Legal area

Welcome to the website www.stoneisland.com. 

Sportswear Company S.p.A., part of the ‘Moncler Group’, provides the following information about the collection and processing of the user’s personal data. During the use of the site or its services (hereinafter, the “Website” and the “Services”), information and personal data concerning users of the Site are collected.  

For this reason, in accordance with the provisions of the General Data Protection Regulation no. 2016/679 (“GDPR”) and applicable national legislation (together, “Privacy Legislation”), we have created this document (hereinafter “Privacy Policy”) for the purpose of describing what personal data we collect, the purposes and methods of its processing and the security measures used to protect it. 

Pursuant to the GDPR, ‘processing’ is defined as any operation, including the mere collection and/or storage, of personal data of any natural person (hereinafter, the “Data Subject” or the “User”), ‘controller’ is defined as the natural or legal person who determines the purposes and means of the processing, and ‘personal data’ is defined as any information relating to a natural person, identified or identifiable even indirectly by reference to any other information. 

The Data Controller is Sportswear Company S.p.A., with registered office in Bologna, Galleria Cavour, n.4, VAT and Fiscal Code n. 0104647037 (hereinafter also “Stone Island” or “Data Controller”)

The User can contact the Data Controller free of charge by writing to the e-mail address privacy@stoneisland.com, or by sending a registered letter with acknowledgement of receipt to the registered office, as identified above. 

Sportswear Company S.p.A. has appointed a Data Protection Officer (DPO), domiciled for the purpose at the offices of Sportswear Company S.p.A. and available at the following address: dpo@stoneisland.com. 

The Data Controller will process the following categories of personal data (hereinafter collectively referred to as “Personal Data”): 

3.1. Browsing data 

During their normal operation, the computer systems used to operate the Website acquire some of the User’s Personal Data, the transmission of which is implicit in the use of Internet communication protocols.  

This information is not collected for the purpose of identifying the User, but may lead his/her identification if, for example, it is combined with information held by a third party. This category of data includes the IP address and domain name of the computer, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server and other parameters relating to the operating system. We use this data for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check it is working properly. The data collected is deleted immediately after processing. The data could be used to ascertain responsibility in the event of cybercrime committed to the detriment of the Services. 

3.2. Registration information and further information provided by the User 

Use of the Website does not require the creation of a personal account. However, to access certain pages reserved for registered users and, for example, to send us a request for information or feedback on the Services, the User must create a personal account and become a registered User. When creating an account, the User will be asked to enter certain Personal Data, such as (i) first and last name, (ii) e-mail address, (iii) date of birth and to create a password. 

In addition, personal data directly provided by the User when placing an order to purchase an item will be collected and processed, this consists of data collected by sending electronic mail, interacting with the functionality of the Website and requesting Services offered by the Website.  

The Personal Data we collect and process for the purpose of order fulfilment include (i) first and last name, (ii) nationality, (iii) e-mail address, (iv) shipping address, (v) shipping and payment methods and, subject to consent, (vi) purchasing habits. 

If the User wishes to use our online size suggestion service, we will collect Personal Data relating to his/her body measurements (e.g. height, weight, age). 

If the User collects, processes and discloses information about third parties to us, he/she must do so in accordance with the provisions of the Privacy Policy and, therefore, the User must provide the third parties with prior notification of processing and, if necessary, obtain their free and express consent before processing. 

Personal Data will be used exclusively for the following purposes: 

a) to create an account; 

b) to respond to and manage requests for information and/or User feedback, via the online form, by telephone on +448081640242 or by e-mail at client.service@stoneisland.com or privacy@stoneisland.com.

c) to provide the services requested through the Website, including registration and subsequent updates and to manage the activities organised through the Website; 

d) to manage sales activities and to provide sales and after-sales services, such as administration, accounting, returns and guarantee management, customer relationship management; 

e) to ensure compliance with legal obligations, national and EU regulations (including anti-money laundering regulations), to prevent fraud and to exercise rights in legal proceedings. 

f) for direct marketing – with your previous consent, which is optional, Stone Island will process your personal data for additional purposes like marketing activities, commercial or advertising communications, direct sales, market researches, by e-mail, (newsletter), phone, SMS, MMS, instant messaging; 

g) for profiling for marketing purposes –Stone Island has realised a specific system composed by various applications and related infrastructure, called "Stone Island Digital Data Architecture for Customer Profilation" (hereinafter also "Stone Island Digital Data Architecture"), which collects, from different sources (i.e. your purchases instore, through MyStoneCompass App, from anti counterfeiting websites, from profiling cookies), and elaborates information related to preferences, purchase habits on purchases made by you worldwide even through other Moncler Group’s companies appointed as data processors for this purpose, in order to build individual profiles for the purposes of providing you, only with your previous content which is optional, with targeted communications by e-mail (newsletter), phone, SMS, MMS, instant messaging and traditional mail, or with a customised management of the relationship between Stone Island and you;  

h) for online advertising and Social Media – in case of interaction with the Data Controllers’ social media pages, if you granted your consent to the use of profiling cookie on the Website (which are mentioned in Section 10 below), Stone Island shall process your personal data in order to show you marketing announcements and contents matching with your interests, in consideration of the preferences and of the purchase habits identified through cookie and/or other tracing systems of social media manager (like Meta) and/or after the analysis that social media carry out on their users. In particular, Stone Island shall be able to show targeted marketing content through digital platforms in consideration of your interests or of your behaviour and on the basis of all those information which could be collected through profiling activities carried out on the Website and shared with digital platforms, or using the instruments made available by social media; 

i) for aggregated analysis of strategic and business intelligence: through the Stone Island Digital Data Architecture Stone Island will also carry out aggregated analysis of strategic and business intelligence on the processed data and information, on the basis of legitimate interest, in consideration of entrepreneurial and market needs to conduct activities of general analysis and forecast, developing statistic elaborations and company’s strategic models, so improving products and services offered to its customers;  

j) to defend its own rights – Stone Island will process personal data in order to protect its rights in judicial, administrative and extrajudicial proceedings and in any disputes arisen in relation to the Services. 

The provision of the User’s Personal Data for purposes (a), (b) (c), (d) and (e) is optional, but necessary in order to provide the Services requested. If the User refuses to provide such information, he/she will still be able to use the Site, but will not be able to access some of our Services reserved for registered users, purchase Stone Island products and we will not be able to handle the User’s requests.  

Consent to the processing of Personal Data for the marketing and profiling purposes referred to in points (f) and (g) is optional and refusal will have no consequences on the navigation of the Site and/or the purchase of Stone Island products. 

The legal basis for the processing of the Personal Data referred to in Article 4 above is: 

• with reference to points (a), (b), (c) and (d) 

fulfilment of a contractual obligation, in particular the provision of Services requested by the User via the Site; 

• with reference to point (e) 

fulfilment of a legal obligation to which the Data Controller is subject in the course of its business; 

• with reference to points (f), (g) and (h) 

consent of the Data Subject, given by means of a specific and separately expressed expression of will, only after having read this Privacy Policy. The User may at any time specify the preferred method of contact from among those listed above and he/she may refuse to receive promotional communications through any or all of the contact methods. 

In relation to the consent for letter (h), we make reference to the cookie policy (section 10); in such case the consent is granted through the specific banner which can be found when you access the Website and can be revoked at any time with the modalities specified in the same cookie control panel. 

• with reference to point (i) 

Stone Island legitimate interest (section 6 (1) (f) GDPR) to verify and improve the quality of the offered services and the company processes efficiency; 

• with reference to point (j) 

Stone Island legitimate interest to protect its rights (section 6 (1) (f) GDPR). 

No new and specific data collection is required as Stone Island will pursue this additional purpose, if necessary, by processing data collected for the above mentioned purposes. 

User’s Personal Data will be processed both in paper form and using electronic means and always in compliance with the security requirements of applicable legislation, with particular but not exclusive reference to art. 32 of the GDPR. Our security measures include contractual arrangements with any entity (e.g. service providers) in order to protect the security and confidentiality of the User’s Personal Data in accordance with the provisions of this Policy. 

We will retain the User’s Personal Data until the purpose for their use is achieved according to our internal data retention policy.  

For the personal data as of Section 5 and 6 above, letter (a), (b), (c) and (d) we have a retention period of 10 years from the time of initial collection for User’s Personal Data that is processed for our invoicing and accounting purposes, save for the circumstances in which national applicable law may provide for different retention requirements. In principle, we will promptly destroy User’s Personal Data in our possession once we achieve the purpose of collection and use of the Personal Data.  

However, we will retain the following categories of Personal Data for the duration indicated below: 

• User registered data: this data will be stored for as long as the account is active and for the subsequent 10 years from the last purchase, for administrative purposes; 
• payment data: these data will be retained until such time as the payment has been confirmed and the administrative and accounting formalities relating thereto have been completed and for the subsequent 10 years from the last purchase, for administrative purposes data collected in connection with the use of Services offered on the Website (e.g. “pick-up in store”, “return in store”, “click from store”, “click and reserve”): such data is stored until the service has been fully performed and for the subsequent 10 years from the last purchase, for administrative purposes;  
• data related to User requests to our Client Service department: relevant data will be retained until the request is resolved. 

For the personal data as of Section 5 and 6 above, letter (f), (g) and (h) the Personal Data processed for marketing and/or profiling purposes will be kept a period of 7 years as per the authorisation obtained from the Italian Data Protection Authority, issued on May 25, 2018, in favour of Industries S.p.A. After this retention period, the data will be automatically deleted or permanently and irreversibly anonymised. 

For the data retention period of the cookie we make reference to what set out in deep in cookie policy.

For the personal data as of Section 5 and 6 above, letter (i) (j), the personal data processed for analysis purposes will be retained for the time set out in relation to the main purposes for which they have been collected, save for the objection right, and for the time necessary in order to protect the specific right (sub.j).  

7.1. Procedure and modalities for the storage and destruction of Personal Data 

In principle, we will promptly destroy User’s Personal Data in our possession once we achieve the purpose of collection and use of his/her Personal Data. 

8.1. Internal and external communication of Personal Data 

Personal Data is accessible to duly authorised Stone Island personnel (e.g., Digital, CRM, Retail, IT) as necessary and is disclosed to third parties in the following cases: (i) when disclosure is required by laws and regulations applicable to legitimate third party recipients, such as authorities and public bodies for their respective institutional purposes, e.g. anti-money laundering legislation, court authorities; (ii) in the event of extraordinary transactions (e.g. mergers, acquisitions, sale of business, etc.); (iii) in charge of fraud prevention services. 

Personal Data is also shared with our service providers, e.g. for services of a technical and organisational nature that are necessary for the purposes referred to in Article 4, such as independent partners, including associates, shipping companies, marketing, payment management, etc, the list of which could be communicated to the Data Subject upon request. We provide such parties only with the data necessary to perform the agreed services and they act as data processors in accordance with art. 28 GDPR, based on instructions received from Sportswear Company S.p.A. (depending on the relevant data controller). 

It is expressly stated that Sportswear Company S.p.A. does not disclose your personal data to third parties for marketing or profiling purposes. 

However, with reference to profiling, marketing and customer relationship management (to provide the User with the same level of service worldwide), other companies in the Moncler Group may access User’s Personal Data as data processors in accordance with art. 28 GDPR, based on instructions received from Sportswear Company S.p.A. 

8.2. Data transfer abroad 

For the performance of certain processing of User’s Personal Data, Stone Island may communicate such data to external parties located in countries that do not belong to the European Union (EU) or the European Economic Area (EEA) (hereinafter “Third Countries”). 

In particular, Stone Island informs the User that his/her Personal Data may be transferred to Third Countries, the list of which will be updated from time to time and available upon request by the Data Subject. The lawfulness of such transfer is in any case guaranteed through the mechanisms envisaged by art. 46 of the GDPR, since Stone Island has executed the Standard Contractual Clauses approved by the European Commission (supplemented by additional technical/organisational/legal measures) or, as applicable, due to the existence of an adequacy decision pursuant to art. 45 of the GDPR issued by the European Commission. 

These external parties will process your Personal Data as independent data controllers or as data processors, regularly appointed Sportswear Company S.p.A. in accordance with the legislation regulating data protection (depending on the role they have in relation to the processing). 

As a Data Subject, the User may at any time exercise the rights recognised by the Privacy Policy regarding the specific processing of his/her personal data. If the User is not of the legal age required by law, the legal guardians will also enjoy the rights described below. 

Below is a general description of the rights and how to exercise them: 

• right of access to own Personal Data: the User may obtain confirmation as to whether or not his/her Personal Data is being processed and, accordingly, obtain access to such Personal Data and information relating to the processing. If the User so wish, he/her will be provided with a copy of Personal Data; 
• right to rectification of the User’s Personal Data: the User may obtain the correction, amendment or updating of any inaccurate or outdated information, as well as obtain the completion of any incomplete Personal Data, possibly by providing an additional statement; 
• right to withdraw consent: the User may at any time withdraw consent to the processing of his/her Personal Data in respect of any activity for marketing purposes, including profiling. In this regard, please note that marketing activities include sending commercial and promotional communications and carrying out market research and surveys aimed at detecting the degree of satisfaction and adapting commercial offers to the User’s interests. Upon receipt of the request, the processing of the User’s Personal Data based on such consent will cease, while we will continue to carry out different processing operations or based on different grounds, in full compliance with applicable laws; 
• right to deletion of the User’s Personal Data (right to be forgotten) if the User’s Personal Data, specifically, (i) is no longer necessary for the purposes for which it was collected or processed, or (ii) has been unlawfully processed, or (iii) needs to be deleted to comply with a legal obligation, or (iv) if the User objects to its processing (see “right to object” below) and there is no overriding legitimate reason for Stone Island to process the User’s Personal Data in any way. Once the request, if legitimate, has been received and examined, the User’s Personal Data will be deleted; 
• the right to limitation of the processing of the User’s Personal Data: the User may request that the processing of his/her Personal Data be limited, i.e. that the Personal Data be stored but not used (with the exception of requests made by the User and exceptions provided for by law): 
• when the User disputes the accuracy of the Personal Data for the period necessary for Stone Island to verify its accuracy; 
• when the processing is unlawful, but the User objects to the deletion of his/her Personal Data; 
• when, although the Personal Data is no longer necessary to Sportswear Company S.p.A. for the purpose of the processing, the User needs it to ascertain, exercise or defend his/her rights in Court; 
• when the User objects to the processing, pending verification of whether Sportswear Company S.p.A. has legitimate reasons for continuing to process the Personal Data; 
• right to data portability: the User may request to receive his/her Personal Data processed pursuant to his/her consent or a contract entered into with him/her, in a structured, machine-readable format. If the User so wishes, and if the transfer is reasonable and technically possible, we may, at the User’s request, transfer his/her Personal Data directly to a third party indicated by him/her; 
• right to object: the User may object at any time to the processing of Personal Data carried out on the basis of a legitimate interest, stating the reasons supporting the request. In the absence of grounds preventing the implementation of the right in accordance with the law, we will cease the processing that is the subject of the objection. the User has the right to object at any time to the processing of his/her Personal Data for marketing and/or profiling purposes, insofar as the processing is related to such purpose, without the need to specify the reason for the objection. In this case, the processing of Personal Data will be suspended immediately; 
• the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning the User or significantly affecting him/her in a similar way. 

National laws may provide for additional data subjects rights. For additional information please contact us at the contact details indicated below. 

To exercise the rights described above: 

• for Countries/Regions where the toll-free number is available, call the Client Service (+448081640242 from Monday to Friday from 10 a.m. to 7 p.m. CEST, excluding public holidays); 
• write to Client Service by selecting the “privacy” topic in the relevant form in the “Contact us” section of the Website; 
• contact Sportswear Company S.p.A and/or the DPO directly at the addresses indicated in Section 2 above. 

If the User believes that Personal Data has not been processed correctly, he/she may lodge a complaint with the local data privacy authority. 

To obtain the list of our external data processors, of the third parties with whom Stone Island share User’s Personal Data please contact the Data Controllers through the modalities set forth above. 

The Site uses technical cookies and, subject to the consent of the Data Subject, profiling, analytics and social cookies, as well as additional functionalities such as plug-ins and/or buttons.  

For further information, Data Subjects are invited to read the Cookie Policy.