Privacy Policy
(EFFECTIVE AS OF 05/10/2021)
The Oakley website available at the following link oakley.com (hereinafter, the "Website") is operated by Luxottica Group S.p.A., acting as data controller (hereinafter, "Luxottica") in the processing of your personal data as set out in this data protection policy (hereinafter, the "Data Protection Policy").
If you would like to learn more about the processing of your personal data by Luxottica, please read the following sections of the Data Protection Policy carefully.
1. An introduction to how we use your personal data
This Data Protection Policy describes how Luxottica collects and processes the personal data of users of the Website (hereinafter, "user", "users", "data subject" or "you") in accordance with the European Union General Data Protection Regulation 2016/679 (hereinafter, the "GDPR") and Legislative Decree 196/2003, as most recently amended and supplemented (hereinafter, the "Privacy Code").
As explained below, Luxottica processes your personal data in order to provide you with its products and services and to enable you to take part in engagement programs, prize competitions and events organized by Luxottica for its customers. If you wish to receive the latest news, offers and promotions about the Luxottica world, Luxottica will process – with your consent – your personal data to send you marketing communications, including communications personalized according to your preferences and interests. In any case, Luxottica will process your personal data securely, adopting all appropriate security measures and allowing access to your personal data only to authorized persons and to third parties located both in the European Union and in the United States, in a manner compliant with the applicable data protection laws.
All personal data you provide through this website is used exclusively for the purposes and in the manner described below.
2. What kind of personal data do we use and where is it collected?
Luxottica processes personal data collected directly from you and from other sources, as indicated in the categories of personal data listed below (hereinafter, collectively referred to as "Personal Data"):
2.1 Personal Data provided directly by you
Luxottica processes the following categories of Personal Data provided directly by you:
- Identifiable information provided during the registration process, when creating an account on the Website or when completing a purchase order or enrolling in Luxottica's engagement programs, prize competitions and events, such as first and last name, email address, user ID, password, gender, country of residence, postal address and telephone numbers;
- Financial information and credit card data for the purchase of products through the Website;
- Information contained in any correspondence or request sent by you to Luxottica or requested by Luxottica when problems are reported with our service on the Website or with purchased products;
- Information relating to your social network profile, if public and if you decide to access the Website through social network applications or to link your Luxottica account to your public profiles available on social networks, and to share your actions through the Website on those channels by means of the relevant plug-ins (e.g. Facebook Connect, Like, sharing on Facebook, etc.). If you decide to share such information, the Personal Data published on your social network profile will be collected by the website and processed for the corresponding functions. Therefore, the use of such plug-ins involves the sharing of the corresponding actions and information on the relevant social networks.
2.2 Personal data obtained from automatic tracking systems when browsing the website and using its services.
Luxottica processes the following categories of Personal Data collected through the automatic tracking system when you browse the website and use its services:
- Information relating to the use of the website. For security reasons, Luxottica processes the log files relating to each session when the user logs in to their account, as well as information on payment transactions that will be processed through Luxottica's electronic payment provider;
- Browsing information collected while browsing the website. Luxottica uses certain technologies (for example, cookies and automatic tracking systems) that automatically collect certain information relating to the way the user uses the Website, such as the IP address or other unique code of the device (computer, mobile phone or other devices) used by the user to browse the Website, identification as a registered user or not, technical information that may include the URL from which the user comes, browser information, and language. This information helps us to continuously improve the browsing experience and the purchasing mechanisms for Luxottica products and services and to monitor the proper functioning of the Website. Such information includes only statistical data relating to the actions performed by the user and is not intended to be associated with the user's identifying data. In any case, browsing data can identify the user only if combined with identifying personal data.
For further information on the use of Personal Data collected through cookies and tracking systems, please read Luxottica's Cookie Policy available here.
3. For what purposes and why do we use your personal data?
Luxottica processes your personal data for the following purposes:
3.1 Contractual purposes - We must be able to provide you with our products and services
Luxottica processes your Personal Data for the purposes necessary to provide the services and products offered through the Website, and in particular for the following Contractual Purposes:
- To enable the user to register on the website and create their account;
- To provide the services available through the Website (for example, managing the registration process and account access, account management, reminders for products in the cart, etc.);
- To manage the sale of products and online orders and to provide products and services;
- To process payments and electronic payments, including with reference to invoicing obligations;
- To provide sales and after-sales support services (including, for example, fraud prevention, returns, warranty and customer service), also by sending users operational communications relating to the provision of the service or products, sales and after-sales support;
- To fulfil the user's requests (for example, handling information requests, booking eye exams, providing the "share with a friend" function, notifying of the "back in stock" function, etc.);
- To enable you to join Luxottica's engagement programs;
- To enable participation in competitions, prize competitions and initiatives promoted by Luxottica.
Data processing activities for Contractual Purposes are necessary for the provision of the products and services requested. If you do not want your Personal Data to be processed for such purposes, Luxottica will not be able to provide the products and services requested.
3.2 Legal purposes - We must ensure compliance with legal obligations
Luxottica may process your Personal Data to ensure compliance with legal obligations, and in particular for the following Legal Purposes:
- Complying with the requirements of national and European laws, regulations, protocols and legislation;
- Implementing the decisions of Public Authorities.
Data processing activities for Legal Purposes are necessary as they are required by applicable laws. If you do not want your Personal Data to be processed for such purposes, you will not be able to use the Website.
3.3 Marketing purposes - You can decide whether we may use your personal data for our marketing activities
Luxottica processes Personal Data, with your prior consent, for the following marketing purposes:
- To send commercial and promotional communications and periodic updates (for example by email, telephone, SMS/MMS, postal service, social networks and newsletters) relating to Luxottica products, services, initiatives and events. In addition, pursuant to Art. 130, paragraph 4, of the Privacy Code, if you are already a Luxottica customer, Luxottica may send you commercial communications by email about similar products, events and services already provided, unless you object to such processing at the time of collection and on the occasion of each message. In fact, you can choose to opt out at any time by following the instructions available in each communication;
- To carry out statistical analyses on the customer base.
Data processing activity for Marketing Purposes is discretionary, subject to the user's consent or objection, in the circumstances referred to in the aforementioned Art. 130, paragraph 4, of the Privacy Code. You are free to decide not to provide Personal Data for Marketing Purposes, and to subsequently withdraw your consent to the processing of Personal Data already provided: in this case Luxottica will not send you marketing communications to update you on offers and promotions on Luxottica products, services and initiatives.
3.4 Segmentation and profiling purposes - You can decide whether you want marketing communications better suited to your needs
If you have given your consent to the processing of your Personal Data for Marketing Purposes, Luxottica may process Personal Data for Segmentation Purposes in order to analyze Personal Data relating to spending volume, product category, date of birth and purchasing habits in connection with the activities carried out for Marketing Purposes. This activity is carried out by Luxottica on the basis of Luxottica's legitimate interest in providing a service in line with your needs, adequately balanced with your rights given the limited amount of Personal Data processed. The processing of Personal Data for Segmentation Purposes falls within the Legitimate Interest Purposes, to which reference is made in the next paragraph.
If you consent to the installation of cookies and other technologies through the banner shown to you on our website, in addition to the above, Luxottica processes your Personal Data for profiling purposes in order to analyze your interests and preferences, including browsing data with specific reference to the pages consulted and products viewed on the Website, in order to offer personalized services and, on this basis, send targeted marketing communications. This activity is carried out by Luxottica on the basis of Luxottica's legitimate interest in providing a service in line with your needs, adequately balanced with your rights given the consent provided through the cookie banner and in line with our Cookie Policy. This activity will help Luxottica provide you with offers more in line with your profile. The legitimate interest consists of Luxottica's need to optimize marketing communications and is balanced by the need to provide you with information that we consider relevant to you.
3.5 Legitimate interest purposes - Luxottica's rights and your rights are adequately balanced, unless you object
In addition to processing for segmentation and profiling purposes, Luxottica also processes your personal data for further legitimate interest purposes and, in particular:
- To exercise or defend rights in judicial proceedings or in administrative or out-of-court proceedings concerning the rights of Luxottica, group companies and/or their representatives, shareholders, members and directors;
- To allow the technical management of the Website and its operational functions, including the resolution of any technical problems, to perform tests, updates and upgrades that cannot be carried out using non-personal data;
- To prevent or identify fraudulent activities or abuse of the Website or against the Luxottica group and/or users of the Website;
- To carry out any merger, sale of assets, transfer of all or a substantial part of its business, or financing transaction, by disclosing and transferring Personal Data to third parties or to the parties involved in the transaction as part of the transaction;
- To conduct market surveys and research relating to Luxottica products and services by post, telephone or email;
The processing of Your Personal Data in relation to the aforementioned Legitimate Interest Purposes and Segmentation Purposes is carried out pursuant to Article 6(1)(f) of the GDPR, for the pursuit of Luxottica's legitimate interest, adequately balanced with Your interest, as the data processing is carried out within the limits strictly necessary for the performance of such business activities. This data processing activity is not mandatory and you may object to such processing at any time through the means set out in this Data Protection Policy. In this case no processing of personal data will be carried out by Luxottica for such purposes, unless Luxottica demonstrates the existence of overriding legitimate grounds or the exercise of a right of Luxottica pursuant to Art. 21 of the GDPR.
4. What methods do we use to process your personal data?
Your Personal Data is processed, by electronic and manual means, only within the limits necessary for the pursuit of the purposes indicated above.
Luxottica is committed to protecting users' personal data. Luxottica informs you that the password is one of the account protection mechanisms. Therefore, users are encouraged to use a sufficiently secure password and to keep it in a safe place, limiting access to it on their computers and browsers, and logging out after visiting the Website. All Personal Data provided by users is stored on secure servers, by adopting adequate security measures to protect Personal Data from unauthorized access, to ensure the accuracy of Personal Data and to guarantee the proper use of the information. In addition, a secure system is used to authorize credit card payments and to identify fraudulent activities. Luxottica uses the SSL (Secure Sockets Layer) standard to protect the confidentiality of your personal data.
5. To whom is your personal data disclosed?
Luxottica may disclose your Personal Data to:
- third-party service providers entrusted with processing activities who provide services or support and consulting to Luxottica, with particular - but not exclusive - reference to technological, accounting, administrative, legal, insurance, IT, marketing and data analysis matters;
- companies of the Luxottica group;
- persons and authorities whose right of access to personal data is recognized by laws, regulations or provisions issued by legally authorized authorities;
- any purchaser of Luxottica and the entities resulting from mergers or any other transformation involving Luxottica; and
- competent authorities.
The above recipients will process your Personal Data as data controllers, data processors or persons authorized to process data, as the case may be.
A complete list of data processors is available, upon request addressed to Luxottica, through the means set out in this Data Protection Policy.
6. Where is your data transferred?
Luxottica may transfer your Personal Data to the recipients listed above, including outside the European Union and, in particular, to the United States. For transfers from the European Union to countries not deemed adequate by the European Commission, the Company has put in place adequate and suitable safeguards to protect Personal Data. Consequently, Personal Data is transferred in compliance with the requirements and obligations set out in applicable data protection laws pursuant to Arts. 44 et seq. of the GDPR. For further information on the appropriate or suitable safeguards and the means of obtaining a copy of them, the user may contact Luxottica through the means set out in this Data Protection Policy.
7. How long does Luxottica retain your personal data?
Luxottica retains Personal Data for the time strictly necessary for the pursuit of the purposes for which the Personal Data was collected and subsequently processed, including any retention period required by applicable legislation.
Luxottica will process your Personal Data for Contractual and Legitimate Interest Purposes for the entire duration of the contract (in the case of an account created on the Website, a purchase, or in relation to the services provided by Luxottica) and for ten (10) years from the completion of the sale or of the service provided.
Personal Data processed for legal purposes will be retained for the period strictly necessary to comply with applicable laws.
In addition, for Marketing and Profiling Purposes, including Segmentation Purposes, Personal Data will be processed for seven (7) years from the last purchase and/or the last contact with the user (for example, entry into a prize competition, participation in an event, opening of a newsletter), without prejudice to the right to withdraw the consent given or to object to the processing at any time.
8. Are you at least 16 years old?
The processing of Personal Data covered by this Policy does not concern minors under the age of 16. In the event of inadvertent registration of Personal Data relating to minors, Luxottica will promptly delete it, upon request of users.
9. How can you exercise your rights regarding your personal data?
At any time, you may exercise the following rights:
- Obtain from Luxottica confirmation of the existence of Personal Data and know its content and origin, verify its accuracy and request its supplementation, updating or rectification;
- Request the erasure, anonymization or restriction of the processing of Personal Data processed in breach of applicable laws;
- Object, in whole or in part, on legitimate grounds, to the processing of Personal Data;
- Withdraw consent to data processing (if and to the extent that such consent is necessary);
- Request that Luxottica restrict the processing of your Personal Data where:
- You contest the accuracy of the Personal Data until Luxottica has taken sufficient measures to correct or verify its accuracy;
- The processing is unlawful but the user does not want the personal data to be erased;
- Luxottica no longer needs the Personal Data for the purposes of processing, but you need it for the establishment, exercise or defense of a right;
- you have objected to processing justified by legitimate interests, pending verification of Luxottica's right to continue the processing;
- Object to the processing of Personal Data based on legitimate interest, where Luxottica does not demonstrate the existence of compelling grounds for the processing or for the establishment, exercise or defense of Luxottica's rights;
- Request the erasure of Personal Data without undue delay;
- Receive an electronic copy of the Personal Data, where the user wishes to transfer the Personal Data to themselves or to another provider and Luxottica's processing is based on your consent or on the fact that it is necessary for the provision of the services and the Personal Data is processed by automated means; and
- Lodge a complaint with the competent data protection supervisory authority.
Pursuant to Art. 2-terdecies of the Privacy Code, in the event of the user's death, the above rights may be exercised by another person entitled (the "Successor") who has their own interest or acts as their agent, or for family reasons deserving protection. The user may expressly prohibit the exercise of some of the above rights by the Successor by sending a request to the email address indicated below. In the same way, the user may, at any time, revoke or modify such declaration.
You may exercise the above rights at any time by clicking here. Luxottica will respond within a reasonable period of time (and, in any case, within the limits of applicable law), after verifying the identity of users.
In addition, Luxottica offers users tools to update and modify Personal Data. Each registered user can, in fact, access and update their information (for example, through the user account). Users can also modify and update their preferences on how they receive emails or other communications from Luxottica. Users can also request the deletion of their account information.
10. How can you contact Luxottica?
The Data Controller of Personal Data is Luxottica Group S.p.A., with registered office at Piazzale Luigi Cadorna, 3, 20123 Milan, Italy.
In the event of questions or comments about this Data Protection Policy or about any data processing by Luxottica, Luxottica can be contacted via the link available in the previous section.
11. How can you contact our data protection officer?
Luxottica has appointed a data protection officer pursuant to Art. 37 of the GDPR, who can be contacted at the following email address dpo@luxottica.com or at Luxottica's address indicated in the section "HOW CAN YOU CONTACT LUXOTTICA?" of this Data Protection Policy
12. How can you keep track of changes to this data protection policy?
For legal and/or organizational reasons, this Data Protection Policy may be subject to changes. You are therefore advised to check this Data Protection Policy regularly and to refer to the latest version of it. In any case, changes will be notified in advance and an updated version of the Data Protection Policy will always be available on the Website.
14. OAKLEY META GLASSES
Luxottica is the manufacturer and distributor of OAKLEY META GLASSES and any information you provide to Luxottica in connection with your purchase of OAKLEY META glasses is subject to Luxottica's terms and policies.
Luxottica shares and receives information with Meta to manage your customer service requests related to OAKLEY META glasses; for example, Luxottica may share with Meta your name, email address and information about the issue you are experiencing, and Meta shares information with Luxottica to help resolve the issue, such as steps to resolve a problem with your Meta account.
Luxottica does not collect information directly from your use of OAKLEY META GLASSES or the app.
In the corresponding section of the website, Luxottica and Meta will collect information by means of a pixel in order to offer you personalized advertisements and to promote relevant content and actions (for more information, please refer to the cookie policy).