PRIVACY NOTICE – KARL LAGERFELD COMPETITION
1. Data Controller
Karl Lagerfeld B.V., (hereinafter – “KARL LAGERFELD or “Promoter”), with the registered address at: Herengracht 182, 1016BR Amsterdam, the Netherlands, is the Data Controller according to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) responsible for processing personal data in connection with the “WIN AN IKONIK EXPERIENCE” promotional competition (“Competition”).
2. Scope and eligibility
This Privacy Notice describes how the Promoter processes personal data in connection with the Competition, including personal data relating to participants, winners and, where applicable, accompanying guests.
Only individuals who are eighteen (18) years of age or older and reside in one of the eligible countries as defined in the Terms & Conditions are permitted to participate
in the Competition.
3. Purposes of Processing
Depending on the circumstances, we may process personal data relating to participants, winners and accompanying guests for the following purposes:
- To administer the participation in the Competition;
- To verify eligibility of participants/ winners and their guests;
- To contact and notify the selected winner;
- To deliver the prize;
- To arrange visa, travel, accommodation and other prize-related services with our prize
fulfilment partners; - Only when consent is provided - to send marketing communications about KARL LAGERFELD products, campaigns and other activities
4. Data Collected
Where necessary to administer the Competition and, where relevant, to arrange and fulfil the prize, the Promoter may collect and process the following information:
- Full name;
- Date of birth;
- Email address;
- Residential
address; - Country of residence and preferred language;
- Confirmation of acceptance of the Terms and Conditions;
- Where applicable, identity information and documentation required to verify
eligibility and arrange prize fulfilment; and - Where applicable, marketing consent and related preference information.
Where a prize includes an accompanying guest, personal data relating to that guest may also be provided and processed to the extent necessary for the administration of the Competition and the arrangement and fulfilment of the prize. The winner shall ensure that the guest is informed of this Privacy Notice before any personal data relating to the guest is provided to the Promoter for the purpose of administering, arranging or fulfilling the prize
5. Legal Basis Performance of a contract (Article 6(1)(b) GDPR):
Personal data may be processed to administer participation in the Competition, verify eligibility, select and contact the winner, and administer and fulfil the prize.
Legitimate interests (Article 6(1)(f) GDPR):
Personal data may be processed where necessary for the administration and security of the Competition, fraud prevention, winner verification, record keeping, compliance management, and the establishment, exercise or defence of legal claims.
Consent (Article 6(1)(a) GDPR):
Where consent has been provided, personal data may be processed for direct marketing purposes. Consent may be withdrawn at any time.
6. Data Retention
Personal data will be retained only as long as necessary to fulfil the purposes described in thisPrivacy Notice. For most participants, personal data will be deleted no later than three (3) months after the Competition ends. However, personal data relating to the winner and accompanying guest may be retained for a longer period where necessary to administer the prize, arrange travel and accommodation, comply with legal obligations, resolve disputes, or maintain appropriate records of the Competition.
7. Data Sharing
We may share personal data, collected in connection with the Competition with:
- Affiliates of the Promoter;
- Service providers supporting the administration and operation of the Competition, including providers of marketing, IT, winner selection and administration services;
- Prize fulfilment partners, including travel, hospitality and hotel providers involved in
arranging and delivering the prize; - The Promoter's email, CRM and marketing platform providers, which process personal data on the Promoter's behalf and are subject to appropriate contractual data protection obligations; and
- Professional advisers, regulators, courts, law enforcement authorities or other competent authorities where required by applicable law.
If a participant is selected as the winner, we may share the personal data of the winner and their guest to the extent necessary to arrange and deliver the prize, including with travel, hospitality and hotel providers. Some of these recipients may be located in Macau.
8. International Data Transfers
In order to administer the Competition and arrange the prize experience, personal data relating to participants, winners and accompanying guests may be transferred to recipients located outside the European Economic Area ("EEA"), including prize fulfilment partners in Macau where this is necessary to organize travel, accommodation and other elements of the prize.
Where personal data is transferred outside the EEA, Promoter will implement appropriate safeguards in accordance with applicable data protection laws, including the execution of Standard Contractual Clauses approved by the European Commission or reliance on another lawful transfer mechanism where available.
Prize fulfilment partners, including partners located in Macau, may process personal data in accordance with their own legal and
regulatory obligations under applicable local laws. Where such partners process personal data as independent controllers, their processing activities will be governed by their own privacy notices and policies.
Where required under applicable data protection laws, Promoter will carry out a transfer assessment and implement any supplementary measures considered necessary to ensure an adequate level of protection for personal data transferred outside the EEA.
9. Individuals’ Privacy Rights
The following rights may be available under applicable data protection laws:
- Access to personal data;
- Rectification of inaccurate or incomplete personal data;
- Erasure of personal data;
- Objection to or restriction of processing; and
- Data portability, where applicable.
Requests concerning the exercise of privacy rights maybe submitted to: [email protected]
10. Complaints
Complaints regarding the processing of personal data may be submitted to the competent data protection authority. Individuals may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.
11. Updates
We may update this Privacy notice to reflect changes in processing or applicable laws. Please refer to www.karllagerfeld.com for the most current
version.