PRIVACY POLICY
Your privacy
Welcome to our website yoox.com (the Site).
Your privacy and the security of your personal data is extremely important to YOOX NET-A-PORTER GROUP S.p.A. (“YOOX”). We therefore take exceptional care when collecting and managing your personal data, adopting specific measures to ensure that it is stored securely.
Below you will find an overview of how YOOX processes your personal data in relation to your browsing activity on yoox.com and your use of the services offered. If you would like more detailed information on how YOOX processes your personal data, please read our “Privacy Policy”.
We also kindly ask you to also read our "Cookie Policy", the yoox.com "General Conditions of Use" and the "Myoox Terms and Conditions of Use", which contain detailed information on the conditions relating to our services. Some services may be subject to specific legal conditions, in which case we are responsible for providing you with the relevant information in each instance.
Who is the Data Controller?
Below you will the key information on how your personal data is processed by YOOX NET-A-PORTER GROUP S.p.A, a company fully owned by LuxExperience B.V., with registered office at via Morimondo n. 17 - 20143 Milan (Italy) and tax code and VAT n. 02050461207 (“YOOX”), in its capacity as Data Controller.
Should you require any further explanations or should you have any questions or requirements regarding your privacy and the processing of your personal data, you may contact us any time, either by logging a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu or in writing to the YOOX head office.
You may also contact our Data Protection Officer (DPO), either by way of a written letter addressed to the “Data Protection Officer” sent to the address indicated above, or via email to the DPO address.
What data do we process and why?
The personal data that YOOX processes is the data that you provide when you place an order and purchase goods, and the data that we collect whilst you browse or use the services offered on yoox.com. YOOX can therefore collect data on you, such as personal information like your name and surname, shipping address and billing address, browsing data and shopping habits.
Your data is notably processed for the following purposes:
- to conclude and perform the agreement for the purchase of goods offered on yoox.com;
- so that you can register on the Site and App in order to benefit from the services reserved for registered users;
- to manage the requests you submit to our Customer Care team.
In the cases mentioned above, processing your personal data is necessary in order to perform an agreement with you or to provide you with the specific service that you have requested from us. We also carry out statistical surveys and analyses using the data in aggregate form in order to gain an understanding of how users interact and use the Site, with a view to improving our product range and services.
We will only process your data for the following purposes with your express prior consent:
- to send you our newsletter via email (communications on news and promotions);
- to send you SMS messages about our news and promotions (SMS service);
- to send you commercial and promotional communications on our products and services and to carry out opinion polls and market research (via email, SMS, phone and post);
- to personalise the Site and our commercial communications based on your habits and interests.
Your data may also be processed to allow YOOX to carry out security checks, in order to prevent and protect your data from fraudulent activity, counterfeiting and abusive conduct (also by third parties) that constitute a violation of current legislation, contractual provisions applicable to the Site, the App and the related services, and regulations on honesty and good faith. Such processing activities shall be based on the legitimate interest of YOOX.
Who will process your data?
Your data will be processed by staff duly instructed by YOOX in its capacity as Data Controller. For organisational and operational requirements related to the provision of the services on yoox.com, your data may also be processed by our suppliers. Our suppliers are all assessed and selected by YOOX based on their proven reliability and ability. Some of these suppliers may also be based in countries that do not belong to the EU. In these cases, your personal data will be transferred to such countries in compliance with the guarantees provided for by law.
How long will your data be stored for?
We will store your data for a limited period, the length of which will depend on the purpose for which it was collected and at the end of which your personal data will be erased or irreversibly anonymised. The period for which we store your data depends on the purpose of the processing: for example, data collected whilst you shop on yoox.com is processed in order to comply with all the necessary administrative and accounting formalities, and is therefore stored in compliance with the local tax regulations (ten years), whilst data used to send you our newsletter or SMS messages is kept until you ask to no longer be sent such communications (withdrawal of consent or objection to receipt), and in any case no longer than 2 (two) years from your last interaction of any kind with us.
For more information, please see our “Privacy Policy”.
What are your rights?
At any time, depending on the specific processing activity, you may: withdraw your consent to the processing of your data; obtain information on what personal data concerning you we have in our possession, where it came from and how it is used; request for your personal data to be updated, rectified or integrated; and, in the cases provided for by current regulations, request the erasure of your personal data or the restriction of processing, or object to the processing of your data. You also have the right to receive the personal data concerning you in the possession of YOOX in a structured, commonly used and machine-readable format, and, where technically possible, we can transfer your data directly to a third party indicated by you.
If you believe that your personal data has been processed illegally, you may log a complaint with one of the supervisory authorities responsible for ensuring compliance with the data protection regulations in force. In Italy, complaints may be submitted to the Italian Data Protection Authority (http://www.garanteprivacy.it/).
The present privacy policy may be subject to modifications and integrations over time. We therefore encourage you to check its contents regularly. Where possible, we will try to inform you promptly of any modifications.
Privacy Policy
1. General information Who is the Data Controller?
YOOX NET-A-PORTER GROUP S.p.A, a company fully owned by LuxExperience B.V., with registered office at via Morimondo n. 17 - 20143 Milan (Italy) and tax code and VAT n. 02050461207 (“YOOX”) is the Data Controller, i.e. the party that decides how and why your personal data should be processed.
You may contact YOOX at any time, either by writing to the address indicated above, or by logging a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu.
Who is the Data Protection Officer?
YOOX has appointed a Data Protection Officer.
If you have any questions regarding the protection of your personal data or on exercising your rights, please contact our Data Protection Officer, either by way of a written letter addressed to the “Data Protection Officer” sent to the address indicated above, or via email to the DPO email address. 2. What personal data do we collect? The categories of personal data that YOOX collects and processes when you browse or shop on yoox.com are as follows:
a) we collect the personal data necessary to conclude or perform your purchase on yoox.com, such as your name and surname, email address, shipping address, billing address, phone number and payment details;
b) we collect your email address when you sign up to our newsletter service (communications on news and promotions);
c) we collect your telephone number when you sign up to our SMS service (communications on news and promotions);
d) we process the personal data that you provide when you contact our Customer Care team in order to provide you with the assistance required;
e) with your prior consent, we collect and use your personal data for profiled marketing purposes; through the analysis of your personal data, we may process information on your interests and preferences regarding our products and services, in order to provide you with suggestions and offers in line with your tastes.
f) in order to create your Myoox account, we collect your name and surname, your email address and your password. If you are a registered user, we collect information on your access to the reserved area on the Site. When you authenticate your Myoox account via external social media platforms, we collect the data required to register/authenticate your account via Facebook and Google from these third parties. We also collect information on you via third parties, in particular Facebook and Google. This information includes the following data categories: email address;
g) we collect information on your browsing activity on yoox.com, such as the pages that you visit and how you interact with a given page, and we save this information on our servers;
h) if you provide YOOX with personal data related to third parties, for example if you wish to purchase an item to be delivered to a friend or as a gift, YOOX shall ensure that the third party is provided with the privacy policy upon their first interaction with YOOX. Please note that the use of personal data related to third parties is subject to data protection regulations.
YOOX does not process personal data concerning minors. By accessing yoox.com and using the services offered by YOOX, you declare that you are over the age of 18. 3. How do we use the personal data that we collect? YOOX collects and processes your personal data for the following purposes:
a) to conclude and perform the agreement for the purchase of goods offered on yoox.com. In particular, this includes sending you confirmation that we have received and processed your order via email, and notifying you once your order has been shipped (you may choose to receive this information via WhatsApp in the countries where this service is available: you can always change your mind by responding to any of our WhatsApp messages with “Stop Order” and you will then continue to receive the updates via email only). We also process your personal data for the purpose of further activities involved in the performance of the agreement, such as payment, billing, shipping and possible returns.
b) so that you can register on the Site in order to benefit from the services reserved for registered users. In order to register on the Site, you must provide a number of personal details so that YOOX can identify you and perform the services offered to registered users;
c) to provide the services offered on yoox.com and on the App. For this purpose, YOOX is required to collect the personal data specifically required for the performance of each individual service requested by you;
d) to manage requests submitted to our Customer Care team, who use the personal data that you provide in order to fulfil your requests for information and assistance;
e) for recruitment. If you send us your CV to be considered for a vacancy, we will use the information contained in your CV exclusively for such purpose. Your CV will be stored for a maximum of six months, after which time it will be erased. You may send us an updated version if you so wish;
f) for analyses and statistical surveys. We use some of the information regarding your use of the Site to conduct analyses and statistical surveys in order to improve our product range and services;
g) to prevent and control fraud, counterfeiting and abusive conduct. Your data may also be processed to allow YOOX to carry out security checks and other activities with a view to preventing and protecting your data from fraudulent activity, counterfeiting and abusive conduct (also by third parties) that constitute a violation of current legislation, contractual provisions applicable to the Site, the App and the related services, and regulations on honesty and good faith.
h) to send you commercial and promotional communications after you have purchased one of our items, known as “soft spam”. After you have purchased an item on the Site, we may send an email to the email address provided to us by you with offers on our products and related services;
i) with your prior consent, to send you our newsletter via email (communications on news and promotions);
j) with your prior consent, to send you SMS messages about our news and promotions (SMS service);
k) with your prior consent, we may also use your contact details in order to carry out market research and satisfaction surveys with a view to improving our services and our relationship with our users. We may contact you for this purpose via email, SMS, phone or post;
l) again with your prior consent, to personalise your experience as a registered user on yoox.com by sending you previews and offers in line with your tastes, in addition to personalised commercial communications in line with your attributes and interests (via email, SMS, phone and post). To do this, we analyse your previous purchases and the information included in the previous paragraph “What personal data do we collect?”. More information on this data and how we process it can be found in the paragraph entitled “Your Myoox profile”.
In the event that you decide to authorise the activities referred to in points h), i), j), k) and l) and subsequently decide that you do not want to receive any more communications from YOOX or that you want to limit the ways in which you are contacted, you can disable them at any time by simply following the instructions present at the bottom of any of our messages (for example, by clicking on the dedicated link at the bottom of the newsletter or SMS message, or by replying “STOP” to the number specified in the SMS); by logging into your Myoox account; by contacting YOOX on 800 78024; by logging a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu or by writing to the above-mentioned address.
Please note that you may receive further communications from us even after you have sent us your request to unsubscribe/withdraw your consent, as some messages may have already been scheduled and it therefore may take some time for our systems to perform your request.
In relation to all the activities indicated above, we will predominantly process your personal data using IT and electronic tools, all of which guarantee high security standards in full compliance with current applicable legislation. 4. Your Myoox profile By registering on the Site, you can create a Myoox profile, through which you may benefit from the following services:
• My Orders: track your orders, exchange and return items that weren't right for you and view your order history.
• Dream Box: save your favourite items and receive updates via email when they become available or if they drop in price. You can disable Dream Box notifications at any time from your Myoox account. You may choose to receive Dream Box notifications via Whatsapp in the countries in which this service is available (you can always change your mind by responding to any of our Whatsapp messages with “Stop Dream Box”, and you will then continue to receive Dream Box notifications via email only).
• Moneyoox: choose the easiest and fastest refund method for any items you want to return. Use your virtual credit for future orders.
• Première: save your searches while you shop and receive email updates when items you show interest in become available You can disable Première notifications at any time from your Myoox account.
• My details: manage your log-in details and your consent regarding communications (personalised or standard) on our news and promotions.
• My addresses: save or modify your addresses to make placing your next order easier and faster.
• My cards: save or modify your card details to make placing your next order faster and just as secure.
• My Sizes: create your profile and only browse the items in your size.
• YOOXMIRROR, only available on the App: create your own personalised avatar.
With your express prior consent, YOOX may personalise your experience and the content you see when you browse on yoox.com as a registered user based on your interests. This activity allows us to help you search for products and services that are of greater interest to you and to improve the range of products we can offer you. With your express prior consent, YOOX may also personalise the commercial communications it sends you, based on your attributes and interests (via email, SMS, phone and post). To do this, we analyse the personal data concerning you in our possession, outlined in the paragraph entitled “What personal data do we collect?”. In particular, information on your previous purchases and the areas of the Site that you visit the most often or the services that you use most frequently help us to understand what products and services you are most interested in.
In order to ensure that the information in our possession is correct and allows us to adequately carry out the activities described above, please go to the “my profile” section of your Myoox account and, if necessary, update it. 5. Lawful basis for processing We shall only process your personal data under the conditions provided for by the regulations in force, and specifically:
a) to conclude and perform an agreement to which you are a party or to execute any pre-contractual measures adopted upon your request.
When we process your data for the purpose of concluding and performing an agreement to which you are a party, we take care to ensure that only the minimum information necessary is used. This provides a legitimate basis for the processing of personal data for the purpose of the following activities:
- the conclusion and performance of an agreement for the purchase of products offered on yoox.com;
- registration on the Site and use of the services reserved for registered users;
- provision of the services offered on yoox.com and on the App;
- the processing of your requests by our Customer Care team.
We are contractually obliged to collect your personal data for such activities. You are free to decide whether to provide us with your data or not, however if we do not have the data requested, we will not be able to conclude or perform the agreement or fulfil your requests. This means that you will not be able to purchase any products or benefit from any YOOX services and that YOOX will not be able to process your requests;
b) to fulfil a legal obligation.
In the event that an agreement for the purchase of goods on yoox.com is concluded, we must process your data to fulfil any legal obligations to which YOOX is bound, in compliance with the tax obligations and other regulations to which YOOX is subject. You are free to decide whether to conclude an agreement and provide us with your data or not, however if you do enter into an agreement, your data will be required and will be processed in order to fulfil the above-mentioned legal obligations to which YOOX is bound.
The processing of CVs spontaneously sent to us in order to assess applicants for possible positions at YOOX is legitimate when expressly authorised by law, which shall specify that in such case the data subject’s consent is not required. You are free to decide whether to provide us with your CV or not, however without your CV, we will not be able to assess your application for a position at YOOX.
c) to fulfil a legitimate interest of ours.
Your personal data may also be processed to prevent and prosecute fraudulent activity, counterfeiting and abusive conduct (also by third parties) that constitute a violation of current legislation, contractual provisions applicable to the Site, the App and the related services, and regulations on honesty and good faith.
In such case, the processing of your data is not performed under any legal or contractual obligations, but to respond to a legitimate interest of ours. Upon your request, YOOX may provide you with detailed information on said legitimate interest forming the basis of the processing and on the related so-called balance test;
d) on the basis of your consent.
We shall only carry out the following processing activities if you have provided us with your express consent:
• the sending of our newsletter via email (communications on news and promotions);
• the sending of SMS messages about our news and promotions (SMS service);
• the performance of opinion polls and market research;
• the analysis of your browsing habits and use of your Myoox profile, in order to personalise your experience on our Site and the commercial communications we send you.
Providing us with your personal data for such activities is entirely optional. You are free to decide whether you provide us with your data for such purposes or not, however without it, YOOX will not be able to perform any marketing activities, opinion polls, market research or analyses of your habits. 6. Who will process your data? Your data will be processed by YOOX and by YOOX staff specifically instructed and authorised to carry out such processing activities.
YOOX shall also rely on third parties (suppliers or business partners) to carry out some of its services and the related activities, to whom it shall transmit the necessary personal data. Such subjects shall be appropriately selected and shall offer a suitable guarantee of compliance with the regulations on personal data processing. If appointed as such by YOOX, these suppliers may carry out their activities as “data processors” (i.e. under the direct responsibility of YOOX: for example, internet providers, specialist IT and telematics companies, customer service companies, marketing companies, specialist market research and data processing companies) or as “independent data controllers” (for example, couriers and carriers, bank operators, etc.).
Your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow YOOX to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
In carrying out the data processing for pre-contractual performance and fulfilment as well as for marketing measures, YOOX, as a part of LuxExperience Group, will share your personal data with other affiliated entities of our parent company LuxExperience B.V. based on Art. 6 (1)(a) or (f) of the General Data Protection Regulation (Regulation (EU) 2016/679). 7. APP Version of the Site As well as the data referred to in the paragraph entitled “What personal data do we collect?”, when you use the App version of our Site, YOOX may:
a) with your prior express consent, collect personal data for profiled marketing purposes in order to send push notifications to your device. You may disable push notifications at any time by modifying your preferences in the settings on your mobile device;
b) with your prior express consent, collect information automatically, such as site traffic data, data on how long you spend on the App, or your IP address, in order to improve our range of products and services;
c) in order to facilitate your use of the YOOXMIRROR service, collect the information that you provide us with, such as your photo and your clothing and accessory sizes. We shall store such data until you decide to delete your profile, created by you, or until you request that we delete your Myoox account. 8. Web push notification With your express consent, we will use some of your personal data in order to send personalised notifications to your device about YOOX products and news ("web push notifications").
In order to send you such notifications, we use technologies similar to cookies (in particular, "HTML5 Local Storage") which store information on the Local Storage of your device. Some of your personal data is also stored on our servers (which are located in the European Union) in order to manage "web push notifications".
Communications are personalised according to: the way you navigate and use the Site, the products you view, purchase or place in your shopping cart, the data you enter in the registration form when purchasing products on the Site (in particular, the name used to personalise communications sent to you and your date of birth so that we can send you promotions and discounts on your birthday).
The categories of personal data used for this purpose are:
- products purchased, viewed or added to your shopping cart;
- name;
- date of birth;
- gender (male or female);
- language used to browse the site or version of site used (country);
- information on your device and browser;
- the date and time at which you provide your consent to receive web push notifications;
- the date on which you create your Myoox account;
- the date of your last visit to our Site.
You may revoke your consent to receive such personalised commercial communications at any time by following the instructions below.
Most popular browsers:
- Chrome: Settings > Show Advanced Settings > Privacy – Content Settings > Notifications - Manage exceptions> Enter www.yoox.com and select “Block”
- Firefox: Options > Content > Notifications – Select > www.yoox.com – “Block”
- Safari: Preferences > Notifications > From here select "Deny"
You may also revoke your consent to receive notifications directly from the messages you receive by following the instructions below.
- Desktop: Right-click on notification > disable notifications from www.yoox.com
- Mobile: Access the notification centre > Site parameters > Notifications > Block notifications from www.yoox.com
In all cases, the service shall be terminated and the related personal data in our possession erased after 365 (three hundred and sixty-five) days from the date of your last visit to our Site. 9. Transfer of data to countries outside of the EU/EEA Some of the third parties listed in the paragraph entitled “Who will process your data?” may be based in countries that do not belong to the European Union or the European Economic Area (EEA), but that nevertheless offer a suitable level of data protection, as established in the relevant European Union decision (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).
Your personal data shall only be transferred to countries that do not belong to the EU/EEA and that do not provide a suitable level of protection following the conclusion of a specific agreement between YOOX and said third parties that contains clauses on suitable safeguarding and guarantees for the protection of your personal data, known as “standard contractual clauses”, which must be approved by the European Commission, whenever such transfer is necessary for the conclusion and performance of an agreement between you and YOOX (for the purchase of goods offered on our Site, registration on the site, or the use of services on the Site) or for the processing of your requests. 10. How long will your data be stored for? We will store your data for a limited period, the duration of which will depend on the type of activity for which your personal data is being processed.
At the end of this period, your data will be permanently erased or irreversibly anonymised, except in cases where the data must be retained for a longer period due to disputes, requests from the competent authorities, or pursuant to applicable legislation.
Your data will be stored by us in line with the following conditions and criteria:
a) data collected to conclude and perform agreements for the purchase of goods on yoox.com: until the relevant administrative and accounting formalities have been fulfilled. Data related to billing shall be stored for ten years from the billing date;
b) data concerning the registered user: until you request that your Myoox profile is erased;
c) data related to payments: until the payment has been certified and the relative administrative and accounting formalities have been fulfilled, following the expiry of the right of withdrawal and the deadlined applied for payment disputes;
d) data collected within the context of the performance of the services offered on yoox.com: until the termination of the service or until registration to the service is cancelled;
e) data related to requests submitted by the user to our Customer Care department: any data that can be used to assist you shall be stored until your request has been satisfied;
f) CVs: for 6 (six) months from receipt;
g) data used for the purpose of sending commercial communications to users who purchase products on yoox.com (soft spam): until the termination of the activity or until you request that the activity is terminated (objection to receipt), and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX. You may independently block these communications at any time by simply clicking on the link at the bottom of any of our emails;
h) email address provided for the purpose of receiving our newsletter (communications on news and promotions): until you request for such activity to be terminated (withdrawal of your consent and objection to receipt) and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX. You may independently block these communications at any time by simply clicking on the link at the bottom of any of our newsletters or by logging into your Myoox account (if you are a registered user);
i) the telephone number provided for the purpose of receiving our SMS messages (communications on news and promotions): until you request for such activity to be terminated (withdrawal of your consent or objection to receipt), and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX. You may independently block these communications at any time by simply clicking on the link at the bottom of any of our messages, by texting “STOP” to the number at the bottom of any our messages or by logging into your Myoox account (if you are a registered user);
j) data used for commercial communications, opinion polls, market research and satisfaction surveys, as well as for the personalisation of such commercial communications: until you request that such activity is terminated and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX.
k) data used to personalise the Site and present personalised offers: until you request that such activity is terminated and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX.
l) data in our possession for the purpose of managing push notifications: until you withdraw your consent and in any case for a maximum of 365 (three hundred and sixty-five) days from the date that you last visited our Site.
In any case, for technical reasons, processing shall be definitively terminated, and the related personal data definitively erased or irreversibly anonymised within 30 (thirty) days from the dates specified above. 11. Your rights You may exercise your rights related to the specific processing of your personal data by YOOX at any time. Below you will find a general description of these rights and information on how to exercise them.
a) accessing your data and modifying it: you have the right to access your personal data and to request that it be rectified, modified or integrated with other information. We can also provide you with a copy of your data that we have in our possession if you so wish;
b) withdrawing your consent: you may withdraw any consent that you have previously given for the processing of your personal data in relation to any profiled marketing purposes at any time. Please note that the following are considered profiled marketing activities: the sending of commercial and promotional communications (including newsletters and SMS messages) and the performance of market research and satisfaction surveys in order to customise the Site and offers based on your interests. Once we have received your request, we shall terminate the processing of your personal data covered by such consent as soon as possible. Other processing activities or processing activities based on other premises shall continue to be carried out in full compliance with the regulations in force;
c) objecting to the processing of your data: you have the right to object to the processing of your personal data carried out on the basis of one of our legitimate interests at any time, explaining the reasons on which your request is founded. Unless there are any reasons for rejecting your request as provided for by law, we shall then proceed to terminate the processing to which you object. You have the right to object to the processing of your data for marketing purposes at any time, including profiling if related to such purpose, without having to indicate the reason behind your objection. In this case, we shall promptly terminate the processing of your data for profiled marketing purposes;
d) erasure of your data: in the cases provided for by current legislation, you may request that your personal data is erased. Once we have received and assessed your request, if it is legitimate, we shall promptly cease the processing and erase your personal data;
e) temporary restriction of processing: in this case, YOOX shall continue to keep your personal data but will not process it, unless requested otherwise by you or provided for by any legal exceptions. You may obtain the restriction of processing if you contest the accuracy of your personal data, if the processing is unlawful but you oppose the erasure of your personal data, if we no longer need your personal data but you need it for the exercise or a right in court, or if you object to the processing of your data during the period in which we are assessing the grounds of your request;
f) receiving your data or transmitting it to a subject other than YOOX (“right to data portability”). You may request to receive the personal data concerning you that we are processing based on your consent or based on an agreement we have with you in a standard format. Where technically possible, we may, upon your request, transfer your data directly to a third party indicated to us by you.
If you wish to exercise any of your rights described above, you can either log into your Myoox account; log a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu or write to the Data Controller’s address as indicated above.
In order to guarantee that our users’ data is not violated or used illegally by any third parties, before granting your request to exercise one of your rights indicated above, we will ask you for some information in order to confirm your identity. 12. Security measures We protect your personal data with specific technical and organisational security measures to prevent it from being used in an illegal or fraudulent manner. In particular, we use security measures that guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity and availability of your data, as well as the resilience of the systems and services that process it; and the ability to recover the data in the event of a data breach. YOOX shall also undertake to regularly test, verify and measure the effectiveness of such technical and organisational measures with a view to ensuring the continuous improvement of data processing security levels. 13. Complaints If you believe that your personal data has been processed illegally, you may log a complaint with one of the supervisory authorities responsible for ensuring compliance with the data protection regulations in force.
In Italy, complaints may be submitted to the Italian Data Protection Authority - the “Garante per la Protezione dei Dati Personali” (http://www.garanteprivacy.it).
More information on how to submit a complaint can be found on the Italian Data Protection Authority’s website at http://www.garanteprivacy.it. 14. Modifications to the present policy We are continuously developing our services, which may lead to changes in the way in which we process your personal data, as outlined above. Consequently, this privacy policy may be subject to modifications and integrations over time, which may also be necessary in relation to new regulations on data protection.
We therefore encourage you to check the contents of this privacy policy regularly: where possible, we will try to inform you promptly of any modifications and their consequences.
In any case, the updated version of the privacy policy will always be published on this page, with an indication of the date on which it was last updated. 15. Legislative references and useful links YOOX shall process your personal data in full compliance with the guidelines provided for by the General Data Protection Regulation (EU) 2016/679, the Italian regulations on the processing of personal data and the provisions stipulated by the Italian supervisory authority (http://www.garanteprivacy.it).
YOOX NET-A-PORTER GROUP S.p.A, a company fully owned by LuxExperience B.V., with registered office at via Morimondo n. 17 - 20143 Milan (Italy) and tax code and VAT n. 02050461207 (“YOOX”) is the Data Controller, i.e. the party that decides how and why your personal data should be processed.
You may contact YOOX at any time, either by writing to the address indicated above, or by logging a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu.
Who is the Data Protection Officer?
YOOX has appointed a Data Protection Officer.
If you have any questions regarding the protection of your personal data or on exercising your rights, please contact our Data Protection Officer, either by way of a written letter addressed to the “Data Protection Officer” sent to the address indicated above, or via email to the DPO email address. 2. What personal data do we collect? The categories of personal data that YOOX collects and processes when you browse or shop on yoox.com are as follows:
a) we collect the personal data necessary to conclude or perform your purchase on yoox.com, such as your name and surname, email address, shipping address, billing address, phone number and payment details;
b) we collect your email address when you sign up to our newsletter service (communications on news and promotions);
c) we collect your telephone number when you sign up to our SMS service (communications on news and promotions);
d) we process the personal data that you provide when you contact our Customer Care team in order to provide you with the assistance required;
e) with your prior consent, we collect and use your personal data for profiled marketing purposes; through the analysis of your personal data, we may process information on your interests and preferences regarding our products and services, in order to provide you with suggestions and offers in line with your tastes.
f) in order to create your Myoox account, we collect your name and surname, your email address and your password. If you are a registered user, we collect information on your access to the reserved area on the Site. When you authenticate your Myoox account via external social media platforms, we collect the data required to register/authenticate your account via Facebook and Google from these third parties. We also collect information on you via third parties, in particular Facebook and Google. This information includes the following data categories: email address;
g) we collect information on your browsing activity on yoox.com, such as the pages that you visit and how you interact with a given page, and we save this information on our servers;
h) if you provide YOOX with personal data related to third parties, for example if you wish to purchase an item to be delivered to a friend or as a gift, YOOX shall ensure that the third party is provided with the privacy policy upon their first interaction with YOOX. Please note that the use of personal data related to third parties is subject to data protection regulations.
YOOX does not process personal data concerning minors. By accessing yoox.com and using the services offered by YOOX, you declare that you are over the age of 18. 3. How do we use the personal data that we collect? YOOX collects and processes your personal data for the following purposes:
a) to conclude and perform the agreement for the purchase of goods offered on yoox.com. In particular, this includes sending you confirmation that we have received and processed your order via email, and notifying you once your order has been shipped (you may choose to receive this information via WhatsApp in the countries where this service is available: you can always change your mind by responding to any of our WhatsApp messages with “Stop Order” and you will then continue to receive the updates via email only). We also process your personal data for the purpose of further activities involved in the performance of the agreement, such as payment, billing, shipping and possible returns.
b) so that you can register on the Site in order to benefit from the services reserved for registered users. In order to register on the Site, you must provide a number of personal details so that YOOX can identify you and perform the services offered to registered users;
c) to provide the services offered on yoox.com and on the App. For this purpose, YOOX is required to collect the personal data specifically required for the performance of each individual service requested by you;
d) to manage requests submitted to our Customer Care team, who use the personal data that you provide in order to fulfil your requests for information and assistance;
e) for recruitment. If you send us your CV to be considered for a vacancy, we will use the information contained in your CV exclusively for such purpose. Your CV will be stored for a maximum of six months, after which time it will be erased. You may send us an updated version if you so wish;
f) for analyses and statistical surveys. We use some of the information regarding your use of the Site to conduct analyses and statistical surveys in order to improve our product range and services;
g) to prevent and control fraud, counterfeiting and abusive conduct. Your data may also be processed to allow YOOX to carry out security checks and other activities with a view to preventing and protecting your data from fraudulent activity, counterfeiting and abusive conduct (also by third parties) that constitute a violation of current legislation, contractual provisions applicable to the Site, the App and the related services, and regulations on honesty and good faith.
h) to send you commercial and promotional communications after you have purchased one of our items, known as “soft spam”. After you have purchased an item on the Site, we may send an email to the email address provided to us by you with offers on our products and related services;
i) with your prior consent, to send you our newsletter via email (communications on news and promotions);
j) with your prior consent, to send you SMS messages about our news and promotions (SMS service);
k) with your prior consent, we may also use your contact details in order to carry out market research and satisfaction surveys with a view to improving our services and our relationship with our users. We may contact you for this purpose via email, SMS, phone or post;
l) again with your prior consent, to personalise your experience as a registered user on yoox.com by sending you previews and offers in line with your tastes, in addition to personalised commercial communications in line with your attributes and interests (via email, SMS, phone and post). To do this, we analyse your previous purchases and the information included in the previous paragraph “What personal data do we collect?”. More information on this data and how we process it can be found in the paragraph entitled “Your Myoox profile”.
In the event that you decide to authorise the activities referred to in points h), i), j), k) and l) and subsequently decide that you do not want to receive any more communications from YOOX or that you want to limit the ways in which you are contacted, you can disable them at any time by simply following the instructions present at the bottom of any of our messages (for example, by clicking on the dedicated link at the bottom of the newsletter or SMS message, or by replying “STOP” to the number specified in the SMS); by logging into your Myoox account; by contacting YOOX on 800 78024; by logging a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu or by writing to the above-mentioned address.
Please note that you may receive further communications from us even after you have sent us your request to unsubscribe/withdraw your consent, as some messages may have already been scheduled and it therefore may take some time for our systems to perform your request.
In relation to all the activities indicated above, we will predominantly process your personal data using IT and electronic tools, all of which guarantee high security standards in full compliance with current applicable legislation. 4. Your Myoox profile By registering on the Site, you can create a Myoox profile, through which you may benefit from the following services:
• My Orders: track your orders, exchange and return items that weren't right for you and view your order history.
• Dream Box: save your favourite items and receive updates via email when they become available or if they drop in price. You can disable Dream Box notifications at any time from your Myoox account. You may choose to receive Dream Box notifications via Whatsapp in the countries in which this service is available (you can always change your mind by responding to any of our Whatsapp messages with “Stop Dream Box”, and you will then continue to receive Dream Box notifications via email only).
• Moneyoox: choose the easiest and fastest refund method for any items you want to return. Use your virtual credit for future orders.
• Première: save your searches while you shop and receive email updates when items you show interest in become available You can disable Première notifications at any time from your Myoox account.
• My details: manage your log-in details and your consent regarding communications (personalised or standard) on our news and promotions.
• My addresses: save or modify your addresses to make placing your next order easier and faster.
• My cards: save or modify your card details to make placing your next order faster and just as secure.
• My Sizes: create your profile and only browse the items in your size.
• YOOXMIRROR, only available on the App: create your own personalised avatar.
With your express prior consent, YOOX may personalise your experience and the content you see when you browse on yoox.com as a registered user based on your interests. This activity allows us to help you search for products and services that are of greater interest to you and to improve the range of products we can offer you. With your express prior consent, YOOX may also personalise the commercial communications it sends you, based on your attributes and interests (via email, SMS, phone and post). To do this, we analyse the personal data concerning you in our possession, outlined in the paragraph entitled “What personal data do we collect?”. In particular, information on your previous purchases and the areas of the Site that you visit the most often or the services that you use most frequently help us to understand what products and services you are most interested in.
In order to ensure that the information in our possession is correct and allows us to adequately carry out the activities described above, please go to the “my profile” section of your Myoox account and, if necessary, update it. 5. Lawful basis for processing We shall only process your personal data under the conditions provided for by the regulations in force, and specifically:
a) to conclude and perform an agreement to which you are a party or to execute any pre-contractual measures adopted upon your request.
When we process your data for the purpose of concluding and performing an agreement to which you are a party, we take care to ensure that only the minimum information necessary is used. This provides a legitimate basis for the processing of personal data for the purpose of the following activities:
- the conclusion and performance of an agreement for the purchase of products offered on yoox.com;
- registration on the Site and use of the services reserved for registered users;
- provision of the services offered on yoox.com and on the App;
- the processing of your requests by our Customer Care team.
We are contractually obliged to collect your personal data for such activities. You are free to decide whether to provide us with your data or not, however if we do not have the data requested, we will not be able to conclude or perform the agreement or fulfil your requests. This means that you will not be able to purchase any products or benefit from any YOOX services and that YOOX will not be able to process your requests;
b) to fulfil a legal obligation.
In the event that an agreement for the purchase of goods on yoox.com is concluded, we must process your data to fulfil any legal obligations to which YOOX is bound, in compliance with the tax obligations and other regulations to which YOOX is subject. You are free to decide whether to conclude an agreement and provide us with your data or not, however if you do enter into an agreement, your data will be required and will be processed in order to fulfil the above-mentioned legal obligations to which YOOX is bound.
The processing of CVs spontaneously sent to us in order to assess applicants for possible positions at YOOX is legitimate when expressly authorised by law, which shall specify that in such case the data subject’s consent is not required. You are free to decide whether to provide us with your CV or not, however without your CV, we will not be able to assess your application for a position at YOOX.
c) to fulfil a legitimate interest of ours.
Your personal data may also be processed to prevent and prosecute fraudulent activity, counterfeiting and abusive conduct (also by third parties) that constitute a violation of current legislation, contractual provisions applicable to the Site, the App and the related services, and regulations on honesty and good faith.
In such case, the processing of your data is not performed under any legal or contractual obligations, but to respond to a legitimate interest of ours. Upon your request, YOOX may provide you with detailed information on said legitimate interest forming the basis of the processing and on the related so-called balance test;
d) on the basis of your consent.
We shall only carry out the following processing activities if you have provided us with your express consent:
• the sending of our newsletter via email (communications on news and promotions);
• the sending of SMS messages about our news and promotions (SMS service);
• the performance of opinion polls and market research;
• the analysis of your browsing habits and use of your Myoox profile, in order to personalise your experience on our Site and the commercial communications we send you.
Providing us with your personal data for such activities is entirely optional. You are free to decide whether you provide us with your data for such purposes or not, however without it, YOOX will not be able to perform any marketing activities, opinion polls, market research or analyses of your habits. 6. Who will process your data? Your data will be processed by YOOX and by YOOX staff specifically instructed and authorised to carry out such processing activities.
YOOX shall also rely on third parties (suppliers or business partners) to carry out some of its services and the related activities, to whom it shall transmit the necessary personal data. Such subjects shall be appropriately selected and shall offer a suitable guarantee of compliance with the regulations on personal data processing. If appointed as such by YOOX, these suppliers may carry out their activities as “data processors” (i.e. under the direct responsibility of YOOX: for example, internet providers, specialist IT and telematics companies, customer service companies, marketing companies, specialist market research and data processing companies) or as “independent data controllers” (for example, couriers and carriers, bank operators, etc.).
Your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow YOOX to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
In carrying out the data processing for pre-contractual performance and fulfilment as well as for marketing measures, YOOX, as a part of LuxExperience Group, will share your personal data with other affiliated entities of our parent company LuxExperience B.V. based on Art. 6 (1)(a) or (f) of the General Data Protection Regulation (Regulation (EU) 2016/679). 7. APP Version of the Site As well as the data referred to in the paragraph entitled “What personal data do we collect?”, when you use the App version of our Site, YOOX may:
a) with your prior express consent, collect personal data for profiled marketing purposes in order to send push notifications to your device. You may disable push notifications at any time by modifying your preferences in the settings on your mobile device;
b) with your prior express consent, collect information automatically, such as site traffic data, data on how long you spend on the App, or your IP address, in order to improve our range of products and services;
c) in order to facilitate your use of the YOOXMIRROR service, collect the information that you provide us with, such as your photo and your clothing and accessory sizes. We shall store such data until you decide to delete your profile, created by you, or until you request that we delete your Myoox account. 8. Web push notification With your express consent, we will use some of your personal data in order to send personalised notifications to your device about YOOX products and news ("web push notifications").
In order to send you such notifications, we use technologies similar to cookies (in particular, "HTML5 Local Storage") which store information on the Local Storage of your device. Some of your personal data is also stored on our servers (which are located in the European Union) in order to manage "web push notifications".
Communications are personalised according to: the way you navigate and use the Site, the products you view, purchase or place in your shopping cart, the data you enter in the registration form when purchasing products on the Site (in particular, the name used to personalise communications sent to you and your date of birth so that we can send you promotions and discounts on your birthday).
The categories of personal data used for this purpose are:
- products purchased, viewed or added to your shopping cart;
- name;
- date of birth;
- gender (male or female);
- language used to browse the site or version of site used (country);
- information on your device and browser;
- the date and time at which you provide your consent to receive web push notifications;
- the date on which you create your Myoox account;
- the date of your last visit to our Site.
You may revoke your consent to receive such personalised commercial communications at any time by following the instructions below.
Most popular browsers:
- Chrome: Settings > Show Advanced Settings > Privacy – Content Settings > Notifications - Manage exceptions> Enter www.yoox.com and select “Block”
- Firefox: Options > Content > Notifications – Select > www.yoox.com – “Block”
- Safari: Preferences > Notifications > From here select "Deny"
You may also revoke your consent to receive notifications directly from the messages you receive by following the instructions below.
- Desktop: Right-click on notification > disable notifications from www.yoox.com
- Mobile: Access the notification centre > Site parameters > Notifications > Block notifications from www.yoox.com
In all cases, the service shall be terminated and the related personal data in our possession erased after 365 (three hundred and sixty-five) days from the date of your last visit to our Site. 9. Transfer of data to countries outside of the EU/EEA Some of the third parties listed in the paragraph entitled “Who will process your data?” may be based in countries that do not belong to the European Union or the European Economic Area (EEA), but that nevertheless offer a suitable level of data protection, as established in the relevant European Union decision (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).
Your personal data shall only be transferred to countries that do not belong to the EU/EEA and that do not provide a suitable level of protection following the conclusion of a specific agreement between YOOX and said third parties that contains clauses on suitable safeguarding and guarantees for the protection of your personal data, known as “standard contractual clauses”, which must be approved by the European Commission, whenever such transfer is necessary for the conclusion and performance of an agreement between you and YOOX (for the purchase of goods offered on our Site, registration on the site, or the use of services on the Site) or for the processing of your requests. 10. How long will your data be stored for? We will store your data for a limited period, the duration of which will depend on the type of activity for which your personal data is being processed.
At the end of this period, your data will be permanently erased or irreversibly anonymised, except in cases where the data must be retained for a longer period due to disputes, requests from the competent authorities, or pursuant to applicable legislation.
Your data will be stored by us in line with the following conditions and criteria:
a) data collected to conclude and perform agreements for the purchase of goods on yoox.com: until the relevant administrative and accounting formalities have been fulfilled. Data related to billing shall be stored for ten years from the billing date;
b) data concerning the registered user: until you request that your Myoox profile is erased;
c) data related to payments: until the payment has been certified and the relative administrative and accounting formalities have been fulfilled, following the expiry of the right of withdrawal and the deadlined applied for payment disputes;
d) data collected within the context of the performance of the services offered on yoox.com: until the termination of the service or until registration to the service is cancelled;
e) data related to requests submitted by the user to our Customer Care department: any data that can be used to assist you shall be stored until your request has been satisfied;
f) CVs: for 6 (six) months from receipt;
g) data used for the purpose of sending commercial communications to users who purchase products on yoox.com (soft spam): until the termination of the activity or until you request that the activity is terminated (objection to receipt), and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX. You may independently block these communications at any time by simply clicking on the link at the bottom of any of our emails;
h) email address provided for the purpose of receiving our newsletter (communications on news and promotions): until you request for such activity to be terminated (withdrawal of your consent and objection to receipt) and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX. You may independently block these communications at any time by simply clicking on the link at the bottom of any of our newsletters or by logging into your Myoox account (if you are a registered user);
i) the telephone number provided for the purpose of receiving our SMS messages (communications on news and promotions): until you request for such activity to be terminated (withdrawal of your consent or objection to receipt), and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX. You may independently block these communications at any time by simply clicking on the link at the bottom of any of our messages, by texting “STOP” to the number at the bottom of any our messages or by logging into your Myoox account (if you are a registered user);
j) data used for commercial communications, opinion polls, market research and satisfaction surveys, as well as for the personalisation of such commercial communications: until you request that such activity is terminated and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX.
k) data used to personalise the Site and present personalised offers: until you request that such activity is terminated and in any case for no longer than 2 (two) years from your last interaction of any kind with YOOX.
l) data in our possession for the purpose of managing push notifications: until you withdraw your consent and in any case for a maximum of 365 (three hundred and sixty-five) days from the date that you last visited our Site.
In any case, for technical reasons, processing shall be definitively terminated, and the related personal data definitively erased or irreversibly anonymised within 30 (thirty) days from the dates specified above. 11. Your rights You may exercise your rights related to the specific processing of your personal data by YOOX at any time. Below you will find a general description of these rights and information on how to exercise them.
a) accessing your data and modifying it: you have the right to access your personal data and to request that it be rectified, modified or integrated with other information. We can also provide you with a copy of your data that we have in our possession if you so wish;
b) withdrawing your consent: you may withdraw any consent that you have previously given for the processing of your personal data in relation to any profiled marketing purposes at any time. Please note that the following are considered profiled marketing activities: the sending of commercial and promotional communications (including newsletters and SMS messages) and the performance of market research and satisfaction surveys in order to customise the Site and offers based on your interests. Once we have received your request, we shall terminate the processing of your personal data covered by such consent as soon as possible. Other processing activities or processing activities based on other premises shall continue to be carried out in full compliance with the regulations in force;
c) objecting to the processing of your data: you have the right to object to the processing of your personal data carried out on the basis of one of our legitimate interests at any time, explaining the reasons on which your request is founded. Unless there are any reasons for rejecting your request as provided for by law, we shall then proceed to terminate the processing to which you object. You have the right to object to the processing of your data for marketing purposes at any time, including profiling if related to such purpose, without having to indicate the reason behind your objection. In this case, we shall promptly terminate the processing of your data for profiled marketing purposes;
d) erasure of your data: in the cases provided for by current legislation, you may request that your personal data is erased. Once we have received and assessed your request, if it is legitimate, we shall promptly cease the processing and erase your personal data;
e) temporary restriction of processing: in this case, YOOX shall continue to keep your personal data but will not process it, unless requested otherwise by you or provided for by any legal exceptions. You may obtain the restriction of processing if you contest the accuracy of your personal data, if the processing is unlawful but you oppose the erasure of your personal data, if we no longer need your personal data but you need it for the exercise or a right in court, or if you object to the processing of your data during the period in which we are assessing the grounds of your request;
f) receiving your data or transmitting it to a subject other than YOOX (“right to data portability”). You may request to receive the personal data concerning you that we are processing based on your consent or based on an agreement we have with you in a standard format. Where technically possible, we may, upon your request, transfer your data directly to a third party indicated to us by you.
If you wish to exercise any of your rights described above, you can either log into your Myoox account; log a request with our Customer Care team via the online form, selecting “privacy” from the dropdown menu or write to the Data Controller’s address as indicated above.
In order to guarantee that our users’ data is not violated or used illegally by any third parties, before granting your request to exercise one of your rights indicated above, we will ask you for some information in order to confirm your identity. 12. Security measures We protect your personal data with specific technical and organisational security measures to prevent it from being used in an illegal or fraudulent manner. In particular, we use security measures that guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity and availability of your data, as well as the resilience of the systems and services that process it; and the ability to recover the data in the event of a data breach. YOOX shall also undertake to regularly test, verify and measure the effectiveness of such technical and organisational measures with a view to ensuring the continuous improvement of data processing security levels. 13. Complaints If you believe that your personal data has been processed illegally, you may log a complaint with one of the supervisory authorities responsible for ensuring compliance with the data protection regulations in force.
In Italy, complaints may be submitted to the Italian Data Protection Authority - the “Garante per la Protezione dei Dati Personali” (http://www.garanteprivacy.it).
More information on how to submit a complaint can be found on the Italian Data Protection Authority’s website at http://www.garanteprivacy.it. 14. Modifications to the present policy We are continuously developing our services, which may lead to changes in the way in which we process your personal data, as outlined above. Consequently, this privacy policy may be subject to modifications and integrations over time, which may also be necessary in relation to new regulations on data protection.
We therefore encourage you to check the contents of this privacy policy regularly: where possible, we will try to inform you promptly of any modifications and their consequences.
In any case, the updated version of the privacy policy will always be published on this page, with an indication of the date on which it was last updated. 15. Legislative references and useful links YOOX shall process your personal data in full compliance with the guidelines provided for by the General Data Protection Regulation (EU) 2016/679, the Italian regulations on the processing of personal data and the provisions stipulated by the Italian supervisory authority (http://www.garanteprivacy.it).
Last updated on 23/04/2025