Privacy Policy

Welcome to the website https://dolcegabbanaprivatesales.com (“Website”).
On this page, we provide you with the information required under Article 13 of Regulation (EU) 2016/679 ("GDPR") regarding the processing of your personal data collected when you browse the Website and interact with its services.
This policy applies exclusively to this Website and its possible subdomains and not to other websites you may access through hyperlinks or links.

We invite you to read this policy carefully before providing us with your personal data.

1. DATA CONTROLLERS

Dolce & Gabbana S.r.l., Tax Code/VAT No. 09297890155, with registered office at Via C. Goldoni 10, Milan, Italy, an Italian company belonging to the Dolce & Gabbana Group (hereinafter referred to as “D&G”), and FiloBlu Spa, with registered office at Via Caltana, 116/C – 30030 Santa Maria di Sala (VE), Italy, registered with the Venice Rovigo Delta Lagunare Chamber of Commerce under REA no. 354686, Tax Code and VAT No. 04274870288 (hereinafter referred to as “FiloBlu”), are joint controllers of your personal data for all activities related to the sale of products offered on the Website, such as order fulfillment and after-sales support (e.g., returns and complaints).
You can request a summary of the joint controller agreement under Article 26 of the GDPR by emailing: privacy@filoblu.com.
D&G is also an independent controller for the purposes of Website management, user registration (personal account), marketing, and profiling.
When the term "Joint Controllers" is used below, it refers to both D&G and FiloBlu. If the reference is only to D&G or FiloBlu, it will be explicitly indicated.

2. DATA PROTECTION OFFICER (DPO)

FiloBlu has appointed a Data Protection Officer (DPO), who can be contacted at: dpo@filoblu.com
D&G has also appointed a DPO, contactable at: dpo@dolcegabbana.it.

3. CATEGORIES OF PERSONAL DATA COLLECTED

Browsing Data

When you visit the Website, some data may be collected automatically, such as your IP address, domain name of the device used, URI (Uniform Resource Identifier) of requested resources, request time, request method, file size, server response code, and other technical data related to your device and browser. This information is not collected to identify you, but it may be identifiable through further processing and association with third-party data.

Personal Data You Voluntarily Provide

D&G and FiloBlu process data you voluntarily provide when registering on the Website, accessing services, making purchases, or contacting customer support—such as personal details, contact information, purchase history, and payment data.

c. Cookies

This Website uses cookies. For more information, see our Cookie Policy page.

4. PURPOSES, LEGAL BASES, AND DATA RETENTION

Your personal data will be processed by D&G for

PURPOSE

LEGAL BASIS

RETENTION PERIOD

Website navigation: browsing data is processed to allow you to navigate the Website and access its services, and in particular to obtain anonymous statistical information on the use of the Website and services provided, to monitor proper functioning, and for security reasons.

Legitimate interest of the Controller

For the time necessary for the relevant processing

Website registration (personal account): to allow you to create your personal account on the Website and access and use related services.

Performance of a contract or pre-contractual measures requested by you

Until the User requests account deletion or, otherwise, for 24 months from the last login

Product availability updates: to respond to your request for updates regarding product availability on the Website.

Performance of a contract or pre-contractual measures requested by you

For 3 months from the response to your request

Marketing: to send you promotional communications (including newsletters) related to the Controller's products, services, and events, and/or market research, via email, SMS, social networks, and instant messaging apps

Your consent

Until consent is withdrawn

Profiling: we will process your personal characteristics (such as gender, date of birth, etc.) and purchase history to assess your preferences and send you personalized commercial and promotional communications.

Your consent

Until consent is withdrawn, or, otherwise, for 12 months from your last interaction with the Controller

Your personal data will be processed by D&G and FiloBlu for:

PURPOSE

LEGAL BASIS

RETENTION PERIOD

Sale of products: for the conclusion and execution of the sales contract for products offered on the Website, including order processing, product delivery, communication regarding the order, payment management, and anti-fraud checks.

Performance of a contract or pre-contractual measures requested by you

For the time necessary to process the purchase order (plus any additional retention necessary for the purposes described below)

After-sales service: for managing and responding to requests related to products purchased on the Website, such as returns, complaints, and refunds.

Performance of a contract or pre-contractual measures requested by you

For the time necessary to respond to your request (plus any additional retention necessary for the purposes described below)

Legal obligations: to comply with legal obligations (especially in civil, tax, public safety, banking, and data protection matters).

Compliance with legal obligations

For the period provided by law. Invoicing data is stored for 10 years from the invoice date

Disputes and prevention of unlawful acts: to defend or assert a right of D&G and/or FiloBlu, and/or for the detection and prevention of fraud or other crimes or unlawful acts.

Legitimate interest of the Controller

For the period necessary for the purposes for which the data is collected, in accordance with applicable law (e.g., statute of limitations)

5. DATA PROVISION

Providing data marked with an asterisk (*) for the purposes under section 4(I) A, B, C and 4(II) is mandatory to access and use the Website and its services, including product purchases. Failure to provide this data will prevent service access. Providing data not marked with an asterisk is optional and does not affect service delivery.

For marketing and profiling (section 4(I) D, E), providing your data is optional. Refusal prevents D&G from using your data for those purposes, but does not affect your access to the Website or product purchase.

6. DATA PROCESSING METHODS

Your data is primarily processed using electronic and digital tools. Specific security measures are in place to prevent data loss, illegal use, or unauthorized access. The Joint Controllers comply with all applicable legal security measures.

7. CATEGORIES OF DATA RECIPIENTS

For the stated purposes, data may be shared with the following categories of recipients or processors:

IT service providers (e.g., internet and cloud services)
Logistics and warehouse providers
Customer support services
Legal, tax, accounting, financial, technical consultants
Banking, financial, insurance, and debt recovery services
Fraud control services
Parent, subsidiary, and affiliated companies
Public authorities and oversight bodies

An updated list of processors is available upon request (see section 11).
Only authorized personnel within the Joint Controllers’ organizations will have access to your personal data. No data will be publicly disclosed.

8. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION

Your data may be transferred to the United States, a non-EU country. This transfer is based on the European Commission’s Implementing Decision (EU) 2023/1795 of July 10, 2023 (regarding the EU-US Data Privacy Framework) and, where applicable, Standard Contractual Clauses or Binding Corporate Rules. You may request a copy from the Controllers (see section).

9. SOCIAL BUTTONS AND WIDGETS

This Website may include social buttons/widgets (e.g., Facebook, Twitter, Instagram). Clicking these icons may allow the respective platforms to collect data about your visit. This privacy policy does not apply to those platforms. Refer to their privacy policies for details.
Unless you voluntarily share data via these buttons, no personal data is shared with the social networks by the Controllers.

10. MINORS

The Website and its services are intended only for adults. The Controllers do not knowingly collect personal data from individuals under 18. By using the services, you confirm you are of legal age.

11. DATA SUBJECT RIGHTS

You may exercise the following rights at any time regarding your personal data:

Access: Confirm whether your data is being processed and obtain a copy (Art. 15 GDPR)
Rectification: Correct or complete your personal data (Art. 16 GDPR)
Erasure: Request deletion of data under certain conditions (Art. 17 GDPR)
Restriction: Limit data processing in specific cases (Art. 18 GDPR)
Objection: Object to processing, including for marketing (Art. 21 GDPR)
Portability: Receive or transmit your data to another controller (Art. 20 GDPR)
Withdraw consent: At any time, without affecting previous processing based on your consent

To exercise these rights, contact: privacy@filoblu.com e/o privacy@dolcegabbana.it.
You may also exercise rights via your personal account or through unsubscribe links in marketing emails.
If you believe your rights have been violated, you may lodge a complaint with your local Data Protection Authority.

Last updated April 15th 2025