When you access a private sale, your personal information (i.e. identification data, purchase information, financial information, data related to professional life if you are an employee of the Kering group and data related to your sponsor if you are not an employee of the Kering group) will be processed by the houses of the Kering group (e.g. Saint Laurent, Balenciaga, etc.) and its corporate entities (e.g. Kering S.A., Kering Italia S.p.A, etc.), each of them respectively acting as independent controller.
Your personal information can be obtained directly from you. It can also be obtained from the seller in charge of managing the sale; from the abovementioned houses and corporate entities of the Kering group; or from a related employee of the Kering Group inviting you to participate in a private sale.
The related processing activities are carried out to detect, investigate, prevent and, to the extent legally permitted, sanction fraud and violations of the terms and conditions applicable to the sale. The legal basis of this processing is: (i) the legitimate interest of the controller (i.e. protecting itself against fraud and contractual breach); or (ii) if your country of residence does not acknowledge legitimate interest as legal basis, the necessity for the performance of a contract.
In this context, please note that, if a controller has reasonable reason to suspect you committed a fraud/violation in relation to a sale, your personal information will be shared with other entities of the Kering group, including your employer if you are accessing sales as an employee of the Kering group, in order to mutualize and cross-check information to fight more efficiently against any fraud and violations.
Your personal information will also be shared with service providers assisting the controller reaching the abovementioned purposes. For example, Kering S.A., where acting as processor, provides analysis services to the houses of the Kering group to help the latter better detect fraud/violations. The controller may also decide for example to share with the seller in charge of the sale the list of persons who committed violations and are no longer entitled to access sales.
Where relevant and legally permitted, the controller will disclose your personal information to competent courts, public authorities and law enforcement bodies.
As the Kering group operates globally, your personal information may thus be transferred internationally, to countries not regarded as ensuring an adequate level of data protection. In such a case, appropriate safeguards will be implemented. To obtain additional information in this respect, including copies thereof, please contact the controller’s DPO as indicated below.
Your personal information will only be retained for the duration strictly necessary for performing anti-fraud analysis and implementing the measures necessary to prevent, and where legally permitted, sanction any fraud and violations.
As a data subject, you benefit from various rights. You can thus request access, rectification and erasure of your personal information. You can also request the restriction of processing or object thereto. You also have the right to request portability of your personal information and to lodge a complaint with a supervisory authority.
To contact the controller itself (e.g. Saint Laurent, Balenciaga, Kering S.A., etc.) or its DPO, you are invited to consult the Privacy Policy available on the official website of such controller, which lays down the relevant contact details.
Alternatively, you may reach out to Kering S.A. at privacy@kering.com, acting as a Data Processor for the other entities of the Kering Group. Kering S.A. will ensure your request is forwarded to the appropriate Data Controller.