Privacy Policy

This Privacy Policy is issued by Steve Madden Europe B.V. (hereinafter referred to as: “Steve Madden Europe”, “we”, “our” or “us”) and is addressed to individuals outside its organization with whom Steve Madden Europe interacts, including but not limited to its (prospective) customers, individuals acting in their professional capacity as representatives of a (prospective) vendor or other relevant third party company and visitors of the Steve Madden Europe premises (hereinafter collectively referred to as “you”). Steve Madden Europe’s Cookies Policy (available on all Steve Madden Europe websites) forms an integral part of this Privacy Policy. We understand the importance of trust in our relationship with you. We therefore take our legal responsibilities as set out in the General Data Protection Regulation (GDPR), Directive 2002/58/EC on privacy and electronic communications (the e-Privacy Directive) and other relevant privacy and data protection legislation (together: “the Data Protection Laws”) regarding your personal data very seriously.

This privacy policy contains important information about who we are, what personal data we collect and how we use it in connection with your interactions with us. It also contains details as to our obligations and your rights.

Throughout our website we may link to other websites owned and operated by us and certain trusted third parties to make additional products and services available to you. Those other third party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third party websites, please consult their privacy policies as appropriate.

To help guide you through this policy, we have set out the relevant information in the chapters below:

Article 1 – Contact details Steve Madden Europe B.V. (Data Controller)
Article 2 – Processing of personal data
Article 3 – Purposes and legal bases for processing of personal data
Article 4 – Retention of personal data
Article 5 – Security of personal data
Article 6 – Disclosure of personal data
Article 7 – International transfers of personal data
Article 8 – Data subject rights
Article 9 – Updates to this privacy policy

1. CONTACT DETAILS STEVE MADDEN EUROPE B.V. (DATA CONTROLLER)

Steve Madden Europe B.V. is the Data Controller. You can contact us via our postal or email address.

Steve Madden Europe B.V.
Touwslager 12
5253 RK Nieuwkuijk
The Netherlands

Email address: privacy@stevemadden.eu
Dutch Chamber of Commerce number: 66152925
Dutch VAT identification number: NL856417580.B.01

Steve Madden Europe B.V. is part of the multinational Steve Madden group.   

2. PROCESSING OF PERSONAL DATA

Steve Madden Europe processes several types of personal data.

Personal data is any information that relates to an identified or identifiable individual, for example, a name, an email address, a phone number and an IP address.

The types of personal data collected and processed can differ, depending on the services you use and the purposes for which processing of your personal data is required.

We collect the below types of personal data directly from you when you use our services, including when buying our products:

1. Identifiers and Contact data: for example, your name, contact details (such as postal, mailing, billing and/or shipping address, postal code, email address, phone number), date of birth, gender;
2. Preferences: for example, historical product purchases (including returns or orders cancelled), shoe and/or apparel size, preferred language, interests, feedback and survey data;
3. Marketing data: for example, your consent for the use of our marketing and retargeting cookies and similar technologies;
4. Financial data: for example, your bank account and payment card details;
5. Order information: for example, order (tracking) number, order status and history, sales order information, invoice and shipping address, bank account information, purchase history; and
6. Communications data: for example, (transcripts of) phone calls and electronic communications with Steve Madden Europe’s customer service department.

We indirectly collect the below types of personal data from you (subject to your browser settings) when you use our website using the technologies explained in our Cookies Policy:

1. Identifiers: for example IP-addresses, geolocation data and cookie ID;
2. Preferences: for example, your preferred language, your order as you shop on Steve Madden Europe’s website(s), list of friends, interests and likes;
3. Online or other electronic network activity data: for example, your online interaction with Steve Madden Europe’s website(s), browsing history and search history, online behavior patterns, preferences and location, IP address, geolocation data, data concerning your computer or other electronic device, operating system and internet service provider;
4. CCTV footage (images) when you visit Steve Madden Europe’s premises at Touwslager 12, 5253 RK in Nieuwkuijk, the Netherlands.

We can also indirectly collect personal data about you which we receive from other sources, depending on the channels (for example, social media networks) you use for our services:

1. Identifiers and Contact data: for example, your name, contact details, date of birth, gender, place of residence;
2. Preferences: for example, your preferred language, list of friends, interests and likes;
3. Marketing data: your consent for the use of third party marketing and retargeting cookies and similar technologies. For more information, please read the Cookies Policy.

For information on the collection and processing of personal data by the third party providers of the channels you use, please consult their respective privacy policies.

3. PURPOSES AND LEGAL BASES FOR PROCESSING OF PERSONAL DATA

We collect, use, store and transfer your personal data for specific purposes. Also, we have to ensure there is a lawful basis for such processing. The purposes for processing and the individual lawful bases for processing your personal data are set out below:

• To process and fulfil your order: this includes processing and delivering your order, contacting you concerning the status of your order or any other information related to your order which ought to be communicated with you. Processing of Identifiers, Contact and Financial data for this purpose is necessary for the performance of the contract you have with Steve Madden Europe. Without the personal data required we cannot be fulfil the contract which may include delivering your order.

• To provide you with customer service: in order to answer your questions and/or requests, to communicate with you with regard to your purchase(s) and to solve any possible issues that could arise or have arisen with regard to your purchase(s). We have a legitimate interest to ensure that we can handle your request in a way that meets your expectations. The processing of your Identifiers and Contact data, Order Information and Communications data is necessary for this purpose.
  
• To allow you to create a personal account: when you shop at Steve Madden Europe, you can register your personal data (including but not limited to Identifiers and Contact data) and create a personal account. Such registration is not required. It does, however, provide you with a quick and simple checkout experience. Steve Madden Europe processes your personal data for this purpose based on your consent. Please note that you can always withdraw your consent by deleting your personal account. You can do so via the settings you can access upon logging into your account.

• To be able to provide you with newsletters and customized content (for example in advertisements): in order to send you future emails and/or text messages about your orders, abandoned checkouts, new releases, exclusive offers, promotions, news, surveys, initiatives and events and to provide you with specific content based on your preferences and interests via advertisements we process Identifiers and Contact data, Preferences, Marketing and Online or other electronic network activity data. If you have opted in to receive such messages and customized content, Steve Madden Europe processes your personal data for this purpose based on your consent. Steve Madden Europe may also process your personal data for this purpose based on its legitimate interest to provide its customers with direct marketing when applicable.
• How to stop newsletters and customized content being sent to you? You can always withdraw your consent or object to receiving any direct marketing by using the unsubscribe link at the bottom of every Steve Madden Europe newsletter, by using the opt-out possibility provided in text messages sent (if applicable, please note that you are advised to reply to or use the link in the latest text message received). You can also contact us at privacy@stevemadden.eu and provide us with your specific request. Your request will be actioned and we will ensure that you will receive no further marketing emails or text messages from that email going forward. You can also change your (marketing) communication and/or cookies and other technologies preferences in the settings in your personal account or browser. We may ask you to confirm or update your marketing preferences if you ask us to provide further products or services in the future, or if there are changes in the law, regulation, or the structure of our business.

• To enable you to take part in the competitions we host (among others via our social media accounts): in order for you to be able to take part in a competition hosted by Steve Madden Europe and in order to provide you with any relevant information with respect to such competitions. Steve Madden Europe processes, among others, Identifiers and Contact Data for this purpose based on your consent, which you provide by actively taking part in a competition we host on, among others, social media.
• How to stop taking part in competitions? Typically, you can take part in competitions we host by reposting a post of Steve Madden Europe on your own social media account and providing the requested (additional) information. You can withdraw your consent and thus stop taking part in competitions by deleting your repost.

• To operate Steve Madden Europe’s business and analyze, develop and improve its services: Steve Madden Europe processes consumers’ personal data to operate its business, to investigate the possibilities for doing business in the future and for developing and optimizing its business. Steve Madden Europe does so, among other methods, by asking consumers to participate in surveys and polls in order to measure customer satisfaction. Consumers are never obliged to take part in such surveys and/or polls. As such, Steve Madden Europe processes consumers’ personal data in this respect based on consent. Also, Steve Madden Europe can process the Identifiers and Contact data of individuals acting in their professional capacity as representatives and/or contact persons of a vendor or other relevant third party company. We do so, based on our legitimate interest to conduct our daily business and in order to communicate with (prospective) corporate customers or suppliers. We also have a legitimate interest to provide our visitors to the website with the best possible user experience and therefore we analyze trends and website traffic to administer and optimize our services, via the use of cookies and similar technologies. For more information, please read the Cookies Policy.

• To effect a significant corporate transaction or restructuring: we may need to share your Identifiers or Contact data with members of our group and third parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency to ensure compliance with laws or for our legitimate interest or those of a third party to protect, realise or grow the value in our business and assets. Information will be anonymised where possible and only shared where necessary.

• To comply with requests from regulators or other official bodies of authority, and for litigation case management and evidentiary purposes: Steve Madden Europe may process all of the above types of personal data if necessary to comply with a valid request from a regulator or other official body of authority, or where it is relevant to any ongoing or prospective legal proceedings. Steve Madden Europe processes your personal data for this purpose to ensure compliance with laws, and based on its legitimate interest to manage legal proceedings and to defend Steve Madden Europe against any possible civil claims or regulatory enforcement action.

• To ensure the safety and security of our employees and third parties, our property, the property of our employees and that of third parties through the use of CCTV-footage: We process CCTV-footage (which may contain your images) based on our legitimate interest to protect our employees and visitors, our property and the property of our employees and visitors, to ensure safe and secure access to the premises and record incidents.

• To protect the security of systems and data: we have a legitimate interest to comply with our legal and regulatory obligations. We may use your Online or other network activity data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests or those of a third party, and to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us.

4. RETENTION OF PERSONAL DATA

Steve Madden Europe does not retain your personal data longer than necessary for the purposes for which your personal data were collected. The retention period may differ for each (category of) personal data. Taking into consideration all our legal obligations to retain information for contract, audit and tax purposes, we will also regularly review the length of time we retain your personal data and consider the purpose or purposes for which we hold it.

Generally speaking, Steve Madden Europe does not retain your personal data for longer than 7 years after having collected it.

Among others, due to applicable tax laws, Steve Madden Europe retains any (personal) data required for financial administration for seven years.

Personal data necessary for the processing and fulfilment of your order and for providing you with customer service in connection with a purchase are also retained by Steve Madden Europe for the duration of seven years after the purchase is made.

Any personal data processed of individuals acting in their professional capacity as representatives and/or contact persons of a vendor or other relevant third party company are retained by Steve Madden Europe for as long as necessary for the performance of the respective contract between Steve Madden Europe and this third party and until seven years after the termination of the contract or collaboration.

Any CCTV footage is retained for the duration of four weeks. If an incident is captured with this footage, the footage will be retained until the incident is resolved but in any event this retention will not exceed any period of retention required by law.

5. SECURITY OF PERSONAL DATA

Steve Madden Europe has implemented the necessary and appropriate physical, organizational, administrative and technical security measures to protect your personal data against unlawful access, loss, misuse or alteration. Steve Madden Europe has taken a variety of security measures in this respect, including the use of secured servers and firewalls. In order to safeguard your transactions, Steve Madden Europe uses a secure (SSL) connection for encrypting, sending and receiving critical information such as your Financial data. Steve Madden Europe is committed to keeping its security technology continuously updated.

Additionally, Steve Madden Europe has an internal privacy and security policy and our staff is aware and ensures that your personal data are handled securely and confidentially. Steve Madden Europe’s systems are only accessed by authorized staff who require access for the performance of their work using (building) access controls and passwords. Personal data is only made available internally as required in connection with the relevant purpose.

6. DISCLOSURE OF PERSONAL DATA

Where permitted or required by law, Steve Madden Europe may – for example if necessary within the context of conducting its business or in order to comply with legal obligations – disclose your personal data to third parties. If your personal data is disclosed to third parties, this is limited to the personal data that is strictly required for the purpose, and done safely and securely.

Steve Madden Europe may disclose your personal data, for example, to other Steve Madden entities (both those established and located in as well as outside the EEA), to vendors or to payment processors, to the extent that this is necessary for the performance of a contract with you. We may when this is required for Steve Madden Europe’s legitimate interests to improve its services, disclose your personal data to other Steve Madden entities and vendors, and we may disclose your personal data to advertising partners for marketing purposes based on your consent or our legitimate interests to provide you with customized content, targeted offers and advertising. If Steve Madden Europe, or substantially all of its assets, were acquired, or in the unlikely event that Steve Madden Europe goes out of business or enters into bankruptcy, your personal data would be one of the assets that can be shared with a prospective buyer, and transferred to that third party buyer upon sale.

It may be necessary for Steve Madden Europe to disclose your personal data to data (sub)processors, who process your personal data on our behalf. Examples of such data (sub)processors are web builders and marketing services. All our engagements with data (sub)processors are subject to data processing agreements requiring the data processor to adhere to and comply with all relevant data protection legislation. Also, Steve Madden Europe may disclose your personal data to agents, subcontractors, suppliers, online payment companies, credit card companies and developers of marketing and website optimization software in the course of its business and for the purposes described in this Privacy Policy.

Furthermore, Steve Madden Europe may disclose your personal data with the aim of preventing fraud or for litigation purposes. In case of a valid request from a regulator or other official body of authority, Steve Madden Europe will disclose your personal data if necessary in order to comply with the law or in order to protect its rights, and to protect your safety and the safety of others.

7. INTERNATIONAL TRANSFERS OF PERSONAL DATA

Among others, depending on the computer systems utilised or the third party providers supporting a processing activity, your personal data may be transferred to organizations and stored in countries outside of the European Economic Area (EEA). Such transfers of personal data to organizations in countries outside the EEA take place in accordance with the Data Protection Laws and are necessary, among others, in order to perform the contract with you, for transaction processing, fraud prevention, to operate Steve Madden Europe’s business and analyze, develop and improve its services as well as for marketing purposes, in order to provide you with customized content, targeted offers and advertising.

Under the Data Protection Laws, we can only transfer your personal data to a country outside the EEA where:

• the European Commission has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy decision’) further to Article 45 of the GDPR,
• there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you, or
• a specific exception applies under relevant data protection law.

Steve Madden Europe has appropriate contractual arrangements in place with relevant third party providers and other third parties to ensure that in the case of such transfers of your personal data to countries outside of the EEA, your personal data is protected to the same high standard as required under the Data Protection Laws.  

If you would like further information about data transferred outside the EEA, please contact us (see Article 1 of this Privacy Policy).

8. DATA SUBJECT RIGHTS

You have several rights regarding the processing of your personal data. You have the right:

• To withdraw consent: If you have consented to receive any marketing material from us or have engaged in any other activity with us for which we have asked you for your consent, you have the right to withdraw your consent at any time. You can withdraw your consent for receiving any direct marketing by using the unsubscribe link at the bottom of every Steve Madden Europe newsletter or by using the opt-out possibility provided in text messages sent (if applicable, please note that you are advised to reply to or use the link in the latest text message received). You can also change your communication and/or cookies and other technologies preferences or withdraw your consent for any other activity in the settings in your personal account or browser.

• Of access to your personal data: you have the right to see a copy of the personal data that we keep about you, subject to certain exemptions;

• To rectify inaccurate or incomplete personal data: you can ask us to correct any data which is inaccurate or incomplete;

• Of erasure of your personal data: you can ask us to delete your personal information (with the exception of us being required to keep it to comply with a legal obligation);

• To restrict processing of your personal data: we will retain enough information to enable the restriction but will not process any further personal data, until and unless we lift the restriction (of which you will be informed);

• To object to processing of your personal data: you can stop or prevent us from using your data (in cases where we are using it with your consent or for our legitimate interests, such as for the purpose of direct marketing (for example, via email); and

• To move, copy or transfer your personal data (data portability): please contact us if you would like us to transfer your personal data electronically to another organisation;

Please note that the above mentioned rights, with the exception of the right to withdraw your consent (in general) and to object to processing of your personal data (for the purpose of direct marketing), are not absolute. Under certain conditions, we may refuse to comply with your request to exercise the above mentioned rights. If we refuse to honor your request, you will be informed of the reasons for refusal.

If you have any questions or complaints about the way we have handled your personal data, or if you wish to exercise any of the abovementioned rights, please contact: privacy@stevemadden.eu. For further information on how to contact us, please see Article 1.

In addition to the above mentioned rights, you always have the right to submit a complaint about the processing of your personal data by Steve Madden Europe to the Dutch Data Protection Authority (de Autoriteit Persoonsgegevens). Their contact details can be found on their website www.autoriteitpersoonsgegevens.nl.

9. UPDATES TO THIS PRIVACY POLICY

This Privacy Policy is regularly updated and may be updated in whole or in part, at any time and without prior notice. You are expected to review this Privacy Policy (including the Cookies Policy) regularly as we may amend it from time to time, and as you are bound by any changes we make to this policy from the date of the change. We will post any amendments on our website to keep you up to date.