5.1 What modalities do we use to process your personal data?

The processing of your Personal Data is carried out, electronically and manually, only within the limits necessary to pursue the purposes outlined above.

The password is one of the protection mechanisms of the account. Therefore, you are invited to use a password sufficiently secure and stored in a safe place, limiting access to it on your own devices and browsers, and disconnecting it after having visited the Sites and/or the Services.

All Personal Data provided by you is kept on secure servers, adopting adequate security measures to protect Personal Data from non-authorized access, to maintain the accuracy of Personal Data and to guarantee the proper use of information.

Furthermore, a secure system for authorising credit card payments and identifying fraudulent activities is used. We use the standard SSL (Secure Sockets Layer) to protect the confidentiality of your Personal Data.

5.2 We share your Personal Data with other Affiliates of the Group

EssilorLuxottica is a global organisation with offices and operations throughout the world and most of your Personal Data relating to is stored and processed within a range of global applications that are used globally by the Affiliates of EssilorLuxottica. The majority of the processing of your personal data is carried out through the concentrated services of two entities: Essilor International and Luxottica Group S.p.A.

We may share your Personal Data with certain Affiliates or Brand of the EssilorLuxottica Group portfolio, based on your preferences and interests about these Affiliates or Brand, for the purposes set out in this Privacy Notice, in each case in or outside your country, as permitted and required by applicable law and/or in other circumstances with your consent.

We may also share your information for our internal business purposes.

5.3 Is your Personal Data transferred to third parties?

Service provider

We may disclose your Personal Data with our third-party service providers entrusted with processing activities that provide services or assistance and advice to us, with special – but not exclusive – reference to technology, accounting, administrative, legal, insurance, IT, marketing, customer service, data analysis matters.

Each service provider will act as a data processor, on behalf of and in accordance with the instructions received from us, by virtue of a specific agreement in, which sets out its obligations and guarantees the implementation of appropriate technical and organisational measures to respect the Applicable Legislation and the protection of your rights.

We require that any such third-party provider is subject to strict control and implements appropriate guarantees of security and confidentiality of your Personal Data.

Sale or merger

We may also disclose Users Personal Data:

in the event that we sell any business or assets, in which case we may disclose Users Personal Data to the prospective purchaser of such business or assets; or
if we sell, buy, merge with, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, Users Personal Data may be among the transferred assets.

We may share all of the information we collect in connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sale, or in the unlikely event of bankruptcy.

Third Party Social Network Service Providers

If you decide to log into the Sites and/or the services through social network applications or to link your account to your public profiles available on social networks, and share your actions through the Site and/or the services on those channels via the corresponding plug-ins (e.g. Facebook Connect, I like, fb share, etc.), these third-party services may be able to collect information about you, including information about your activity on the Sites or/and the services, and they may notify you connections on the third-party services about their use of the Sites and/or the services. Their use of your Personal Data is not governed by this Privacy Notice but in accordance with their own data protection policies.

Legal process

We may disclose your Personal Data to any authority, court, administrative body, or other authorised third party (including, without limitation, counsel), where the disclosure of Personal Data is required by law, regulation or court order or where such disclosure is necessary for the protection and defence of our rights.

Other instances

We may ask if you would like to disclose your information with other third parties who are not described elsewhere in this Privacy Notice. Furthermore, we do not sell, rent, or lease your Personal Data to third parties but we may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest for you. In those cases, without your consent, your Personal Data would not be transferred to the third party.

The abovementioned recipients will process your Personal Data as data controllers, data processors or persons in charge of processing, depending on the circumstances.

A complete list of data processors is available, upon request to us, through the modalities as per this Privacy Notice.

5.4 Is your Personal Data transferred across the border?

Given the presence of EssilorLuxottica in many countries around the world and in order to provide you with personalized service worldwide, some of your data may be collected, accessible or stored outside your country of residence.

As a result of the above, your Personal Data may be accessed and/or transferred to countries which do not have equivalent data protection laws to those required within the European Economic Area (EEA).

In such cases, EssilorLuxottica ensures that, at all times, appropriate safeguards are implemented to ensure that your Personal Data is processed in accordance with applicable legislation. In this respect, where your Personal Data is processed by another EssilorLuxottica entity, the safeguards are based on the commitments taken on the basis of (ii) a dedicated transfer agreement binding upon the EssilorLuxottica entity involved in the processing and (ii) a set of common rules applicable through the EssilorLuxottica Group Data Protection Policy.

Where your data is processed by EssilorLuxottica entities or third parties located outside the European Economic Area, EssilorLuxottica ensures that specific contractual protection is implemented to ensure that this requirement is addressed in accordance with the Applicable Legislation.

For further information with regard to the appropriate or suitable safeguards and the means by which to obtain a copy of them, you can contact us with the modalities as per this Privacy Notice.

5.5 For how long do we retain your Personal Data?

We retain all or part of your Personal Data for the time strictly necessary for the reason:

to meet applicable statutory requirements for data retention,
to meet and comply with our legal and/or contractual obligations,
for as long as necessary to carry out each of the purposes mentioned in this Data Protection Privacy Notice, including for the purposes of satisfying any legal, accounting, reporting requirements.

To determine the appropriate retention period for Personal Data, we consider jointly the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In any case, please note that, as general rule, within EssilorLuxottica, retention and archiving of Personal Data will not exceed ten (10) years overall calculated as of the first record, which is a maximum in EssilorLuxottica exception made for legal hold obligations.

In some circumstances we may anonymize your Personal Data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

5.6 We keep your data safe, updated and accurate

EssilorLuxottica is responsible for the security and accuracy of the Personal Data that it processes about you and for keeping data up to date. EssilorLuxottica has taken steps to eliminate duplicate copies of data and to facilitate updating of data that may change over time.

Privacy Policy