where you have given your consent by ticking the relevant consent box.

e. DATA PROCESSING FOR THE PURPOSES OF CONDUCTING PREFERENCE ANALYSES

Legal basis

For the purposes indicated in Section 3.e above, the legal basis for the processing of your personal data consisting in carrying out preference analyses is Article 6(1)(a) GDPR, where you have given your consent by ticking the relevant consent box.

f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

Legal basis

For the purposes indicated in Section 3.f above, the legal basis for the processing of your data is Article 6(1)(f) GDPR, consisting in organising information relating to CANALI’s customers into general macro-categories in order to support the analysis and planning of the services offered.

g. DATA PROCESSING FOR STATISTICAL ANALYSES AND CUSTOMER SATISFACTION SURVEYS

Legal basis

For the purposes indicated in Section 3.g above, the legal basis for the processing is CANALI’s legitimate interest, pursuant to Article 6(1)(f) GDPR, in analysing and improving the quality of its products, services and the experience offered to customers.

This interest is pursued in compliance with the rights and freedoms of data subjects and, with regard to customer satisfaction surveys, without sending promotional content.

h. DATA PROCESSING FOR THE SO CALLED SOFT SPAM PURPOSES

Legal basis

For the purposes indicated in Section 3.h above, the legal basis for the processing of your personal data consisting in the so-called soft spam is Article 6(1)(f) GDPR, namely CANALI’s legitimate interest in informing its customers, by e-mail, about products or services similar to those already purchased, within the limits laid down by Article 130(4) of the Italian Privacy Code. The data subject’s right to object to receiving such communications at any time remains unaffected.

FOR HOW LONG WILL CANALI STORE MY DATA?

a. DATA PROCESSING FOR CONTRACTUAL PURPOSES

Retention period

The common personal data of users and customers of CANALI’s Website, collected for the purposes referred to in Section 3.a above, will be retained for the time necessary to perform the contract or to provide statutory or contractual warranties and, after termination of the contract, for no longer than 10 years, unless further retention periods are provided for by applicable law.

b. DATA PROCESSING FOR SURFING THE WEBSITE

Retention period

Your personal data collected for the purposes indicated under paragraph 2.b above, will be stored for the entire session and until the browser is closed.

c. DATA PROCESSING FOR THE SENDING OF NEWSLETTERS

Retention period

Your personal data collected for the purposes indicated in Section 3.c above will be retained for a period not exceeding 5 (five) years from the date of your subscription to our newsletter service, unless you have withdrawn the consent previously provided in this regard. It is understood that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

d. DATA PROCESSING FOR MARKETING PURPOSES

Retention period

Your personal data collected for the purposes indicated in Section 3.d above will be retained for a period not exceeding 5 years from the date of your last purchase, without prejudice to the exercise of the right to erasure and your right to object to the processing of your data for this purpose. It is understood that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

e. DATA PROCESSING FOR THE PURPOSE OF PREFERENCE ANALYSES

Retention period

Your personal data collected for the purposes indicated in Section 3.e above will be retained for a period not exceeding 5 (five) years from the date of your last purchase, unless you have withdrawn your consent or exercised your right to object to the processing of your data for this purpose. It is understood that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

f. DATA PROCESSING FOR CLASSIFICATION PURPOSES

Retention period

Your personal data collected for the purposes indicated in Section 3.f above will be retained for a period not exceeding 5 (five) years from the date of your last purchase, unless you have exercised your right to object to the processing of your data for this purpose.

g. DATA PROCESSING FOR STATISTICAL ANALYSES, CUSTOMER SATISFACTION SURVEYS

Retention period

Your personal data collected for the purposes indicated in Section 3.g above will be retained for a period not exceeding 5 (five) years from the date of your last purchase, without prejudice to your right to object to the processing of your data for this purpose.

h. PROCESSING FOR SOFT SPAM PURPOSES

Retention period

Your personal data collected for the purpose of sending soft spam communications will be retained by the Data Controller for a period of 5 years from your last purchase, unless you exercise your right to object pursuant to Article 21 GDPR

TO WHOM AND WHERE DOES CANALI COMMUNICATE MY DATA?

Your data may be communicated to:

· CANALI’S employees/staff, expressly and duly authorized to process your data, as per Article 29 GDPR

· CANALI Group companies, in their capacity as data processors, pursuant to Article 28 of the GDPR, or as independent data controllers as the case may be;

· external professionals or firms (such as technology partners / Social Media), in the capacity as Processors under Article 28 of the GDPR, or as independent data controllers, as the case may be.

· competent Public Authorities.

Your Data will be loaded onto CANALI's Customer Relation Management system, hosted in server(s) located in or outside the jurisdiction where Your Data have been collected, and shall be accessible to the CANALI Companies worldwide, including Canali SpA a Socio Unico, Canali Retail France, Canali Retail UK Ltd, Canali USA Inc., Canali Madison LLC, Canali Beverly Hills LLC, Canali Shanghai Co. Ltd., Canali Macau Ltd., Canali Far East Ltd.

CANALI’s Customer Relation Management System is currently hosted in servers located in the following jurisdictions: Italy, France, United Kingdom, United States of America, Mainland China, Hong Kong, Macao.

The complete list of third parties to whom data may be transferred to may be requested at any time by submitting a request at https://privacycanali.whistlelink.com.

Where personal data are transferred outside the European Economic Area to countries for which the European Commission has not adopted an adequacy decision, CANALI adopts the appropriate safeguards provided for under Article 46 GDPR, including, where applicable, the Standard Contractual Clauses approved by the European Commission and any supplementary measures deemed necessary in relation to the specific transfer.

Further information on the safeguards applicable to transfers, as well as on how to obtain a copy of them, may be requested from CANALI using the contact details indicated in this Privacy Policy.

WHICH IS THE NATURE OF THE PROVISION OF MY PERSONAL DATA?

a. DATA PROCESSING FOR CONTRACTUAL PURPOSES

Nature of the provision of personal data and consequences of any refusal

The provision of your personal data necessary for the performance of the purchase or the requested service is mandatory, limited to the data required for the specific transaction.

For purchases made at CANALI boutiques, certain personal data, in particular contact details, may not be necessary to complete the purchase unless additional services are requested, such as shipment of the product.

For purchases made through the Website, the data indicated as mandatory are necessary to manage the order and provide the requested services. Failure to provide such data may make it impossible to complete the purchase or provide the relevant service. The provision of the personal data referred to in Section 2.3 is optional if you do not wish to receive an invoice, whereas it is necessary if you request an invoice. In the latter case, refusal to provide your personal data may make it impossible for us to provide the service you requested.

b. DATA PROCESSING FOR BROWSING PURPOSES