Thank you for visiting our website! The protection of your data is our top priority. In this privacy policy, we provide detailed information about how we process your data.
This policy applies both to data processing within Fashion District Mantova S.r.l. and to the use of our website. The legal basis for this data processing is the General Data Protection Regulation (GDPR) and the Italian Data Protection Act.
Joint controllers pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) are
ROS Italia S.r.l
Via Melchiore Giona 26
20124 Milan
Fashion District Mantova S.r.l.
Via Cordusio 1
20123 Milan
Tel: +39 037625041
Email: info@mantovavillage.it
We, ROS Italia S.r.l, operate the website https://www.mantovavillage.it together with Fashion District Mantova S.r.l. In this case, we are joint controllers for the processing of personal data. If we are obliged to fulfil data subject rights, you can contact both us and Fashion District Mantova S.r.l.
We process data that is provided to us by various individuals through their own disclosures, such as when registering for the Land of Fashion Club, participating in competitions, applying for jobs, and concluding contracts.
In addition, we also process data that is not provided directly by the data subject. This is the case, for example, when management bodies provide us with the names and contact details of their employees in the context of projects or business relationships. If necessary for the provision of our services, we also process personal data from legally accessible public sources such as debtor registers, land registers, commercial and association registers, media reports or the internet.
The following data is processed from interested parties: company, name of the contact person and professional contact details and address data.
We process the following data from contractual partners (e.g. VIP club members, competition participants, voucher purchasers): first and last name, email address, date of birth.
We process the following data from tenants' contact persons: company, title and name of the contact person, business address and contact details, bank details, contract details.
We process the following data from suppliers and business partners that is necessary for the initiation or conclusion of a contract: company, title and names of contact persons, business address and contact details, bank details, contract data.
We process the following data from employees and/or other contacts of our contractual partners: identification and contact data.
We process the following data from legal representatives and authorized signatories of contractual partners: name, date of birth, address data, personal data contained in the identity card copy, the commercial register extract, the DURC certificate and contract data.
We process the following data from event participants: name, contact and address details.
We process the following data from newsletter recipients: email address and name data.
We publish the names of authors upon request. As soon as the use of the works are discontinued, the personal data is automatically deleted.
The legal basis for data processing is:
We will inform you separately about the legal basis and purpose of the processing for each of the data processing operations described below.
Data is transferred exclusively for the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR in order to provide you with our services.
When you contact us by email, telephone or social media, the data you provide will be stored in order to process your enquiries.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
If you participate in our competitions, we process your data for the purpose of conducting the competition, determining and notifying the winner, and sending the advertised prize. For this purpose, we require your name and email address. Without this data, you cannot participate in the competition. In this context, we also require your date of birth, as participants must be at least 18 years old.
If you also provide your telephone number, we will use it to contact you by telephone if you have not responded to the previous prize notification by email. However, this is not necessary for the competition to be carried out.
The data will be deleted after the winner has been determined and the competition has ended.
Legal basis: Art. 6(1)(b) (contract initiation and fulfilment)
You have the option to register bindingly for one of our events by e-mail or via the contact form. For this purpose, we require the name of your company, your position, your first and last name, your address details, your e-mail address and your telephone number. We process your data for the registration and organization of the booked event, including, for example, for seat reservations.
Legal basis: Art. 6(1)(b) (contract initiation and fulfilment)
As part of our events, photo and, where applicable, video recordings are regularly made. These are used to document the event and for our company’s reporting purposes in order to promote the long-term growth and visibility of the initiatives. The recordings may be published on our website.
When creating and publishing such recordings, we ensure that no legitimate interests of the persons depicted are infringed. As a rule, only overview shots or recordings of situations in which no individual person is the focus are made. If individual persons are clearly recognizable and highlighted, for example in close-up shots or interviews, we obtain prior verbal or written consent.
Participants are informed at the time of registration and on site by means of notices that photo and video recordings will be made and may be published for the purposes of event documentation and reporting. Persons who do not wish to be recorded have the option to leave the recording area or contact us directly.
The recordings are stored and published only for as long as they are necessary for the purposes stated above. They are subsequently deleted or archived.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest), Art. 6(1)(a) GDPR (consent in the case of individuals or small groups)
General: When you send us your application documents, we process the personal data contained therein for the purpose of personnel selection and recruitment.
Legal basis: Art. 6(1)(b) GDPR (contract initiation and fulfilment)
Deletion: In the event of rejection, we will delete your documents 6 months after sending you the rejection letter.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Record keeping: If we wish to keep you on file for future contact, we will send you a separate request for your consent. If you explicitly give us your consent, we will store your application documents. If no further job opportunities arise at our company within one year of receiving your consent, we will delete all your application documents.
Legal basis: Art. 6(1)(a) GDPR (consent)
Job Applicant Portal: All applications are processed through our job applicant portal. For more information, please visit https://media.cving.com/privacy-policy-en/.
Application platforms: We use various online application platforms to recruit employees for our company. Individuals who are interested in working for our company can apply directly using a form provided by the operator of the application platform. Applicants decide for themselves what data they provide when using such an online portal. Personal data entered and documents uploaded are forwarded to us by the operator of the application platform. Both the application platform and we process this data as controllers within the meaning of the GDPR. Please note the privacy policies of the respective operators of the application platforms.
Legal basis: Art. 6(1)(b) GDPR (contract initiation and fulfilment)
As part of our security measures, we use video surveillance technology in the Village Center to ensure the safety of individuals and the protection of property. Surveillance is used to enforce property rights and to investigate criminal offenses and security-related incidents. Areas under surveillance are marked with appropriate signs. The recordings are stored for a period of 72 hours and then deleted, unless they are needed to clarify incidents or to initiate legal proceedings. Access to the recordings is restricted to authorized personnel. The data is only shared with law enforcement authorities when necessary to investigate criminal offenses.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
We operate social media pages on Instagram and Facebook. When you visit our social media pages, personal data, including your IP address, is processed by Meta Platforms Technologies Ireland Limited (Meta) and cookies are used for data collection. Please refer to the privacy policy of the respective service for details on exactly what information is transmitted. There you will also find information on how to contact them and how to restrict the processing of this data.
We would also like to point out that you use the respective services and their functions at your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, commenting or rating).
Meta has provided us with corresponding agreements – in most cases, these are agreements on joint responsibility for data processing. The use of social media platforms is based on our legitimate business interest.
If we are obliged to fulfil data subject rights (see 18 – Your rights), you can contact both us and Meta.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
We have set up a whistleblower system (online whistleblowing portal) on our website. The whistleblower system allows you to contact us and report compliance and legal violations without fear of retaliation. For more information, please visit https://mantovavillage.whistlelink.com/privacy-policy/
Legal basis: Art. 6(1)(c) GDPR (legal obligation).
When using the website for informational purposes only, we only collect the personal data that your browser transmits to our server (server log files). When you visit our website, we collect the data that is technically necessary for us to display our website to you and to ensure stability and security:
This data is not merged with personal data sources. We reserve the right to subsequently check this data if we become aware of specific indications of illegal use and, in the event of a cyber attack, to pass the data on to the law enforcement authorities. No further disclosure to third parties takes place.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
When you visit our website, cookies are stored on your device. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive. They enable us or third-party providers to collect certain information. Cookies cannot execute programs or transfer viruses to your computer.
The information contained in the cookies is used, for example, to determine whether you are logged in, what data you have already entered, or to recognize you as a user when a connection is established between our web server and your browser.
We distinguish between technical cookies, which serve exclusively to ensure the operation of a website, and cookies requiring consent, which are set by us or third-party providers for the purposes of statistical analysis, tracking or advertising/marketing.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest; for technical cookies), Art. 6(1)(a) GDPR (consent; for all other cookies)
It cannot be ruled out that personal data may be transferred to an insecure third country (countries outside the EEA without an adequate level of data protection) when you visit our website. If this is the case, we will point this out directly in the description of the external service in this privacy policy.
The GDPR requires so-called suitable guarantees in accordance with Art. 46 GDPR for a data transfer to an insecure third country or to an international organization.
In the case of data processing of personal data in a third country or in the case of data processing by US data recipients who have not submitted to the regulations of the EU-US Data Privacy Framework, the following risks in particular cannot currently be ruled out for you as a data subject:
By giving your consent via the consent banner to the use of external services and to the setting of the corresponding cookies, you expressly consent to the possible transfer of your personal data to insecure third countries.
Legal basis: Art. 6(1)(a) GDPR (consent)
You can subscribe to our newsletter by providing us with your email address and name. You can unsubscribe at any time. To do so, use the unsubscribe link included in every newsletter or send an email to info@mantovavillage.it.
To ensure that you are the one signing up, we use the so-called double opt-in process. After you sign up, you will receive a confirmation email containing a link. Only when you click this confirmation link will your registration be activated and your address added to the mailing list. This way, we ensure that no one uses your email address without your consent and that you have explicitly agreed to receive the newsletter.
After you unsubscribe, we will no longer use your data to send you the newsletter.
If we have no business relationship with you and are not subject to any legal retention obligations, your data will be deleted after you unsubscribe from the newsletter.
Legal basis: Art. 6(1)(a) GDPR (Consent)
You can order gift cards through our website. As part of the ordering process, we process the personal data you provide to the extent necessary to process and fulfill your gift card order. This includes, in particular, your first name, last name, email address, postal address, and telephone number.
We process your data for the purpose of handling and fulfilling your gift card order, issuing an invoice, contacting you in connection with the order, and, where applicable, complying with legal retention and documentation obligations.
Legal basis: Art. 6(1)(b) GDPR (contract initiation and fulfilment)
If you register for our Land of Fashion Club, we process your personal data to create and manage your member account and to provide the functions of the loyalty program. This includes your registration and account data, such as your name, email address, date of birth, country, login details and, where provided by you, additional profile information such as your phone number or gender.
Within your personal Land of Fashion Club area, you can access your digital membership card, including the card number and Barcode, view your points balance and level status, check your transactions and rewards, manage your profile and consents, and update your shopping preferences and interests. We process this data to operate the member area, authenticate you when you log in, and administer your participation in the Land of Fashion Club.
If you upload sales receipts, we process the data contained in the receipt and the related purchase information, such as the store name, receipt number, purchase amount, date of purchase, registration date and validation status, in order to verify eligible purchases, allocate points, enable participation in promotional mechanics such as instant win campaigns, and document the outcome of the validation process.
Where the Land of Fashion Club includes benefits, missions, prize draws, instant win functionalities or similar promotional activities, we process the data necessary to administer your participation, record points and activities, determine eligibility, allocate rewards and document the history of your participation.
You may also voluntarily provide additional information, such as your shopping preferences and interests. We use this information to personalize your Land of Fashion Club experience and, where you have separately consented, provide you with tailored offers, benefits, invitations, promotions and other marketing communications.
Your Land od Fashion Club account data will be stored for as long as you participate in the program. Data relating to points, transactions, receipt uploads, validations, rewards and similar program activities may be retained for a longer period where this is necessary to comply with legal retention obligations or for the establishment, exercise or defense of legal claims. Data processed based on your consent will be stored until you withdraw your consent or the data is no longer required for the relevant purpose.
Legal basis:
Art. 6 (1)(b) GDPR (contract initiation and fulfilment) regarding performance of the Land of Fashion Club membership and administration of the loyalty program;
Art. 6 (1)(a) GDPR (consent) regarding optional marketing communication and personalization based on your consent; and, where applicable:
Art. 6 (1)(f) GDPR (legitimate interest) regarding prevention of misuse, fraud prevention and ensuring the security of the Land of Fashion Club.
We use the services of Google Ireland Limited ("Google"), a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, on our website.
Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.
We use Google Fonts on our website. To ensure a uniform and appealing display of fonts and icons, your browser loads the required fonts into your browser cache. To do this, it is necessary for the browser you are using to contact the Google Fonts servers, which means that Google Fonts becomes aware that our website has been accessed via your IP address.
Legal basis: Art. 6(1)(a) GDPR (consent)
We use the Google service reCAPTCHA to determine whether a human or a computer is making a specific entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer IP address of the end device used, the website you visit with us and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCAPTCHA areas and tasks where you have to identify images.
You can find more detailed information here: https://cloud.google.com/security/products/recaptcha
Legal basis: Art. 6(1)(a) GDPR (consent)
We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to use the map feature conveniently. When you visit the website, Google receives information that you have accessed the relevant page of our website. In addition, the data already mentioned under “Informational Use of the Website” is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish for this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.
Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider’s privacy policy. There you will also find further information regarding your rights in this regard and settings options for protecting your privacy:
https://www.google.com/intl/us/policies/privacy
Legal basis: Art. 6(1)(a) GDPR (consent)
We use Google Analytics on our website, a tool that allows us to analyze how our website is used. With Google Analytics, we can see how many people visit our website and how long they stay.
This website uses the “IP anonymization” feature (i.e., Google Analytics has been extended with the code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously (so-called IP masking)). As a result, your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the U.S. and truncated there.
Google uses the collected information to analyze your use of the website, to compile reports on website activity, and to provide other services related to website usage.
Your IP address, which is transmitted by your browser to Google Analytics, is not merged with other Google data. However, Google may disclose this information to third parties if required by law or if third parties process this data on Google’s behalf.
You can prevent cookies from being stored on your computer by adjusting the settings in your browser. Please note, however, that in this case you may not be able to fully use all features of our website.
For more information on terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/us/ or https://support.google.com/analytics/answer/6004245.
Legal basis: Art. 6(1)(a) GDPR (Consent)
Google Ads is integrated into our website. Information about the use of our website is processed via Google services. This may include, in particular, technical data such as IP addresses, browser and device information, cookies or online identifiers, as well as information about pages visited and interactions.
This is used to display, measure, and optimize advertisements, as well as to attribute website visits to advertising campaigns. This allows us to track whether users perform certain actions on our website after clicking on an ad. In addition, the information collected can be used to improve and target advertising campaigns.
For more information, please refer to: https://policies.google.com/technologies/ads
Legal basis: Art. 6(1)(a) GDPR (Consent)
This website uses Google Ads Conversion Tracking. Google Ads places a cookie on your computer if you arrived at our website via a Google ad. These cookies expire after 30 days and are not used to identify you personally. The information collected via the conversion cookie is used to generate conversion statistics for us. We learn the total number of users who clicked on our ad and were redirected to our page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking process, you can also refuse the placement of the cookie required for this, for example, by using a browser setting that generally disables the automatic placement of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain “www.googleadservices.com.”
If you use SSL search, Google’s encrypted search feature, search terms are usually not sent as part of the URL in the referrer URL. However, there are some exceptions to this, for example, if you use certain less common browsers. For more information on SSL search, please visit: https://support.google.com/websearch/answer/173733?hl=en.
Search queries or information in the referrer URL may also be viewed via Google Analytics or an Application Programming Interface (API) under certain circumstances. Additionally, advertisers may receive information about the exact search terms that triggered a click on an ad.
For more details, please refer to Google’s FAQ: https://policies.google.com/faq?hl=en
Legal basis: Art. 6(1)(a) GDPR (consent)
We use Google Tag Manager on our website. Google Tag Manager is a service that allows website tags to be managed via a unified interface. Google Tag Manager itself is primarily used to control other tags and, in doing so, processes the user’s IP address in particular. Additional tags can be triggered via Google Tag Manager, which may in turn process personal data. Google Tag Manager itself does not access this data.
Google Tag Manager may set cookies, particularly in connection with preview and debug functions. To the extent that tags or technologies requiring consent are integrated and triggered via Google Tag Manager, their use is subject exclusively to your prior consent via our consent banner.
The integration of Google Tag Manager enables the loading of Google Ads services.
For more information, please visit: https://support.google.com/tagmanager.
Legal basis: Art. 6(1)(a) GDPR (consent)
Our website uses the consent management tool “CookieScript” operated by Objectis Ltd, Laisves str. 60, LT-05120 Vilnius, Lithuania.
The service stores information on your device and uses technically necessary cookies and comparable technologies in order to save and manage your cookie preferences. CookieScript records and stores the consent choices made by the respective users of our website. This ensures that cookies and similar technologies requiring consent, in particular for statistical and marketing purposes, are only used after the website visitor has given their explicit consent.
In this context, information on the consent status, a consent ID, the time and scope of the consent decision, browser information and technical device information is processed.
Further information can be found in CookieScript’s privacy policy: https://cookie-script.com/legal/privacy-policy.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Our website uses a so-called “Content Delivery Network” (CDN). The CDN service enables website content such as web videos or other large media files to be delivered quickly and securely. To achieve this, proxy servers cache the files locally, thereby improving download speeds. Using the Cloudflare CDN helps us optimize our website’s loading speed.
The CDN service processes the website visitor’s IP address. The IP address is automatically deleted from Cloudflare’s logs.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Our website uses the so-called Meta Pixel to analyze and optimize ads for our online offerings.
Meta uses the pixel to identify website visitors as a target audience for displaying ads (so-called Meta Ads). Accordingly, we use these to display the ads we place on Meta platforms (Facebook and Instagram) only to those Meta users who have shown an interest in our online offerings or who exhibit certain characteristics (e.g., interests in specific artists or events, determined based on the websites they have visited) that we transmit to Meta (so-called “Custom Audiences”). This is intended to ensure that our ads align with user interests and do not appear intrusive. Additionally, with the help of pixels, we can track the effectiveness of Meta ads for statistical and market research purposes by determining whether users were redirected to our website after clicking on a Meta ad (so-called “conversion”).
Your actions are stored in one or more cookies. These cookies allow Meta to match your user data (such as IP address, user ID) with the data in your Meta account. The collected data is anonymous to us and cannot be viewed by us; it is used solely for advertising purposes. If you wish to prevent this link to your Meta account, you have the option to log out before performing any action.
For further information, please refer to Facebook/Meta’s Privacy Policy at https://de-de.facebook.com/policy.php.
For specific information on Facebook Pixels, please visit: https://www.facebook.com/business/help/742478679120153?id=1205376682832142.
Legal basis: Art. 6(1)(a) GDPR (consent)
Our website uses a cloud web hosting solution provided by Amazon Web Services EMEA SARL, Eschborner Landstraße 100, 60489 Frankfurt am Main, Germany. AWS provides the infrastructure and resources necessary for the operation and delivery of the website. Since AWS acts as a cloud provider, data is stored and processed on AWS servers.
When using AWS, certain data such as IP addresses and access times may be logged to ensure the security and operation of the website.
Further information is available in the Amazon Web Services Privacy Policy at https://aws.amazon.com/privacy/?nc1=f_pr.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
We use the jsDelivr CDN on our website to ensure fast loading speeds. This is an open-source content delivery network operated by Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom (trading as jsDelivr).
The CDN service enables website content such as JavaScript libraries or other static files to be delivered quickly and reliably. To achieve this, the content is delivered and cached via a globally distributed network of servers, thereby improving access speed when loading the website.
When using the CDN, it is technically necessary to process the website visitor’s IP address and other technically necessary connection data so that the requested content can be delivered to the user’s browser.
For more information, please refer to jsDelivr’s privacy policy at:
https://www.jsdelivr.com/terms/privacy-policy
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
On our website, we use jQuery UI, which is integrated via an external Content Delivery Network (CDN). It is retrieved from the domain code.jquery.com, which is provided by the OpenJS Foundation at 2810 N Church St, PMB 57274 Wilmington, DE 19802.
When a webpage that includes jQuery UI is accessed, a connection is established to the servers of code.jquery.com. In particular, technical access data (e.g., IP address, date and time of access, browser information) is transmitted to the CDN provider. The library is not integrated locally.
Since the servers are located in the United States and the OpenJS Foundation does not hold certification under the Data Privacy Framework, personal data is transferred to a third country without an adequate level of data protection. There is a risk that U.S. authorities may access this data without effective legal remedies being available to the data subjects.
For more information on data processing, please visit: https://privacy-policy.openjsf.org/
Legal basis: Art. 6(1)(a) GDPR (consent)
We use services of Contactlab S.r.l., Viale Andrea Doria 7, 20124 Milano, Italy, on our website in connection with Land of Fashion Club functions. We use technical services provided to generate and provide barcode-based features, such as digital membership, loyalty or identification codes, within the Land of Fashion Club area.
In this context, personal data is processed to the extent necessary to provide the respective function. This includes contact data, membership-related or identification data, the barcode or code value displayed or generated for the respective user, the website visitor’s IP address, and other technically necessary data, so that the requested barcode-based function can be generated, displayed and used properly.
For more information, please refer to the provider’s website at
https://contactlab.com/en/privacy-policy-2/
Legal basis: Art. 6(1)(b) GDPR (contract initiation and fulfilment)
You have the following rights with regards to your personal data:
In addition to the above rights, you have the right to lodge a complaint with a data protection authority, which in Italy is the Italian Data Protection Authority:
If you believe that we have violated Italian or European data protection law in the processing of your data and thereby infringed your rights, please contact us so that we can clarify any questions you may have.
Please send your enquiries and requests by email to or contact us using the contact details provided.
We reserve the right to make changes to our privacy policy from time to time. All changes to the privacy policy will be published by us on this page. Please refer to the current version of our privacy policy for this information.
Share