Privacy Policy

PRIVACY POLICY

This page describes how the personal data of users (“Users”) of https://www.mandarinaduck.com (the “Website”) is processed. Users may browse the Website, subscribe to the newsletter, create an account, make purchases through the online store and/or contact customer service.

This Privacy Policy (the “Policy”) is provided in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Italian Legislative Decree No. 196/2003 (the “Italian Privacy Code”) to individuals interacting with the online services of Mandarina Duck S.p.A.

This Policy applies only to this Website and not to third-party websites, apps or content accessed through links on the Website. Such third parties may apply different data protection policies, which Users should review before providing any personal data.

This Policy describes the methods, periods and nature of the information the Data Controller must provide when processing Users’ personal data.

DATA CONTROLLER

The Data Controller is Mandarina Duck S.p.A., with registered office at Via Tortona 27, 20144 Milan, Italy, Tax Code and VAT Number 00153020029 (“Mandarina Duck” or the “Data Controller”). For questions about personal data processing, Users may use the contact details in the “Data Subject Rights” section.

PERSONAL DATA PROCESSED

Data Collected by the Data Controller – Browsing Data

The IT systems and software procedures used to operate this Website collect certain personal data as part of their normal operation. Transmission of such data is inherent in the use of Internet communication protocols. Although not collected to identify individuals, this information may, through processing and association with other data, allow Users to be identified.

Such data includes IP addresses or domain names of devices used to connect to the Website, Uniform Resource Identifier (URI) addresses of requested resources, the time of requests, the methods used to submit requests to the server, response file sizes, numerical server response status codes (success, error, etc.), and other parameters relating to the User’s operating system and IT environment (“Browsing Data”).

Browsing Data is used solely to obtain anonymous statistics about Website usage and to check that the Website functions correctly. It is deleted immediately after processing. It may also be used to establish responsibility in the event of suspected cybercrimes against the Website. Except in such cases, web traffic data is currently retained for no longer than seven days.

Behavioral Analytics Tools

Subject to consent through the cookie banner, the Website uses behavioral analytics tools to analyze, in aggregated and, where possible, pseudonymized form, how Users interact with its pages, including browsing paths, mouse movements, scrolling, clicks and form completion.

• Online identifiers (such as cookie IDs, session identifiers and pseudonymized user IDs)
• Device and browser information (such as browser type and version, operating system, screen resolution and language settings)
• Website interactions (such as pages visited, time spent on pages, navigation sequences, click and scroll events, and interface interactions)
• Approximate location inferred from IP addresses, processed using provider-supported minimization or masking techniques where configured by the Data Controller

Session recordings and heatmaps are not intended to identify Users directly. However, they may constitute personal data when associated with online identifiers. In such cases, processing is based on consent, as explained under “Purposes and Legal Bases of Processing”.

Cookies

The Website uses cookies and similar technologies to collect and store information about access to, use of and interactions with the Website. For more information, please refer to the Extended Cookie Policy published on the Website, prepared in accordance with the Italian Data Protection Authority’s provision of 10 June 2021. The Cookie Policy supplements this document.

Use of Cookies and Behavioral Tracking Tools

The Website uses cookies and tracking technologies associated with Microsoft Clarity, which enable advanced statistical and usability analysis, including session replay, heatmaps and analytics. These cookies are used only after the User has given consent through the cookie banner on their first visit or subsequently through the cookie preference management panel.

For details about cookie categories, behavioral analytics tools, cookie types, duration, purposes, legal bases, possible transfers outside the EU and how to change or withdraw consent, please see the updated Cookie Policy, accessible from the footer of each Website page and from the initial cookie banner.

Data Voluntarily Provided by Users – Personal Details, Contact Details and Purchase Data

On the Website, Users may send messages and requests to Mandarina Duck, subscribe to the newsletter, create an account and purchase products online. Voluntarily sending messages or requests entails collecting the personal data needed to respond, together with any other personal information included in the communications.

For these activities, Users must provide the information requested in the relevant Website forms. Fields marked with an asterisk (*) are mandatory; failure to complete them prevents the relevant procedure from being completed.

• Personal Details: first name, last name, residential address, country of residence, nationality and date of birth
• Contact Details: telephone number and email address
• Purchase Data: products purchased, place, date and time of purchase, purchase history, delivery details, payment and billing methods, and personal information contained in communications about purchased products or products of interest

Browsing Data, Personal Details, Contact Details and Purchase Data are collectively referred to as the “Data”.

PURPOSES AND LEGAL BASES OF PROCESSING

Account Registration and Management

Data provided when registering on the Website, including shipping and payment details, is processed to allow Users to create an account, add products to a wishlist, complete purchases and manage their personal area. The Data Controller may receive identification and contact details from Facebook or Google when Users sign in through Facebook or Google+. Account authentication credentials are known only to the User, who must keep them secure under their sole responsibility.

Registration offers benefits such as invitations to exclusive promotions, birthday discounts and easier checkout. Registration is not required to purchase online; Users may check out as guests. Processing is necessary to perform a contract, take pre-contractual steps requested by the User and comply with related legal obligations. Without the required data, account registration cannot be completed.

Responding to User Requests

Data is processed to respond to requests submitted through the contact details or forms on the Website, including the “Contact Us” form and Customer Service communications. The legal basis is the necessity to perform a contract, take pre-contractual steps at the User’s request and comply with related legal obligations. Without the necessary Data, requests cannot be answered.

Online Purchases

Data is processed to manage orders, send informational and service emails about order status, arrange deliveries, provide pre- and after-sales customer support, and comply with legal obligations. Processing is necessary to perform a contract, take pre-contractual steps at the User’s request and comply with related legal obligations. Users who refuse to provide the required Data cannot complete a purchase.

Customer Satisfaction Surveys

Within 48 days of a purchase and/or 30 days of contacting Customer Service, Users may receive email surveys asking them to evaluate Mandarina Duck products and/or their customer service experience. Participation is voluntary, and collected Data may be used to improve products and services.

The legal basis is Mandarina Duck’s legitimate interest in customer satisfaction, balanced against Users’ interests, since customers can reasonably be expected to value quality, defect-free products and qualified customer assistance.

Analysis of Website Navigation and Interaction Through Behavioral Analytics Tools

Subject to consent, Data, particularly Browsing Data and online identifiers collected via cookies and similar technologies, may be processed to analyze Website navigation and interactions in aggregated form, including browsing paths, the most viewed or clicked page areas and usability issues. Tools may include session replay, heatmaps and analytics.

The legal basis is consent to non-essential cookies and tracking technologies under Article 6(1)(a) of Regulation (EU) 2016/679 and Article 122 of Italian Legislative Decree No. 196/2003, as amended. Consent is obtained through the cookie banner and preference management panel. Without consent, the tools and associated tracking are not activated.

Providing Data for this purpose is optional. Refusing or withdrawing consent does not affect browsing or core Website features, including online purchases, but prevents the Data Controller from carrying out these behavioral analyses.

Data collected for this purpose is retained for no longer than 12 months from collection, in line with the storage limitation principle and the Italian Data Protection Authority’s guidance, unless shorter periods apply under technical settings or provider policies. Users may withdraw consent at any time through the cookie preference management area linked in the footer or initial banner. Withdrawal does not affect the lawfulness of prior processing.

Soft Marketing Communications

Data, particularly email addresses provided at registration and checkout, may be used to send commercial, promotional and advertising emails relating exclusively to Mandarina Duck branded products similar to those already purchased or used by the User.

Under Article 130(4) of the Italian Privacy Code, this processing is based on Mandarina Duck’s legitimate interest in informing customers about new products, services, promotions and initiatives. This interest is considered balanced with Users’ interests, since customers may reasonably expect updates about related Mandarina Duck products and services.

Users may object at any time, easily and free of charge, using the instructions in each commercial message or the Data Controller’s contact details below. Objection does not affect the lawfulness of prior processing or future purchases.

Newsletter and Marketing Communications

Data is processed to manage subscriptions to the Mandarina Duck newsletter and send information, promotions, commercial and advertising messages by email and/or SMS about Mandarina Duck products, events, exceptional store openings or closures, catalogues, event invitations and special promotions.

Newsletter processing requires the User’s explicit, freely given and informed consent, provided through the relevant checkbox in registration or contact forms or through an express request in the “Newsletter Subscription” section. Refusing consent does not prevent online purchases, browsing, information requests or non-profiled communications.

Users may withdraw consent at any time by contacting Mandarina Duck using the details in the “Data Subject Rights” section. Withdrawal does not affect the lawfulness of processing carried out before it.

Profiling

Subject to consent obtained during checkout, Data relating to products purchased, favorited and/or added to a wishlist may be processed by automated means for profiling, to analyze purchasing choices, personalize commercial and promotional communications, and suggest relevant products online and in Mandarina Duck stores.

Profiling does not involve automated decisions producing legal effects concerning Users. It requires explicit, freely given and informed consent through the relevant Website checkboxes. Refusal does not prevent purchases, browsing, information requests or non-profiled communications.

Users may withdraw consent at any time using the contact details in “Data Subject Rights”. Withdrawal does not affect processing lawfully carried out beforehand. Where consent preferences are provided more than once, the most recent choice prevails.

Legal Claims and Defense

Where necessary, Data may be processed to comply with legal obligations and to establish, exercise or defend the Data Controller’s rights in judicial or arbitration proceedings concerning disputes over contracts entered into with it. The legal bases are compliance with legal obligations and the Data Controller’s legitimate interest in legal defense, balanced against Users’ rights and freedoms.

METHODS OF DATA PROCESSING

Data is processed under appropriate instructions from the Data Controller exclusively by authorized employees and collaborators, or companies expressly appointed as Data Processors. These include IT providers managing mandarinaduck.com (such as Keros Digital SA), newsletter platforms (such as Klaviyo), marketing automation services (such as Salecycle), and affiliated companies operating Mandarina Duck franchise stores.

Franchise affiliates may receive the Data of Users who have created an account and/or purchased online to support them in Mandarina Duck stores with purchases, assistance and warranty requests. Affiliates outside Italy are established in EU countries and/or countries covered by a European Commission adequacy decision; otherwise, they have entered into the European Commission’s approved Standard Contractual Clauses as safeguards for international transfers.

Appropriate security measures are adopted to prevent Data loss, unlawful or improper use and unauthorized access.

DISCLOSURE OF PERSONAL DATA

Where necessary for specific processing purposes, Data may be disclosed to third-party ancillary service providers, such as communication agencies preparing and sending promotional communications, shipping companies and carriers delivering online orders, and companies appointed to repair customers’ products. Depending on the circumstances, these parties act as independent Data Controllers or Data Processors under a specific written appointment.

TRANSFERS TO THIRD COUNTRIES

Data may be transferred abroad only where the User requests delivery of products purchased online outside Italy. If the destination country is not covered by a European Commission adequacy decision, the transfer is based on the derogation for the necessity of performing a contract between the Data Controller and the User.

DATA RETENTION PERIOD

Data is retained only for the period necessary to achieve the purposes for which it is processed. In particular:

• Purchases and contract performance: for the applicable statutory limitation period
• Legal defense: for 10 years after the end of the contractual relationship
• Commercial, promotional and newsletter communications: for a maximum of 48 months from newsletter subscription, renewable for an equivalent period whenever the User renews consent following a specific request sent before expiry
• Soft marketing: in identifiable form only as long as strictly necessary, and for a maximum of 48 months from collection
• Customer satisfaction surveys: for a maximum of 48 months after each purchase
• Profiling: for a maximum of 48 months from collection

Data may be retained longer where required to comply with legal or regulatory obligations and/or for the protection of rights.

DATA SUBJECT RIGHTS

Users have the right, at any time, to:

• Access their personal data
• Request rectification, erasure or, where applicable, restriction of processing
• Object to processing
• Withdraw consent
• Where applicable, receive Data provided to Mandarina Duck in a structured, commonly used and machine-readable format and transmit it to another Data Controller without hindrance
• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or seek judicial remedies

Users may also request a complete list of Data recipients at any time. To exercise these rights or request clarification, please contact Mandarina Duck by email at md.privacy@mandarinaduck.com or by post at Via Tortona 27, 20144 Milan, Italy.

UPDATES TO THIS PRIVACY POLICY

In the event of substantial changes to this Policy, the Data Controller will notify Users by email and/or publish a notice on the Website to explain the changes and allow Users to exercise the rights described above, where applicable.

COOKIE POLICY

Behavioral Analytics Tools

The Website uses third-party behavioral analytics tools that rely on cookies and similar technologies to collect information about how Users interact with Website pages, with the aim of improving its structure, content and usability.

These tools allow the Data Controller to:

• Analyze Users’ browsing paths in aggregated form
• Display heatmaps showing the most viewed or clicked page areas
• Replay browsing sessions in pseudonymized form to identify potential usability issues
• Obtain statistics on individual pages and Website features

Cookies and identifiers used by these tools generally include:

• Cookies for analyzing and measuring Website usage
• Session or persistent cookies of varying duration, for example from a few minutes up to 12 months depending on service settings
• Online identifiers associated with browsers or devices to distinguish visits and sessions

These cookies are not strictly necessary for the Website to function and are installed only with consent given through the cookie banner or preference management panel. Without consent, behavioral analytics cookies will not be activated.

Cookie Consent Management

Users may:

• Give consent by selecting the relevant behavioral analytics cookie category in the initial banner or preference management panel
• Refuse or withdraw consent at any time through the “Cookie Settings” link in the Website footer or the relevant banner function
• Change browser settings to delete or block cookies already installed, noting that this may affect some Website features

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

COOKIE BANNER

This Website uses essential cookies necessary for its proper functioning and, subject to your consent, analytics and profiling cookies, including third-party cookies, to measure and improve Website performance and analyze your browsing experience through advanced tools such as session replay, heatmaps and aggregated statistics.

You can accept all cookies, reject non-essential cookies or select your preferred cookie categories. You can change your preferences at any time by visiting “Cookie Settings”. For more information, please refer to our COOKIE POLICY and PRIVACY POLICY.

Information updated on October 2026