Customer Service

Welcome to the Ambush Italy S.r.l. website, located at www.ambushdesign.com (hereinafter, the “Website”).

Please read this privacy policy (hereinafter, the “Privacy Policy”) carefully, as it applies every time you access the Website, even if you do not purchase the products sold on it.

Please note that this Privacy Policy is governed by European Regulation No. 2016/679 (hereinafter, the “Regulation"). The Regulation guarantees that personal data will be carried out in compliance fundamental rights and freedoms, as well with respect for the dignity of the data subject, with particular reference to confidentiality and personal identity.

1. Data Controller and contact data

Ambush Italy S.r.l., with registered office at Via Turati 12, 20121 Milano, Italia (hereinafter “Ambush” or the “Data Controller”) is the autonomous controller of the processing of personal data of users who visit the Website, including browsing data, marketing data and profiling, as well as data related to sales made through the Website and to the corresponding pre- and post-sales support activities.

Ambush has entrusted some of the Website's services – related to, more specifically, customer service, hosting and logistics – to Farfetch Platform Solutions Limited, which has been appointed as data processor.

You may always contact the Data Controller to receive information regarding the processing of your personal data and to exercise your rights, by writing to the following e-mail address privacy@newguardsgroup.com, or by writing to the Data Controller’s headquarters located at Via Filippo Turati, 12, 20121 Milan.

2. Types of data, purposes and legal basis of the processing activities

Through the Website, different types of personal data are collected and processed, for different purposes and with different methods. More precisely:

a)    personal data related to browsing, processed both for the purpose of allowing the Website to function properly and for marketing purposes. To this end, please read the cooky policy on the Website;

b)    personal data provided voluntarily by the user (such as, for example, personal information, e-mail address, telephone number, password provided by filling in the registration form) or otherwise lawfully acquired during the user’s visit to the by Website or through interaction with customer care in order to respond to user’s requests and to offer the requested services, assistance and information regarding Ambush products;

c)     personal data provided by the user as part as of the Website sales process, for the conclusion of the e-commerce transactions and for activities that are operational and essential for sale, as well as for any necessary pre and after-sales assistance;

d)    personal data, contact data, processed by Ambush upon express consent of the user, for marketing purposes, more specifically to send the user (using traditional tools and by means of telematic tools such as newsletter, e-mail, sms, mms and smart messages) information and updates on products, sales, promotional campaigns, events and other initiatives promoted by Ambush;

e)    personal data- such as sales data and data related to any preferences expressed by the user- processed by Ambush upon express consent of the user for the purpose of studying shopping habits and choices in order to make products and initiatives more responsive to the tastes and need of its customers;

f)      With the express consent of the user, Ambush may disclose user’s personal to the companies controlled directly and/or indirectly by New Guards Group Holding S.p.A. (the “New Guards Group”) and to Farfetch UK Ltd., so that they, acting as autonomous data controllers, can directly propose to the user products and services they offer.

With the exception of, which is covered by the cookie policy, personal data processing is based on:

i)   the legitimate interest of both Ambush in providing the services of the Website and of the user in browsing the Website properly and of Ambush in responding to any requests from users;

ii)     the contractual obligation assumed by Ambush in connection with sales made on the Website and related legal obligation arising therefrom, with reference to point c);

iii)    the user’s consent, for the purposes referred to in paragraph d), e), f) (marketing, study of habits, third party transmission for their own purposes).

3. Source of personal data

The personal data collected by Ambush is provided directly by the user (by registering on the website or as part as the sales process) with the exception of the browsing data referred to in paragraph 2 a) above.

4. Your purchase habits and choices

As described in paragraph 2 e) above and with the express consent of the user, Ambush may process the user's personal data for the purpose of studying the habits and choices of users in order to make Ambush products and initiatives more responsive to the tastes and demands of its customers.

With the help of automated tools, Ambush will process data relating to the value and frequency of purchases as well as the type of products purchased over a specific period of time.

This research aims to offer customers and users products, services and initiatives that are better suited to their tastes and will be carried out in a non-intrusive manner. You can always ask for specific information about the logic applied to this processing and the modification of the results obtained by contacting Ambush at the contact details given in paragraph 1.

As described in paragraph 2 a) and with the express consent of the user, Ambush may process the user’s personal data, using automatic tools, to study cookies in order to monitor browsing on the Website and to suggest products and service in line with the browsing activity.

5. Personal data processing methods carried out by Ambush

Personal data collected through the Website is processed by digital and electronic methods and tools, adopting security measures to minimize the risk of destruction or loss of the data, unauthorized access or processing that does not comply with this Privacy Policy.

However, due to the nature of the online environment, such measures cannot completely limit or exclude any risk of unauthorized access or loss of data.

To this end, it is recommended that you periodically check that your computer is equipped with adequate software to protect the network transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has taken appropriate measures to ensure the security of network data transmission (such as firewalls and spam filters).

6. Mandatory or voluntary nature of providing data

With the exception of browsing data (the provision and collection of which are regulated by the cookie policy), the provision to Ambush of personal data, both to respond to requests and queries from users, for marketing, for analysing habits and preferences, for the transmission to the companies of the New Guards Group and to Farfetch UK Ltd., is free, voluntary and optional. Failure to provide such data does not limit the use of the Website, although it may make it impossible for Ambush to respond to requests for information and queries, or to send information, updates, newsletters and invitations to Ambush events.

The provision of data, especially personal details, email address, postal address, telephone number and bank details in case of credit card payments requested in the purchase form, is compulsory for executing, though the Website, the product purchase agreement.

Some of said data, moreover, may be necessary for providing the user other services made available on the Website in connection with the sales or for discharging the obligations deriving from the law or regulatory provisions (tax obligations and antimony laundering). Any failure by the data subject to provide us with the data may therefore constitute, as the case may be, a lawful and justified reason for not performing the agreement of the products purchased on the Website and not providing the related services.

The mandatory or voluntary nature of the data to be provided will be, if necessary, and as the case may be indicated by means of a special character (*) placed next to the relevant information or to the data the provision of which is necessary for the purpose of providing the services and for purchasing the products on the Website. Any failure to furnish the data the provision of which is voluntary, does not entail obligations or disadvantages of whatever type.

7. Categories of recipient of personal data

Personal data may be disclosed and processed by:

·       companies that carry out specific technical, logistic, organizational services instrumental to the sales;

·       the parent company New Guards Group Holding S.p.A. and Farfetch UK Ltd;

·       companies that carry out specific services related to marketing and analysis activities (such as list management and optimisation services, management, support and hosting services, analysis services and the sending of communications);

·       employees and consultants of Ambush, acting as data processors or as subjects authorised to process personal data by the Data Controller;

·       third parties such as bank, Public Authorities, companies managing payment services, which will operate as autonomous data controllers.

Your data will not be disseminated in any way and may be transferred abroad to countries located outside EU, given the transnational nature of the Group of which Ambush belongs. In any case, each transfer will always take place ensuring adequate levels of protection and sufficient safeguards, through the use of technically secure tools and channel and though the stipulation of the Standard Contractual Clauses, in accordance with applicable legislation.

Please note that it is always possible to contact Ambush, as Data Controller, to know the exact location of the data and to request a copy of them.

8. Storage period

Personal data linked to the purchase will be stored for at least 10 years to comply with tax and civil law, unless specific legal defence needs in court require a retention for a longer time.

The personal data provided by the user to request assistance and information will be kept for the period of time strictly necessary to handle the request.

The personal data provided for marketing and profiling purposes are kept for the period of time necessary due to the specific processing and up to a maximum of 7 years, in line with the relevant sector.

9. User rights recognized by the privacy law

The user is entitled to obtain, at any time, confirmation as to whether or not personal data relating to him/her exists, even if it is not yet recorded, and to have it communicated to him/her in an intelligible form. The user is also entitled to obtain information about the source of personal data; the purposes and methods of processing it, the logic applied in the event of processing that is performed with the aid of electronic instruments; the identification details of the controller and data processors; and indication of the persons or categories of persons whose personal data may be communicated, or who could end up being known by, for example, data processors or agents as data supervisors or data processors. The user has also the right to request an update, correction or, when s/he has an interest in doing so, an inclusion of personal data, deletion, conversion to an anonymous form or the blocking of personal data, that has been processed in violation of the law, including data which it is not necessary to keep in relation to the purposes for which it was collected or subsequently processed; a statement that the above operations were disclosed, including in terms of their content, to those parties to whom the data was communicated, except in the case in which such performance proves impossible or entails the use of methods that are clearly disproportionate to the right protected. The user can also ask for the portability of his/her data.

The user nevertheless has the right to object, in part or in full, for legitimate reasons, the processing of personal data concerning him/her, even if it is pertinent to the scope of the collection, the processing of personal data concerning him/her for the purposes of sending advertising or direct marketing materials, or to conduct market research or commercial communications and he has the right to ask restriction of processing concerning itself. The right to object may also be exercised specifically with regard to one or more methods of sending marketing communications.

The above rights may be exercised by contacting the Data Controller by writing to privacy@newguardsgroup.com.

The user also has the right to lodge a complaint with the competent supervisory authority (Autorità Garante per la Protezione dei Dati Personali).

For additional privacy rights with respect to users in California, see the section below.

10. Your California privacy rights

California Civil Code Section § 1798.83 permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@newguardsgroup.com.

11.  Privacy Notice for California residents

This section supplements the information contained in our Privacy Policy and applies solely to the processing of Californian consumers' personal information (it does not apply to employment-related personal information collected from California-based employees, job applicants, contractors, or similar individuals). This section is intended to address the relevant notice requirements of the California Consumer Privacy Act of 2018 (hereinafter, the "CCPA") and uses certain terms having the meaning given in the CCPA.

·       Your information, sources and purposes: please refer to the sections in the Privacy Policy above explaining 1) what data we collect, 2) how such personal data is used, and 3) the cookies collected, for a description of the personal information we may collect about you (or have collected in the preceding 12 months) and the sources of such information. Sources may include information acquired directly from you and your devices, or through certain third parties. In the Privacy Policy you will also find the purposes for which we may use or have used such information.

·       As more fully described in the Privacy Policy, we may disclose your personal information to a third party for a business purpose (but excluding its own commercial and marketing purposes). When we disclose personal information for a business purpose, we enter into a contract that describes such purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

·       Selling your information: we have not sold personal information in exchange for monetary compensation. We may allow certain third parties (such as certain advertising partners) to collect your personal information via automated technologies on our platforms in an effort to serve you content and advertisements that may be of interest to you, based on your consent; in this regard, please see the cookie policy. You have the right to opt out of this disclosure of your information, as described therein.

·       Your rights: subject to exceptions under applicable law, you may have certain choices regarding our use and disclosure of your personal information, as described below:

·       Access: you have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected about you during the past 12 months and details regarding our collection, use, disclosure of such information.

·       Deletion: you have the right to request that we delete the personal information we have collected from you subject to certain exceptions.

·       Opt-Out: you have the right to manage the activation of the cookies as described in the above-mentioned cookie policy.

·       To exercise your rights, described above, you can:

-       contact the Customer Care at the contact details indicated on the Website;

-       contact us directly at privacy@newguardsgroup.com. If you exercise your rights, we may require you to provide certain information to verify your identity (such as your name, email address, phone number and/or address).

·       No discrimination: if you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us.

·       Personal, family and household clients: California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email message to our email address below privacy@newguardsgroup.com with "Request for California Privacy Information" in the subject line. You may make such a request up to once per calendar year. If applicable, we will provide you with a list of the categories of personal information disclosed to third parties for their direct marketing purposes during the preceding calendar year, along with the third parties' names and addresses. Please note that all the rights granted by EU Regulation remains not affected.