PRIVACY POLICY – LONGCHAMP GROUP WEBSITE
Version of 25/11/2022
The LONGCHAMP Group places great importance on protecting the Personal Data of visitors to its website Longchamp.com and undertakes to ensure the privacy of the Personal Data collected.
This Privacy Policy details the LONGCHAMP group's policy on the processing of Personal Data in connection with its website.
It is intended to govern the conditions for processing the Personal Data collected during your browsing. The data collected is subject in particular to the provisions of Law no. 78-17 of 6 January 1978, as amended and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
When Personal Data is collected from or held in a country outside European Economic Area (EEA) or collected by a company belonging to the LONGCHAMP Group located outside EEA, we may also be required to comply with local laws in force. In this context, a specific privacy policy is setting up for each country concerned.
We invite you to consult our Privacy Policy regularly to be informed of any updates.
1. Definitions
Personal Data |
Any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, login details or to one or more factors specific to physical, physiological, mental, economic, cultural or social identity. |
LONGCHAMP Group |
Any company belonging to the LONGCHAMP Group. |
Politique Données Personnelles |
La présente politique régissant le traitement des Données Personnelles du Groupe LONGCHAMP. |
Privacy Policy |
The present policy governing the processing of Personal Data of the LONGCHAMP Group. |
Data Controller |
Natural or legal person who determines the purposes and means of processing. |
2. Identity and contact details of the Data Controller and Joint Data Controllers
Personal Data are collected on behalf of SAS LONGCHAMP, 12 Rue Saint-Florentin 75001 PARIS, in its capacity as Data Controller.
SAS LONGCHAMP may also be a Joint Data Controller with the companies belonging to the LONGCHAMP Group: in that case, each LONGCHAMP Group company defines the purposes and means of processing jointly with SAS LONGCHAMP. This is the case when Personal Data is collected for the purpose of processing and tracking orders, as well as organising competitions and notifying winners online.
The LONGCHAMP Group companies act as Joint Data Controllers only when your Personal Data is being processed on the territory where they are domiciled and exclusively for the purposes detailed above.
Example: the company LONGCHAMP ITALIA is the Joint Data Controller with SAS LONGCHAMP when processing customers' and prospects' Personal Data collected in Italy only, and when such processing is for the sole purpose of managing and tracking orders placed online or organising competitions and notifying winners online.
The LONGCHAMP Group companies that may act as Joint Data Controllers are listed in the appendix to the Privacy Policy.
3. Personal Data collected, purposes and legal basis
The LONGCHAMP Group gathers the Personal Data needed to achieve the following purposes (when these are proposed on the site), subject to obtaining your prior consent for each of these purposes:
Purpose |
Data collected |
Legal basis |
Creation and management of customer accounts |
• Last name and first name; |
Consent of the data subject for this specific purpose. |
Promotional operations (Personal Data collected during a competition or promotional offer) |
• Last name and first name; |
|
Newsletters or marketing communications |
• Telephone number; |
|
Processing requests made via the online contact form |
• Last name and first name; |
|
Virtual eyewear try-on |
• Scan and/or reconstruction and/or modification of the appearance of your face (Personal Data collected directly by FITTINGBOX in its capacity as Data Controller). |
|
Generating statistics, market analysis and customer relations follow-up |
• Purchase history. |
|
Processing the creation of online stock availability alerts |
• Email. |
|
Processing and tracking orders |
• Last name and first name; |
Performance of a contract to which the data subject is a party or of pre-contractual measures taken at the request of the data subject. |
Disputes/complaints/rights of data subjects |
As applicable: |
You may at any time withdraw your consent to the processing of your Personal Data for the above purposes, except for the purpose of processing and tracking orders.
4. Personal data recipients
Your Personal Data is collected, depending on the purpose:
- either by SAS LONGCHAMP in its capacity as Data Controller,
- or by each LONGCHAMP Group company, in their capacity as Joint Data Controllers.
The Personal Data is made accessible only to persons authorised to have knowledge of it due to their responsibilities within the internal departments of the LONGCHAMP Group companies or the departments responsible for controls.
Your Personal Data is communicated to service providers of the LONGCHAMP Group located within the European Economic Area, which we appoint to help us carry out our activities (order management, payment processing, website development).
These service providers, and certain members of their staff, are authorised to use your Personal Data on our behalf only for the specific purposes for which they have been appointed, in accordance with our instructions, and are required to protect the privacy and security of your Personal Data.
Your Personal Data may also be sent to franchisees of LONGCHAMP shops, for the commercial and promotional management of their sales outlets.
Given the LONGCHAMP Group's international reach and in order to optimise the quality of our service, your Personal Data is likely to be sent outside the European Economic Area. The LONGCHAMP Group however ensures that the necessary measures are in place for sufficient protection of privacy and individual liberties, and to guarantee secure data transfer.
5. Retention period
We undertake to ensure that your Personal Data is not kept any longer than is strictly necessary for the purposes described above.
6. Security
The LONGCHAMP Group implements appropriate organisational, technical, software and physical measures in terms of security, in order to ensure the confidentiality and protection of Personal Data, and to prevent it from being distorted or damaged or unauthorised persons having access to it.
Furthermore, the confidentiality of the banking information that you send via the website to an approved banking institution is guaranteed by an SSL encryption process.
The LONGCHAMP Group also ensures that subcontractors implement the same type of measures in order to ensure the protection of Personal Data.
7. Rights of data subjects
In accordance with the “Data Processing, Data Files and Individual Liberties” law no. 78-17 of 6 January 1978, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, you have a right to access, rectify, delete, and move Personal Data concerning you, as well as a right to oppose and limit the processing thereof.
To exercise these rights or ask any questions about the processing of your Personal Data, you may write to SAS LONGCHAMP, 12 rue Saint-Florentin 75001 Paris, or contact our Data Protection Officer (DPO), at the following address: dpo@longchamp.com.
Please note that you may be asked to show a copy of your identity document in the event of reasonable doubt as to the identity of the person making the request.
Furthermore, if you subscribe to our marketing offers, we may send you promotional offers, event invitations or news of the LONGCHAMP brand by post, email, text message or phone. You also have the option to unsubscribe from such communications by following the instructions provided in each medium.
If you consider, after having contacted us, that your "data protection" rights are not being respected, you have the right to lodge a complaint with the French data protection authority, “Commission Nationale Informatique et Libertés” (CNIL), which you can contact by post (3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07).
APPENDIX
LIST OF LONGCHAMP GROUP COMPANIES ACTING AS JOINT DATA CONTROLLERS
SAS LONGCHAMP, a French simplified joint stock company (SAS) with a capital of 2,000,000 euros, whose registered office is located at 12, rue Saint-Florentin - 75001 Paris, registered on the Paris Trades and Companies Register under number 737 050 187, represented by SAS JEAN CASSEGRAIN, Chair, itself represented by Mr. Jean CASSEGRAIN in his capacity as Chairman. |
SAS LES BOUTIQUES LONGCHAMP, a French simplified joint stock company (SAS) with a capital of 1,858,000 euros, whose registered office is located at 4, rue du Chevalier Saint-George – 404, rue Saint-Honoré – 75001 Paris, registered on the Paris Trades and Companies Register under number 334 502 655, hereby represented by SAS JEAN CASSEGRAIN, Chair, itself represented by Mr. Jean CASSEGRAIN in his capacity as Chairman. |
LONGCHAMP (UK) LIMITED, a company limited by shares with a capital of £ 1,210,100, whose registered office is located at 28 New Bond Street – London W1S 2RJ, England, registered with Companies House under number 3833491, represented by Mr Jean CASSEGRAIN in his capacity as Director. |
LONGCHAMP DISTRIBUTION IRELAND LIMITED, a company limited by shares with a single shareholder with a share capital of 100,000 euros, whose registered office is located at 29 Earlsfort Terrace, Dublin 2, Republic of Ireland, registered with the Irish Companies Registration Office under number IE503093, represented by Mr Jean CASSEGRAIN in his capacity as Director and Secretary. |
LONGCHAMP BENELUX S.R.L., a limited liability company with a capital of 18,550 euros, governed by the laws of Belgium, whose registered office is located at Avenue Louise, 5 – Brussels 1050, Belgium, registered on the Brussels Register of Legal Entities under number BE 0442.062.652, represented by Mr. Jean CASSEGRAIN in his capacity as Administrator. |
LONGCHAMP NEDERLAND B.V., a limited liability company with a share capital of 1 euro, whose registered office is located at Pieter Cornelisz, Hooftstraat 69 H – 1071 BP Amsterdam, the Netherlands, registered with the Amsterdam Business Register under number KvK 57039933, represented by Mr Jean CASSEGRAIN in his capacity as Manager. |
LONGCHAMP LUXEMBOURG SARL, a limited liability company with a capital of 20,000 euros, whose registered office is located at 50, Grand Rue, L-1661 Luxembourg, registered on the Trade and Companies Register of the Grand Duchy of Luxembourg under number B83040, represented by Mr Jean CASSEGRAIN in his capacity as Manager. |
LONGCHAMP SUISSE SARL, a limited liability company with a capital of CHF 800,000, whose registered office is located at Morgenstrasse 129 – 3018 Berne, Switzerland, registered on the Commercial Register of the Canton of Berne under number CHE-112.325.828, represented by Mr. Jean CASSEGRAIN in his capacity as Manager. |
LONGCHAMP GMBH, a limited liability company with a capital of 326,000 euros, whose registered office is located at Werderstr. 6 – 76530 Baden-Baden, Germany, registered on the Mannheim Company Register under number H.R.B. 231179, represented by Mr. Jean CASSEGRAIN in his capacity as Manager. |
LONGCHAMP AUSTRIA GMBH, a limited liability company with a capital of 35,000 euros, whose registered office is located at Graben 14-15, 1010 Vienna, Austria, registered on the Vienna Company Register under number FN 395468 x, represented by Mr. Jean CASSEGRAIN in his capacity as Director. |
LONGCHAMP, S.L. Sociedad Unipersonal, a limited liability company with a capital of 346,780 euros, whose registered office is located at Calle Gurtubay nº 4, bajo derecha – 28001 Madrid, Spain, registered under number Hoja M-291.945, Tomo 17.060, Libro 0, Folio 39, C.I.F. number B 831 28561, represented by Mr. Jean CASSEGRAIN in his capacity as Administrator. |
LONGCHAMP LISBOA - COMERCIO DE MALAS E MARROQUINARIA, UNIPESSOAL, LDA, a limited liability company with a capital of 37,500 euros, whose registered office is located at Rua de São José, 109, 1º - 1150-322 Lisbon, Portugal, registered on the Lisbon Business Register under number 502579757, represented by Mr Jean CASSEGRAIN in his capacity as manager. |
LONGCHAMP ITALIA S.R.L., a limited liability company with a capital of 52,000 euros, whose registered office is located at Corso Venezia 10 – 20121 Milan, Italy, registered on the Economic and Administrative Index (REA) under number MI-1292045, represented by Mr. Jean CASSEGRAIN in his capacity as Administrator and Chairman of the Board of Directors. |
LONGCHAMP AUSTRALIA PTY LTD, a private company limited by shares with a share capital of A$ 1, whose head office* is located at c/o MinterEllison, Level 40, Governor Macquarie Tower 1 Farrer Place Sydney NSW 2000, Australia, registered under number 627 941 940, tax number (TFN) 568 881 326 represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP JAPAN K.K., a joint-stock company with a share capital of 10,000,000 yen, whose head office is located at 4-30-4 Jingumae, Shibuya-ku, Tokyo, Japan, registered under number 0110-01-063116, represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP TAIWAN LIMITED, a limited liability company with a share capital of NT$ 28,000,000, whose head office is located at Unit 2,13 Fl. No. 89, Songren Road, Xinyi District, Exchange Square 1, Taipei City 11073, Taiwan, ROC, registered under number 24474098, tax number 141205581, represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP USA, INC., a Delaware corporation with a share capital of 5,500,000 USD whose head office is located at c/o Corporation Service Company, 251 Little Falls Drive, Wilmington, Delaware, 19808, USA, registered under number 2408762, represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP CANADA INC. a body corporate duly incorporated under the laws of the Province of British Columbia with a share capital of 100$, whose head office is located at Suite 1700, Park Place, 666 Burrard Street, Vancouver BC V6C 2X8, Canada, incorporated under number BC1019745 and registered under business number 827438797, represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP SINGAPORE PTE. LTD., a private company limited by shares with a share capital of S$ 550,000, whose head office is located at 435 Orchard Road, #18-03, Wisma Atria, Singapore 238877, registered under number 201431152H, represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP MALAYSIA SDN. BHD., a private company limited by shares with a share capital of RM 5,000,000, whose head office is located at c/o SecFin, Suite 16-03, Level 16, Wisma UOA II, N°21 Jalan Pinang, 50450 Kuala Lumpur, Malaysia, registered under number 201501041245, GST registration number 001657360384, represented by Mr. Jean CASSEGRAIN as Director. |
LONGCHAMP COMPANY LIMITED, a company limited by shares with a share capital of HK$ 78,500,000, whose head office is located at Units 1903-06, 19/F, One Peking, Tsim Sha Tsui, Kowloon, Hong-Kong, registered under business registration number 05939284-000, tax number 04/0593 9284, represented by Mr. Jean CASSEGRAIN as Director. |
Malaysian Privacy Policy
Updated 25/11/2022
This privacy policy (“Policy”) set out how SAS LONGCHAMP and LONGCHAMP MALAYSIA SDN. BHD., a private company limited by shares incorporated under the laws of Malaysia with a share capital of RM 5,000,000, whose head office is located at Suite 04-01A, 4th Floor, Menara Keck Seng, 203, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia, registered under number 201501041245 (“LONGCHAMP”, “we” or “us”) manage, collect, share and use Personal Data (as defined in the Article 1 of the LONGCHAMP Group’s Privacy Policy), in relation to our website located at https://www.longchamp.com/my/en ( our “Website”) and how you can exercise your privacy rights.
LONGCHAMP complies with the Personal Data Protection Act 2010 (Act 709) and the applicable Malaysian privacy principles under that Act and any other applicable privacy laws when handling your Personal Data. We take the protection of your Personal Data seriously.
If your Personal Data is collected from or held in Malaysia or has a Malaysian link, this Policy will apply in addition to the Privacy Policy of the LONGCHAMP Group.
SAS LONGCHAMP is acting as the Data Controller (as defined in Article 1 “Definitions” of our LONGCHAMP Group’s Privacy Policy) for our Website and the services offered on it . Personal Data are collected, processed, transmitted, and stored on and through the Website remains in the possession and under the control of SAS LONGCHAMP.
We invite you to consult this Policy and our Privacy Policy of LONGCHAMP Group regularly in order to be aware of any updates.
1. Scope of application
This Policy is intended to govern the conditions of processing the personal data collected when you browse on our website. The Personal Data collected are subject, notably, to the provisions of the PDPA and the GDPR.
By accessing and using our Website, you are deemed to have accepted to our practices as described in this Policy, and undertaken to comply with your obligations under this Policy and the Privacy Policy of the LONGCHAMP Group.
2. Purpose of the data collection
In accordance with the Section 6(1)(a) and 6(2)(a) of the Personal Data Protection Act 2010 (Act 709), please find in the Article 3 of LONGCHAMP Group’s Privacy Policy, the types of Personal Data, we are collecting and for which purposes.
Also, we will collect only the information listed in this Article 3 that is reasonable for us to provide you with our services.
LONGCHAMP makes a reasonable effort to ensure that the Personal Data collected is accurate and complete. LONGCHAMP will not be responsible for relying on inaccurate or incomplete data arising from your failure to notify us of any changes or inaccuracies in your Personal Data that was initially provided.
LONGCHAMP only collects such information when the Individuals choose to supply the same to us. You do not have to supply any Personal Data to us, but you may not be able to take advantage of all the services that LONGCHAMP offers without doing so.
By using the Website, you expressly authorize and consent to LONGCHAMP gathering, reviewing, retaining, and transmitting your Personal Data as is proper and reasonable for the purposes enumerated above, in accordance with the PDPA.
You may at any time withdraw your consent to the processing of your Personal Data for the above purposes, except for that related to the processing and tracking of orders.
3. Destination of the Personal Data
Your Personal Data are collected by LONGCHAMP, in its capacity of processing manager. These data may also be communicated to other LONGCHAMP Group companies (listed in Appendix above) and to its service providers situated outside Malaysia, who contribute notably to the administration of orders and improving customer service.
Regarding the transfer of your Personal Data, please refer to the Article 2 “Identity and contact details of the Data Controller and Joint Data Controllers”.
Given the international standing of the LONGCHAMP Group and to optimize the quality of our service, your Personal Data may be transferred outside Malaysia. However, LONGCHAMP guarantees having taken the necessary measures to ensure a sufficient level of protection for privacy and freedom enabling a safe transfer of your data.
Your Personal Data may also be transferred to the LONGCHAMP boutique franchises for the commercial and promotional management of their sales outlets.
LONGCHAMP will also take appropriate steps to ascertain that the foreign recipient organization of the Personal Data is bound by legally enforceable obligations that are in-line with the requirements under the PDPA.
LONGCHAMP will not share your Personal data with others except as indicated in this Policy and in the LONGCHAMP Group Privacy Policy or when LONGCHAMP informs you and gives you an opportunity to opt out of having your Personal Data shared.
LONGCHAMP may disclose your information, including Personal Data in response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency, to establish or exercise our legal rights, to defend against legal claims, or as otherwise required by law.
4. Duration of conservation
As described in Article 5 above "Retention period", we undertake not to conserve your Personal Data for longer than is strictly necessary for the purposes detailed above.
5. Security
Please refer to Article 6 “Security” of the LONGCHAMP Group Privacy Policy above.
LONGCHAMP will take security measures to help safeguard your Personal Data from unauthorised access, collection, use, copying, modification, disposal, and disclosure. However, no system can be completely secure. Therefore, although LONGCHAMP takes steps to secure your Personal Data we cannot guarantee that your Personal Data, activities on the Website, or other communications will always remain secure.
6. Third Party Sites
There are a number of places on our Website where users may click on a link to access other websites that do not operate under this Policy. These third-party websites may independently solicit and collect information, including Personal Data, from the users and, in some instances, provide us with information about the users’ activities on those websites. You should consult the privacy statements of all third-party websites that you visit.
7. Children’s privacy
Although the Website is for a general audience, LONGCHAMP restricts the use of the Website to individuals aged 18 and above. LONGCHAMP does not knowingly collect, maintain, or use Personal Data of children under the age of 18. It is your sole responsibility to provide your correct birth date.
8. No Third-party Rights
This Policy does not create rights enforceable by third parties or require disclosure of any Personal Data relating to you.
9. Changes to our Privacy Policy
As part of our efforts to ensure that we properly manage, protect, and process your Personal Data, we will review our policies, procedures and processes from time to time.
LONGCHAMP reserves the right to amend the terms set forth under this Policy and the Privacy Policy of LONGCHAMP Group at our sole and absolute discretion.
LONGCHAMP will post details of any changes to this Policy on the Website to help ensure that the users are always aware of the information that we collect, how we use it, and in what circumstances, if any, that we share it with other parties.
10. Specific provisions related to the European Union General Data Protection Regulation
LONGCHAMP acknowledges that the GDPR will apply if we process or hold any Personal Data of individuals residing in the EU (“EU Individuals”) or if we offer goods or services to individuals in the EU.
LONGCHAMP will process Personal Data of EU Individuals only if consent is provided by the EU Individual for the processing for specific purposes, if it is necessary for the performance of a contract of if it is necessary for our compliance with a legal obligation.
LONGCHAMP will process Personal Data of EU Individuals lawfully, fairly and transparently, collect and apply the Personal Data only for specified, explicit and legitimate purposes, limit the collection of Personal Data to only what is required, ensure the accuracy of the Personal Data, not keep the Personal Data in personally identifiable form for longer than is necessary and secure and protect them in accordance with the GDPR.
LONGCHAMP will uphold the following rights of EU Individuals in accordance with the GDPR:
(a) Right to access and obtain a copy of the EU Individuals’ Personal Data, including the purposes of processing and who the Personal Data has been disclosed to;
(b) Right to rectify inaccurate Personal Data concerning the EU Individual;
(c) Right to erasure of Personal Data concerning the EU Individual in certain circumstances;
(d) Right to restriction of processing of Personal Data in certain circumstances, such as where the accuracy of the Personal Data is contested, or the processing is unlawful;
(e) Right to data portability by receiving Personal Data concerning the EU Individual or data which has been provided to us, in a structured, commonly used and machine-readable format, and the right to transmit that data to another organisation;
(f) Right to object to the processing of Personal Data in certain circumstances, including for the purposes of direct marketing; and
(g) Right not to be subject to automated decision-making (including profiling) where this has a legal effect on the EU Individual or significantly affects him.
We agree that we will act on a request from an EU Individual without undue delay (within one month). We will maintain records of how we process Personal Data, acknowledge the need to conduct data protection impact assessments and the need to apply careful consideration in the adoption and engagement of our data processors.
11. Access to personal data
In compliance with the Malaysian Personal Data Protection Act 2010, you have the right to access, rectify, to object to processing, to withdraw consent and to object marketing. This Act however, does not provide for the right to deletion/ right to be forgotten/ right to restrict processing or the right to data portability. You may contact our local Data Protection Officer (DPO) with any request or query on your personal data at ecommerce@longchamp.com.my or by using our online form.
LONGCHAMP will process your request within twenty-one (21) working days from the date on which the request for withdrawal of consent was made, and will thereafter not collect, use and/or disclose your personal data.
However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. Depending on the extent of the withdrawal of consent, it may mean that LONGCHAMP will not be able to continue with the existing relationship with you and the contract that you have with us will have to be terminated.
Moreover, if you choose to subscribe to our sales offers, we may send you promotional offers, invitations to events or any news about the LONGCHAMP brand by e-mail, SMS or telephone. You have the possibility of un-subscribing, by following the instructions mentioned on each communication.