PRIVACY POLICY BY Y CLOTHING®

LAST UPDATED: MARCH 3, 2024

Welcome to by Y clothing´s® Privacy Policy. This Privacy Policy explains how we collect, use, and disclose personal data (as defined herein) related to your use of our Services.

These documents provide you with important information about the following:

1.         PROCESSING OF PERSONAL DATA

2.         PERSONAL DATA WE COLLECT

3.         HOW WE USE PERSONAL DATA

4.         HOW WE SHARE PERSONAL DATA

5.         CHILDREN'S PRIVACY

6.         STORAGE, ACCESSIBILITY AND TRANSFER OF PERSONAL DATA

7.         SECURITY AND CONFIDENTIALITY OF PERSONAL DATA

8.         RIGHTS IN RELATION TO PERSONAL DATA– MANAGING YOUR CHOICES

9.         DATA RETENTION

10.       LINKS, ADVERTISERS, SPONSORS & ADS

11.       DATA CONTROLLER –DATA PROTECTION OFFICER- AND HOW TO CONTACT US

12.       UPDATING THIS POLICY - NOTICES

 

 

 

ACCEPTANCE

By visiting the  Website, using its services or, otherwise by interacting with us, our Points of Sales, Boutique and/or Websites, you acknowledge that you have read and understand this Privacy Policy and you agree that we may collect, use, store, transmit and disclose the personal data we collect through the Websites, Boutiques and/or Points of Sale in accordance with this Privacy Policy. Unless you already registered with us, we may ask you to opt-in (e.g., ticking a checkbox) if we deem it appropriate to safeguard your rights or if so, required by the applicable laws. If you do not agree to the terms of this Privacy Policy, please do not visit this Website, create an account, and do not otherwise use or submit personal data to this Website, or do not opt-in when this option is offered to you pursuant to the applicable laws.

 

1. PROCESSING OF PERSONAL DATA

 

When we use "Personal Data" in this Privacy Policy we refer to any information enabling us to identify you (or a third party whose personal data you provide us) directly or indirectly including any information incidental to the purchase of goods or services; or that you chose to communicate to us or share with us, or third parties, while using the Websites or at Points of Sales . We will process the personal data in accordance with the General Data Protection Regulation (EU) 2016/679 “Reg.(EU) 2016/679” and with the legislation of the country where data should be collected, if applicable. We reserve the right to carry out additional processing as required by law or as part of a criminal or other investigation or proceedings.

2. PERSONAL DATA WE COLLECT

2.1 Source of Data

We collect personal data from you only when you voluntarily provide us with this information, such as:

Branded Websites distributing our products: when placing an order through the Website(s) , as a “guest”; establishing an account or modifying your account; by setting up a wish list; entering a contest, sweepstakes or promotion; searching on the Website; contacting us with a comment or question; signing up to receive email newsletters and updates regarding our latest products and services, boutique openings, events or promotions; or requesting to receive an order confirmation, shipping confirmation or other alerts;

Our websites: when filling in our customer card, during informal chats when you visit our web page, interact with us, or purchase merchandise.

Events: when participating to our events, surveys and market research, challenges, and other promotions, also online, e.g., minisites that we run on third party social networks such as Facebook;

 

Our customer services: when asking for assistance, special services or aftersales care.

E-mail, text and other electronic messages.: when communicating between you and us.

If you provide us with personal information of third parties (e.g., your family members, other customer, or prospects of us), you should make sure that said third parties are informed and authorized the use of their data as described in this Privacy Policy.

2.2 Types of Data

We may collect and use different types of personal data depending on the specific purpose we have, as described below:

personal details, such as name, surname, gender, age/date of birth, country of origin, and other personal details as allowed by applicable laws.

contact details, such as address, email address, phone number, mobile number, fax number (if any), and other contact details as allowed by applicable laws.

payment details, such as payment instrument (credit card, debit card) if applicable, passport number when required for tax or anti money laundering reasons.

sales related information, such as date, products or services provided, place of purchase, product codes, amount, total of sales, VAT number, complaints, returns, refunds and other sales related information as allowed by applicable laws.

habits and profiles, such as data regarding your purchases (purchase history including, boutique where the sale takes place, type, quantity and price of the products purchased by you), information related to customer relationship management activities and initiatives (date and categories of said actions as performed or to be performed and results of said actions), shopping habits and preferences (wish list, preferred categories of products, colour, style, other brands purchased, most visited countries, how you knows our brands, sizes, notes regarding purchase habits or special needs stated by you – i.e. preferred materials), other information (job related information, education, hobbies and lifestyle activities) as allowed by applicable laws; and

family related information, such as marital status, anniversary date, number of children, children related information and other family related information as allowed by applicable laws.

3. HOW WE USE PERSONAL DATA

Personal data may be used for the following purposes, depending on the specific circumstances in which you interact with us.

 3.1  For online (by Point of Sale at which you make your purchase or the local website vendor as identified in the Terms of Sale of your online purchase)

Your personal data provided by you or collected when you make any purchase, regardless as a guest or registered user, i.e. basic personal details, contact details, data regarding your purchases, fiscal data, payment details, sales related information, and any other data strictly necessary for the delivery of products, will be used:

to manage, administer and process your purchase of our products, sale and post-sale services, e.g. administrative activities, accounting, returns, warranties, tax free refunds if applicable, fraud prevention, communicating with you, including by e-mail, for any problem relating to the handling of the order or to subsequent requests relating to the order.

to comply with obligations imposed by laws, regulations, or EU/Mexican legislation (including anti-money laundering laws) and to establish or defend a legal claim.

Providing your personal data for the purposes above is necessary; denial thereof would make it impossible to complete your purchase.

Unless otherwise required to comply with local applicable laws, data may be processed for these purposes without seeking your consent because this is necessary to comply with the contractual and legal obligations.

3.2 For specific purposes for which it was volunteered.

Your personal data provided by you or collected when you ask for a specific service (e.g., registering your account on our websites, handling complaints, asking for information) i.e. personal details, contact details, data strictly necessary for follow-up your request, will be used

to provide the services you requested (e.g., operating the processes of registering your account, managing authentication on the Website, operating your accounts, assisting you, and handling any complaints, handling wish lists, follow up to any question or contact request you may submit to us, also through our customer care service).

to manage newsletter subscription if you are not also registered with us.

Providing your personal data for the purposes above is necessary; denial thereof would make it impossible to complete your request.

Unless otherwise required to comply with local applicable laws, data may be processed for these purposes without seeking your consent because this is necessary to follow up your request.

3.3 For CRM purposes if you register with us.

Your personal data provided by you filling in our forms or collected when you visit our websites and you interact with us, i.e. personal details, contact details, data regarding your habits and profile, family details, will be entered into our centralized CRM:

to offer you with promotions, discounts, and other tailored services, and send you newsletters, other marketing and commercial communications on products, services and invitations to events about our brands (either organized by us or our distributing chain), surveys and research, market analysis, invitation to contests, sweepstakes or promotions and other initiatives for registered customers or contacts of our brands (“marketing”). We may use traditional (postal mail, and phone) and/or digital and automated (e-mail, SMS, MMS, telephone and other digital channels, e.g., social media) contact means, and may send you these communications based on your profile, if you agreed to our profiling (see point 3.3.b) below);

to analyze your contacts with us, interests, preferences, and purchase habits, and create individual or aggregated profiles based on that, to work out how to provide you with a better service, including to provide you with a customized sales experience in any and every web site in European Union, United States, Asia and abroad (“profiling”). We may use the personal data also to create clusters and conduct market and statistical analyses directed at identifying products and/or services of interest to the customers of our brands and to improve our services (including the Websites). We will combine your data collected on the Websites with information that we may have obtained through your interaction with the salespersons at the Boutiques and/or the Points of Sales. The processing for the personal data for profiling is carried out in compliance with the guarantees and measures set by the applicable law.

Your data entry into the CRM system is optional and free (based on your selective opt-in) and only if you provide your personal data for both the purposes of marketing and profiling under points 3.3.a) and b), or one of them. You may unsubscribe or opt-out at any time (see point 8 below). Denial to provide your personal data for both or one of these CRM purposes does not prevent you, in any way, from using the services or making your purchases, but we will not be able to inform you on the marketing initiatives and events described above and we could not understand your interests and offer you a more personalized shopping experience.

 4. HOW WE SHARE PERSONAL DATA

We share your personal data collected with our affiliates, distributors, and franchisees, including those located in other countries, and with other companies that provide services on our behalf (as further described below), whether upon our direction or the direction of a third party .We will only provide those companies and organizations the personal data required to deliver the services and will prohibit them from using that personal data for any other purpose.

4.1 Sharing with data processors

When you purchase our products or use our online sale services your personal data may be shared by the e-commerce vendor of this Website with selected third parties who provide services to the vendor, including those that fulfill orders, ship products, process credit and debit card payments, and anti-fraud controls.

Your personal data may be shared with third parties to monitor and analyze Website activity, host Website content, provide technical and organizational services functional to the purposes above, maintain our customer database, assist in marketing, and administer emails, market analysis, surveys, contests, sweepstakes, or promotions.  Such third parties may have access to, store and process your personal data to provide those services on our behalf, which may occur in Italy, your country or abroad.  Our service providers are not authorized to use personal data for any purpose other than to provide the contracted services.

Our affiliated companies operating our brand business locally in Italy and in the other countries or online and our business partners (franchisees, distributors) operating the Points of Sales or the online sales on their websites will process your personal data for the CRM purposes as data processors upon our instructions

4.2 Sharing with other third parties

Your personal data may need to be shared with companies providing payments management, and anti-fraud controls acting independently as data controllers, for providing you with the online sales services.

In case of any asset or corporate operations (e.g. merger or acquisition, our reorganization or liquidation), customer data will likely be one of the transferred assets and we may share them with any of our legal successors, to the extent permitted by law based on our legitimate interest.  Your personal data will remain subject to any pre-existing privacy policy unless you agree otherwise.

We may also disclose your personal data to third parties (i) when required by a law of the EU or of a Member State (ii) in response to legal proceedings; (iii) in response to a request from a law enforcement agency under legitimate basis; or (iv) to protect our rights, privacy, safety or property, or the public.

Moreover, to the extent permitted by law, we may also communicate personal data to third parties in the event of a complaint about your use of the Website and, where we deem it necessary to investigate, prevent or take measures regarding illegal activities, suspected fraud, or where we believe, at our sole discretion, that your use of the Website is incompatible with the terms of the Website.

The full list of data processors appointed and of the third parties to which data are communicated can be obtained at the contact point below (point 13).

5. CHILDREN'S PRIVACY

This Website is a general audience site; however, our services are intended for people aged 18 years or older. We do not knowingly request or collect, use, and disclose personal data provided by a person under the age of 18 online. In the event we learn we have collected personal data from a child, we will delete that information.

If you are under this age, please do not register or proceed with the online purchase and ask an adult (i.e. your parents or your legal guardian) to proceed with the required procedures.

6. STORAGE, ACCESSIBILITY AND TRANSFER OF PERSONAL DATA

The personal data collected through the Websites is processed mainly using electronic or web means, including web analytics services hosted by servers of our selected providers both in the European Union (e.g., Germany and Ireland, for online sales transactions on our directly managed websites) and outside the European Union (e.g., USA, for our newsletter subscription services).  In websites personal data may also be processed in hard copy. In both cases, the personal data will be feeded for the CRM purposes into our centralized and secured data base stored in Italy and is managed by our Customer Relationship Managers and marketing team in Italy and abroad.

Personal data will be accessed, on a need-to-know and under multi-level access control tools, only by authorized staff of our Boutiques, Points of Sales and of the local e-commerce vendor (e.g. staff in the digital & IT, marketing, retail, administration, security departments). This staff engaged to be bound by confidentiality obligations and expressly appointed as person in charge of the processing, as required by the applicable law. If you agreed to the processing of your personal data for the CRM purposes, the related data may be read, amended and updated by our staff and the staff at the e-commerce vendors (especially the sales and marketing personnel). The staff is based in Italy or abroad and is trained and bound by confidentiality obligations. We may use them, indeed, to collect, use and disclose the data as instructed by us.

If we need to transfer the personal data abroad for achieving the purposes of this Privacy Policy, including where the data protection legislation differs from the one applicable in your country, we take steps to ensure that these communications happen in compliance with the European data protection standards, or other local standards in the country where we collect the data, so that your data remain secure and confidential.

7. SECURITY AND CONFIDENTIALITY OF PERSONAL DATA

We have implemented appropriate measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure.  For example, when you provide any order information, we use Secure Socket Layer (SSL) technology, an encryption tool that provides security while transmitting this information over the Internet.  We also use firewall technology, password controls, and other technological and procedural safeguards in maintaining this Website.  Although we have implemented the above security measures for this Website, you should be aware that 100% security is not possible.  Therefore, your providing of your personal data is done at your own risk and, to the greatest extent permitted under applicable law, we shall have no liability because of the disclosure of your personal information due to errors, omissions or unauthorized acts of third parties during or after the transmission thereof to us. We recommend you (i) to periodically update your software for protecting data transmission over networks (for example, antivirus software) and check that your provider of electronic communication services has adopted suitable means for the security of data transmission over networks (for example, firewalls and ant spamming filters); (ii) keep confidential, and not to disclose to any else, your username and password to access to your account; and (iii) to change your password from time to time.

In the unlikely event we believe that the security of your personal information in our possession or control was or may have been compromised, we will notify you of that development as required by applicable law using any of the methods prescribed thereunder (by providing us with your email address, you hereby consent to receiving any such notification in electronic form through such email address).

8. RIGHTS IN RELATION TO PERSONAL DATA– MANAGING YOUR CHOICES

8.1 Your rights

At any time and free of charge, you may access your data, receive your electronic personal data in a structured, commonly used machine-readable format and transmit it to another data controller (data portability), have your data corrected, updated, changed, or removed (subject to exemptions which may apply).  You may update any information you have given to us by contacting us at the addresses given below. Requests to delete your data are subject to any applicable legal and document retention obligations imposed on us.

If you think there is a problem with the way we are handling personal data, you have a right to file a complaint to your national and/or any other data protection authority in the EU or the EEA.

To exercise those rights, you may send your request sending an email at contact@byyclothing.com or regular mail at the address appearing below (point 13). When contacting us, please be sure to provide us with your name, email address, mailing address and/or telephone number(s) to be sure, we handle your request correctly.

8.2   Accuracy - Keep Personal Data Updated

To allow us to serve you better we encourage you to regularly review and update your personal data.  If you are a registered user, you may access and edit your personal data through your user account settings on the Website; otherwise you may contact us (see point 13) to assist you in updating your personal data.

8.3 Managing your choices in relation to direct marketing and profiling.

If you wish to opt-out from any of the CRM purposes, marketing and/or profiling, or manage your advertising preferences, you can simply send your request to us (see point 13), or indicated below, or manage your choices account accordingly. The same procedure applies if you wish to withdraw your consentto profiling. 

 

 

9. DATA RETENTION

Personal data will be retained for the duration of the business relationship and for as long as necessary for the purposes described in this Privacy Policy (e.g., if you subscribe to a newsletter, for the duration of your subscription; if you have a user account, until you close the account). Beyond this period, your personal data will only be retained to comply with our legal and regulatory obligations (e.g, for 10 years for accounting purposes; for the duration of the mandatory retention requirements for tax purposes, etc.), or to allow us to maintain evidence of our respective rights and duties.

Your personal data processed for the CRM purposes (points 3.3) will be retained until you close your account, or you withdraw your consent to the processing of your personal data for these purposes. Personal data relating to the details of your purchases processed for profiling and marketing purposes will be retained for a limited period in line with the timing permitted by the applicable law; upon expiration of this time limit, the personal data will be deleted or permanently anonymized. 

10. LINKS, ADVERTISERS, SPONSORS & ADS

This Website may contain links to our various owned or controlled websites, as well as links to third party websites. If you elect to provide your personal data on any such linked website(s), that information will be subject to such linked website's privacy policy and security practices -  including the Websites run and managed by our approved distributors, except for the data collected therein by our distributors for the CRM purposes where our privacy policy is posted - and is not governed by this Privacy Policy. You should familiarize yourself with these other privacy policies , as we are not responsible for, and have no control over, the information submitted to, or collected, used, disclosed or otherwise processed by third party websites.

11. DATA CONTROLLER - HOW TO CONTACT US

For the purpose of this Privacy Policy and the data processing described therein please note that “We” “our”, “us” "Company" is by Y clothing®. with registered place of business in Mexico City.  As holding company and ultimate owner of several brands through its affiliates including " by Y clothing®", the Company is the data controller (as defined under the Reg.(EU) 2016/679) of the data collected at the Boutiques, Points of Sales and/or on the Websites in Italy and abroad for the CRM purposes under points 3.2 and 3.3 . The Company appointed a Data Protection Officer who may be addressed with queries and may receive claims about the processing of personal data for CRM purposes. The Data Protection Officer may be reached at Mexico City,  email: abogadosennegocios@gmail.com, Acctrendinn.mx via Instagram, or Acctrendinn via Facebook Page.

The data controller of the data collected at the local Boutique, Point of Sales and/or on the local website for the sales related purposes under point 3.1 is the by Y clothing®", Boutique, Point of Sales or online store at which you make your purchase and/or which has collected the data. The local vendor may be required to process your personal data in accordance with the data protection rules applicable in the country where it is based. Nevertheless, except in case of any conflicting mandatory rule applicable in that jurisdiction, the local vendor is committed to process your personal data according to the principles declared under this Privacy Policy.

12. UPDATING THIS POLICY - NOTICES

We reserve the right, at our discretion, to change, modify, add, or remove portions of this Privacy Policy at any time by posting such revised Privacy Policy on this page of the Website and updating the “Last Modified” date below.  It is your responsibility to review this Privacy Policy from time to time to take notice of any changes we made.  In some cases, we may provide additional notification of material changes to this Privacy Policy by adding a statement on the homepage of this Website or, for registered users, by sending a notification email or by adding a statement on their account page.  By accepting such revised Privacy Policy through a “click accept” in such notification email or account page statement (made available when required to comply with the applicable laws), or by completing a purchase on the Website or in any stores after this Privacy Policy has been revised, or, otherwise, by using or submitting information to the Website following the posting of the revised Privacy Policy, you agree to such revised Privacy Policy. As a consequence of the changes, no processing of your data will be carried out without your explicit consent if so, required by the applicable law.