Geox Privacy Policy

At Geox, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you interact with our brand, products, and services, including through our website, mobile applications, and physical stores (collectively, the “Services”). Please read this policy carefully to understand our practices.

1. Data Controller
The data controller for the processing of your personal data is Geox S.p.A. For any inquiries regarding the processing of your personal data, you may contact our Data Protection Officer (DPO) through the contact channels available on our website.

2. Information We Collect
We may collect various types of personal data, including:

  • Identification and Contact Data: Such as your name, surname, shipping and billing address, email address, and telephone number.
  • Account and Profile Data: Information you provide when creating an account, including login credentials, preferences, and wish lists.
  • Transaction and Financial Data: Details of purchases you make, payment information (though full credit card details are processed directly by secure third-party payment service providers), order history, and invoicing details.
  • Technical and Usage Data: When you use our digital Services, we automatically collect information such as your IP address, browser type, device identifiers, operating system, browsing behavior on our sites (pages viewed, time spent, etc.), and approximate location data.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication history with our customer service.

3. How We Collect Your Data
We collect data:

  • Directly from you: When you make a purchase, create an account, subscribe to our newsletter, participate in promotions or events, or contact our customer service.
  • Automatically: Through cookies and similar tracking technologies when you navigate our website. For more details, please refer to our dedicated Cookie Policy.
  • From third parties: Such as analytics providers, advertising networks, payment service providers, and partners who provide us with data in compliance with applicable laws.

4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes:

  • To fulfill a contract with you: To process and deliver your orders, manage your account, provide customer support, and ensure the correct functioning of our Services. Legal basis: Contractual necessity.
  • For legitimate business interests: To improve our Services, websites, and products; to prevent fraud and ensure security; to manage business operations; and for internal administrative purposes. Legal basis: Legitimate interest.
  • To comply with legal obligations: To meet tax, accounting, and other regulatory requirements. Legal basis: Legal obligation.
  • Based on your consent: To send you direct marketing communications (via email, SMS, or push notifications) about our products, promotions, and news, and for certain types of cookies. You may withdraw your consent at any time. Legal basis: Consent.

5. How We Share Your Data
We may share your personal data with:

  • Service Providers: Trusted partners who perform services on our behalf, such as payment processing, order fulfillment, IT and infrastructure services, marketing agencies, and customer service.
  • Group Companies: Within the Geox Group for centralised administrative, operational, and reporting purposes.
  • Legal and Regulatory Authorities: When required by law or to protect our rights, property, or safety, or that of others.
  • Business Transfers: In connection with a merger, sale, restructuring, or acquisition of our company or assets.
    We require all third parties to respect the security of your data and to treat it in accordance with the law and our instructions.

6. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with this Privacy Policy and applicable data protection laws.

7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods vary depending on the data type and purpose. For example, transaction data is retained as required by tax laws, while marketing contact data is kept as long as you remain an active customer or until you unsubscribe.

9. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Access: The right to request a copy of the personal data we hold about you.
  • Rectification: The right to correct inaccurate or incomplete data.
  • Erasure (“Right to be Forgotten”): The right to request deletion of your data under certain circumstances.
  • Restriction of Processing: The right to request we suspend processing of your data.
  • Data Portability: The right to receive your data in a structured, machine-readable format and to transmit it to another controller.
  • Objection: The right to object to processing based on our legitimate interests or for direct marketing purposes.
  • Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time.
    To exercise these rights, please contact us using the details provided in the dedicated section of our website. We may need to verify your identity before responding. You also have the right to lodge a complaint with a supervisory authority.

10. Children’s Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

11. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal obligations. The updated version will be posted on our website with an updated effective date. We encourage you to review this page regularly.

12. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please reach out to us through the contact channels available on our main website.