Privacy Policy

INTRODUCTION
Following consultation of this website (the “Site”) and use of the services offered therein, data relating to identified or identifiable persons may be processed. This privacy notice is provided to users accessing the website www.trussardi.com, pursuant to Article 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as Legislative Decree 196/2003, as subsequently amended and supplemented, and other applicable national and European data protection laws (hereinafter collectively referred to as the “Privacy Law”).

DATA CONTROLLER
The Data Controller of the data provided by users is Trussardi Milano S.p.A., a company under Italian law subject to the management and coordination of Miroglio S.p.A., with registered office in Milan - 20135 - Italy, Via Francesco Burlamacchi no. 4, tax code and VAT no. 04101240044 (hereinafter “Trussardi” or the “Controller”).

DATA PROTECTION OFFICER (DPO)
The Miroglio Group, of which the Controller is a part, has appointed a Data Protection Officer, who can be contacted at the following address: Miroglio Group – Data Protection Officer, Via S. Barbara 11, 12051 – Alba (CN), Italy, email: dpo@miroglio.com.

TYPES OF DATA PROCESSED
Trussardi may process various types of personal data (“Data”), depending on the products, services, and functionalities of the Site.
The Data processed may include:

• Personal and identifying data
  First and last name, date of birth, gender, etc.

• Contact data
  Email address, phone number, shipping address

• Data voluntarily provided by the user
  No personal data is required for mere browsing of the Site. The voluntary, explicit, and optional sending of emails to the addresses indicated on the Site, or messages via other contact methods listed, results in the acquisition of the sender’s address and any other personal data included in the message. This data will be used solely to respond to the request and may be disclosed to third parties only if necessary for this purpose.

• Data related to customer purchases
  Details of products purchased and amounts spent

• Data related to products added to the cart
  Details of products placed in the “virtual cart” and their price

• Browsing data
  The IT systems and software procedures used for the functioning of this Site collect, during normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but could, through processing and association with data held by third parties, allow user identification. This category includes IP addresses or domain names of the computers used by users who connect to the Site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the server’s response status (success, error, etc.), and other parameters related to the user's operating system and IT environment.
  This data is used solely to obtain anonymous statistical information about the use of the Site and to ensure its proper functioning. It is deleted immediately after processing. The data may be used to determine liability in case of cybercrimes against the Site; except for this eventuality, web contact data is not stored for more than seven days.

• Cookies
  For information on cookies used on the Site, please refer to the Cookie Policy.

LEGAL BASES AND PURPOSES OF PROCESSING
Trussardi may process your Data for various purposes, depending on the products, services, and functionalities of the Site.
Data processing will occur for the following purposes and based on the following legal grounds:

• Contact: Voluntary, explicit, and optional emails or messages sent via the Site's contact methods result in the acquisition of the sender’s email address and any other personal data included. Such data is used solely to fulfill the user's request and may be disclosed to third parties only if necessary. Consent is not required, as processing is necessary for the execution of a contract or pre-contractual measures, and where applicable, to comply with legal obligations (legal basis: contractual and legal obligations).

• Site registration: Creating and managing the user’s personal account, authenticating to the reserved area, and accessing related services (legal basis: contractual obligations).

• Online product purchase: Buying products via the Site and providing any related services (legal basis: contractual obligations).

• Legal and contractual obligations: To comply with laws and regulations, and to prevent and detect abuse, unlawful acts, crimes, or fraud (legal basis: legal obligation).

• Marketing: Sending promotional, informative, and advertising material via automated (email, web, SMS, instant messaging, calls without operator) and/or non-automated (postal mail and/or operator-assisted calls) means, conducting market research and statistics, providing updates on initiatives or events, and sending abandoned cart reminders (legal basis: consent).

• Newsletter: Sending promotional and informative emails (legal basis: consent).

• Customer profiling: Analyzing purchases and user preferences, including automated decision-making and profiling, to provide a personalized service (legal basis: consent).

• Loyalty programs, contests, prize operations: Managing participation in loyalty programs, contests, or prize promotions upon user’s subscription (legal basis: execution of a contract or pre-contractual measures).

NATURE OF DATA PROVISION
Providing Data may be mandatory or optional, depending on the purpose. It is mandatory when required to provide the requested service or product (e.g., registration requires completion of all mandatory fields (*), otherwise registration will not proceed; to place an order, providing a delivery address is essential).

DATA PROCESSING METHODS
Data will be processed using manual and automated tools for the time strictly necessary to achieve the purposes for which it was collected, as outlined in the “Legal Bases and Purposes of Processing” section of this Privacy Policy.
Specific security measures are applied to prevent data loss, illegal or incorrect use, and unauthorized access.
Processing related to web services of this Site is carried out only by authorized personnel. Personal data may be processed by external service providers (e.g., IT companies, cloud services, email marketing platforms, technical maintenance providers) duly appointed as Data Processors under Article 28 GDPR. A complete list of processors can be requested by writing to the Controller at the address listed in the “Data Subject Rights” section.
Personal data will be processed within the EU but may be transferred outside the EEA solely for service provision or technical reasons. Transfers will occur to countries with an adequacy decision or under standard contractual clauses.
The Site may contain links to third-party websites. If you access them, please review their respective privacy policies.
“Social login” functionality may also be available; by using it, you agree to the selected social network’s terms and privacy policy.

DATA RETENTION
Data will be retained for varying periods depending on the purpose and in accordance with the Privacy Law:

• Contact purposes: Data is retained only as long as needed to provide the requested service, unless legal retention applies.

• Site registration: Data is retained while the user actively uses the reserved services. Afterwards, it is stored for another 5 years unless the user requests deletion.

• Online purchases: Data is stored for no longer than required by tax and civil laws (generally, up to 10 years).

• Legal and contractual obligations: As above, up to 10 years.

• Marketing and profiling: Until consent is withdrawn or for a maximum of 5 years from the last purchase or interaction (e.g., event participation, service use, email opening). Afterwards, data will be deleted or permanently anonymized. If the user joins a loyalty program, data will be retained for its duration or until cancellation, and deleted after 5 years of inactivity. Cart data is stored for up to 3 months.

• Newsletter: Data is retained until consent is withdrawn, which can be done anytime via the unsubscribe link in each newsletter.

• Loyalty programs, contests, and prize promotions: Data is retained for the program’s duration or until withdrawal. If no interest is shown in Trussardi’s updates despite enrollment, the data will be deleted.

DATA SUBJECT RIGHTS
Data subjects have the right at any time to exercise their rights under Articles 15 et seq. of the GDPR, including:
a) to be informed about the purposes and methods of processing;
b) access;
c) rectification and updating;
d) deletion, anonymization, or blocking;
e) objection to processing, including profiling and automated decision-making;
f) withdrawal of consent (where applicable);
g) data portability;
h) restriction of processing.
To exercise these rights, email: privacy@trussardi.com or write to Trussardi Milano S.p.A., Via Francesco Burlamacchi no. 4, 20135 Milan.
Users also have the right to lodge a complaint with the Data Protection Authority.

POLICY CHANGES
New regulations or service updates may require changes to how we process personal data. Therefore, this privacy policy may change over time, and we encourage visitors to check this page regularly.

Last updated: June 18, 2025