European Privacy Disclosures
Privacy arrangements for European citizens
Grounds for lawful processing of personal data
Under European data protection law European individuals are entitled to be informed about the legal grounds on the basis of which personal data is processed (article 6 General Data Protection Regulation, hereinafter “GDPR”). When we process your personal data in the context of orders placed by you on our website colehaan.com, we process this data on the basis that this is necessary for the performance of a contract (article 6 (1)(b)GDPR). All data that is processed in connection to cookies or our newsletters, is processed on the basis of your consent (art. 6 (1)(a) GDPR). All other personal data that we process, is processed on the basis of our legitimate interest (article 6 (1)(f) GDPR). More specifically:
- We may process personal data due to our legitimate interest to ensure network- and information security, to prevent fraud and to obtain diagnostic data to improve our products and services.
- We may process personal data due to our legitimate interest to provide you with a website/app that is high quality and has full functionality, including personalized content.
- We may process personal data due to our legitimate interest to contact you in connection to your order, request, posed questions and activities/contests you signed up for.
- We may process personal data due to our legitimate interest of commercialization of Cole Haan and the acquisition of commercial information, including user experiences, in order to improve our products and services.
We will not retain your personal data in a form that permits identification for longer than is necessary to fulfill the purposes for which it was collected or as required by laws and regulation.
Data subject rights
If we process your personal data, you may:
- ask to gain access to your personal data;
- ask for rectification or erasure of your personal data;
- ask for restriction of the processing of your personal data;
- object to our processing of your personal data;
- execute your right to data portability;
- lodge a complaint with the Dutch Data Processing Authority (Dutch DPA); and
- withdraw your consent at any time.
You may contact us by e-mailing us at firstname.lastname@example.org
with your request. Note that this will not impact the lawfulness of our processing of your personal data prior to the withdrawal.