Prada S.p.A., with registered office in Milan (Italy), the operating holding company of the Prada Group together with its subsidiary Prada Bosphorus Deri Mamüller Limited Şirketi, with its registered office in Istanbul (Turkey), the company directly operating the selling of products offered on the website www.miumiu.com/tr (the “Website”), (Prada S.p.A. and Prada Bosphorus Deri Mamüller Limited Şirketi are referred together as “PRADA”), recognise the importance of maintaining the confidentiality, integrity and security of your personal information (hereinafter “Personal Data”), and hereby inform you that any Personal Data which you may provide to us through the Website, by phone, email or incoming text messages, as well as any Personal Data which you may provide at a Prada Group store, will be processed in compliance with current applicable laws on data protection and with any specific local regulations applicable from time to time, including the Turkish Law on Protection of Personal Data No. 6698 (“DPL”) and the European General Data Protection Regulation (Regulation (EU) 2016/679 - “GDPR”), together with the principles and general rules of conduct contained in the Code of Ethics adopted by the Prada Group.

1. Type and source of data

Browsing data

During their normal operation, the computer systems and software procedures used to operate our Website collect certain personal data (log files). The transmission of such data is inherent to the use of internet communication protocols. This information is not collected in order to be associated with specific data subjects. However, due to its nature, this information can allow users to be identified by means of its processing and integration with data held by third parties. Such information includes the IP addresses or domain names of the computers you use to visit our Website, URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical status code of the server reply (successful, error, etc.) and other parameters concerning the user's operating system and computer environment. This data is used with the sole purpose of obtaining anonymous statistical information on the use of our Website and to guarantee its correct operation.

Cookies

Our Website uses cookies to ensure its efficient functioning and to improve our services. Cookies are small text files that are sent to terminal you use to access to the Internet (usually to your browser) by the websites you visit. Cookies are stored in your computer or device to be recognized by those websites on your subsequent visits. For more information on cookies, on the types of cookies used on our Website, on how to disable them and on how you can revoke your consent, see our Cookie Policy .

Personal Data voluntarily provided by the data subject

PRADA collects and processes the Personal Data that you directly and voluntarily provide through our Website, by phone, email or incoming text messages and/or at a Prada Group store, when:

(i) you place online, remote and/or other orders,

(ii) you register to our Website by creating your online account,

(iii) you use other functionalities available on the Website (for example: to subscribe to our newsletter, to send a request to our Client Service, to book an appointment in store, to connect or interact with us through social networks, etc),

(iv) you choose to register into the Prada Group customer database by completing our customer card (hereinafter the “Customer Card”),

(v) interact with our Client Service team and/or sales staff,

(vi) purchase our products, and/or

(vii) use our services.

If you decide to register to the Website through the social login function, please be informed that PRADA will have access to the Personal Data of your social account (for example, your email address and your public profile) in accordance with the privacy settings of the applicable social media platform. For more information, please refer to the related privacy statements on the applicable social media platform; PRADA does not oversee or control such social media services or user profiles on these platforms and does not establish privacy settings or rules regarding how Personal Data is used on such platforms.

The items of Personal Data collected may include personally identifiable information (title, first and last name, location and date of birth), contact, shipping and billing details (delivery and billing addresses, email, telephone), details of purchases and/or other information regarding you that you may decide to provide us during the interactions with our Client Service team or with our sale staff.

Furthermore, when you voluntarily send an email through our Website and/or to the addresses indicated on our Website or when you call, email or send text messages to our Client Service team and/or sales staff, we collect your email address and/or phone number you use to contact us, as well as any additional Personal Data contained in your message or provided by you during your interactions with us, so that we can reply to your requests.

If you call our Client Service team or our Client Service team contacts you with the details you have provided to us, please note that calls may be recorded for quality assurance and record-keeping purposes.

In addition, we may also obtain information about you as a result of authentication or identity checks (for example, you will be asked to present your identity document when you pick up your purchase in-store). PRADA uses this information to identify you as a customer, to process your order, to deliver products and services and/or to process payments.

Personal Data of minors

You must be at least 16 years old (or older depending on your country or state of residence) in order to provide us with Personal Data and at least 18 years old to purchase products from our Website.

PRADA protects the Personal Data of minors in accordance with the relevant national laws and regulations. If PRADA discovers that it has collected Personal Data about a minor without the prior consent of a verifiable parent or legal guardian, it will de-activate the minor’s account and try to delete the data as soon as possible.

2. Purposes and legal bases of the processing

Your Personal Data may be processed and used for the following purposes:

(a) to respond to all your requests and to manage your relationship with PRADA;

(b) to process or fulfil your online, remote and/or other purchase orders and perform all management activities connected with them (including administrative management of the contract, delivery of goods, payment processing, management of any claims and litigation, and fraud prevention), and to comply with any applicable legal or regulatory obligations;

(c) to manage your online account profile and give you access to areas and service reserved for registered users in the Website.

(d) to send by email the newsletters and other marketing communication regarding the Prada Group’s products, services, initiatives and events as a result of your subscription to the service.

Furthermore, if you register to the Prada Group customer database (e.g. as a result of your registration on the Website, or your completion of the Customer Card) your Personal Data will be managed by the holding company Prada S.p.A. and shared with all Prada Group stores globally, and may be processed, together with the details of your purchases online, remotely and/or in stores, for the following purposes:

(e) to confirm your identity as a registered Prada Group customer and, consequently, to provide a global customized customer care service and post-sales assistance and allow you to access exclusive services and benefits reserved for registered members (e.g. preservation of your purchase order history, faster online checkout, simplified procedures for product repair and warranty, invitation to events, pre-sale and other promotional initiatives and special projects, etc.);

(f) to offer you a personalized and tailored experience with regards to your preferences for Miu Miu and the other brands, products and services of the PRADA Group, including by performing statistics, market research and surveys; and/or;

(g) marketing: to contact you and/or send you (by post, telephone, e-mail and any other form of electronic communication or digital means including social networks platforms and other instant messaging applications) information and promotions, including commercial information, newsletters, advertising and catalogues concerning “Miu Miu” and the other brands, products and services of the Prada Group.

The Personal Data processing referred to in subsections (a), (c) (d) and (e) is necessary to provide the service requested by the data subject. The processing referred to subsection (b) is necessary to execute the contract with the data subject or the related pre-contractual measures and to fulfill the connected legal obligations of an administrative and fiscal nature. Further, the data processing referred to in subsections (f) and (g) is based on the prior consent of the data subject.

3. Nature of the provision of personal data

The provision of Personal Data is optional.

However, if you wish to make a purchase order, register to the Prada Group customer database, receive information on Prada Group’s products and services, and/or use any other services offered on the Website, remotely and in store, you need to provide us with the required Personal Data and fill in all mandatory fields of the relevant forms, otherwise PRADA cannot proceed with the contractual services requested.

The provision of your Personal Data for the purposes indicated at letters (f) and (g) of section 2 above is subject to your prior express consent. If you withhold your consent, we may not be able to proceed with the indicated purposes, including the ability to offer you a personalized service, inform you of any initiatives that may interest you and/or send you any other commercial information on products, initiatives and events of the Prada Group.

You may withdraw your consent to receive our commercial communications and modify your communication preferences and/or opt-out from specific electronic communications at any time, by sending an email to privacy@prada.com, or by using the “unsubscribe” link included in all of our commercial electronic communications, and/or by using any other appropriate procedures which may be made available to you by PRADA (e.g. by logging into your online account).

You also can withdraw from or cancel your registration in the Prada Group customer data base at any time by contacting us at privacy@prada.com and/or by logging into your online account.

4. Processing Methods

Your Personal Data will be processed by suitable electronic or automated means and computerised tools, or manually and on hard copy, exclusively for the purposes for which they have been collected and guaranteeing the security and confidentiality of any processed information through the adoption of appropriate measures to prevent the alteration, cancellation, destruction, unauthorized access or processing or actions not in accordance with the purpose of collection. Your Personal Data will be processed by the PRADA’s internal staff committed to the confidentiality and duly authorised to do so under their respective job duties.

5. Transfer and disclosure of data

Whenever necessary and/or instrumental to the above purposes, your Personal Data may be processed on behalf of PRADA by other entities engaged by PRADA in the correct and regular pursuit of the described purposes, including:

• - Prada Group companies and franchisees that operate Prada Group stores;
  • - Third parties service providers, consultants and firms engaged by PRADA to perform business purposes including website analytic services, hosting, transaction and payment processing, promotional campaign management, fraud prevention, shipping of goods, IT maintenance, etc.
     

These third parties will act on behalf of PRADA as data processor and are under a contractual obligation of confidentiality of the personal information.

As PRADA is part of an international network your Personal Data may be transferred abroad, even temporarily, in accordance with applicable legislation, including to locations outside Turkey and the European Union (click here to see the jurisdictions in which the Prada Group and its service providers operate), by adopting all appropriate security measures and safeguards to ensure an adequate level of data protection and security.

Your Personal Data will not be used for third-party advertising purposes or for the promotion of products, services or initiatives by entities other than the Prada Group, nor shall they be disclosed to unknown persons under any circumstances.

Data communication within the Prada Group

Please also note that if you agree to register on the Prada Group customer database for the purposes referred to in sections 2, letters (e)-(g), your Personal Data will be shared with all Prada Group stores globally to provide you with the same level of service around the world. PRADA will take all appropriate and suitable security and confidentiality measures as required by applicable legislation to ensure an adequate standard of data protection.

6. Retention period

Your Personal Data will be processed and stored for: (a) as long as required to carry out the purposes for which the Personal Data were collected, (b) in accordance with the storage periods provided for by the applicable laws, or (c) until you revoke your consent to the processing/storage of your Personal Data, if applicable.  After the conclusion of such period(s), and where there is no legal or business purpose for retaining your Personal Data, it will be automatically and permanently erased or made anonymous.

In particular, regarding the data processing of registered members into Prada Group customer database:

• - Personal Data of your membership account are kept for a period of 7 years from the date of your last interaction with the Prada Group, or otherwise until you withdraw from or cancel your registration in the Prada Group customer data base; and
• - Purchase details are kept for a period of 7 years from the date of purchase.

7. Data Controller and contacts

For the purposes referred to in Section 2 letters (a) to (d), the Data Controller is

Prada Bosphorus Deri Mamüller Limited Şirketi

Abdi İpekçi Cad. No.34 Şişli/Istanbul-Turkey

Regarding the data processing of registered members into the Prada Group customer database, if any, the Data Controller is:

Prada S.p.A.

Via Antonio Fogazzaro 28, Milan (Italy)

Group Data Protection Officer

e-mail: privacy@prada.com.

If you have any requests regarding your Personal Data, have any inquiries regarding this Privacy Policy, or you would like to exercise your rights, please contact (free of charge) the Group Data Protection Officer or the Data Controller by writing to the addresses/email address listed above.

8. Your rights

Please note that you may exercise your rights under the applicable data protection laws at any time by contacting the Data Controller or the Group Data Protection Officer at the addresses indicated in the previous paragraph, including the right to request information as to whether your Personal Data is being processed and as to the characteristics of the processing, the right to rectification and erasure of your Personal Data, to limitation of the data processing and/or the right to object to the processing, and/or to lodge a complaint with the competent supervisory authority or take legal action if you believe there is non-compliance with the provisions of the applicable laws.

You also have the right to withdraw your consent for the processing of your Personal Data by PRADA at any time, without charge. The withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.

PRADA reserves the right to amend this Privacy Policy at any time. The Privacy Policy currently in force is the one published on the Website.

Last updated:  February 6, 2023