PRIVACY POLICY – LONGCHAMP GROUP WEBSITE

We place particular importance on protecting your personal data collected during your visit to the Longchamp.com website (the “Site”), in accordance with the applicable provisions of the General Data Protection Regulation (GDPR), Law No. 78-17 of January 6, 1978, as amended, and/or any other applicable local law and/or any local laws in force, where applicable.

This Privacy Policy (the “Policy”) is designed to provide you with clear and precise information about how we collect and use your personal data, our commitment to protecting it, and the rights you have.

Where applicable, specific provisions may supplement the Policy to take into account applicable local regulations for each country concerned.

We encourage you to review this Policy regularly to stay informed of any updates.

By browsing the Site, you fully accept the terms of this Policy and acknowledge that you understand its meaning. If you do not agree, you should cease browsing the Site.

1. Data Controller

The Longchamp Group is a corporate group consisting of Longchamp (an SAS with its registered office at 43, rue Vineuse – 75116 Paris – France), its parent company, and the latter’s subsidiaries.

Longchamp and, where applicable, any Longchamp Group company located in the country from which you interact with us, act as joint controllers in the processing of your personal data.

That is why, in this Policy, the terms “Longchamp”/“we” refer to the Longchamp Group company or companies involved in the processing of your personal data.

2. Personal Data Processed

The personal data we process falls into the following categories.

Categories of personal data	Examples
Identity Data	First and last name, title, form of address, and date of birth
Contact Information	Email address, billing and shipping addresses, phone number, preferred communication channel and language
Business Data	Transaction data: shopping cart contents, order details (order number, customer ID), shipping information, transaction number, payment and billing information (payment methods used, credit card information), transactional messages, product returns/exchanges, refunds, purchase history
Customer Service Data	Case number (generated for each interaction with customer service), online account credentials, newsletter subscription, requests submitted via the online contact form (complaints and other interactions), reviews and feedback (following an online or in-store order and a customer service request—NPS)
Preferences and Interests	Preferences and purchasing or browsing habits, and related data
Browsing Data	Online browsing data derived from your use of cookies and other similar technologies, browsing habits, interactions with online advertisements, etc.
Login Data	IP address and technical identifiers, username, login logs, browser information, general device location, etc.

3. Purposes of Processing and Legal Bases

We process your personal data in accordance with applicable regulations:

- either with your express consent;
- or when necessary for the performance of a contract entered into with you;
- or to comply with our legal obligations;
- or to pursue a legitimate interest, when the processing is necessary for our business activities.

And for the following purposes:

Purposes	Legal Basis
Customer Relations / Business Relations
Management of online orders and purchases, including tracking, delivery, and, where applicable, product exchanges or returns and related refunds	Performance of a Contract
Management of billing and payment for transactions	Performance of a Contract
Management of the secondhand item buyback service	Performance of a Contract
Transaction security and prevention of fraud and/or payment incidents	Our legitimate interest in ensuring the security of transactions
Customer Service
Creating and managing online accounts	Performance of a Contract
Managing requests submitted via the online contact form	Our legitimate interest in responding to our customers’ requests, or the performance of a contract if your request relates to a contractual or precontractual measure on our part
Managing online alerts regarding inventory availability	Our legitimate interest in responding to our customers’ requests
Managing repairs and after-sales service (SAV)	Performance of a Contract
Marketing
To send you newsletters and other marketing communications about our offers, products, news, and events	Your consent, when required. Our legitimate interest in promoting our products and services and developing our relationship with our customers, in other cases permitted by applicable regulations
To personalize our communications, content, and marketing initiatives—including our online advertising campaigns—based on your preferences, interests, and interactions with Longchamp	Your consent, when such personalization is based on data collected or combined for this purpose and requires your consent
Measuring the performance of our online advertising campaigns	Your consent
To conduct marketing analyses and compile statistics	Our legitimate interest in improving customer experience and tailoring our products and services to your preferences
To organize and manage your participation in contests and promotional campaigns	Compliance with the rules or terms and conditions for participation in the contest or promotion in question
Others
Cookie Management	View the Cookie Policy
Managing Your Requests Regarding the Exercise of Data Protection Rights	A Legal obligation

4. Categories of Recipients

Your personal data is stored within the European Union and is accessible only to Longchamp employees within the departments authorized to have access to it.

Where applicable, your personal data may be processed by Longchamp Group companies with which you interact, or by franchisees within the Longchamp network, acting as joint data controllers, by data controllers who are ours partners, and by our service providers acting as data processors.

The Longchamp Group and its network

Your personal data may be shared with authorized personnel at Longchamp Group companies or our franchisees with whom you interact—whether on a regular or ad hoc basis—when access to this data is necessary to optimize your customer experience and provide you with the same quality of service regardless of which store you visit worldwide.

Longchamp’s Partners and Service Providers

We engage service providers as needed to act as data processors and process your data on behalf of Longchamp, in accordance with our instructions and under our supervision.

These may include, for example:

technical service providers (IT service providers, hosting providers, software maintenance providers, or artificial intelligence providers, etc.);
data analysis and statistics providers;
media, communications, advertising, and marketing service providers.

We may also need to share certain personal data about you with the data controllers listed below. The processing of your personal data by these partners is subject to their own policies, which you can obtain by contacting them. You may exercise your data protection rights directly with them.

These may include, for example:

transportation and delivery service providers;
partners operating online marketplaces and social media platforms;
banks and financial institutions (including your own when you use bank-based payment methods);
providers responsible for online payment services;
organizations that detect and combat fraud, theft risks, or any other wrongful acts that may affect the services and goods provided by Longchamp.

Personal data processed for the virtual eyewear try-on feature on the Site (scanning and/or reconstruction and/or modification of your facial appearance) is collected and processed directly and entirely independently by Fittingbox in its capacity as data controller.

5. Data Transfers

Since the Longchamp Group consists of subsidiaries located abroad, which in turn use data processors in their respective countries or regions, the recipients of your personal data may be located abroad, including outside the European Economic Area, when you visit our stores or use our services from those countries or regions.

Such transfers of personal data outside the European Economic Area—particularly to a country for which the European Commission has not issued an adequacy decision pursuant to Article 45 of the GDPR—are carried out subject to appropriate safeguards, in accordance with applicable data protection laws, such as the standard contractual clauses provided for in Article 46(2) of the GDPR and/or appropriate technical and organizational measures to ensure an adequate level of protection for individuals’ privacy and fundamental rights.

6. Retention Periods

Longchamp does not retain your personal data beyond the period strictly necessary to fulfill the purposes described above, subject to mandatory legal provisions regarding data retention and archiving, in order to comply with applicable administrative, legal, and tax requirements and to maintain a record of transactions and commercial documents associated with those transactions.

Your personal data will not be retained in a form that allows you to be identified for longer than is reasonably considered necessary to achieve the purposes for which it was collected or for a period not exceeding the applicable statutory limitation periods.

7. Data Security

We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, in order to prevent it from being distorted, damaged, destroyed, or accessed by unauthorized persons. All security measures (software or physical) implemented are state-of-the-art, particularly with regard to the protection of our information systems.

We require our service providers to ensure the security of our data and to strictly comply with our instructions and applicable regulations regarding the protection of personal data. Our service providers are not authorized to use your personal data for any purposes other than those we have specified.

8. Your Rights

Under applicable data protection regulations, you have certain rights, including the right of access, rectification, erasure, and data portability, as well as the right to restrict processing and, where applicable, to object to the processing of your personal data.

To exercise your rights or ask any questions about the processing of your personal data, you may write to Longchamp, for the attention of the DPO:

by email: dpo@longhcamp.com;
by mail: to Longchamp, 43 Rue Vineuse – 75116 Paris (France), or to the Longchamp Group company located in the country from which you are interacting with us.

If, after contacting us, you believe that your rights have not been respected, you may at any time file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) (3 Place de Fontenoy – TSA 80715 – F-75334 Paris Cedex 07 (France) / Tel. +33.1.53.73.22.22 / http://www.cnil.fr/), or with a competent supervisory authority, depending on the country from which you are interacting with us.

9. Country-Specific Policy

This Privacy Policy is intended to apply in all countries where Longchamp offers its products and services. Depending on the country from which you interact with Longchamp or in which you reside, specific provisions may apply to take into account local regulations regarding the protection of personal data. These specific provisions are included, where applicable, in a separate appendix to the Policy. They supplement the Policy and, in the event of a conflict, take precedence over it with respect to the processing activities and individuals to whom they apply.