privacy policy

Effective date: This Privacy Policy was updated on July 23, 2024 and is effective as of that date.

contents

What is the content of this document? What happens to my personal data when I interact with the VF Group?

Who controls the processing of my personal data? Who is accountable for it?

What personal data are processed?

For what purposes are my personal data processed?

What are the legal bases for the processing of my personal data as described herein?

How long will my personal be data processed?

Are my personal data safe?

Where do my personal data go? Who are the recipients, where is it transferred and for what purposes?

Am I obliged to provide my personal data? What are the consequences if I refuse to provide them?

Do VF Digital Platforms contain elements controlled by third parties? Who is responsible and liable for these elements?

What are my rights in relation to the processing of my personal data and how can I exercise them?

Can we make changes to this Privacy Policy?

Appendix 1 - Data Subject's Rights

What is the content of this document? What happens to my personal data when I interact with the VF Group?

This privacy policy (“Privacy Policy”) applies to any collection and processing of personal data carried out:

(i)               when you interact with us through digital means, including the website www.timberland.co.uk (the “Site”), portals and mobile applications, operated by VF International Sagl, Via Laveggio 5, 6855 – Stabio, Switzerland (collectively “VF Digital Platforms”);

(ii)            when you purchase a product or request other services from VF International Sagl or any of its subsidiaries (hereinafter, "we" or "us" or "VF group"), whether online on our Site or offline in our stores, including when you contact our customer service for post-sale customer service or specific questions or requests;

(iii)           when we communicate with you as part of our marketing activities.

By accessing and using the VF Digital Platforms or otherwise providing us with your personal data, for example when visiting our stores or when contacting our customer service , you confirm that you have read and that you understand the way we collect, process, use and disclose your personal data, as described in this Privacy Policy. 

For specific processing activities, we need to obtain your consent to collect and process your personal data. When we need your consent, we will ask you, before you submit personal data or use the relevant sections of VF Digital Platforms, to confirm electronically that you consent to the processing activity at stake, as described in this Privacy Policy, by ticking specific boxes. Your affirmative action in ticking the relevant box and your use of this Site signify that you agree to the processing activity at stake as described in this Privacy Policy. Our records of your acceptance of this Privacy Policy, the date thereof, and of all future amendments to this Privacy Policy, shall be regarded as conclusive and written evidence of your consent. 

You will also be informed of this Privacy Policy - and, when a specific processing activity requires your consent, be asked to consent - when contacting our customer service or when providing us with your personal data through interactions in stores. 

We collect and process your personal data in accordance with all applicable data protection laws and regulations, including, without limitation, the laws promulgated on the matter by the European Union, such as the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and supplementing national provisions, as well as the orders and guidelines issues by the competent data protection authorities, as applicable (the "Data Protection Laws").

Who controls the processing of my personal data? Who is accountable for it?

The data controller of the personal data (i) that are collected when you use VF Digital Platforms (other than when you purchase goods from us), and (ii) that are collected for our marketing and profiling activities is: VF INTERNATIONAL S.A.G.L. – BRAND DIVISION, Via Laveggio 5, 6855 – Stabio, Switzerland. For further details and how to contact us, please refer to Contact Us.

VF Europe BV, with registered office at Link 1, Posthofbrug  2-4, 2600 Antwerp, Belgium , VAT BE 0405.039.138 RPM Antwerp Division Mechelen, is acting as the representative of VF International Sagl for purposes of personal data protection compliance in the European Union.

The data controller of your personal data when you purchase goods from us is the local entity of the VF Group that sells the goods to you through our Site (for online purchases) or in store (for offline purchases). This local entity is also the data controller of the personal data that you provide when you interact with our customer service. The relevant VF subsidiary is identified on your purchase receipt. A list of the VF subsidiaries acting as data controllers per country is  available here.  

Note that the VF entity with which you interact (and to which you provide personal data) is not always the data controller. In the following cases, the VF entity with which you interact acts on behalf of (and will communicate your personal data to) another VF entity, that is the actual data controller of your personal data:

- the VF local subsidiary from which you purchase goods collects your personal data - and, where required by law, asks your consent to use them - for marketing and profiling purposes on behalf of VF International Sagl, which is the data controller in that context as indicated above;

- Alternatively, VF Northern Europe Ltd or our third-party service provider Concentrix Services Bulgaria EOOD, with registered offices at 29 Atanas Dukov Str Rainbow Center, Sofia, Bulgaria, manages our customer service and interacts with you on behalf of the VF local subsidiary from which you purchased the goods, which is the data controller in that context as indicated above.

VF Group's Data Protection Officer may be contacted via our Privacy Office at privacy_europe@vfc.com.

What personal data is processed?

Automatic Information Collection on the VF Digital Platforms

The processing of your personal data when you merely visit and consult the Site is limited to the so-called surfing data, namely the data whose transmission to the Site is implicit in the functioning of the systems in charge of the managing of the Site and in the communications protocols peculiar to the Internet. Surfing data are, for example, the IP addresses of the devices you use to connect to the Site and other parameters relating to your device and operating system.

In principle, surfing data, such as those specified above, and for example the number of visits and the time spent on the Site, are collected and processed by us exclusively for statistical purposes and in aggregated form for purposes of measuring and enhancing the functioning of the Site. Due to the nature itself of surfing data, these data may lead to identification of users if they are associated with data held by third parties; however, we do not collect surfing data in order to associate them with identified users, except where said data may be used for purposes of assessing possible responsibilities in case of information crimes realized against the Site or through the Site to the extent permitted by law. 

Besides, certain information is gathered on the Site or other VF Digital Platforms by means of cookies and other tracking technologies, as described in our Cookie Policy available  at Cookie Policy. By clicking the “Accept All” button on the Site’s Cookie Banner or by setting your cookie preferences through our  tool, you are agreeing to our use of cookies and similar tracking technologies. If you do not agree to our use of cookies and similar technologies in this way, you should set your cookie preferences or browser settings accordingly. You will always be able to withdraw your consent and change your cookie preferences at any time through our tool. If you disable cookies that we use, this may impact your user experience while on the VF Digital Platforms. Please refer to our Cookie Policy for further details.

Information you provide voluntarily to us:

We collect and process:

1.     personal data that you provide when you interact with us, through VF Digital Platforms, for example, when you open an account, upload user-generated content on the Site, fill-in forms in store or use our mobile applications. This personal data may include:

-       your name, e-mail address, telephone number

-       your username and password

2.     personal data that you provide when you take part/subscribe to our marketing activities (whether through VF Digital Platforms or in our stores), for example, when you subscribe to our newsletter(s) or mailing list(s) or participate to promotions and other initiatives such as loyalty programs, contests and sweepstakes, etc. This personal data may include:

-       your name, e-mail address, telephone number

-       the history of your purchases

-       your gender

-       your preferences and interests

-      your actions and behaviors when interacting with VF Digital Platforms

3.     personal data that you provide when you purchase goods from us (whether online or in our stores). This personal data may include:

-       your name, e-mail address, telephone number, shipping and billing address

-       the history of products you purchase

-       details regarding your transaction

4.     personal data that you provide when you interact with our customer-service, for example, when you send a question about a product, communicate feedback to us, contact our customer service call center for support, or request specific assistance or service from our customer-service. This personal data may include:

-       your name, e-mail address, telephone number

-       the history of products you purchase

-       information regarding the reasons why you contacted customer service 

-       content of your communications relating to your interaction with customer service (Additional information about our customer service)

Where you have provided us with personal data about another person (for example when using the function e-mail to a friend, gift card functionalities or other purposes), to the extent permitted by applicable laws you hereby confirm that you are entitled to communicate such personal data to us and that you have informed said person about - and where necessary, have obtained his/her consent to - the processing of his/her personal data for the purposes set out in this Privacy Policy. 

for what purposes are my personal data are processed?

We collect and process your Personal Data for the following purposes:

1.     VF International Sagl , as data controller, processes your personal data for the following purposes:

a.     to operate and manage VF Digital Platforms, including:

-        to provide you with the services or functionalities that you request on VF Digital Platforms;

-        to create your account and manage your subscription on VF Digital Platforms;

-        to improve your browsing experience and ameliorate VF Digital Platforms;

b.     to conduct marketing activities for the VF Group, including:

-        for direct marketing and/or profile-based direct marketing purposes, such as:

§  to manage your subscription to our newsletter(s) or mailing list(s) or loyalty program(s);

§  to allow participation to promotions and other initiatives, such as contests and sweepstakes;

§  to send you (subject to your consent, that is optional), also through e-mail or other electronic communications means, such as SMS, MMS, fax, etc., promotional information and materials, including profile-based promotional information and materials, on our products and services, on special initiatives on price and promotions and on initiatives such as loyalty programs, events, exhibitions and fairs organized by the VF Group  or to which the VF Group takes part;

§ to send you notifications of an abandoned shopping cart, notably if you select products, add them to the cart and then leave the VF Digital Platforms before finalizing the purchase, we will notify you that the cart is available to you in case you wish to finalize the purchase;

-       to measure and optimize the effectiveness of marketing and advertising campaigns, including through the use of dedicated tracking technologies, as further described in our Cookie Policy (subject to your consent, that is optional).

-        for survey purposes (subject to your consent, that is optional);

-        for profiling purposes (subject to your consent, that is optional);

-        to improve our products and services;

c.     for other purposes:

-        for fraud prevention purposes, through internal procedures aimed at verifying the regularity of transactions, to protect our financial integrity and to protect you against the misuse of data and fraudulent purchases; and

-        to comply with our obligations under applicable laws, regulations and to assess and defend a legal right.

2.     VF local subsidiaries, as data controllers, process your personal data for the following purposes:

a.      to manage your purchases of goods (online and in our stores):

-        this includes all activities relating to the purchase of goods, such as for example delivery of goods, billing, returning and exchanging of goods, receiving refunds, purchase and use of gift cards and e-gift cards, as applicable, payment related activities, including use of vouchers;

b.     to provide you with our customer-service (see details section 3 below), including:

-        to provide you with after-sale services;

-        to respond to your request(s) of information, question(s), communication(s) or feedback

-        for internal training purposes and improvement of our customer-service;

c.     for other purposes:

-        for fraud prevention purposes, through internal procedures aimed at verifying the regularity of transactions, to protect our financial integrity and to protect you against the misuse of data and fraudulent purchases; and

-        to comply with our obligations under applicable laws, regulations and to assess and defend a legal right.

3.     Additional information about our customer service

Our customer service is managed alternatively by VF Northern Europe Ltd or our third-party service provider Concentrix Services Bulgaria EOOD, with registered offices at 29 Atanas Dukov Str Rainbow Center, Sofia, Bulgaria, which interacts with you and provides you the service on behalf of the VF local subsidiary from which you purchased the goods. We will process your personal data when you contact our customer support and call center, which may communicate with you through e-mail, chat and telephone. The call center will register your phone number for purpose of call-back and back-office services in order to provide you with the requested support and information. In some cases, for purposes of internal training, quality control and verification, the call may be recorded and the e-mails may be saved to the extent not prohibited under applicable law. You will always be informed in advance of the recording of the communication, and you will have the opportunity to object to such recording, save when this is necessary for verification purposes in relation to your purchase or other reasons, as allowed under applicable laws.

What are the legal bases for the processing of my personal data as described herein?

We will collect and process your personal data for the purposes described in the Section "For what purposes are my personal data processed?" on one of the following legal bases:

§  The processing of your personal data is necessary for performance of a contract with you or in order to take steps prior to entering into a contract with you at your request (Article 6, 1., (b) of the GDPR);

§  The processing is necessary for the purposes of our legitimate interests or our affiliates' or other third parties' legitimate interests, and such interests are not overridden by your interests or fundamental rights and freedoms (Article 6, 1., (f) of the GDPR); The legitimate interests that we pursue notably include our interest to manage and maintain the contractual relationship with you, to answer to your specific requests, to ask your feedback in order to improve our Site and our products, or to pursue other general marketing activities.

§  Where your specific consent is required to the processing of your personal data as described herein, your personal data will be processed based on such consent (Article 6, 1., (a) of the GDPR);

how long will my personal data be processed?

Personal data are not kept for longer than the time necessary to achieve the specific data processing purposes described herein. This may be up to 10 years after the end of the contractual relationship with you (statute of limitation for legal claims in most EEA countries), unless a shorter or longer retention period applies under applicable laws.

is my personal data safe?

We are committed to protect the security and confidentiality of your personal data. We take – and require that any service provider and/or third party processor processing personal data on our behalf and on our instructions takes – appropriate technical and organizational measures  to prevent loss and destruction, even accidental, of data, unauthorized access to data, unlawful or unfair use of data. Moreover, information systems and software programs are configured so that personal and identification data are used only when necessary to achieve the specific processing purpose from time to time sought.

We deploy a variety of advanced security technologies and procedures to help protecting personal data against the risks outlined above. For example, personal data provided by users are stored on secured servers placed in controlled locations. Moreover, for the transmission of some data through the Internet are deployed encryption techniques such as the Secure Socket Layer (SSL) protocol. 

However, please note that no electronic transmission or storage of information is 100% secure. Therefore, despite the security measures that we have put in place to protect your personal data, we cannot guarantee that loss, misuse, or alteration of data will never occur.

where does my personal data go? who are the recipients, where is it transferred and for what purposes?

Personal data collected through our Site or other VF Digital Platforms, as part of the sale of goods in our stores and as part of our customer service, are stored on the servers provided and managed by our third-party storage and hosting provider Rackspace Limited, with registered offices at 5 Millington Road, Hyde Park Hayes, Middlesex, UB3 4AZ, servers located in London, United Kingdom. Certain personal data collected as part of the sale of goods in our stores might also be stored locally in the store. All these personal data may be shared with recipients as detailed below.

We communicate personal data within the limits and under the circumstances specified in this Privacy Policy, subject to your specific consent when required under applicable Data Protection Laws:

1°.   Your personal data will be accessible within our organization by the internal and external personnel that need to access it because of their duties in relation to the processing purposes herein specified.  We ensure that these persons are held by appropriate security and confidentiality duties.

2°.   Your personal data may also be accessible by third party service provider that we appoint to process personal data on our behalf and on our instructions (as data processors). These data processors include:

•  third party service providers to which we may revert to for performance of professional, technical and organizational services functional to the managing of VF Digital Platforms and the activities performed therein, such as for example the sales of goods and related activities, the managing of functionalities offered by VF Digital Platforms and of the initiatives and services that you may subscribe to and require through VF Digital Platforms, and for services strictly functional to achievement of the other processing purposes herein specified;

• third party service providers to which we revert for closing purchase transactions and payment processing through our e-commerce platform; 

• third party service providers that are managing and supporting the VF Digital Platforms, the relevant e-com platform and all the pre- and post-sale activities, such as, order processing, performance marketing, financial services, warehouse management, and customer relationship management;

      A list of these data processors, with indication of where they are located, is available upon request to our Privacy Office. These data processors are bound by appropriate contractual obligations to implement adequate security measures to protect security and confidentiality of personal data.

3°.   Subject to your specific consent, which is optional, your personal data may also be communicated to third-party online media, search and/or advertising platforms through cookies or other tracking technologies, as further described in our Cookie Policy. These third parties might process your personal data, alternatively, as data controllers or data processors, according to their privacy policies and practices. 

4°.   Your personal data may also be communicated to other companies of the VF Group within the European Economic Area, processing personal data on behalf of the data controller(s) identified above. A list of these VF Group's companies, with indication of where they are located, is available upon request to our Privacy Office. For example, VF Europe BV provides accounting and back-office services and VF Northern Europe Ltd post-sale customer services, as data processors, to the data controllers identified above under "Who Controls the Processing of my Personal Data".

5°.   Your personal data may also be shared with institutions, authorities, public entities, banks and financial institutions, professionals, independent consultants, also in associate form, business partners or other legitimate recipients as permitted by applicable laws and regulations, for example in case of judicial processes, request by competent courts and authorities or other legal obligation, to protect and defend our rights and property and VF Digital Platforms.

6°.   Lastly, we may also communicate your personal data to third parties in case of mergers, acquisitions, transfers of any of our assets, products, websites or operations.

Except for the foregoing, personal data will not be shared with third parties, natural persons or legal entities, that are unrelated to, or that do not perform a business, professional or technical function for us. 

Personal data will not be communicated to third parties for their own marketing purposes.

Such transfers take place on the processing bases identified in Section 3 above.

These abovementioned recipients may be located in countries other than the country in which personal data was originally collected, it being noted that your personal data will in principle only be transferred within the European Economic Area or other countries recognized by the EU Commission as adducing an adequate level of protection of personal data. 

In case any of the above recipient is established in a country outside the EEA that is not covered by an adequacy decision of the European Commission and therefore does not provide the same level of protection for your personal as in the EEA, we shall implement appropriate safeguards, including, but not limited to relevant data transfer agreements based on the EU Commission Standard Contractual Clauses for the transfer of data to third countries (Article 46, 2., (c) of the GDPR,) or binding corporate rules (Article 47 of the GDPR). A copy of these appropriate safeguards may be obtained by contacting our Privacy Office at privacy_europe@vfc.com.

am i obliged to provide my personal data? what are the consequences if i refuse to provide them?

Except in relation to the surfing data (please refer to the above section 3 - "What personal data are processed? ), providing your personal data may be a requirement necessary to enter into or to perform a contract, including for the performance of certain services and functionalities offered by VF Digital Platforms, such as subscription to the Site, subscription to our newsletter(s), the purchase of goods through the Site or in our stores, the management of participation to loyalty programs, promotions and other initiatives communicated through VF Digital Platforms or in our stores, replying to and managing of request of information, questions, communication or feedback. In the above referenced circumstances, refusal to provide your personal data would make it impossible for us to perform the contract or to provide the requested services, products or information as above specified.

Providing your personal data for survey, marketing, profile-based marketing and other profiling purposes, as above specified, is optional; refusal to provide your personal data for these purposes will not have any impact on the entering into or performance of the contract.  When requested under Data Protection Laws, we will collect your prior consent before proceeding to processing your personal data for these purposes. 

do vf digital platforms contain elements controlled by third parties? who is responsible and liable for these elements?

VF Digital Platforms may contain links to other sites, as well as objects or elements controlled by third parties. 

An example is plug-ins that may connect VF Digital Platforms to social networks ("social plug-in") and that are usually identified by the relevant social network's logo. If you interact with a social plug-in on any VF Digital Platform, your browser may send such social network certain data relating to you, such as your user ID, information on the relevant VF Digital Platform, date and time, and other browser-related information. Such information will be processed by the social networks, owned and operated by third parties, according to their privacy policies.

Another example is cookies as illustrated in our Cookie Policy. In particular, if you enable Targeting cookies, this may result in your personal data being communicated to third-party online media, search and/or advertising platforms, to support targeted marketing and advertising campaigns and to measure and optimize the effectiveness of such campaigns. This refers, for example, to the dedicated technologies implemented by Meta (for example Pixel, Conversions API) and Google (Enhanced Conversions). 

We do not have access nor control over elements, objects, plug-ins, cookies, web beacon and other items or tracking technologies owned and operated by third parties, available on VF Digital Platforms or on the relevant third party websites, which users may access on or from VF Digital Platforms, and over the relevant methods of processing of personal data through such elements or sites.  We disclaim any responsibility for such elements and websites. You should check the privacy policy of such third-party websites to learn about the conditions applicable to the processing of personal data. 

In particular, you can find full information on Google’s Data Usage practices here. 

what are my rights in relation to the processing of my personal data and how can i excercise them?

You are entitled at any moment to enforce the rights available to you under applicable Data Protection Laws, including, but not limited, to the right of access, rectification, restriction, erasure, opposition (including objecting, at any time and for free, to the processing of your personal data for direct marketing purposes), right to portability as well as the right to withdraw your consent.  You also have the right to lodge a complaint with the competent supervisory authority.

For a summary on what the abovementioned rights involve and how you can exercise them, please refer to Appendix 1 to this Privacy Policy.

For any query or request relating to the personal data processing by VF and to enforce the rights under Data Protection Laws, you may contact our Privacy Office at privacy_europe@vfc.com.

can we make changes to this privacy policy?

We reserve the right to update and amend all or parts of this Privacy Policy, at any time, to the fullest extent permitted under applicable law. The version published on the Site, and on any other relevant VF Digital Platform, is the version actually in force. If we change this Privacy Policy, we will notify you of such changes through the relevant VF Digital Platform and/or by direct email notification. 

The date at the top of this Privacy Policy indicates when it was last updated.
 

* * * * * * *