PRIVACY POLICY

Isabel Marant attaches great importance to the processing, confidentiality, and security of your personal data. We strive to offer you personalized services, all the while respecting your personal choices and privacy.

By using our website "www.isabelmarant.com" (hereinafter, the "Website") or shopping in our Isabel Marant stores (hereinafter, the "Store(s)"), you acknowledge that you have read the present Privacy Policy (hereinafter, the "Privacy Policy"), which governs the use and protection of personal data collected while customers use our Website or shop in our Stores, i.e., any information that directly or indirectly identifies a data subject as a person (hereinafter, "Data" or "Personal Data" or “Personal Information”), such as your first name, last name, postal address, email address, and customer number.

Valid from April 22th 2024

1. WHO IS THE DATA CONTROLLER?
2. WHICH DATA DO WE COLLECT?
3. HOW DO WE USE YOUR DATA?
4. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
5. WHAT ARE YOUR RIGHTS?
6. WHO CAN ACCESS YOUR PERSONAL DATA?
7. WHERE DO WE TRANSFER YOUR DATA?
8. SECURITY AND CONFIDENTIALITY OF YOUR PERSONAL DATA
9. MISCELLANEOUS
10. SPECIFIC ANNEX FOR U.S. RESIDENTS 

1. WHO IS THE DATA CONTROLLER?

IM PRODUCTION, a simplified corporation (French SAS) with a share capital of 550,000 euros, registered with the Paris Trade and Companies Register (RCS) under the number 403 24 30 58, and headquartered at 50 rue Croix des Petits Champs, 75001 Paris, France (hereinafter, the "Company" or "We/Us"), is the data controller, and as such, is responsible for defining the purposes for which your Data is collected.

Nevertheless, if you purchase products in a Store outside of France, the Store in which you purchased your item(s) or placed an order is solely responsible for any processing required to manage the transactions and invoicing associated with your purchase.

If you have questions about your Personal Data, please contact Us by email (gdpr@isabelmarant.fr) or via the contact form on our Website, selecting "Privacy Policy" as the subject of your message.

2. WHICH DATA DO WE COLLECT?

We may collect a variety of different Personal Data during your visit to our Stores or Website. Personal Data refers to any information that can be used to identify you, either directly (e.g., your name) or indirectly (e.g., a unique customer number), as a person.  As used in this Privacy Policy, “Personal Data” is meant to include Personal Information. We collect Personal Data such as:

- Your identification information and contact information (first name, last name, email address, telephone number, postal address, nationality);

-  Your gender and date of birth;

- Your purchase history on the Website and in the Stores;

- Your contact and purchases preferences (size, styles, and colors);

- Your browsing data on our Website (e.g., the date and time of your connection and/or visit, the pages you view, etc.), the type of terminal and browser you are using, your location, the language of your browser, your Internet provider, your IP address, and if applicable, your login information for social networks; and

- Your communication (emails, etc.) with our Customer Service department.

On the various pages of the Website, We will indicate which Personal Data is required to fulfill the purposes described in Article 3. If you do not complete these mandatory fields, We will not be able to answer your inquiries and/or provide you with the products and services you have requested. All other entries are optional and simply allow Us to get to know you better and improve our services and communication with you.

In our Stores, or during special events (e.g., exclusive sales in our Stores), We may collect additional data to meet the conditions and for the specified purposes of the respective occasion.

3. HOW DO WE USE YOUR DATA?

We use your Personal Data for the purposes that are defined in accordance with the nature of our relationship. The Company only collects your Personal Data if it has a legal basis for doing so. 

Depending on the context in which your Personal Data is collected, it may therefore be used for one or more of the following purposes: 

4. HOW LONG DO WE KEEP YOUR DATA?

We retain your Personal Data for the amount of time that is required to fulfill the purpose(s) for which it was collected. Our retention periods are as follows: 

• Data collected while purchasing an item in a Store or placing an order on the Website: for the amount of time that you remain a customer, and up to three (3) years from your last interaction with Us. Please note that invoicing data is kept for ten (10) years from the date of the invoice;

• Data collected during the creation of a customer account: until you request that your account be deleted on the Website or in a Store, or three (3) years after your last interaction with Us;

• Data collected during the creation of a customer account: until you request that your account be deleted on the Website or in a Store, or three (3) years after your last interaction with Us;

• Data collected while making inquiries to our Customer Service department: until the respective inquiry is processed.

If you consent to the use of cookies, We will only store said cookies on your computer for the amount of time required by applicable regulations. For more details on this topic, please see our "Cookie Policy".

Some of your Data may be kept in archived form (with restricted and strictly limited access) for the purposes of meeting our legal, accounting, and tax-related obligations, as well as to manage any eventual claims or warranty requests, and only for the applicable legal prescription periods.

At the end of the above-mentioned periods, it will be deleted or irreversibly anonymized. 

Your bank details are stored by our payment service providers. When placing an order on the Website, you must enter your bank details in the fields provided. To facilitate your orders, you may choose to have the payment service provider securely store your bank details (so they can be used for future purchases on the Website) by checking the "Save your payment details" box.

5. WHAT ARE YOUR RIGHTS?

As may be required by applicable data protection regulations, you have the following rights which can be exercised at any time: 

- Right to information: you have the right to obtain concise, transparent, and intelligible information about your rights and the ways in which We process your Personal Data. This information is contained in this Privacy Policy.

- Right of access and rectification: you have the right to access all the Personal Data that We have collected which pertains to you, and to have your Personal Data rectified if it is inaccurate, obsolete, or incomplete.

- Right to erasure (right to be forgotten): you have the right to have your Data erased or deleted. However, you may not be able to exercise this right if an overriding legal ground exists or We have a legitimate interest to retain your Personal Data.

- Right to object: you may, at any time, request to no longer receive correspondence from Us relating to our news and offers. In particular, you can use the hyperlink included in each of our emails for this purpose. 

- Right to portability: under certain conditions, you have the right to request that your Personal Data be transferred to another data controller.

- Right to define the fate of your Data: you have the right to create general instructions regarding the fate of your Personal Data after your death.

You can exercise some of the rights above via your customer account on the Website, or by contacting our Customer Service or writing to Us at the following address: gdpr@isabelmarant.fr. In order to ensure that your Data is not misused by third parties, We may ask that you provide additional information to verify your identity.

We will do our best to quickly process your request.

6. WHO CAN ACCESS YOUR PERSONAL DATA?

Your Personal Data is mainly processed by the Company's internal departments that are responsible for handling your requests. In this respect, We ensure that only duly authorized persons have access to your Personal Data, and only when such access is necessary for the aforementioned purposes. However, if necessary, We may also share your Data with:

- other entities of the group (to which the Company belongs), to provide you with the same personalized service throughout the world, regardless of the Store you choose to shop in;

- our trusted third-party service providers, who act as subcontractors on our behalf and per our instructions only. Your Personal Data may therefore sometimes be shared with the following third parties: Internet providers and operators of the Website, payment service providers, companies specializing in IT services; carriers and logistics service providers; marketing firms; companies specializing in market research and data processing. 

We carefully select each of these third parties based on the guarantees they offer in terms of data security and confidentiality, as per all applicable data protection regulations and requirements.

We may also let you use your login details for certain social networks, so you can (if you wish) share certain information available on the Website. In such a case, We will receive your login information for the respective network. Please note, however, that these third-party social networks have their own privacy policies. We therefore recommend consulting these policies before connecting to and sharing on these networks.

Your Personal Data may also be transferred to third parties for the following reasons: 

i. Processing in accordance with the purpose(s) for which your Data was collected, and for which you provided your consent;

ii. In the event of a legal procedure, a mandatory request from a public authority, or any other case where We are required by law to transfer your Data;

iii. If the Company is involved in a merger, acquisition, or transfer of assets.

7. WHERE DO WE TRANSFER YOUR DATA? 

Your Personal Data may be transferred to a country outside the European Economic Area where the applicable regulations on Personal Data differ from those that apply in the European Economic Area. If We are required to transfer your Personal Data outside the European Economic Area, such a transfer is done in a secure manner and in compliance with all applicable regulations. 

We transfer your Personal Data in order to properly respond to your requests and to provide you with a harmonious level of service, regardless of the Store you visit.

We demand that the recipients of Personal Data comply with the conditions outlined in this Privacy Policy, and take all the necessary measures to ensure the same level of protection as that required by European regulations, for example by signing appropriate contracts (e.g., standard contractual clauses or binding corporate rules).

8. SECURITY AND CONFIDENTIALITY OF YOUR PERSONAL DATA

We implement technical and organizational security measures to protect and prevent any loss, alteration, destruction, or unlawful use of your Personal Data. 

We take all the necessary steps to ensure our partners maintain a similar level of data protection as our own. We also ensure that your transactions are secure by implementing appropriate measures to combat fraud.

9. MISCELLANEOUS

This Privacy Policy may be modified at any time to reflect changes in regulations and/or our Personal Data processing practices. In the event of a modification, We will inform you and publish the updated version of the Privacy Policy in the "Legal Notices" section of the Website. 

To file a complaint regarding the processing or protection of your Personal Data, please visit the website of the CNIL (French National Commission on Informatics and Liberty): https://www.cnil.fr/.

10. SPECIFIC ANNEX FOR U.S. RESIDENTS

A- CALIFORNIA STATE DISCLOSURES

This portion of our Privacy Policy applies only to residents of the state of California and applies only to the extent of any inconsistency with the information above. All terms not otherwise defined in this portion shall have the meanings as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, along with any implementing regulations (the “CCPA”).

CATEGORIES OF PERSONAL DATA COLLECTED ABOUT CONSUMERS

In the 12-month period before the effective date of this Privacy Policy, we have collected the following categories of Personal Information about consumers:

• Identifiers such as real name, postal address, Internet Protocol address, email address, and passport number.

• Additional Personal Information described in Cal. Civ. Code Section 1798.80 such as telephone number. 

• Characteristics of protected classifications under California or federal law, such as gender. 

• Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement.

• Professional or employment information such as current employer.

• Sensitive information such as your signature, physical characteristics (including sizing preferences you communicate), and data about a known child. 

CATEGORIES OF SOURCES FROM WHICH PERSONAL INFORMATION IS COLLECTED

We may have collected Personal Information about you form the following categories of sources: 

• Directly from you.

• From your devices.

BUSINESS OR COMMERCIAL PURPOSE FOR COLLECTING PERSONAL INFORMATION FROM CONSUMERS

We may have collected Personal Information for any of the purposes set forth in the “HOW DO WE USE YOUR DATA?” section of this Privacy Policy. We may use your Personal Information for the following business purposes:

• To provide our services.

• Helping to ensure security and integrity to the extent the use of the consumer’s Personal Information is reasonably necessary and proportionate for these purposes.

• Performing services on behalf of our customers, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.

• Supporting our advertising and marketing services as permitted by law.

• Undertaking internal research for technological development and analytics.

• To improve, upgrade, or enhance the services.

CATEGORIES OF PERSONAL INFORMATION SOLD OR SHARED TO THIRD PARTIES

In the 12-month period before the effective date this Privacy Policy, the Company may have sold or shared the categories of Personal Information below to the following categories of third parties for the following business or commercial purposes:

We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

CATEGORIES OF PERSONAL INFORMATION DISCLOSED TO THIRD PARTIES

In the 12-month period before the effective date this Privacy Policy, the Company may have disclosed the categories of Personal Information below to the following categories of third parties for the following business or commercial purposes: 

YOUR RIGHTS AS A CALIFORNIA RESIDENT

If you are a California resident, you have the following rights regarding your Personal Information:

• Right to Know: The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources form which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing such Personal Information, the categories of third parties to whom we have disclosed Personal Information, and the specific pieces of Personal Information that we have collected about you.

• Right to Delete: Subject to certain exceptions, the right to delete Personal Information that we have collected from you.

• Right to Correct Inaccurate Personal Information: The right to correct inaccurate Personal Information that we maintain about you.

• Right to Opt-Out of Sale or Share: The right to opt-out of the sale or sharing of your Personal Information by us.

• Right to Limit Disclosure of Sensitive Information: In some instances, we may use or disclose your Sensitive Information outside of the limited purposes set forth below. You have the right to direct us to limit our use and disclosure of such Sensitive Information. If you do, we may still use your Sensitive Information for certain limited purposes, such as the following: (1) performing our service or providing goods, (2) detecting security incidents, (3) resisting malicious, deceptive, fraudulent, or illegal actions, (4) ensuring physical safety, (5) for short-term transient use, including certain non-personalized advertising, (6) maintaining or servicing accounts, providing customer service, verifying customer information, or providing similar services, and (7) to verify and maintain the quality or safety of a service or product to improve, upgrade, or enhance a service or product.

• Right to Not Receive Discriminatory Treatment: You have the right to not receive discriminatory treatment by us for the exercise of any of the rights conferred by the CCPA in this section.

HOW TO EXERCISE YOUR CCPA RIGHTS

You can exercise any of your CCPA rights described in the previous section by contacting us at gdpr@isabelmarant.fr or via the contact form on our Website, selecting "Privacy Policy" as the subject of your message. You may opt out of the sale or sharing of your Personal Information by visiting our Cookie Management tool. 

AUTHORIZED AGENTS

You may designate an authorized agent to submit requests on your behalf. To submit a request as an authorized agent on behalf of a consumer, please contact us at gdpr@isabelmarant.fr.

B – TEXAS STATE DISCLOSURES

This portion of our Privacy Policy applies only to resides of the state of Texas and applies only to the extent of any inconsistency with the information above. This portion of our Privacy Policy is not effective until July 1, 2024.

CATEGORIES OF PERSONAL DATA AND PURPOSE FOR PROCESSING

We process the categories of Personal Data described in the “WHICH DATA DO WE COLLECT?” section of this Privacy Policy for the purposes described in the “HOW DO WE USE YOUR DATA?” section of this Privacy Policy.

CATEGORIES OF PERSONAL DATA SHARED WITH THIRD PARTIES

We share Personal Data with the third parties described in the “WHO CAN ACCESS YOUR PERSONAL DATA?” section of this Privacy Policy. 

YOUR RIGHTS

If you are a Texas resident, you have the following rights regarding your Personal Data:

• Right to Confirm: The rights to confirm whether or not we are processing your Personal Data and to access such Personal Data.

• Right to Correct: The right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and our purposes of the processing of such Personal Data.

• Right to Delete: The right to delete Personal Data provide by or obtained about you.

• Right to Obtain a Copy: The right to obtain a copy of your Personal Data that you previously provided to us in a portable and to the technically feasible, readily useable format that allows you to transmit to the data to another controller without hindrance, where the processing is carried out by automated means.

• Right to Opt-Out: The right to opt out of the processing of your Personal Data for purposes of: (1) targeted advertising, (2) the sale of Personal Data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

• Right to Appeal: If we refuse to take action regarding your exercise of any of the rights described in this section, you may appeal our refusal to do so by contacting us as provided below.

HOW TO EXERCISE YOUR RIGHTS AS A TEXAS RESIDENT

You or your authorized agent can exercise any of your Texas state law rights described in the previous section by contacting us at gdpr@isabelmarant.fr or via the contact form on our Website, selecting "Privacy Policy" as the subject of your message.