TERMS AND LEGALS

A “Data Controller” as defined in article 4.7 of the GDPR , is a company that defines the purpose and method for processing personal data.

The data controller is KARL LAGERFELD International B.V. (hereinafter  as “KARL LAGERFELD”, “KARL”, “we”, “us” or “our”).

KARL LAGERFELD is a company incorporated in the Netherlands and the owner of KARL.COM, (international) stores, and the KARL LAGERFELD brand.

Registered number: 53647785

Registered office: Herengracht 182, 1016 BR Amsterdam, Netherlands

VAT registration number: NL850960678B01

For more information about how we collect, use and manage your data, please contact our ‎Customer Care team or email our Data Privacy Officer (DPO) - [email protected]

We collect personal data from you when browsing or shopping on KARL.COM or in-store. This includes:

• Fulfilling and processing purchases you have ordered
• Enabling your customer account registration on KARL.COM
• After-sales services and communications
• Customer Care inquiries
• Marketing activities (a.o.: newsletter subscriptions online or in-store, WhatsApp, SMS, or post)
• Customer experience surveys
• Omnichannel services (in-store pick-up, book an appointment and reserve in-store)
• Job recruitment (CVs and application forms)

We also collect personal data from you that we obtain from Global-e.

The data we collect and why we collect it

a. Purchasing products

WHAT: Full name, delivery and shipping addresses, telephone number, mobile number, email address, payment details.

WHY: To complete the purchase of products on KARL.COM or in-store.

When you make a purchase, we ask for the personal data needed to complete your order request, for example payment details, billing and shipping address, as well as information required to manage the return of products to us.

If you are a customer with residence outside the EU and Global-e has processed your order on KARL.COM, we do not process your personal data for this purpose.

b. Processing payments

WHAT: Name on card, card issuer, card type, card number, issue number, start and expiry dates, and CVV code; store/gift card details; payment methods; account details.

WHY: To process payments for the purchase of products.

We use your payment data to check that you are the authorized user of the payment method selected, and to meet the payment requirements of your card/account issuers. We also collect payment data to process refunds and to keep a record of financial transactions for tax purposes. Please note, we do not store CVV codes. For a list of payment providers for your region, visit the Customer Care area.

If you are a customer with residence outside the EU and Global-e has processed your order on KARL.COM, we do not process your personal data for this purpose.

c. Anti-fraud activities

WHAT: Fraud checks or flags raised for transactions, payment card refusals, suspected crimes, complaints.

WHY: To protect you, our customers, and our company against criminal activities and risk.

The data we collect ensures we can meet our legal obligations to you and others, and can defend ourselves against fraudulent or criminal activity. Please see the “Anti-fraud checks” section below for more information.

d. Account registration and use of KARL services

WHAT: Full name, address, telephone number, mobile number, email address, date of birth.

WHY: To create a KARL account and enable the use of all services offered in-store, on KARL.COM and omnichannel services (in-store pick-up, book an appointment and reserve in-store).

When you request any KARL service, we collect the personal data needed to perform and fulfill each specific request and service.   

e. Customer Care

WHAT: Full name, address, contact number, mobile number, email address, details of query or issue you have raised.

WHY: To respond to inquiries made to our Customer Care team.

We use the personal data you have provided to investigate and resolve your request for support or assistance.

f. Account verification

WHAT: For the account holder only, email address, surname, postcode, telephone number and order information or history.

WHY: To enable access to your KARL account.

If you would like to change your account details but do not have access to your KARL account or if you call our Customer Care team, you will be asked to provide information to verify that you are the account holder.

g. Marketing activities

WHAT: Full name, email address, telephone number, postal address.

WHY: To send you marketing communications, including the latest news from KARL LAGERFELD, new arrivals, exclusive products, offers and promotions, as well as market research and satisfaction surveys related to the product(s) or services you have purchased as a KARL customer. You can always opt out by unsubscribing in the email you receive or by updating your preferences in My Account on KARL.COM.

h. Cookies

WHAT: Our website logs a variety of information about visitors, including internet protocol (IP) addresses, browser type, internet service provider (ISP) information, referring/exit pages and date/time stamp.

WHY: When you browse our website, we may use “cookies” to keep track of your visit and give you a better browsing experience. We may use this information to analyze trends, administer the website, track your movement around the website and gather broad demographic information. We may also use this information to inform our marketing and future business strategies and it may therefore be shared with third parties such as our advertisers. Any information we do share will be in a statistical form and will not identify you as an individual.

Where we collect personal information through cookies, the legal basis for this use is that you have given your consent to this.

For more detailed information about our use of cookies and similar technologies, please visit our Cookie Policy.

i. Social media

WHAT: Photos, videos, hashtags, comments, direct messages.

WHY: To respond to customer inquiries, complaints and feedback via social media.

We monitor our customers’ views, reactions and engagements with the KARL LAGERFELD brand across our social media channels (Facebook, Instagram, Twitter, LinkedIn, TikTok, Pinterest) to respond to any inquiries, issues, engagements or positive feedback. We will always ask for your permission to use a photo or video. The social media channels are integrated into our website only as a link to the relevant services. After clicking the integrated button, you will be forwarded to the site of the relevant provider, i.e. only then will user information be transferred to the relevant provider. Information on dealing with your personal data in the use of these websites can be found in the relevant data protection terms and conditions of the provider.

j. Recruitment

WHAT: Curriculum vitae (CV), application form and cover letter (if required).

WHY: To process your application for a job role at KARL LAGERFELD.

When you send your CV and application form to be considered for a position at KARL LAGERFELD, we will use the information provided exclusively for recruitment purposes. Personal data relating to your application may be transferred to third-party providers of recruiting and application software. Your application data will be kept for a maximum of 6 months for open vacancies and a maximum of 4 weeks after the closing date of a specific position. After these periods, your application data will be deleted.

k. Health and safety

WHAT: Details about an accident or injury on our premises, or health and safety incident.

WHY: To ensure you get the help you need, to inform emergency services, and to support with any insurance claims.

Marketing communications

We send marketing communications via email, WhatsApp, SMS, post, etc. Your consent is provided by making a purchase or by opting in to our marketing communications, which include news from KARL LAGERFELD, new arrivals, exclusive products, offers and promotions, as well as market research and surveys to determine your level of satisfaction and improve services.

If you no longer want to receive communications from KARL LAGERFELD or if you wish to modify or limit the ways you are contacted, you can stop or edit these communications at any time from My Account, by contacting our Customer Care team or by following the “unsubscribe” link at the bottom of each digital communication. Please note, you may temporarily continue to receive communications after editing your preferences while we process your request.

We also use data from your browsing and purchasing behavior to personalize the marketing communications that we send to you. By analyzing data from your profile as a user of KARL.COM, we ensure that you will receive the information that is most relevant and interesting to you.

For all of the above, we will process your personal data through IT and electronic tools that guarantee high safety standards, in full compliance with current legislation. We have therefore constituted a Cookie Policy.

Personalized shopping on KARL.COM

We use personalization to tailor product searches, product recommendations, offers and services that reflect your interests, as well as allowing us to improve our offering to you. Personalization involves collecting and analyzing your shopping and browsing habits on KARL.COM to provide you with a personalized online shopping experience. By accepting functionality cookies, you consent to us analyzing your browsing and purchasing behaviors. Please visit our Cookie Policy for more information.

To ensure we can provide this personalized experience, we recommend keeping your personal details in My Account up to date.

Anti-fraud checks

If you purchase products from KARL LAGERFELD by credit or debit card, we may use your personal data to carry out anti-fraud activities. We have a legitimate interest in conducting anti-fraud checks to prevent and pursue any fraudulent activity. For internal administrative purposes, data may also be processed by companies belonging to the business group of which KARL LAGERFELD is a member.

Links to other websites from KARL.COM

KARL.COM may contain links to third-party websites. However, this privacy policy applies exclusively to KARL.COM. We cannot be held accountable nor do we have any control over whether third-party sites adhere to data protection regulations. We, therefore, recommend you read their independent privacy policies.

Your personal data will be processed by KARL LAGERFELD employees who are specifically trained and authorized to process it. Your personal data will also be processed by our third-party suppliers who have been selected by us for their proven reliability and high-level privacy and security standards.

These third parties include:

• Financial services
• Internet providers
• IT and telematic service providers
• Couriers
• Content and referral links
• Lawyers
• Marketing agencies

Please note, some of our suppliers may be based in non-EU countries. In this case, the transfer of your personal data to these third countries will be carried out in compliance with the articles 44 to 47 of the GDPR data transfer-requirements in order to meet a similar adequate protection level as in Europe. With these third parties we have arranged a lawful data transfer mechanism as defined in article 46 of the GDPR and we have contractually arranged adequate technical and organizational measures to safeguard the data. Finally, your data may be processed by the police and judicial and administrative authorities, in accordance with the law, for:

• The detection and prosecution of crimes
• The prevention of and protection from threats to public security
• Allowing KARL LAGERFELD to ascertain, exercise or defend a right in court
• Any other reason related to the protection of the rights and freedoms of others.

We keep your personal data for a limited period of time, after which it will be deleted or otherwise rendered anonymous in an irreversible way. This time period for storing your data depends on the purpose for which the data was collected. For example:

• Data collected to process purchases on KARL.COM and in-store – kept until the completion of administrative and accounting formalities. Billing data is kept for 10 years from the billing date.
• Data for your KARL LAGERFELD account – stored until you cancel your account.
• Data relating to payments – dependent on the certification of the payment and the completion of related administrative and accounting formalities as a result of the expiration of the right of withdrawal and terms applied for contesting the payment.
• Data collected for omnichannel services – kept until the service has been fulfilled or cancelled.
• Data relating to Customer Care requests – kept until your request is met.
• CVs and application forms – stored for 6 months from submission with your consent.
• Data used for marketing communications – retained until the termination of service or until the user unsubscribes from the service.
• Data used to personalize KARL.COM and in-store and to show customized content – stored until the user requests the activity to stop and, in any case, within 2 years from the last interaction of any kind by the user.

In principle we do not forward or share personal data to recipients in third countries (i.e. countries outside the EU). If we should, we assure you that we do it lawfully and assure an adequate level of data protection as required in articles 44 to 49 of the GDPR.

At any time, you can exercise your privacy rights as included in articles 12 to 23 of the GDPR regarding the processing of your personal data. This includes:

• Requesting to know what data we have about you in our possession, how it was collected, and how it is used.
• Withdrawing your consent to processing your data – on receiving your request, it is our duty to stop processing your personal data related to the specific consent as soon as possible, but different processing or that based on other assumptions will continue to be carried out in full compliance with the provisions in force.
• Objecting to your data being processed – you are required to explain the reasons for your objection to our processing your data and we will evaluate these reasons before accepting your request.
• Limiting the use of your data – in this case, we will keep your personal data but will not process it, unless it is subject to a different request by you and in the case of exceptions established by law. Processing of data can be limited when disputing the accuracy of your personal data, when the processing is illegal but you oppose the cancellation of your data, when we no longer need your personal data but you need to exercise your right in court, and when you oppose your data’s processing, in the period in which we evaluate the reasons for your request.
• Deleting your data – where (i) we don’t need your personal information anymore; (ii) you withdraw your consent to our use of your personal information and we have no other legal basis to keep your personal information; (iii) you have asked us to review and explain our legitimate interests to you and we don’t actually have a valid legitimate interest to do what we are doing; (iv) our use of your personal information is illegal; (v) we have to delete your personal information to comply with our legal obligations.
• Modifying, updating or correcting your data.
• You can also request to receive your personal data held by us in a format readable by electronic devices and, where technically possible, we can transfer your data directly to a third party chosen by you.

You can complete any of the above via My Account or by contacting our Customer Care team. Please note, to ensure that your data is not at risk of illegitimate or fraudulent use by third parties, we will ask you to confirm your identity before accepting your request to exercise one of the rights listed above or before disclosing any personal data.

If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. As KARL LAGERFELD is registered in the Netherlands, you can file a complaint with the Dutch Data Protection Authority (“Autoriteit Persoonsgegevens”) or with your national Data Protection Authority.   

We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. Our security measures guarantee:

• The pseudonymization or encryption of your data
• The confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them
• The ability to restore data in the event of a data breach.

We are committed to testing, verifying, and regularly evaluating the effectiveness of our technical and organizational measures to ensure the ongoing security of your data.

We also have rigorous procedures in place to respond to any suspected data security incident and will notify you, and any applicable regulator, of a suspected breach where we are legally required to do so.

Please note, not all methods of contacting us (email or post) are entirely secure and therefore your personal data may be at risk of interception. Your personal data is also at risk if a malicious third party gains access to your account on our customer portal or to any other place where your personal data is stored, such as your email account.

We therefore recommend that you keep your personal information secure, including choosing a secure password for your KARL.COM account and your email account. We also recommend using a unique password for every account where your personal data is stored not disclosing your passwords to anyone.

We operate CCTV monitoring to ensure staff and customer safety and for the prevention and detection of crime. We may use your personal information for the purposes of bringing or defending any legal proceedings or meeting any legal or compliance obligations we have. The CCTV policy sets out the details of how we collect, use and store CCTV images.

For more information about how we collect, use and manage your data, please contact our ‎Customer Care team or email our Data Privacy Officer (DPO) - [email protected]

Our Privacy Policy is subject to changes and additions in line with new services offered by KARL LAGERFELD or new regulatory measures. While we will try to update you with any changes as quickly as possible, we recommend familiarizing yourself with the policy on this web page from time to time.

This policy was last amended in July 2022.

Supplemental Notice for California Residents:

This Supplemental Notice for California Residents only applies to our processing of personal information that is subject to the California Consumer Privacy Act of 2018 (“CCPA”). The CCPA provides California residents with the right to know what categories of personal information KARL LAGERFELD has collected about them, and whether KARL LAGERFELD disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding twelve months. California residents can find this information below:

The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in “DATA COLLECTION AND PURPOSE”.

Additional Privacy Rights for California Residents

“Sales” of Personal Information under the CCPA. For purposes of the CCPA, KARL LAGERFELD does not “sell” personal information, nor do we have actual knowledge of any “sale” of personal information of minors under 16 years of age.

Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To authorize an agent, provide written authorization signed by you and your designated agent and contact us for additional instructions.

Verification To protect your privacy, we will take steps to reasonably verify your identity before fulfilling your request. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, or to answer questions regarding your account and use of our services.

If you are a California resident and would like to exercise any of your rights under the CCPA, please contact us using the information set forth in “FURTHER INFORMATION.” We will process such requests in accordance with applicable laws.

De-Identified Information. If we create or receive de-identified information, we will not attempt to reidentify such information, except to comply with applicable law.

Supplemental Notice for Nevada Residents:

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. To the extent applicable, you can exercise this right by contacting us with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.

If you are a resident of Japan, you may request us under the Japanese Act on Protection of Personal Information to:

• notify you about the purpose of use of your personal data;
• disclose your personal data;
• make any correction to your personal data;
• suspend the use, or delete your personal data (including the suspension of our provision of your personal data to third parties); and
• disclose records with regards to our provision of your personal data to third parties.

If you wish to make such request, please contact our Customer Care team or email our Data Privacy Officer (DPO).

If you are a resident of Canada, the following applies in addition to this privacy policy as a requirement under Canadian privacy law.

KARL LAGERFELD International B.V (“we”, “us” or “our”) controls your personal data collected in accordance with this privacy policy.

Your personal data is maintained on our servers, or those of our service providers and is accessible by our authorized employees, representatives and service providers as necessary for the purposes described in this privacy policy.

You may request information on the countries outside of Canada where our service providers may be located.

We collect your personal data with consent except as otherwise permitted or required by law. We collect consent to send marketing messages to you and you may unsubscribe from receiving these messages at any time.

Your privacy rights include:

• Requesting to know what data we have about you in our possession, how it was collected, and how it is used.
• Withdrawing your consent to processing your data – on receiving your request, it is our duty to stop processing your personal data related to the specific consent as soon as possible, but different processing or that based on other assumptions will continue to be carried out in full compliance with the provisions in force.
• Modifying, updating or correcting your data.

If you wish to exercise your privacy rights, please contact our Customer Careteam or email our Data Privacy Officer (DPO).