Welcome to the website www.moncler.com.
Moncler Korea Inc., part of the Moncler Group, provides the following information about the collection and processing of the user’s personal data. During the use of the site or its services (hereinafter, the “Website” and the “Services”), information and personal data concerning users of the Site are collected.
For this reason, in accordance with the provisions of the General Data Protection Regulation no. 2016/679 (“GDPR”), Personal Information Protection Act (“PIPA”), and applicable national legislation (together, “Privacy Legislation”), we have created this document (hereinafter “Privacy Policy”) for the purpose of describing what personal data we collect, the purposes and methods of its processing and the security measures used to protect it.
Pursuant to the GDPR, ‘processing’ is defined as any operation, including the mere collection and/or storage, of personal data of any natural person (hereinafter, the “Data Subject” or the “User”), ‘controller’ is defined as the natural or legal person who determines the purposes and means of the processing, and ‘personal data’ is defined as any information relating to a natural person, identified or identifiable even indirectly by reference to any other information.
The Data Controllers are the following companies, both belonging to the Moncler Group (hereinafter also “Moncler” or “Data Controllers”):
The User can contact the Data Controllers free of charge by writing to the e-mail to [Name of DPO/department responsible for performing personal data protection tasks and handling related complaints] (e-mail address privacy@moncler.co.kr), or by sending a registered letter with acknowledgement of receipt to the registered offices, as identified above.
Industries S.p.A. has appointed a Data Protection Officer (DPO), domiciled for the purpose at the offices of Industries S.p.A. and available at the following address: dpo@moncler.com.
The Data Controllers will process the following categories of personal data (hereinafter collectively referred to as “Personal Data”):
During their normal operation, the computer systems used to operate the Website acquire some of the User’s Personal Data, the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected for the purpose of identifying the User, but may lead his/her identification if, for example, it is combined with information held by a third party. This category of data includes the IP address and domain name of the computer, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server and other parameters relating to the operating system. We use this data for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check it is working properly. The data collected is deleted immediately after processing. The data could be used to ascertain responsibility in the event of cybercrime committed to the detriment of the Services.
Use of the Website does not require the creation of a personal account. However, to access certain pages reserved for registered users and, for example, to send us a request for information or feedback on the Services, the User must create a personal account and become a registered User. When creating an account, the User will be asked to enter certain Personal Data, such as (i) first and last name, (ii) e-mail address, and (iii) date of birth to create a (iv) password.
In addition, personal data directly provided by the User when placing an order to purchase an item will be collected and processed, and this consists of data collected by sending electronic mail, interacting with the functionality of the Website and requesting Services offered by the Website.
The Personal Data we collect and process for the purpose of order fulfilment include (i) first and last name, (ii) nationality, (iii) e-mail address (iv) shipping address, (v) shipping and payment methods and, subject to consent, (v) purchasing habits.
In addition, we may collect information generated during the use of Moncler’s services, such as (i) order history, (ii) exchange and return history, (iii) wishlist items, (iv) appointment bookings, and (v) aftercare service requests. We may also collect, based on the User’s selection, additional information including (i) preferences, (ii) gender, and (iii) phone number.
If the User collects, processes and discloses information about third parties to us, he/she must do so in accordance with the provisions of the Privacy Policy and, therefore, the User must provide the third parties with prior notification of processing and, if necessary, obtain their free and express consent before processing.
Personal Data will be used exclusively for the following purposes:
The provision of the User’s Personal Data for purposes (a), (b) (c), (d), (e), (i), (j) and (k) is optional, but necessary in order to provide the Services requested. If the User refuses to provide such information, he/she will still be able to use the Site, but will not be able to access some of our Services reserved for registered users, purchase Moncler products and we will not be able to handle the User’s requests.
With specific reference to the purpose referred to in purpose (k), the User will be notified in advance of registration by a short information notice issued by a recorded voice at the beginning of the telephone call, with a reference to this full information notice.
Consent to the processing of Personal Data for the marketing and profiling purposes referred to in points (f), (g) and (h) is optional and refusal will have no consequences on the navigation of the Site and/or the purchase of Moncler products.
The legal basis for the processing of the Personal Data referred to in Article 4 above is:
fulfilment of a contractual obligation (Article 15(1)(iv), PIPA), in particular the provision of Services requested by the User via the Site or, in the case of point (b), by WhatsApp chat or by telephone call or e-mail;
Specific Personal Data Items Processed: first and last name, e-mail address, date of birth, password, nationality, shipping address, shipping methods, payment records (payment currency, information related to payment methods), phone number, order history, exchange and return history, aftercare service requests, records of customers’ consultation and inquiries through various channels such as Live Chat (product and service-related information).
fulfilment of a legal obligation to which the Data Controllers are subject in the course of its business (Article 15(1)(ii), PIPA);
Legal Basis |
Specific Personal Data Items Processed |
Improvement the accuracy of fraud prevention tools |
Purchase history, service usage history, name, email address, membership status, payment history, delivery information |
consent of the Data Subject (Article 15(1)(i), PIPA), given by means of a specific and separately expressed expression of will, only after having read this Privacy Policy. The User may at any time specify the preferred method of contact from among those listed above and he/she may refuse to receive promotional communications through any or all of the contact methods.
In relation to the consent for letter (h), we make reference to the cookie policy (section 10); in such case the consent is granted through the specific banner which can be found when you access the Website and can be revoked at any time with the modalities specified in the same cookie control panel.
Specific Personal Data Items Processed: title, gender, name, surname, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases, exchanges and returns history), wishlist items, collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID
Moncler legitimate interest (section 6 (1) (f) GDPR, Article 15(1)(vi), PIPA) to verify and improve the quality of the offered services and the company processes efficiency;
Specific Personal Data Items Processed: gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address
Moncler legitimate interest to protect its rights (section 6 (1) (f) GDPR, Article 15(1)(vi), PIPA).
Specific Personal Data Items Processed: all Personal Data mentioned above
fulfilment of a contractual obligation (Article 15(1)(iv), PIPA), in particular the provision of the Services requested by the User through a phone call to the Client Service.
Specific Personal Data Items Processed: Recording of customers’ consultation and inquiries through phone calls’ registration
User’s Personal Data will be processed both in paper form and using electronic means and always in compliance with the security requirements of applicable legislation, with particular but not exclusive reference to art. 32 of the GDPR. Our security measures include contractual arrangements with any contractor (e.g. service providers) or other party in order to protect the security and confidentiality of the User’s Personal Data in accordance with the provisions of our Privacy Policy. Specifically, we implement the following measures:
We will retain the User’s Personal Data until the purpose for their use is achieved according to our internal data retention policy.
For the personal data as of Section 5 and 6 above, letter (a), (b), (c) and (d) we have a retention period of 10 years from the time of initial collection for User’s Personal Data that is processed for our invoicing and accounting purposes, save for the circumstances in which national applicable law may provide for different retention requirements. In principle, we will promptly destroy User’s Personal Data in our possession once we achieve the purpose of collection and use of the Personal Data.
However, we will retain the following categories of Personal Data for the duration indicated below:
For the Personal Data as of Section 5 and 6 above, letter (f), (g) and (h), the Personal Data processed for marketing and/or profiling purposes will be kept a period of 7 years as per the authorization obtained from the Italian Data Protection Authority, issued on May 25, 2018, in favor of Industries S.p.A. After this retention period, the data will be automatically deleted or permanently and irreversibly anonymized.
For the data retention period of the cookie we make reference to what set out in deep in the cookie policy
For the Personal Data as of Section 5 and 6 above, letter (i) (j), the Personal Data processed for analysis purposes will be retained for the time set out in relation to the main purposes for which they have been collected, save for the objection right, and for the time necessary in order to protect the specific right (sub. j).
If we are required to retain Personal Data by applicable legal obligations (i.e., point (e) referred in Section 4 and 5), such as those set forth below, we will retain the Personal Data for the relevant retention period and the purposes required by such legal obligations.
In principle, we will promptly destroy User’s Personal Data in our possession once we achieve the purpose of collection and use of his/her Personal Data. The process and method for destroying Personal Data after the retention periods are as follows:
Personal Data recorded and stored in the form of paper documents shall be shredded or incinerated.
Personal Data is accessible to duly authorized personnel of the Moncler Group (e.g., Digital, CRM, Retail, IT) as necessary and is disclosed to third parties in the following cases: (i) when disclosure is required by laws and regulations applicable to legitimate third party recipients, such as authorities and public bodies for their respective institutional purposes, e.g. anti-money laundering legislation, court authorities; (ii) in the event of extraordinary transactions (e.g. mergers, acquisitions, sale of business, etc.).
It is expressly stated that Industries S.p.A. and Moncler Korea Inc. do not disclose your personal data to third parties for marketing or profiling purposes.
However, with reference to profiling, marketing and customer relationship management (to provide the User with the same level of service worldwide), other companies in the Moncler Group may access User’s Personal Data as data processors, based on instructions received from Industries S.p.A.
The following are the details regarding the third parties to whom we lawfully provide Personal Data.
Moncler Korea Inc.’s Provision of Personal Data to Third Party
Name of the recipient |
Purposes of use by the recipient |
Items of the information to be transferred |
Periods of retention/use by the recipient |
Moncler Group Companies [List available upon request] |
to manage sales and post-sales activities for Korean Customers |
first and last name, e-mail address, date of birth, password, nationality, shipping address, shipping methods, payment records (payment currency, information related to payment methods), phone number, order history, exchange and return history (only when consent to profiling is given), aftercare service requests, records of customers’ consultation and inquiries through various channels such as Live Chat (product and service-related information) |
10 years |
Industries S.p.A. |
to carry out marketing and profiling activities and CRM Analysis |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
7 years |
Industries S.p.A.’s Provision of Personal Data to Third Party
Name of the recipient |
Purposes of use by the recipient |
Items of the information to be transferred |
Periods of retention/use by the recipient |
[Moncler Group Companies] [List available upon request] |
to carry out marketing and profiling activities |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
7 years |
Moncler Korea Inc. |
to integrate customer data |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
7 years |
Personal Data is also shared with our service providers, e.g. for services of a technical and organizational nature that are necessary for the purposes referred to in Article 4, such as independent partners, including associates, shipping companies, marketing, payment management, etc. We provide such parties only with the data necessary to perform the agreed services and they act as data processors, based on instructions received from Industries S.p.A. or Moncler Korea Inc. (depending on the relevant Data Controller).
Moncler Korea Inc.’s Outsourcing of Personal Data
Data Processor (Outsourcee) |
Description of Outsourced Tasks |
|
Cegid Group |
Retail sales database management and storage |
|
Crea Vision |
HelpDesk services |
|
Adyen |
Payment Gateway services |
|
Kakao |
Push messages - personalized ad delivery based on customer interest |
|
Industries S.p.A.’s Outsourcing of Personal Data
Data Processor (Outsourcee) |
Description of Outsourced Tasks |
|
Salesforce, Inc. |
Managing E-commerce solutions and hosting website solutions |
|
Riskified |
Fraud Prevention Tool |
|
Dynamics |
Customer profiling data storage |
|
Skynet |
Helpdesk services |
|
Meta |
Delivery of personalized ad based on customer’s interest and measure advertisement effectiveness |
|
|
Analytics: data tracking – Cloud: data analysis – Advertising: personalized ad delivery based on customer interest and measure advertisement effectiveness |
|
Microstrategy |
Clienteling analysis |
|
For the performance of certain processing activities concerning the User’s Personal Data, We communicate such data to external parties located in countries that do not belong to Korea (hereinafter referred to as “Third Countries”), the list of which is provided below and will be updated from time to time. The lawfulness of such transfers is ensured through mechanisms under Article 28-8 of PIPA, including obtaining the data subject’s consent or entering into a data processing agreement in accordance with the privacy policy. With reference to points (f), (g) and (h), we directly collect personal data from Italy.
These external parties will process your Personal Data as independent data controllers or as data processors, regularly appointed by Moncler Korea Inc. and Industries S.p.A. in accordance with the legislation regulating data protection (depending on the role they have in relation to the processing). If you choose not to consent to the overseas transfer of personal data, you may indicate your refusal in the proper consent form. However, please note that, although you would be still able to purchase on this Website, refusal may result in your inability to be provided with targeted communications by e-mail (newsletter), phone, SMS, MMS, instant messaging and traditional mail, or with a customized management of the relationship between Moncler and you.
Specifically, we transfer personal data to Third Countries as follows:
Moncler Korea Inc.’s Cross-border Transfer of Personal Data
Recipient’s Name (Contact Information) |
Country where Recipient is Located |
Recipient’s Purpose of Using the Personal Data |
Items of Personal Data to be Transferred |
Time and Method of Transfer |
Period of Retention and Use by Recipient |
Description of Outsourced Tasks |
Legal basis of the cross-border transfer |
Moncler Group Companies [List available upon request] |
Global |
to manage sales and post-sales activities, to integrate customer data |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
transferred remotely via network immediately upon collection |
7 years |
N/A |
[PIPA Article 28-8(1)(iii)(Contract with Data Subject)]
|
Industries S.p.A. |
Italy |
to perform marketing and profiling, to integrate customer data |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
transferred remotely via network immediately upon collection |
7 years |
N/A |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)] |
Kakao Corp. |
South Korea |
Send push messages to KaKao users and advertising services (including personalized/targeted advertising) |
IP address, Mobile Advertising Identifiers (ADID, IDFA), KaKao account information (nickname, email address, phone number, profile picture, gender) |
transferred remotely via network immediately upon collection
|
1 year |
Customer Communication & Advertisment |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)] |
Cegid Group |
France |
Retail sales database management and storage |
first and last name, e-mail address, date of birth, password, nationality, shipping address, shipping methods, payment records (payment currency, information related to payment methods), phone number, order history, exchange and return history, aftercare service requests, records of customers’ consultation and inquiries through various channels such as Live Chat (product and service-related information) |
transferred remotely via network immediately upon collection |
10 years |
Retail sales database management |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)] |
Riskified
|
Israel |
Retail sales database management and storage |
first and last name, e-mail address, date of birth, password, nationality, shipping address, shipping methods, payment records (payment currency, information related to payment methods), phone number, order history, exchange and return history, aftercare service requests, records of customers’ consultation and inquiries through various channels such as Live Chat (product and service-related information) |
transferred remotely via network immediately upon collection |
10 years |
Retail sales database management |
[PIPA (Article 15(1)(ii), PIPA); (fulfilment of a legal obligation]; |
Industries S.p.A.’s Cross-border Transfer of Personal Data
Recipient’s Name (Contact Information) |
Country where Recipient is Located |
Recipient’s Purpose of Using the Personal Data |
Items of Personal Data to be Transferred |
Time and Method of Transfer |
Period of Retention and Use by Recipient |
Description of Outsourced Tasks |
Legal basis of the cross-border transfer |
Moncler Group Companies [List available upon request] |
Global |
to manage sales and post-sales activities, to integrate customer data |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
transferred remotely via network immediately upon collection |
7 years |
N/A |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)] |
Google LLC |
Europe (multiple locations) |
To provide, measure and improve analytics and advertising services (including personalized/targeted advertising) |
cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, hashed emails |
transferred remotely via network immediately upon collection
|
50 months |
Analytics & Advertisement |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)]
|
Meta Platforms, Inc. |
Europe (multiple locations) |
To provide, measure and improve advertising services (including personalized/targeted advertising) |
cookies, browsing habits (online session/visits history), IP address, Device ID, city, hashed emails |
transferred remotely via network immediately upon collection
|
2 Years |
Advertisement |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)]
|
Salesforce, Inc. |
EU (salesforce ecommerce – data center: EU; salesforce marketing – data center: USA)
|
To provide e-commerce sales services; to provide direct marketing services |
Name, surname, password, title, gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, IP address, shipping address, payment method |
transferred remotely via network immediately upon collection
|
7 years |
E-Commerce and marketing services |
[PIPA Article 28-8(1)(iii)(Contract with Data Subject)]
|
Microsoft Dynamics |
Vendor registered office location Italy
Dynamics datacenter location:EU |
Customer profiling data storage |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, cookies, browsing habits (online sessions/online visits history), IP address, Device ID, city, shipping address |
transferred remotely via network immediately upon collection |
7 years |
customer profiling data storage |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)] |
Microstrategy |
Italy |
Clienteling Analysis |
gender, date of birth, phone number, email address, preferred contact method, country of residence, purchasing habits (purchases and returns history), collections’ preferences, city, shipping address |
transferred remotely via network immediately upon collection |
7 years |
Clienteling Analysis |
[PIPA Article 28-8(1)(i)(Consent of Data Subject)] |
As a Data Subject, the User may at any time exercise the rights recognized by the Privacy Policy regarding the specific processing of his/her personal data.
Below is a general description of the rights and how to exercise them:
To exercise the rights described above:
If you need to consult regarding complaints or remedies related to personal information, you may contact the specialized organizations listed below.
Contact Organization |
Contact Number |
Website |
Personal Information Dispute Mediation Committee |
1833-6972 (no area code) |
|
Personal Information Infringement Report Center |
118 (no area code) |
https://privacy.kisa.or.kr/ |
Supreme Prosecutors’ Office Cyber Investigation Division |
1301 (no area code) |
|
National Police Agency Cyber Crime Reporting System |
182 (no area code) |
https://ecrm.police.go.kr/minwon/main |
The Site uses technical cookies and, subject to the consent of the Data Subject, profiling, analytics and social cookies, as well as additional functionalities such as plug-ins and/or buttons.
For further information, Data Subjects are invited to read the Cookie Policy.
Moncler operates the Moncler Digital Data Architecture that performs automated decision-making based on data collected from various sources (e.g., in-store purchases, Monclient App, anti-counterfeiting websites, profiling cookies). This system processes data worldwide in cooperation with other Moncler Group companies appointed as data processors for this purpose. The objective of such automated decisions is to build individual customer profiles to provide personalized marketing communications or to enable customized relationship management between Moncler and its customers. Such processing is performed only for Users who have given their explicit consent.
The data used for this purpose may include purchase history, preferences, purchasing habits, profiling cookie data, and information relating to social media interactions. This data is analyzed to infer Users’ interests or behavior, which is then used to deliver targeted communications such as newsletters, phone calls, SMS, MMS, instant messaging, and traditional mail.
The Moncler Digital Data Architecture integrates and analyzes data from various channels to tailor marketing strategies to each User. This may include the use of profiling cookies on the Website, as well as third-party tracking systems (e.g., tools provided by social media managers such as Meta), to analyze online activity and deliver personalized advertising based on specific interests and purchasing patterns.
Users have the right to refuse or withdraw their consent to such processing at any time. For more information about the right to object to or request an explanation of automated decisions, please refer to Section 9 of this Privacy Policy.