Who We Share Your Personal Data With
In connection with the activities set out above, we may disclose your personal data to:
(i) our group companies, in particular, our group companies that operate Stella McCartney stores that act as data controller or data processors on our behalf depending on the purposes of processing (for example, if you have an account with us and visit a Stella McCartney store in another country, your account may be accessed by the sales staff in the store you are visiting) both in and outside your country of residence and both in and outside the EEA (a list of Stella McCartney subsidiaries can be found here);
(ii) service providers who provide our business with support services, IT services, customer care support, logistics or courier services as data processors, including:
a. DROP (https://www.drop.it/en/) who manage purchases through the website on our behalf (including billing and/or invoicing activities);
b. T.W.S. (www.twsonline.it) who provide warehousing services; and
c. G SUITE (gsuite.google.it/intl/it//) who provide certain cloud computing services;
(iii) service providers who are involved in our marketing activity, such as media agencies working for us.
When you make a purchase through the website, the payment card details you provide are processed exclusively by our external payment processing provider, ADYEN (www.adyen.com), which processes your data as a data processor on our behalf for the purposes of completing the electronic payment transaction and to undertake identity verification, fraud and anti money laundering checks, and risk management and solvency assessments.
We may transfer your personal data from your country of residence to third countries. Some of these countries are subject to a data protection adequacy decision of the European Commission, but others are not, such as the USA. To ensure the protection of your personal data, transfers outside your country of residence or the EEA to a third party processing your personal data on our behalf will be made pursuant to the EU Model Clauses or other acceptable legal mechanisms. For more information, please contact firstname.lastname@example.org.
We may also share personal data with third parties in connection with a potential or actual sale of our business or assets and, where relevant, we will respond to requests for personal data where required to do so by law, or when we believe that disclosure is necessary to protect our legal rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on us.