Bvlgari takes all possible steps to ensure the accuracy of the information included in its websites. However, Bvlgari takes no responsibility for errors or omissions in the content of the same. Information provided on the Sites is subject to change at any time without prior notice.
Use of and browsing on the Sites are at your own risk. Neither Bvlgari S.p.A. nor its affiliates nor any party representing Bvlgari in creating, presenting or otherwise affiliated with the Sites are liable for any indirect, special, punitive, incidental, exemplary or consequential damages arising out of your use of the Sites.
This page describes how the personal data of users consulting this site is handled.
Users who visit www.bulgari.com
Data referring to identified or identifiable persons may be processed following consultation of this site.
The Data Controller of such processing is Bvlgari S.p.A., in the person of its pro tempore chief executive officer at its head office located at Via dei Condotti 11, Roma 00193. Data Processing Location
Processing connected with the web services provided by this site is carried out in the aforementioned incumbent's head office exclusively by the technical personnel in the company charged with such processing or persons engaged on an occasional basis for maintenance operations. No data deriving from the web service is communicated or made public. Finalities and Use of Information
Personal data provided by users who request transmission of information or who register to receive newsletters are used for the sole purpose of providing the service requested. They may also be used for the Company's normal activities including the following:
a) management of user/client relationship;
b) to carry out business activities;
c) other purposes connected with the Company's activities; such as the improvement of products and services offered, although not strictly related to the services requested by the Submitter; market research regarding customer satisfaction submitted directly or through specialized agencies, by phone, questionnaires or personal appointments; delivery of information related to services offered and products marketed by the Company. Types of Data Processed Navigation Data
IT systems and software procedures used to operate this site acquire certain personal data during the course of normal operation. The transmission of such data is implicit in the use of internet communication protocols.
Such information is not collected in order to be associated with the identified parties but may, by its very nature, make identification of users possible through processing and association with data held by third parties.
This category of data includes the IP addresses or domain names of the computers used to connect to the Sites, addresses in the URIs (Uniform Resource Identifiers) of resources requested, time of request, method used to submit the request to the server, size of the file obtained in reply, numeric code indicating the state of the response given by the server (done, error, etc.) and other parameters relating to the user's operating system and IT environment.
This data is only used to obtain anonymous statistical information regarding the use of the Sites and to run operational checks and are cancelled immediately after processing. Data could be used to ascertain liability in the case of alleged computer crimes affecting this site. Data Provided Voluntarily by Users
Optional, explicit and voluntary sending of e-mail to the addresses indicated on this site entails subsequent acquisition of the sender's address, which is needed to reply to requests, and of any other personal data included in the e-mail. Summary information on privacy will be indicated or displayed from time to time in the pages of the site referring to specific services upon request. Cookies
No user personal data is acquired by the site. No use is made of cookies for transmission of information of a personal nature nor are so-called permanent cookies or any other kind of user tracing systems used. The use of so-called session cookies (which are not permanently memorized on the user's computer and disappear when the browser is switched off) is strictly limited to transmission of the session identifiers (random numbers generated by servers) needed to provide secure and efficient exploration of the site. The session cookies used on this site avoid recourse to other IT techniques that are potentially invasive of the privacy of users' navigation and do not allow users' personal identification to be acquired. Optional Supply of Data
Irrespective of the foregoing on navigation data, users are free to supply the personal data indicated in the request modules, or in any case indicated in the Contact us page, to request informational material or other communications.
Failure to supply such data may mean it is impossible to obtain what has been requested. Processing Methods
Personal data is processed by automatic devices only for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are adopted to prevent loss, illicit or incorrect use of data and non-authorized access thereto.Rights of Interested Parties
The parties to whom personal data refers are entitled at any time to obtain confirmation of whether or not such data exists and to know the content and origin thereof and to check its exactitude or request addition to or updating or rectification of such data (art. 7, decree law 196/2003).
Under the aforementioned provision of the law, parties are entitled to request cancellation or transformation into an anonymous form or blocking of data processed in violation of the law and in any case to oppose, on legitimate grounds, the processing of personal data.
This document, published at www.bulgari.com
PRIVACY INFORMATION NOTICE
In accordance with the provisions of Italian Legislative Decree 196/2003 (Privacy Code), EU Regulation 2016/679 and any other privacy laws which may apply to you,
we have the pleasure and duty of providing information on the processing of personal data in accordance with such requirements.
1. Collection of personal data and processing purpose
For the purposes of this privacy information notice (this “Privacy Notice”),
(a) “personal data” means personal data or personal information as defined by the applicable privacy or data protection laws of your jurisdiction; and
(b) “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
(a) The following personal data is collected and processed by Bulgari S.p.A. and by the companies controlled by Bulgari S.p.A. in Italy and throughout the world, as identified hereinbelow (hereinafter referred to as the “Bulgari Group Companies”) when, and for the purpose of, managing contractual relations with customers and to fulfill relevant legal obligations including the sale of products through their websites: Name, family name, address and email address. In addition, third party payment processors may also collect your payment data when you use a credit or debit card to purchase products from us for the purpose of processing your payment.
(b) Subject to the data subject’s prior express consent, personal data mentioned above and additional data described below are collected and processed by Bulgari S.p.A. and Bulgari Group Companies:
(i) To carry out statistical and profiling analysis, also via services provided by third parties. Such data is processed in compliance with the guarantees and measures set by the Italian Data Protection Authority on April 24, 2013 in response to the request of prior checking submitted by Bulgari, as well as all other applicable privacy laws.
(ii) To provide personalized sales services (by way of example but not limited to: personal shopping services, free assistance services and courtesy services), for the sending of (via mail, email, sms and mms, social networks, instant messaging) information relating to our creations, exclusive sales and events or similar initiatives organized or attended by Bulgari (including potential invitations to such events), and for the sending of questionnaires evaluating levels of satisfaction reached by services offered.
In relation to the purposes set out in points (b) (i) and (ii) above, Bulgari S.p.A. and Bulgari Group Companies may collect and process additional data in addition to those required for the management of contractual relations and to fulfill relevant legal obligations. This includes:
(i) Data collected during store visits, including use of the Wi-Fi system, during participation to events or while making purchases online: Birthday, age range, dates of family events, profession, hobbies, purchases, use of particular social networks or social network ID, telephone number, photograph, nationality, sex, the method and date of registration within Customer Relationship Management managed by Bulgari S.p.A (henceforth referred to as “CRM”), language, categories of favorite products, details of products purchased, size, price, discount, statistical spending levels, abandoned shopping carts, ways in which services are used, preferences regarding services offered in stores, response to contact activities, events attended by customers, products chosen for purchase but not actually purchased;
2. Provision of data
The provision of personal data with respect to the purposes outlined in paragraph 1, sub-section a) is obligatory and if it is not provided, Bulgari Group Companies cannot proceed with contractual services requested (for example, to complete your online purchase). For the purposes detailed in paragraph 1 sub-section b), provision of data is completely free and optional and the use of such data is subject to your consent. Denial thereof would not allow Bulgari Group Companies to proceed with the indicated purposes.
3. Conditions applicable to consent of minors
Processing the personal data of minors is lawful provided they are at least 16 years of age or such other age as defined by applicable law. If a minor is younger than 16 years of age or such other age as defined by applicable law, data processing is only lawful if, and where, consent is provided or authorized by the holder of parental responsibility.
4. Processing method
Personal data will be processed with IT-based tools and/or processed manually for the length of time needed to achieve the purpose for which it was collected. In particular, personal data collected for the purposes outlined in paragraph 1(b) will be also processed with the usage of automated mechanisms based on procedures and logics that are strictly related to the purposes specified above.
5. Entering of data in the CRM system
The entering of personal data in the CRM system is optional and occurs only if consent is given to one of the purposes detailed in paragraph 1 (b) above; it automatically implies that Bulgari employees across the world, tasked with data processing, will be able to view the data, as well as to change and to update it.
6.Scope of communication, transfer abroad and publication of data
Personal data is processed by personnel who are tasked with, or responsible for, data processing. This applies to: Bulgari S.p.A., parent companies, subsidiary companies, associate companies, companies under the same control, or companies that are part of the same group of companies that Bulgari S.p.A. belongs to, in Italy and/or across the world (a complete list of these can be obtained by writing to email@example.com.); in this regard, it is specified that Model Clauses made available by the European Commission regarding the transfer of personal data outside of Europe are used. Additionally, personal data may also be processed by our third party service providers, specifically: - companies that carry out shipping/delivery services for catalogs and/or products; - companies that deliver newsletters, marketing material and promotional communications; - companies that carry out customer care services; - companies that carry out analysis and market research; - companies that maintain IT systems. Data collected may also be processed by independent third-party data controllers, for example: - persons, companies, associations or professionals that provide assistance or consultancy services (lawyers, accountants, auditors); - companies that manage credit card payment service and, to the extent applicable in your jurisdiction, tax free. A complete list of third parties able to process personal details, on behalf of Bulgari or as independent third-party data controllers, may be obtained by writing to firstname.lastname@example.org. The data will, under no circumstances, be published. Where we use service providers who might have access to your personal data, we require them to have privacy and security standards that are comparable to ours. We use contracts (utilizing the Model Clauses made available by the European Commission) and other measures with our service providers to maintain the confidentiality and security of your personal data and to prevent it from being used for any purpose other than for the purposes for which it was collected.
As noted above, Bulgari S.p.A. and the Bulgari Group Companies are a global corporate group. As such, your personal data will likely be processed outside your jurisdiction of residence. However, all such data will be protected in accordance with this Privacy Notice. Please note that when your personal data is located outside your jurisdiction of residence it will be subject to the laws of the country in which it is situated.
The data will, under no circumstances, be published.
7. Data retention period
Data collected for the purposes outlined in paragraph 1(a) will be retained by Bulgari S.p.A. and Bulgari Group Companies for the time period necessary for the purposes for which it was collected, or in accordance with obligatory legal terms regarding the retention of data. Data collected for the purposes outlined in paragraph 1(b) will be retained until the earlier of: (i) the data subject revokes his/her consent to process his/her personal data and in any event, with particular reference to data collected for the purposes outlined in paragraph 1(b) (i), (ii) the data is no longer needed for the purposes for which it was collected and (iii) ten years following collection (in compliance with the measure issued by the Italian Data Protection Authority on April 24, 2013 in response to the request of prior checking submitted by Bulgari S.p.A.). When said consent is revoked or if earlier the time limit for the retention of data collected for the purposes outlined in paragraph 1, sub-section b) expires, the data will be automatically erased or made permanently anonymous.
8. Data subjects’ rights
The following may be requested at any time: (i) access to the personal data we hold about you; and (ii) information regarding the existence of personal data processing and its characteristics, correction and deletion of data or limited processing, including our use of service providers and the jurisdictions where such service providers are located. It is also possible to object to processing and/or to request that data be sent to another controller. Bulgari S.p.A. must respond to requests within deadlines provided for by applicable regulations; except as otherwise prohibited by applicable law, it must also correct incorrect data, ensure that incomplete data is completed, and update data that is no longer correct; and finally, when required, it must delete data and limit it and/or stop it from being processed, or ensure that it is, where technically possible, sent to another controller. When exercising rights, as listed above and provided for by law, or in order to obtain any related information and/or report potential misunderstandings and issues, the party concerned is invited to send an email to email@example.com for prompt replies, or to send a written letter to the Data Protection Officer ('DPO') at Bulgari S.p.A. in Lungotevere Marzio 11, Rome. If the response is not considered satisfactory, the party concerned may contact the Italian Data Protection Authority or the applicable data protection authority in their jurisdiction. Any electronic communication sent shall contain an appropriate section outlining how data processing is objected to and how clients no longer receive material and promotional information.
9. Data controllers and processors
Data controllers are:
- Bulgari S.p.A. – Via dei Condotti 11 – 00186 Rome (RM) and Bulgari Group Companies as identified hereinbelow. Data controllers may be contacted or a complete list of data processors designated by the former may be obtained by writing to firstname.lastname@example.org.
Bulgari S.p.A. (Italy), Bulgari Italia S.p.A. (Italy), Bulgari Asia Pacific Ltd (Hong Kong), Bulgari Australia PTY Ltd (Australia), Bulgari Belgium SA (Belgium), Bulgari Canada Ltd (Canada), Bulgari Commercial de Mexico Ltd (Mexico), Bulgari Commercial Shanghai CO Ltd (People’s Republic of China), Bulgari Corporation of America (U.S.A.), Bulgari Deutschland GmbH (Germany), Bulgari do Brazil Lda (Brasil), Bulgari España SA (Spain), Bulgari France SA (France), Bulgari International Corporation (BIC) NV (the Netherlands), Bulgari Ireland Ltd (Ireland), Bulgari Japan Ltd (Japan), Bulgari Korea Ltd (Korea), Bulgari Malaysia SDN BHD (Malaysia), Bulgari Montecarlo SAM (Principality of Monaco), Bulgari Panama Inc. (Panama), Bulgari Portugal Lda (Portugal), Bulgari Qatar Llc (State of Qatar), Bulgari SA (Switzerland), Bulgari South Asian Operation PTE Ltd (Republic of Singapore), Bulgari St Barth SAS (Saint Barthelemy), Bulgari Taiwan Ltd (Taiwan), Bulgari Turkey Luxury and Trade Llc (Republic of Turkey), Bulgari Thailand Ltd (Thailand), Bulgari UK Ltd (United Kingdom), Gulf Luxury Trading Llc (Dubai), Lux Jewels Bahrain Wll (Kingdom of Bahrain), Lux Jewels Kuwait Wll (State of Kuwait), India Luxco Retail Private Ltd (Republic of India), Bulgari Prague Sro (Czech Republic), Bulgari Russia Llc (Russian Federation).