Welcome to the Golden Goose S.p.A. website, available at the following URL (hereinafter the “Website”).

Please note that this Privacy Policy is governed by Regulation No. 2016/679 (the “Regulation”). The Regulation guarantees that the processing of personal data is carried out in consideration of the Data Subject’s fundamental rights, freedoms, and dignity, with a particular emphasis on confidentiality and personal identity.

1. Data Controller

Golden Goose S.p.A., with registered office in Via Privata Ercole Marelli 10, Milan, Italy (hereinafter “GGDB”), is the autonomous data controller of the personal data of the Data Subjects who browse the Website, including.

We remind you that you can always exercise your rights by writing to the following e-mail address:

2. Type and purpose of processing carried out by the site – legal basis of processing

Through the Site are collected and processed:

(a) personal data on browsing, processed to enable the proper functioning of the Site and for marketing purposes. In this regard, please read the Cookie Policy on the Website;

(b) contact data (e-mail address), processed by GGDB - upon express consent - for re-contact purposes, i.e. to send the user newsletters regarding information and updates related to sustainability projects promoted by GGDB.

With the exception of browsing data, which are regulated by the Cookie Policy, the processing of personal data is based on the consent that may have been provided by the user for the purposes in (b) above.

3. Source of personal data

With the exception of browsing data indicated at point 2 (a), the personal data collected by GGDB are provided directly by the Data Subject through the Newsletter registration form. 

The personal data collected through the GGDB Website are collected using mainly informatic and telematic methods and tools, adopting the necessary security measures in order to minimize the risks of destruction or loss, even accidental, of the data themselves, of unauthorized access or processing that is not permitted or does not conform to the purposes of collection indicated in this Privacy Policy.

However, such measures, due to the nature of the online medium of transmission, cannot absolutely limit or exclude any risk of unauthorized access or loss of data.

To this end, you should periodically check that your computer is equipped with software devices to protect incoming and outgoing data transmission on the internet (such as up-to-date antivirus systems) and that your ISP adopts the appropriate measures to safeguard the transmission of data online (such as firewall and spam filter).

4. Mandatory or voluntary nature of providing data

With the exception of browsing data (the provision and collection of which is reguled by the “Cookie Policy”), the transmission to GGDB of personal data collected to respond to Newsletter request of the user is free, optional and facultative. Failure to provide it does not restrict use of the Website.

5. Categories of recipients of personal data

Personal Data may be know by: 

- GGDB employees and consultants, who shall act as authorised data processors for the internal organisation of the company’s activities;

- companies that act as data processors for GGDB, carrying out specific technical and organisational services connected to the Website (logistics services, IT services, customer care services and marketing services).

Your data will not be disseminated and will be transferred abroad only while guaranteeing adequate levels of security and safeguards for the protection of such data, in compliance with the regulations in force.

6. Data retention period

The personal data collected for newsletter purposes will be stored for a period strictly necessary because of the data treatment and in any case not exceeding 3 years.

To know about the retention period and persistence of cookies, please read the Cookie Policy.

7. Rights granted to the data subject by the privacy law

The Data Subject is always entitled to obtain from GGDB:

(i) confirmation whether or not personal data concerning them are being processed even if not yet recorded, and their communication in an intelligible form;

(ii) information concerning the origin of their personal data, the purposes and methods of processing the logic applied in the case of processing performed with the support of electronic instruments, the details of the data controller and data processors, an indication of the subjects and categories of subjects to whom the personal data may be disclosed or who may be informed thereof in their capacity as data processors or, in any event, parties authorised to process the data;

(iii) the updating, rectification or, if interested, the completion of the personal data;

(iv) the erasure, anonymisation or blocking of unlawfully processed personal data, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed, as well as certification that the operations referred to above have been brought to the attention of those to whom the data were disclosed, except where this proves impossible or involves the use of means disproportionate to the protected right;

(v) the portability of their personal data;

(vi) the restriction of the processing of their personal data.

The Data Subjects also have the right to object, in whole or in part, on legitimate grounds, to the processing of their personal data, even if it is relevant to the purpose of the collection, and to revoke the consent provided previously. 

The rights listed above may be exercised by contacting GGDB at the following address:

Finally, please note that you are always entitled to lodge a complaint with the competent supervisory authority (Autorità Garante per la Protezione dei Dati Personali [Italian Data Protection Authority]).

Sign up for the newsletter to receive information and updates regarding sustainability initiatives and projects promoted by Golden Goose.