Privacy Policy 

This document (the “Privacy Policy”) has been drawn up pursuant to Articles 13 and 14 of EU Regulation 2016/679 (the “GDPR”) in order to enable you to understand how your personal data will be processed when you browse the website dolcegabbana.com (the “Website”). 

Dolce & Gabbana S.r.l. (“Dolce & Gabbana”) and each company of the Dolce & Gabbana Group that processes personal data in the circumstances specified below (the “Relevant Group Company” and, jointly with Dolce & Gabbana, the “Joint Controllers”) are committed to protecting the online privacy of the Website’s users. 

This Privacy Policy will help you better understand how we manage your data, for what purposes and how you can control your information. 

1. Data Controller and Data Protection Officer

The data controller of your personal data is Dolce & Gabbana, with registered office at Via Carlo Goldoni 10, 20129, Milan. You may contact Dolce & Gabbana to exercise your privacy rights at the following address: [email protected]. 

If you purchase a product in one of the countries listed below, Dolce & Gabbana and the Relevant Group Company located in the country where you make your purchase (as indicated in the list below) will act as joint controllers for certain processing purposes specifically listed in Section 3 of this Privacy Policy. 

Dolce & Gabbana and the Relevant Group Companies have entered into a specific joint controllership agreement pursuant to Article 26 of the GDPR. Under the joint controllership agreement entered into between the Joint Controllers, Dolce & Gabbana serves as the main point of contact for the exercise of your privacy rights. 

Dolce & Gabbana has appointed a data protection officer (also known as “DPO”). The DPO is available for any information regarding the processing of personal data. You may contact the DPO by writing to: [email protected]. 

2. Personal Data processed

While you browse and use the Website, Dolce & Gabbana may collect and process information that relates to you individually and that allows your identification (either directly or in conjunction with other information) or relating to other individuals (“Personal Data”). 

In particular, the Personal Data we process through the Website includes the following categories: 

During your interaction with the Website (e.g., to create an account, to update your profile, to log in including through the social log-in function, to subscribe to our newsletter, to contact us through the “contact us” form, etc.), you will provide us with Personal Data such as first and last name, telephone number, date of birth, title, e-mail address, language and country. 

You may access the Website either as a registered user or as a guest. To complete a purchase, in addition to your contact details and any data already provided upon registration on the Website, you will provide us with data such as shipping address, payment and billing information, as well as your preferences (e.g., product purchased, size, colour, etc.). 

In order to provide you with the most useful and accurate services (e.g., to respond to your contact request through the “contact us” form or to locate the boutique nearest to you so you can pick up your order directly at one of our boutiques), we may ask you to provide your address, postcode or simply the country where you are located. 

Your location will be determined, more or less accurately, depending on whether it is collected by the browser or the device you use to browse the Website (e.g., IP address, device language or language selected by the user) and by any privacy settings you have configured on those devices. 

When using the Website, you may provide us with personal data relating to third parties (e.g., postal addresses or payment data of third parties for a gift, information relating to third parties when contacting us through the “contact us” form, etc.). 

In any case where you decide to share Personal Data relating to third parties through the Website, you assume all obligations and responsibilities arising thereof. This means that you must ensure you have obtained the prior consent of third parties to such use of their Personal Data, or otherwise ensure that other grounds exist that permit you to process such information. To this end, you agree to indemnify and hold harmless Dolce & Gabbana and/or the Joint Controllers against any claim, demand or request for damages that may arise from the processing of said Personal Data, brought by the third parties whose information is processed through the Website at your initiative. 

The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow the identification of users. This category of data includes IP addresses or domain names of computers used by users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the technical method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the user’s operating system and computing environment. 

These data are used solely for the purpose of obtaining anonymous statistical information on the use of the Website, to monitor its proper functioning and identify anomalies and/or abuses, and are deleted immediately after processing. In limited cases, these data may be used to establish liability in the event of hypothetical cybercrimes against the Website or third parties. 

Some of this information is collected using cookies and other tracking technologies present on your browser or on the device used to browse the Website. Further information on the cookies used on the Website is available by consulting our Cookie Policy. 

3. Purposes of processing and legal basis

Your Personal Data will be used for the following purposes and relying on the legal basis indicated for each purpose: 

Your Personal Data will be used for sales purposes (including the possibility of finalizing a purchase order and collecting it at the boutique you selected at the time of the order) and to provide you with all necessary after-sales assistance, including requests for return and/or repair (collectively, the “Sales Service”). 

The processing for the Sales Service is carried out by Dolce & Gabbana as independent data controller in case of sales made within the European Union and in the following countries, divided by geographical areas:

AFRICA

• Algeria 
• Egypt 
• Cape Verde 
• Kenya 
• Morocco 
• Mauritius 
• Mozambique 
• Namibia 
• Tunisia 
• Senegal 

LATIN AMERICA

• Guatemala
• Paraguay
• Venezuela 

ASIA-PACIFIC

• Brunei 
• Cambodia 
• Cook Islands 
• India 
• Indonesia 
• Kazakhstan 
• Laos 
• Mongolia
• New Caledonia
• New Zealand 
• Philippines 
• Taiwan
• Vietnam 

MIDDLE EAST

• Jordan 
• Lebanon 
• Oman
• Qatar 

EUROPE

• Albania 
• Andorra 
• Armenia 
• Azerbaijan 
• Bosnia Herzegovina 
• Georgia 
• Iceland
• Liechtenstein 
• Macedonia 
• Moldova 
• Montenegro 
• Norway 
• San Marino 
• Serbia 
• Turkey 

Instead, if you make a purchase in one of the countries listed in Section 1 of the Privacy Policy, Dolce & Gabbana and the Relevant Group Company located in the country where you make your purchase will act as joint controllers. 

This processing is necessary for the purposes of invoicing your purchases and delivering products to you, and is therefore necessary for the performance of the purchase contract between you and Dolce & Gabbana and/or the Joint Controllers, and in order to comply with legal obligations arising from consumer rights legislation.

Providing your Personal Data for this purpose is not mandatory. However, failure to do so will make it impossible for us to provide you with the Sales Service. 

Your Personal Data, including data you may communicate to us by contacting our customer care or by using our virtual assistant on the Website, will be used to respond to your requests for information or assistance and to provide you with all necessary assistance before and during a purchase or in relation to requests concerning your account (e.g., to request account activation, in case of lost login credentials or password, to request the update of your Personal Data, or to request the deletion or temporary deactivation of your account) (collectively, “Customer Care”). 

This processing is necessary to provide you with the assistance you requested and is therefore necessary for the performance of pre-contractual measures carried out at your request. 

Providing your Personal Data for this purpose is not mandatory. However, failure to do so will make it impossible for us to respond to your requests and provide you with the requested assistance. 

If you contact our customer care by telephone, with your explicit prior consent we may record and subsequently transcribe the telephone conversation to facilitate the handling of your request by our operators and to improve the quality of our service (“Call Recording”). 

Providing your Personal Data for this purpose is optional and failure to do so will have no consequences for you, other than the impossibility of recording and transcribing the call. 

Your contact details may be processed to send you commercial communications (e.g., to receive information and updates on products, sales, campaigns, events, and other initiatives promoted by Dolce & Gabbana), including communications regarding the completion of unfinished purchases where you have added a product to your shopping cart without proceeding to checkout (a so-called “abandoned cart”), as well as to gather your opinion regarding Dolce & Gabbana products and initiatives (“Marketing”). Such communications may be sent using both traditional methods, such as mail and phone calls, and electronic means, such as newsletters, emails, text messages, and smart messages, including WhatsApp. Please note that – with the exception of what is specified in purpose e) below – no marketing communications will be sent to you without your prior consent, which you may provide through the specific tick-box for this purpose.  

Providing your contact details for this purpose is optional and failure to do so will have no consequences for you, other than the impossibility of receiving marketing communications from Dolce & Gabbana. 

If you are already a Dolce & Gabbana customer, your contact details may be processed to carry out direct marketing communications by e-mail for products similar to those you have already purchased, on the basis of Article 130, paragraph 4, of Italian Legislative Decree 196/2003 (“Soft-Spam”). Please note that, in any case, since this processing has a marketing purpose, you may object to such processing at any time, either initially or on the occasion of each subsequent e-mail communication. The objection will have no consequences on the use of the Website. 

Please note that the processing activity described in this Section 3, e) will be performed solely for the Italian jurisdiction.

Your Personal Data may be processed to send you personalized commercial communications in line with your interests and profile (“Profiling”). Please note that no personalized promotional communication will be sent to you without your prior consent, which you may provide through the specific tick-box for this purpose. 

Providing your Personal Data for this purpose is optional and failure to do so will have no consequences for you, other than the impossibility of receiving personalized marketing communications from Dolce & Gabbana. 

Your Personal Data will be processed as part of our efforts to detect, prevent and respond to fraudulent or unlawful conduct, or to activities that compromise the security of the Website, including to enable Dolce & Gabbana to defend itself in any legal proceedings that may be brought in the future (collectively, “Security and Anti-Fraud”). 

For this purpose, Personal Data relating to your purchase will be shared with Riskified Ltd, a company with registered office at 37 Sderot Sha’ul HaMelech, Tel Aviv, Israel, 6492806 (hereinafter “Riskified”). For further information in this regard, please consult Section 5 (Recipients of Personal Data) of this Privacy Policy. 

This processing activity is based on Dolce & Gabbana’s legitimate interest in ensuring the security of the Website and safeguarding its interests and protecting users of the Website, including you. 

Your Personal Data will be processed by Dolce & Gabbana or by the Joint Controllers (depending on the entity providing the Sales Service) to protect their interests (“Defence in Legal Proceedings”). 

This processing activity is based on the legitimate interest of Dolce & Gabbana or the Joint Controllers to defend themselves in legal proceedings and protect their interests. 

Your Personal Data will be processed to comply with legal and tax obligations to which Dolce & Gabbana or the Joint Controllers (depending on the entity providing the Sales Service) are subject, which constitute the legal basis for such processing (“Legal Obligations”). 

Providing your Personal Data for this purpose is mandatory, as otherwise we would not be able to comply with the obligations to which Dolce & Gabbana or the Joint Controllers (depending on the entity providing the Sales Service) are subject.

4. Retention period

Your Personal Data will be retained only for the period strictly necessary to achieve the purposes for which they were processed. Specifically: 

1. Dolce & Gabbana or the Joint Controllers (depending on the entity providing the Sales Service) will retain Personal Data processed for the Sales Service as necessary to complete your purchase, deliver the purchased product and subsequently to demonstrate that they have properly fulfilled their contractual obligations, up to the applicable limitations period for claims for breach of contract.
2. Personal Data processed for Customer Care purposes will be retained for the period deemed strictly necessary to respond to your request and, subsequently, will be retained for 24 months following the closure of the case related to your request.
   If you contact Dolce & Gabbana’s customer care to request the deactivation of your account created on the Website, we specify that, following your request, the account will be maintained for a period of 12 months from your request. Upon expiration of this period, if you have not requested a reactivation, the account will be permanently deleted. 
3. Personal Data processed for Call Recording purposes will be retained for 12 months from the recording and subsequent call transcription.
4. Personal Data processed for Marketing purposes will be retained until you withdraw your consent previously provided or up to 7 years from collection, whichever occurs first.
5. Personal Data processed for Soft-Spam purposes will be retained until you object to the processing or up to 2 years from collection, whichever occurs first.
6. Personal Data processed for Profiling purposes will be retained until you withdraw your previously given consent or up to 7 years from collection, whichever occurs first.
7. Personal Data processed for Security and Anti-Fraud purposes will be retained for the period provided for by applicable law to protect our interests, in accordance with the statute of limitations for claims arising from breach of contract.
8. Personal Data processed for Defence in Legal Proceedings purposes will be retained for the period provided for by applicable law to protect our interests, in accordance with the statute of limitations for claims arising from breach of contract.
9. Personal Data processed for Legal Obligations purposes will be retained for the period provided by applicable law from time to time.

Once the relevant retention period/criterion has expired, your Personal Data will be deleted in accordance with Dolce & Gabbana’s data retention policy. You may request further information on retention criteria and periods by writing to: [email protected]. 

5. Recipients of Personal Data

Your Personal Data may be disclosed to the following categories of subjects/entities (“Recipients”): 

• persons authorised by us to carry out any of the activities relating to Personal Data described in this Privacy Policy: these are our employees and collaborators who have committed to confidentiality or are subject to an adequate legal obligation of confidentiality;
• entities acting as data processors to whom certain processing activities are delegated, in particular:
  • individuals, companies, or professional firms providing professional and advisory services in relation to accounting, legal, tax, administrative, financial, and debt collection matters;
  • security and hosting providers;
  • technology platform providers;
  • persons authorized to carry out technical maintenance work (including the maintenance of network equipment and electronic communication networks).
• public bodies, entities and authorities acting as independent data controllers, to whom your Personal Data may be disclosed in compliance with applicable laws or to fulfil binding orders issued by said bodies, entities, and authorities;
• banks and payment service providers, to whom your Personal Data may be disclosed for the purpose of processing your payments to provide the Sales Service. In particular, your payment data will be shared with the payment gateway Adyen NV, with registered office in Simon Carmiggeltstraat 6, 1011 DJ, Amsterdam (hereinafter “Adyen”). Adyen will process your payment data as an independent data controller in order to request the relevant payment system (e.g., Mastercard, Visa, etc.) to authorize the transaction and send such authorization to your bank for approval. For further information on the processing activities carried out by Adyen as an independent data controller, please consult Adyen’s privacy policy (available at the following link: https://www.adyen.com/privacy-policy/transaction);
• anti-fraud service providers. In particular, the company Riskified will carry out checks for Security and Anti-Fraud purposes on your purchase data (as indicated in Section 2, b) of this Privacy Policy) relating to transactions carried out. Riskified will process your purchase data as an independent data controller in order to verify the security of your payments and prevent the improper use of our services. The processing of purchase data by Riskified is carried out through automated means, and consists of aggregating your purchase data with other data relating to transactions completed through e-commerce platforms, in order to verify the validity of payments in accordance with predetermined criteria. For further information on the processing activities carried out by Riskified as an independent data controller, please consult Riskified’s privacy policy (available at this link: https://www.riskified.com/privacy/); 
• Dolce & Gabbana Group companies.

The complete list of Recipients is available by sending a request to: [email protected].

6. Transfer of Personal Data 

Some of your Personal Data is shared with Recipients that may be located outside the European Economic Area. Dolce & Gabbana ensures that your Personal Data are processed by such Recipients in compliance with the applicable data protection legislation. Such transfers may be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. Further information is available by sending a request to: [email protected]. 

7. Data subjects’ rights

At any time, you have the right to request: 

• access to your Personal Data;
• the rectification of your inaccurate Personal Data and the integration of incomplete Personal Data;
• the erasure of your Personal Data, in the cases provided for by applicable legislation;
• your Personal Data in a structured, commonly used and machine-readable format (right to data portability), in the cases provided for by applicable legislation;
• the objection to the processing, in the cases provided for by applicable legislation;
• the restriction to the processing of your Personal Data, in the cases provided for by applicable legislation;
• the withdrawal of consent previously given, in the case of processing activities based on your prior consent.

In any case, you always have the right to lodge a complaint with the competent supervisory authority (the Garante per la Protezione dei Dati Personali, if you are located in Italy, or the local supervisory authority, whose contact details are available at this link), if you believe that the processing of your Personal Data is in breach of applicable legislation, or to seek judicial remedies. 

You may exercise your rights either by sending a request to the DPO at [email protected] or by writing directly to Dolce & Gabbana at [email protected]. 

8. Amendments 

This Privacy Policy is effective from 5 November 2026. Dolce & Gabbana reserves the right to amend this Privacy Policy, in whole or in part, or simply to update its contents, for example in the event of changes to applicable law. Should amendments to this Privacy Policy involve substantial changes to the processing activities or otherwise have a significant impact on data subjects, Dolce & Gabbana will take care to duly inform data subjects. In any case, Dolce & Gabbana invites you to regularly visit this section to review the most recent and updated version of the Privacy Policy, so as to always be informed about the Personal Data processed and how it is used. 

9. Are you located outside the European Economic Area? 

This Privacy Policy has been drawn up in compliance with Italian and European data protection legislation, as the parent company of the Dolce & Gabbana Group has its registered office in Italy. 

The sections below explain how we process your Personal Data if you are located outside the European Union, in the event that the law of the country where you are located provides for derogations or necessary specifications to what is set out above in our Privacy Policy. Otherwise, the provisions previously indicated within the Privacy Policy shall fully apply. 

JAPAN 

If you are located in Japan, the Act on the Protection of Personal Information (“APPI”) applies to the processing of your Personal Data. The following provisions supplement and, where they diverge, prevail over the corresponding sections of this Privacy Policy to the extent required under Japanese law.  

A. Business Operators Handling Personal Information  

The APPI does not recognise the concepts of “data controller” and “data processor” as defined under the GDPR. Dolce & Gabbana S.r.l. and Dolce & Gabbana Japan K.K., whose legal representative is Nick Waddington, and which has its registered office at 5th Floor, Hulic Aoyama Gaien Higashi-dori Building, 2-2-3 Minami-Aoyama, Minato-ku, Tokyo, Japan, each qualify as a “Business Operators Handling Personal Information” under the APPI and each handle your “personal information” in accordance with the applicable obligations under the APPI. Accordingly, the distinction between data controller and data processor, and the joint controllership arrangement described in Section 1 of this Privacy Policy (pursuant to Article 26 of the GDPR), do not apply as such under Japanese law.  

Joint Use of Personal Data. Under the APPI, the sharing of “personal data” – including within group companies –constitutes a provision to a third party requiring the data subject's prior consent, unless one of the statutory exceptions applies. One such exception is the “joint use” arrangement under Article 27(5)(iii) of the APPI, which permits specified entities to share and use personal data as if they were a single entity, provided that the information prescribed by law is notified to data subjects, or made readily accessible to them, in advance.  

Dolce & Gabbana S.r.l. and Dolce & Gabbana Japan K.K. will jointly use your personal data as follows:  

• the categories of personal data to be used jointly: all data described in Section 2 of this Privacy Policy;
• the scope of joint users: Dolce & Gabbana S.r.l. and Dolce & Gabbana Japan K.K.; 
• the purpose of the joint use: all purposes described in Section 3 of this Privacy Policy;
• the entity responsible for the management of the jointly used personal data: Dolce & Gabbana S.r.l., Via Carlo Goldoni 10, 20129, Milan, Italy, whose legal representative is Alfonso Dolce.

B. Personal Data We Collect 

The APPI classifies certain categories of personal information as “special care-required personal information”, which includes information relating to a person's race, creed, social status, medical history, criminal record, or the fact of having been a victim of a crime. The acquisition of special care-required personal information requires the data subject's prior consent, and such information cannot be transferred to third parties through the opt-out mechanism. Special care-required personal information is not processed for the purposes of this Privacy Policy. 

In addition, the APPI defines “personally referable information”, which includes data such as web browsing history collected through cookies, purchase history, location data and other information linked to terminal identifiers that does not, on its own, constitute personal information. Where personally referable information is transferred to a third party who may identify a specific individual by cross-referencing such data with information already in the recipient's possession, we will confirm that the third party has obtained the data subject's prior consent before making such transfer.  

C. Purposes and Legal Basis 

Under the APPI, your personal information will be processed to the extent necessary to achieve the purposes of use set out in Section 3 of this Privacy Policy. Although the APPI does not recognize the concept of “legitimate interest” as a legal basis for processing, under Article 18(3) of the APPI your personal information may be processed for purposes beyond the stated purposes of use in cases such as the following: 

• where the handling of personal information is based on laws and regulations; 
• where the handling of personal information is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the person;
• where the handling of personal information is especially necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the person; or
• where the handling of personal information is necessary for cooperating with a state organ, a local government, or an individual or business operator entrusted by either of the former two in executing the affairs prescribed by laws and regulations, and obtaining the consent of the person is likely to impede the execution of the affairs concerned. 

D. Recipients 

Under the APPI, the sharing of personal data with third parties – including within group companies – requires the data subject's prior consent unless an exception applies (Article 27(1) of the APPI).  

As one exception, Article 27(5)(i) of the APPI permits the provision of personal data to a third party without the data subject’s consent where such personal data is provided in connection with the entrustment of all or part of the processing of personal data, within the scope necessary to achieve the purpose of use. This exception may apply to the sharing of personal data to the Recipients mentioned in Section 5 of the Privacy Policy, including payment service providers and anti-fraud service providers. 

In addition, Article 27(5)(iii) of the APPI provides another exception under which the data subject’s consent is not required for the joint use of personal data. This exception applies to the sharing of personal data among Dolce & Gabbana Group companies. For further details regarding such joint use, please also refer to the explanation of “Joint Use of Personal Data” under Section A.  

Unlike GDPR, the APPI does not have a formal “data processor” category. Where a third-party provider handles personal data on our behalf under an entrustment arrangement, we remain obligated to exercise necessary and appropriate supervision over the entrusted party to ensure the secure management of personal data (Article 25 of the APPI).  

E. Transfer of Personal Data Outside Japan 

Under the APPI, personal data may not be transferred to third parties located outside Japan unless the individual has given prior consent to such transfer (Article 28(1) of the APPI). However, this requirement does not apply to transfers of personal data to third parties located in foreign countries that have been designated as having an adequate level of protection (i.e., countries specified under the European Economic Area Agreement and the United Kingdom). Accordingly, your personal data may be transferred to Recipients located outside Japan based on an adequacy designation.  

In addition, where personal data is entrusted to a service provider outside Japan or transferred to a group company outside Japan, and the implementation of measures consistent with the purpose of the APPI with respect to the recipient’s handling of such personal data is ensured through a contract, confirmation letter, internal rules or similar arrangement, the APPI also permits the transfer of personal data to a third party located outside Japan without the individual’s consent. Accordingly, even in relation to third parties located in countries that have not been recognized as having an adequate level of protection, your personal data may be transferred to Recipients located outside Japan, provided that appropriate measures are ensured.  

F. Your Rights 

Within the scope permitted by the APPI, data subjects may exercise the following rights with respect to their “retained personal data”, i.e. personal data over which a Business Operators Handling Personal Information has the authority to disclose, correct, add or delete, cease to use, erase and cease to provide to a third party, and from which the individual is identifiable: 

• Right to disclosure: you may request disclosure – including in electronic format – of your retained personal data as well as records of its provision to third parties; 
• Right to correction: you may request its correction, addition or deletion; 
• Right to cessation of use or erasure: you may request that we cease to use or erase your retained personal data;
• Right to cessation of third-party provision: you may request that we cease providing your retained personal data to third parties.

Please note that the right to data portability as recognised under the GDPR is not provided under the APPI. 

We may charge a reasonable fee for processing your requests for disclosure or notification of the purpose of use, within the limits of actual costs. 

You may submit any request regarding your Personal Data by contacting us at [email protected] or at [email protected]. We will endeavour to process any complaint concerning the handling of your Personal Data appropriately and promptly. 

In any case, you always have the right to lodge a complaint with the competent supervisory authority of Japan, the Personal Information Protection Commission (PPC), at the following address: Kasumigaseki Common Gate West Tower 32nd Floor, 3-2-1 Kasumigaseki, Chiyoda-ku, Tokyo 100-0013, Japan, or, where applicable, with an accredited personal information protection organization designated for the relevant industry sector.