Privacy

Privacy Policy

1. Why do we have a Privacy Policy?

It is important for GANT Australia to protect your personal privacy. Therefore, we strive to always protect your personal data in the best possible way and comply with applicable data protection rules. Through this privacy policy, we would like to inform you about how your personal data is processed by GANT Australia and our Affiliates.

GANT Australia respects the privacy of its Customers and is committed to the protection of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Who is responsible for your personal data?

Salco Group Pty Ltd, as Licensee in Australia for GANT (“GANT Australia”) ABN 42 004 320 898 (also referred to as "we", "us" and "our"), at 23-35 Mace Way Tullamarine 3043, is responsible for the processing of your personal data (controller or "GANT Australia"). GANT Australia shares your personal data with other companies of the GANT group which may act as separate or joint controllers or as processors of GANT Australia, as described below.

3. Personal data we process about you

3.1 Personal Data that you have provided to us or that we have collected from you.

You will provide us with some information about yourself when joining GANT Australia's membership, purchasing items in store or at gant.com.au and when integrating with us in any other way (for example via our customer service). You may also provide us with information for other reasons.
Example of such information is:

• Name

• Age

• Gender

• Contact information (such as email address, phone number & address)

• Physical attributes (size)

• Product feedback and comments (including unstructured comments/information, chat/mail, email & recordings of call sessions)

• Payment information (such as bank account)

• Image (collected from CCTV in our stores or our offices)

We also collect your information when you make a purchase at a GANT store, visit gant.com.au or when you integrate with us in any other way.
GANT Australia processes information as:

• Technical data (such as IP address, language settings, geographical information)

• Transaction & purchase information (such as order number & item)

• Purchase and user generated data/E-commerce activities (such as clicked and viewed items)

• Preferences and behaviour

3.2 Personal data we have collected from third parties.

In order to maintain a good customer relationship, GANT Australia regularly collects personal data from other places/other parties (so called third parties). The information we collect from third parties is:

• Addresses from public records to be sure we have the correct address details for you.

• Credit rating data from credit rating agencies or banks.

4. Cookie Information

A cookie is a small text file sent from a website and then stored locally on the visitor's hard drive. GANT Australia uses cookies to enhance your customer experience and provide you with relevant information and offers. The cookie also tells us if you visited the site before and which of our pages you've been in.

Read more under our Cookie policy.

In your browser you can choose an option that allows you to receive a message before a website sends a cookie to your computer. You can then choose to accept or reject the cookie. You can also choose not to receive any cookies at all. Because different browsers work differently, you can search your help menu to find the setting on your browser.

5. Purpose and legal basis for processing your personal data

5.1 The purpose of processing your personal data

We process your personal information for different purposes. GANT Australia processes your personal information in order to:

Administer your purchase, which includes:

• Giving you information about your purchases on gant.com.au, e.g. order confirmation, delivery information etc.

• Delivering your purchases on gant.com.au to your specified address

Deliver a personalised experience (profiling) by:

• Sending newsletters and other marketing to you

• Customising your experience on gant.com.au based on your behaviour and preferences

• Delivering a personalised experience of our services, benefits and offers

Improve our communication, products and services by:

• Handling customer service issues and/or complaints

• Identify trends by collecting data for statistical purposes

Manage and administrate your information by:

• Keeping our customer records updated with the current address

Administrating events by:

• Conduct and manage participation in competitions and/or events

• Communicating before and after competitions and/or events

Manage and administrate your membership (only applicable for members) by:

• Offering points, bonuses and other benefits linked to your personal membership

• Administrate your account on our webpage

We may place a cookie on your device when you access our website. These cookies will let us know when you have accessed our website. We may share this information with our advertising social media providers such as Facebook or Twitter (e.g. IP addresses or unique mobile identifiers). The cookies will let our advertising providers know when to serve ads and to whom, ensuring that our ads are served only to people who have previously visited our websites or used or downloaded our apps ("Retargeting"). This is further explained in our Cookies Policy.

5.2 Legal basis for processing your personal data

GANT Australia bases the processing of your personal data on a number of legal bases.

• Performance of Contract.

We treat your personal information in order to fulfil the purchase agreement with you as a customer and/or member or to provide any other services we agree to provide to you. Based on this legal basis, we treat information such as your purchases and your interaction with our customer service.

• Legitimate Interest.

Part of the processing of personal data we carry out is based on our legitimate interest when we conduct and manage our business. This applies, for example, to the personal data we process to send you personal offers and to make a limited segmentation of customers. For example, this includes the processing and analysing of your purchase history, your buying behaviour and your behaviour on gant.com.au in order to gain more knowledge about you as a customer and our customers in general as well as to improve our offers.

• Law Compliance.

In some cases, GANT Australia may have a legal obligation to process your personal data to comply with a legal or regulatory obligation.

• Consent.

Generally, GANT Australia does not rely on consent as a legal basis for processing your personal data, other than in relation to marketing purposes such as direct marketing and newsletters.

Please note: You are never required to share your personal data with us, however, if you do not submit your personal data to us, we will not be able to fulfil our agreement or fulfil our commitments in relation to you.

6. Who can access your personal data?

Your personal data is for some purposes shared with parties who process personal data on our behalf, so-called processors. We will provide your personal data to the following;

• Suppliers of IT systems such as gant.com.au and its sub-suppliers in development and support. These companies provide services, technical solutions and platforms for GANT Australia.

Only applicable for GANT Australia Subscribers:

As a member of GANT, we also want to offer you the benefits from any of our partners. This means that in order for you to benefit from their offers and benefits we need to share some of your personal data, such as name, email and mobile number to be able to identify you as a member. Offers in cooperation with external partners will only be sent by GANT Australia and the personal data provided to partners will only be used to identify you as a GANT Australia member.

We also transfer your personal data to joint or independent controllers:

• Collaborating partners.

To handle payments made by GANT Australia's customers, we use suppliers to ensure secure payment solutions;

• Other companies within the GANT group and the Salco Group. Since GANT is an international company, some of your personal data is disclosed to companies within the Group which operate in other countries such as Sweden, Germany, UK, France, Benelux and Switzerland;

7. For how long is your personal data retained?

We will only retain your personal data for as long as you have consented to it or when is necessary to us to provide you with our services or fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, reporting or regulatory requirements. For instance, by law we will keep basic information about our customers (including contact, identity, financial and transaction data) typically for six years after they cease being customers for tax purposes.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances you can ask us to delete your personal data.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Only applicable for GANT Australia Subscribers: Your personal data will as a general rule be saved until you end your membership or automatically due to inactivity for a period of 24 months. You may contact us at any time and terminate your membership and request that we remove your personal data.

8. Data Security

The Internet is not a secure medium. However, we have put in place various security procedures with regards to the website and your electronic communications with us, as set out in this Privacy Policy.

Please be aware that communications over the Internet, such as e-mails are not secure unless they have been encrypted. Your communications may route through several countries before being delivered. We cannot accept responsibility for any unauthorised access or loss of personal data that is beyond our control.

We have appropriate security policies, rules and technical measures to protect the personal data that we have under our control (having regard to the type and amount of that data) from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss. We have procedures in place to deal with any suspected personal data breach, and will notify you and any regulator of a breach when legally required to do so.

9. Your rights

Access. In accordance with Data Protection Legislation, you have the right to access information about what personal data we are processing about you and the right to request a correction of your personal data.

Rectification. You have the right to rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed.

Erasure. under certain conditions, for example if the processing is no longer necessary for the stated purposes or if you withdraw your consent, you have the right to request that we erase your personal data. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Restriction. In some cases, you also have the right to request that we restrict our processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

(i) if you want us to establish the data's accuracy;

(ii) where our use of the data is unlawful but you do not want us to erase it;

(iii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or

(iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Objection. You have the right to object to our processing of your personal data for example direct marketing purposes or profiling, or if the processing is based on our legitimate interest. You also have the right to object to processing of personal data for the purpose of profiling and direct marketing.

Portability. You also have the right, under certain circumstances, to obtain the personal data that relates to you, as provided to us, in a structured, widely used and machine-readable format and may transfer them to another controller.

Withdrawal. You are entitled to revoke all or part of a given consent for processing personal data at any time where we are relying on consent to process your personal data with effect from the date of withdrawal, unless further processing is required by law.

Profiling. You also have the right to object to processing of personal data for the purpose of profiling and direct marketing.

What we may require from you.

We may need to request specific information from you to help us confirm your identity. We may also contact you to ask for further information in relation to your request.

Time limit to respond.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex, or you have made several requests. In this case, we will notify you and keep you updated.

No fee usually required.

All communication and all actions taken by GANT Australia regarding your rights described above are provided free of charge. GANT Australia reserves the right, in the case of clearly unfounded or unreasonable requests, to either take out a reasonable fee covering the administrative costs of providing the information or taking the requested action or refusing to fulfil the requested action.

10. Changes to this Policy and changes of purpose for which your data is collected

10.1 Changes to this Policy.

We reserve the right to amend or modify this Privacy Notice and if we do so we will post the changes on our website. It is your responsibility to check the Privacy Notice every time you submit your personal data to us.

10.2 Change of purpose.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at online@gant.com.au If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

11. Complaints

If you would like to let us know about something we have done, or failed to do in relation to your personal data, whether positive or negative, please let us know by contacting GANT Australia online@gant.com.au. Your comments enable us as an organisation to learn and continuously improve our services.

If you have any complaints regarding our processing of your personal data, you have the right to lodge a complaint with The Office of the Australian Information Commissioner on 1300 363 992 or visit their website at www.oaic.gov.au.

12. Contact information

If you want to execute your rights or contact us regarding our processing of your personal data, you can do so by contacting GANT Australia at online@gant.com.au

This Privacy Policy is effective as at October 2019.