Prada Fashion Commerce (Shanghai) Co., Ltd., with registered office in Shanghai, PRC, the company directly operating the websites https://www.prada.com/cn and https://www.miumiu.com/cn (hereinafter, both referred to as “Website”) as well as online and offline Prada Group stores (including but not limited to Prada and Miu Miu brand stores) in the People’s Republic of China, together with its parent company Prada S.p.A., with registered office in Milan (Italy), the operating holding company of the Prada Group (hereinafter, both referred to as “PRADA”) is committed to protecting the confidentiality, integrity and security of your personal information (“Personal Information”) that you may share with PRADA, and hereby explains how we collect, use and disclose your Personal Information. PRADA will process your Personal Information in compliance with current applicable laws on privacy and with any specific local regulations applicable from time to time, including but not limited to, the Civil Code of the People's Republic of China, the Personal Information Protection Law of People’s Republic of China (“PIPL”) and the E-commerce Law of People’s Republic of China together with the principles and general rules of conduct contained in the Code of Ethics adopted by the Prada Group.
This privacy policy applies to the Personal Information which we may collect through our digital platforms, such us the Website, PRADA WeChat mini programs, online stores in third-party e-commerce platforms (such as Tmall.com and JD.com), and any mobile applications, cloud-based services, controlled widgets embedded in communication platforms (hereinafter, collected referred as “Digital Platforms”), or other locations where this privacy policy is located or referenced, as well as to Personal Information that you may provide us by phone, email, incoming text messages and/or in person at our stores, when you interact with our Client Service team or sales staff, purchase our products, use our services, or participate in our events.
Please read and confirm that you have fully understood this Privacy Policy before using our services, visiting our Digital Platforms
By clicking confirmation button or ticking the relevant consent checkbox(es) and by providing your Personal Information or using our services, visiting our Digital Platforms, you confirm that you are 14 years of age or older and agree (or by continuing to use the services, or continue to provide your Personal Information after the Privacy Policy is updated, you continue to agree) to the Privacy Policy. If you are under 14 years of age or object to any terms of the Privacy Policy, you may not use our services and you should not provide your Personal Information to us.
This Privacy Policy will help you to understand the following:
(1) Types of Personal Information that PRADA can collect and process
(2) Protection of minors' Personal Information
(3) Methods that PRADA may use to collect and process the Personal Information
(4) Optional Provision of Personal Information
(5) Purposes and legal basis of collecting and processing Personal Information
(6) How PRADA shares, transfers, and publicly discloses your Personal Information on a global scale
(7) Global transfer of your Personal Information
(8) How PRADA protects your Personal Information
(9) Retention period
(10) Personal Information Processor, Data Protection Officer and contact information
(11) Personal Information subject’s rights
(12) Amendments to this Privacy Policy
1. Types of Personal Information that PRADA can collect and process:
“Personal Information” means any kind of information related to an identified or identifiable natural person as electronically or otherwise recorded, or reflect the activity of a particular natural person, either alone or in combination with other information.
Based upon the services you choose, the activities you participate in and your interactions with us etc., Personal Information collected by us may include the following information; we will only collect sensitive personal information in certain specific and necessary circumstances, we will draw your attention by bold and underline the sensitive personal information that may be involved:
(1) Basic personal information and contact information (such as first and last name, title, province, city and district, date of birth, postal address, postal code, mobile phone number, fix phone number, email address etc.);
(2) Network identity information (such as customer account number, IP address, user ID and password, common orders, WeChat OpenID, WeChat UnionID etc. related to the foregoing);
(3) Voice reproduction (such as phone call recording information based on your authorization);
(4) Body size and style preferences;
(5) Log/browsing information: (such as search content, browser type, IP address, access date and time, the pages you visit and the related operations you performed);
(6) Personal shopping records (such as order history, products added to wishlist or shopping bag);
(7) Information about the usual equipment (such as hardware model, operating system type, etc.) describing the basic conditions of personal equipment;
(8) Location information (based on your authorization, we will collect your geographic location at that time, but we will not combine your location information at different times to determine your whereabouts).
2. Protection of minor’s Personal Information
PRADA values and is committed to the protection of the privacy of minors under the age of 14 ("Minors"). PRADA has no intention in collecting and processing Personal Information from Minors. However, due to technical limitations, we are not able to verify the age in some cases. Therefore, Minors shall not provide their names, addresses, mobile phone numbers or any other Personal Information to us without the consent of their legal guardian. If we become aware that we have inadvertently received Personal Information from a minor without the consent of the Minor's legal guardian, upon the request of the relevant legal guardian, we will delete such Personal Information from our records.
3. Methods that PRADA may use to collect and process the Personal Information
(1) Information we may collect automatically from you
Through your use of our Digital Platforms, we may automatically collect certain information about your use of them through cookies and similar technologies, including from third parties that may directly collect relevant information from you outside our control. For the SDK (software development kit) information of our Digital Platforms, please refer to the Appendix hereof.
In general, above-mentioned information is used to analyse and improve the performance of our Digital Platforms, perform statistical analysis, provide our customers with a pleasant browsing experience. For example:
Browsing data
In the course of normal operation, certain specific information (log files) are collected by the computer systems and software programs used to run our Digital Platforms. The transmission of such information is inherent in the use of internet communication protocols. Such information is not collected for the purpose of creating a link with a specific data subject. However, due to its nature, this information can be processed and integrated through third parties so that the user can be identified. This information includes the IP address or domain name of the computer used to access our website, the URI (Uniform Resource Identifier) of the requested resource, the time of the request, the method used to submit the request to the server, the size of the document obtained in the reply, the numerical code of the status of the server's reply (success, error, etc.) and other parameters about the user's operating system and computer environment. This data is only used to obtain anonymous statistical information on the use of our Digital Platforms and to ensure their correct functioning.
Cookies
Our Digital Platforms use cookies and similar technologies to ensure their effective operation, perform statistical analysis, improve our services, and send our online advertising messages in line with your preferences. Cookies are small text files that are sent to the terminal you use to access to the Internet (usually to your browser) by websites you visit. They are stored on your device and are recognised when you visit those pages subsequently. If you would like to find out more about cookies, the types of cookies used by our browser, how to prevent them from being generated, and how to withdraw your consent, please see our Cookie Policy.
(2) Personal Information voluntarily provided by the personal information subject
PRADA collects, processes and use the Personal Information that you directly and voluntarily provide or allow us to collect when you: (i) purchase our products in store or place online, remote and/or other orders (ii) register to an event or participate in other initiatives promoted by PRADA (iii) book an appointment or pick-up products in store; (iv) register an online account with us; (v) register to our Prada Group customers database; (vi) subscribe to our newsletter and updates service; (vii) contact our Client Service using our live chat or hotline and in general interact with our Client Service team or sales staff (viii) visit our stores or (ix) use our services or Digital Platforms.
The items of Personal Information collected in the above cases usually include basic personal information (title, name and surname, location, birthday), contact and billing details (postal address, billing address, phone number, email address), details such as the booked time and number of people for a service or event, details of purchases and/or other information regarding you that you may decide to provide during the interactions with our Client Service.
If you call our Client Service team or our Client Service team contacts you with the details you have provided to us, please note that calls may be recorded for quality assurance, record-keeping and training purposes. Before recording you will be anyhow advised of this circumstance again. Furthermore, when you call, send an e-mail or text to our Client Service team and/or sales staff, we collect your e-mail address and/or phone number you used to contact us, so that we can reply to any request, as well as any additional Personal Data contained in your message or provided by you within the course of your interactions with us.
When you visit our stores, we may also collect your images recorded from the security surveillance camera system in operation for security and crime prevention purposes. We may indicate the CCTV system by a sign placed before the range of action of the cameras or in their close proximity.
In addition, we may also obtain information about you as a result of authentication or identity checks (for example, you may be asked to present your identity document when you pick up your purchase in-store). PRADA uses this information to identify you as a customer, to process your order, to deliver products and services and/or to process payments.
When you follow our WeChat Official Account or use our WeChat Mini Programs, we may obtain your WeChat nickname and avatar and other information recorded in your WeChat account you may agree to share with us.
We will combine the information that you provide when interacting with PRADA or that we collect in accordance with the law through a variety of channels (including but not limited to various social media, Digital Platforms and offline stores), in order to better understand your preferences and habits, as well as to enhance and optimize the customer experience that we provide to you.
4. Optional Provision of Personal Information
The provision of Personal Information is optional. However, if you wish to submit purchase order, create a personal account and register to the Prada Group customers database, and/or use any other services offered online, remotely and in store, you need to fill in all mandatory fields of the relevant forms and provide us with the required Personal Information as necessary in relation to the purposes for which they will be processed. If you do not provide this information, then it may delay or prevent us from processing your request, responding to your query, or providing products or services to you.
You are free to choose whether or not to register a personal account with us and whether or not to consent to the collection, processing and share of your Personal Information for the purposes referred to under section 5, paragraphs (f), (g) and (h) below. If you do not consent, you may still place purchase orders, but we will not be able to proceed with the indicated purposes, including but not limited to, notifying you of any initiatives of interest to you, and/or send you any other commercial information on products, services, initiatives and events of the Prada Group, and you will not have access to the additional exclusive features reserved for registered members that may be useful for your shopping experience with PRADA.
Please note that if you consent to the processing of your Personal Information for the purposes referred to under section 5, paragraphs (f), (g) and (h), that is, after your registration into the Prada Group customers database, your Personal Information linked to your customer profile will be visible to, and securely shared with, all Prada Group stores in order to provide you with the same quality of service wherever you choose to interact with the Prada Group around the world (i.e. when you travel and purchase our products or visit our stores). Click here to see the Prada Group retail and affiliated companies and the jurisdictions in which we operate. PRADA will take appropriate security and confidentially measures as required by applicable legislation to ensure an adequate standard of data protection.
Subject to the relevant provisions herein, you may withdraw or modify your consent to the processing of your Personal Information at any time, by writing to the Personal Information Processor at the contact addresses indicated in section 10, and/or by logging onto your online account, using the “unsubscribe” link included in all of our commercial electronic communications or any other appropriate procedures which may be made available to you by PRADA.
Please also note that unless you delete your Personal Information or withhold your consent for PRADA to your Personal Information, it is deemed that you have authorised PRADA to process all the Personal Information you have provided for the duration of your registration as Prada Group customer. Once you deregister your account, relevant Personal Information will be deleted or anonymised after fulfilment of any obligations due to you or otherwise required by laws.
5. Purposes and legal basis of collecting and processing Personal Information
Your Personal Information may be collected and processed for the following purposes:
a) to fulfil your purchase orders and perform all management activities connected with it (including administrative management of the contract, provision of services or delivery of goods, payment processing, handling of any products exchanges and returns, management of any claims and litigation, and fraud prevention), and to comply with any applicable legal or regulatory obligations. (For this purpose, you need to provide the purchaser’s mobile phone number, recipient’s name, mobile phone number and shipping address (including province, city, region). For the purpose of e-invoicing (if applicable) you need to provide the invoice recipient’s email address and possibly company name and taxpayer identification number.
b) to provide you with to post-sale service (including product warranty and repairs service) and other services or information you request from us, communicate with you and manage your relationship with PRADA. (For this purpose, we will collect the Personal Information contained in your request and further details that you may choose to provide us during the interactions with our Client Service or with sales staff in order to provide services that are relevant to you or that you require).
c) to send you newsletters, updates and other marketing communications regarding the Prada Group brands’ collections, campaigns, events and special projects as a result of your subscription to the service, including communicating the above with you via phone call. (For this purpose, we only require your mobile phone or email address, as the case may be).
d) to provide you with more convenient and personalized products and services, and improve your shopping experience, we will predict your interests or preferences through algorithm model based on your behaviour records such as browsing, clicking, adding items to shopping bag, adding items to wishlist, purchasing, etc., combined with the network identification information legally collected and other information authorized by you, and then provide personalized information that may be of interest to you. We will also adjust and optimize the recommended results based on your behaviour during your use of the relevant Digital Platforms. (For this purpose, we will collect information such as your WeChat OpenID, UnionID, behaviour records such as browsing, clicking, adding items to shopping bag, adding items to wishlist, purchasing etc.)
e) to enable you to register as a store member of certain Digital Platforms (such as Tmall.com and JD.com) and enjoy relevant benefits (For this purpose, we will require your mobile phone number and/or the platform account etc.)
Furthermore, if you, by choice, consent to register to the Prada Group customers database and consent that your Personal Information will be transferred to, and managed by, Prada S.p.A., then your Personal Information may be processed and used, together with the details of your purchases online and/or in stores, for the following purposes:
f) to manage your PRADA personal account, confirm your identity as a registered Prada Group customer and, consequently, to provide a customised global customer service and post-sale assistance and allow you to enjoy exclusive services and benefits reserved for registered members (e.g.: preservation of your purchase order history, global customer service and personalized assistance, simplified procedures for product repair and warranty, invitation to events, pre-sale and other promotional initiatives and special projects, etc.).
g) to offer you a personalized and tailored experience with regards to your preferences for the Prada Group brands, products and services, including by performing statistics, market research and surveys.
h) marketing: to contact and/or send you (by phone, e-mail and any other form of electronic communication or digital means including social network platforms and other instant messaging applications) information and promotions, including of a commercial nature, newsletters, advertising, and catalogues concerning the brands, products and services of the Prada Group.
For the purposes in paragraphs (f), (g) and (h) above, you need to provide your first name, last name, title, location, and mobile phone number. If you provide us with your date of birth and so forth as additional information, it will help us provide you with a more personalised service. If you do not provide such additional information, the basic functions of the services will not be affected.
We collect and process your Personal Information based on one or many of the legal basis provided for by the applicable data protection laws, including but not limited to:
- the processing is necessary in connection with any contract between PRADA and you (for example, when you make a purchase or ask for repairs services) or for the taking of pre-contractual steps at your request;
- we have obtained your prior consent. Please note that you have the right to withdraw your consent at any time in accordance with the provisions herein;
- we have to process your personal data to comply with applicable laws and regulations.
If PRADA uses your Personal Information for other purposes not covered by this Privacy Policy, or if the information collected for a specific purpose will be used for other purposes, your specific consent will be sought in advance.
You are fully aware that PRADA does not require your consent to collect, process and use Personal Information in the following situations:
- the processing is necessary for the conclusion or performance of a contract in which the individual is a party;
- the processing is necessary for the performance of statutory duties or statutory obligations;
- related to national security and national defense security;
- related to public safety, public health, and major public interests;
- related to criminal investigation, prosecution, trial and execution of judgments;
- in order to protect the personal information subject or other individuals’ lives and property, and the consent of the personal information subject is hard to obtain;
- the collected information has already been publicized by the personal information subject;
- collected from legally publicly disclosed information, such as legitimate news reports, government information disclosure, etc.;
- necessary to legitimate news reporting;
- other circumstances as stipulated by laws and regulations.
6. How PRADA shares, transfers, and publicly discloses your Personal Information
Your Personal Information will not be disclosed to unknown persons under any circumstances.
Entrusted processing
Where necessary for, and / or instrumental to, the above purposes, PRADA may delegate the processing of Personal Information to outside service providers, including to other companies belonging to the Prada Group. Upon outsourcing the processing of personal information, we will enter into relevant agreement to clearly stipulate the external service provider’s strict compliance with our requirements on protection of personal information and prohibition of illegal provision to a third party. The service providers will not use any personal information beyond the scope of the work outsourced. The functions of the service include:
- SMS sending service provider;
- Software and system technology service providers;
- Risk control service provider;
- Online survey agency;
- Marketing and research, data analysis companies;
- Website/system server hosting company.
Sharing
Moreover, in order to achieve the purposes stated in this Privacy Policy, PRADA will share your Personal Information with third parties in certain circumstances as set out below.
In order to fulfil your purchase order, we need to share (i) your order number and transaction amount with Alipay, Wechat or other third party payment institutions so that they can confirm your payment instruction and complete the payment, and (ii) the recipient’s information with the courier to provide you with delivery services.
In order to provide you with any of the services and benefits reserved to registered members in the Prada Group customers database that you may have chosen to enjoy, we may share your Personal Information with other Prada Group affiliates companies in order to render the service requested. Click here to see the Prada Group retail and affiliated companies and the jurisdictions in which we operate.
In addition, PRADA may share your Personal Information with government agencies, regulators, law enforcement and the judiciary to comply with our legal obligations.
Transfer
PRADA will not transfer your Personal Information to any company, organization or individual except:
- with explicit consent;
- In the event that PRADA has a merger, acquisition or bankruptcy liquidation situation, or other circumstances involving mergers, acquisitions or bankruptcy liquidation, if a Personal Information transfer is involved, PRADA will require the new company or organization holding your Personal Information to continue to be bound by this Privacy Policy. Before transferring your Personal Information, we will send you appropriate notice informing you of the name and contact information of the recipient and ensuring that your Personal Information will be protected in a manner consistent with this Privacy Policy. If the recipient changes the purpose or method of the processing, we will require the recipient to obtain your consent again.
Public Disclosure
PRADA will only publicly disclose your Personal Information under the premise of complying with safety precautions in the following circumstances:
- Disclose the Personal Information you specify in accordance with your needs with the disclosure methods that you expressly agreed to;
- Your Personal Information is required in accordance with the requirements of laws, regulations, mandatory administrative enforcement or judicial requirements.
In the following circumstances, sharing, transfer, and public disclosure of your Personal Information does not require your prior consent:
- related to national security and national defense security;
- related to public safety, public health, and major public interests;
- related to criminal investigation, prosecution, trial and execution of judgments;
- in order to protect the personal information subject or other individuals’ lives and property, and the consent of the personal information subject is difficult to obtain;
- the collected information has already been publicized by the personal information subject;
- collected from legally publicly disclosed information, such as legitimate news reports, government information disclosure, etc.;
Please be aware that, in accordance with applicable law, if PRADA takes technical measures and other necessary measures to deal with Personal Information, so that the personal information becomes anonymous or by removing personally identifiable information from the personal information, then the sharing, transfer and disclosure of such anonymised personal information need not require notification to, nor consent from, you.
7. Global transfer of your Personal Information
In principle, the Personal Information collected and processed by PRADA will be stored in the territory of the People's Republic of China.
However, as PRADA is part of an international network in order to manage our global business, improve our service level and provide you with global services, we may use overseas facilities to process, store or back up your Personal Information.
We will comply with applicable laws in connection with such data transfer by adopting all suitable security measures and safeguards to ensure an appropriate level of data security and obtaining your prior specific consent. Prior to cross-border transfer of your Personal Information, we will send appropriate notice to you, notifying you of, among other things, the name and contact information of the foreign recipient, the purpose and method of processing, type of Personal Information and the manner and procedure of your exercise of the rights set forth in this Privacy Policy against the foreign recipient, and ensure that your Personal Information will be protected in a manner consistent with this Privacy Policy.
8. How PRADA protects your Personal Information
PRADA has adopted industry-standard, reasonably practicable security measures to protect your information from unauthorized access, public disclosure, use, modification, damage or loss. For example, when you exchange data between your browser and the server, it is protected by SSL protocol encryption; PRADA also provides HTTPS protocol secure browsing for the website, uses encryption technology to improve the security of Personal Information, and trusted protection mechanisms that prevents Personal Information from being subject to malicious attacks, and deploys access control mechanisms to ensure that only authorized personnel have access to Personal Information. Your Personal Information will be processed by suitable electronic or automated means and computerised tools, or manually and on hard copy, exclusively for the purposes for which they have been collected and guaranteeing the security and confidentiality of any processed information. Your Personal Information will be processed only by the PRADA’s internal staff duly authorised to do so under their respective job duties.
PRADA will take reasonable and practicable steps to avoid collecting unrelated Personal Information. PRADA will only retain your Personal Information for the minimum period of time required to achieve the purposes stated in this Privacy Policy (unless the law otherwise has a mandatory retention requirement).
The Internet is not an absolutely secure environment. PRADA will do its utmost to ensure the security of any information you send to PRADA. If the physical, technical or managerial protective facilities of PRADA are damaged, resulting in unauthorized access, public disclosure, alteration or destruction of the information, resulting in damage to your legal rights, PRADA will bear the corresponding legal responsibility.
In the event that there is a Personal Information security incident, PRADA will notify you in accordance with the requirements under the relevant laws and regulations and the content of the notification should include, but not be limited to, the nature and possible impact of the security incident, the measures taken or to be taken, suggestions for how you can mitigate risks, and possible remedies for you. PRADA will inform you by mail, letter, telephone, notification, etc. When it is difficult to inform the individual information subject one by one, PRADA will issue a notice in a reasonable and effective manner.
At the same time, PRADA will report any Personal Information security incidents in accordance with the requirements of the regulatory authorities.
9. Retention period
Your Personal Information will be processed and stored for as long as required to carry out the purposes for which they were collected, and in accordance with the storage periods required by the applicable laws, or until you revoke your consent to the processing, if applicable. After the conclusion of such period, and where there is no legal or business purpose for retaining your Personal Information, it will be automatically and permanently erased or made anonymous.
In particular, regarding the data processing of registered members into Prada Group customers database:
· Personal Information of your membership account are kept for a period of 7 years from the date of your last interaction with the Prada Group, or otherwise until you withdraw from or cancel your registration in the Prada Group customer data base; and
· Details of purchase and event participation are kept for a period of 7 years from the date of purchase and event respectively.
10. Personal Information Processor, Protection Officer and contact information
The Personal Information Processor is:
Prada Fashion Commerce (Shanghai) Co., Ltd.
Rooms 4109 & 4110, 41/F, Plaza 66 Office Tower Two, No. 1366 Nan Jing Xi Road, Jing An District, Shanghai, PRC
Email address: Privacy_China@prada.com
In addition, for the purposes of data processing within the Prada Group Customers database referred to in section 5 (f) to (h) above, the Data Controller is the parent company:
Prada S.p.A.
Via Antonio Fogazzaro 28, Milan, Italy
Group Data Protection Officer
Email address: privacy@prada.com
If you want to exercise your rights or receive any information on your rights and/or this Privacy Policy, please contact us by writing to the addresses/email addresses listed above.
11. Personal Information subject’s rights
Please note that you may exercise the rights under the applicable privacy laws, by contacting the Personal Information Processor as set out in section 10 above, including the right as below
· to access and receive a copy of your Personal Information;
· to request to correct or complete of inaccurate or incomplete Personal Information;
· to delete your Personal Information; and
· other rights provided by applicable regulation.
In the following situations, you can request Personal Information Processor to delete your Personal Information:
· the processing purposes have been achieved or are no longer possible or necessary;
· Personal Information Processor ceases to provide products or services, or the storage period has expired;
· you have withdrawn your consent to Personal Information processing;
· Personal Information Processor violates laws, administrative regulations, or the agreements to process personal information; or
· other circumstances as provided by laws and administrative regulations.
If the Personal Information Processor approves your request for deletion, it will also notify the entity that has obtained your Personal Information from PRADA and request that the relevant data be deleted in a timely manner, unless otherwise required by law or regulation, or if these entities have obtained your separate consent. When you delete information from PRADA's services, PRADA may not immediately delete the corresponding information in the backup system, but PRADA will delete the information when the backup is updated. You are reminded that the deletion is irreversible, once the information is deleted, you will no longer be able to view and manage the historical order, and the relevant services originally provided based on the deleted information will not be available, so it is recommended to choose to delete your Personal Information carefully.
You may withdraw your consent to the processing of your Personal Information by us at any time, by contacting the Personal Information Processor as set out in section 10 above or by using any other appropriate procedures which may be made available to you by PRADA. For security reasons, PRADA may require you to provide a written request, or other ways to prove your identity, and PRADA will respond to your request within 15 working days of receiving your feedback and verifying your identity (unless otherwise provided by law). Please understand that each business function requires some basic Personal Information to be provided. When you withdraw your consent, PRADA cannot continue to provide you with the service corresponding to the withdrawal of consent and will not process your relevant Personal Information. However, your decision to withdraw your consent will not affect the processing of Personal Information previously based on your consent before its withdrawal. In addition, if applicable laws, regulations or regulatory requirements require us to retain some of your information, we will retain the relevant information until the expiration of the minimum retention period required by laws and regulations.
In principle, PRADA does not charge any fees for your reasonable request, but for repeated requests that exceed reasonable limits, PRADA may charge a fee as appropriate. For those requests that are unreasonably repetitive, requires excessive technical requirements (for example, to develop new systems or fundamentally change existing practices), pose risks to the legal rights of others, or are very impractical, (for example, involving information stored on backup tapes), PRADA may refuse to assist in such requests.
PRADA will not be able to respond to your request in accordance with legal and regulatory requirements in the following situations:
· related to national security and national defense security;
· related to public safety, public health, and major public interests;
· related to criminal investigation, prosecution and trial;
· there is sufficient evidence that you have subjective malice or abuse of rights;
· responding to your request will result in serious damage to the legitimate rights and interests of you or other individuals or organizations;
· involving trade secrets.
If you are dissatisfied with PRADA's response, especially if you believe that PRADA's Personal Information handling actions have harmed your legal rights, you may lodge a complaint to the competent supervisory authority or seek a solution by filing a lawsuit in the court of the district where Prada Shanghai’s office is located namely Jing An District Court in Shanghai.
12. Amendments of this Privacy Policy
PRADA reserves the right to amend this Privacy Policy at any time. However, we will post any changes to the Privacy Policy on the Website and/or other relevant Digital Platforms. If you continue to use relevant services after an updated version of this Privacy Policy has been published, you will be deemed to have agreed to the changes we have made. For major changes, we will also provide more conspicuous notices (including notifying you via SMS or email etc.). The Privacy Policy currently in force is the version published on the Website and/or other relevant Digital Platforms.
Appendix: SDK information list
Digital customer card (the functionality under relevant application used in our offline stores to provide membership registration function):
Third Party Name |
Processing Purpose
|
Duration |
Processing Method |
Collecting Information |
Third Party Privacy Policy |
Google Firebase Crashlytics |
Crash analysis
|
According to the platform policy
|
Online server (encrypted)
|
Crashlytics Installation UUIDs Firebase installations ID Crash traces Breakpad minidump formatted data (NDK crashes only) |
|
Dynatrace |
Performance Improvements
|
Since start to using until the subscription
|
Online server (encrypted)
|
Diagnostic Data: iOS Version App Version User Language Client Ips and Location |
Wechat Mini program - Prada普拉达 / Prada Rongzhai:
Third Party Name |
Processing Purpose |
Duration |
Processing Method |
Personal Information Type |
Tencent |
Digital marketing |
According to the platform policy |
Online server |
User registration information; Contact information; Browsing data |
Shanghai Pose Advertising Co.,Ltd. |
Prada Miniprogram ticket booking, user registration and transmission |
Service period |
Server designated by Prada |
User registration information; Contact information; Booking information; Consent to the privacy policy, marketing and profiling, data processing and cross-border data transfer |
Shanghai Yuanke Information Technology Co., Ltd |
CRM Miniprogram registration and transmission |
Service period |
Server designated by Prada |
User registration information; Contact information; Consent to the privacy policy, marketing and profiling, data processing and cross-border data transfer |
Wechat Mini program - Prada member center / Miu Miu member center:
Third Party Name |
Processing Purpose |
Duration |
Processing Method |
Personal Information Type |
Shenzhen Tencent Computer System Co., Ltd |
Data analysis, advertising attribution analysis |
According to the platform policy |
Online server |
User registration information; Contact information; Browsing data |
Shanghai Yuanke Information Technology Co., Ltd |
CRM Miniprogram registration and transmission |
Service period |
Server designated by Prada |
User registration information; Contact information; Consent to the privacy policy, marketing and profiling, data processing and cross-border data transfer |
Wechat Mini program - Prada official store / Miu Miu official store:
Third Party Name |
Processing Purpose |
Duration |
Processing Method |
Personal Information Type |
Shenzhen Tencent Computer System Co., Ltd |
Data analysis, advertising attribution analysis |
Before the termination of DataNexus interfacing |
Automatic collection |
Device Information Screen resolution De-identified id |
Shanghai Xingyun Information Technology Co., Ltd |
Extraction of the required information from the database belonging to Prada according to PRADA requirements |
During the maintenance period of PRADA Group's mini program system |
Systematic data extraction |
Order information; After-sales information User’s personal information |
Shanghai Fengbo E-commerce Limited |
For OMS order transfer, warehouse delivery |
During the brand service period |
System Transmission |
Name, contact information, address (all encrypted) |
Wechat Mini program - Miu Miu club:
Third Party Name |
Processing Purpose |
Duration |
Processing Method |
Personal Information Type |
Tencent |
Digital marketing |
According to the platform policy |
Online server |
User registration information; Contact information; Browsing data |
Shanghai Pose Advertising Co.,Ltd. |
Miu Miu Club Miniprogram user registration and transmission |
Service period |
Server designated by Prada |
User registration information; Contact information; Booking information; Consent to the privacy policy, marketing and profiling, data processing and cross-border data transfer |
Tmall.com – PRADA official store / MIU MIU official store:
Third Party Name |
Processing Purpose |
Duration |
Processing Method |
Personal Information Type |
Shanghai Baozun E-commerce Limited |
Obtain order information for order fulfillment |
During operation service peirod and the peirod when Baozun order and warehouse system are used by PRADA |
Obtain order information from Tmall, |
Order information, after-sales information (such as encrypted recipient information such as name, address, contact information, etc.) |
Shanghai Baozun E-commerce Limited |
Tmall membership function |
Activated period of Tmall membership function |
Obtain member information from Tmall |
Encrypted mobile phone number, name, gender and date of birth, |
JD.com – PRADA official store / MIU MIU official store:
Third Party Name |
Processing Purpose |
Duration |
Processing Method |
Personal Information Type |
Shanghai Baozun E-commerce Limited |
Obtain order information for order fulfillment |
During operation service peirod and the peirod when Baozun order and warehouse system are used by PRADA |
Obtain order information from JD |
Order information, after-sales information (such as encrypted recipient information such as name, address, contact information, etc.) |
Last updated: July 2, 2024