PRIVACY POLICY

Prada Asia Pacific Limited with registered office in Hong Kong, together with its parent company Prada S.p.A., with registered office in Milan, the holding company of the Prada Group (Prada Asia Pacific Limited and Prada S.p.A. are referred together as “PRADA”) hereby inform you that any personal information (hereinafter “Personal Data”) provided to PRADA to register and participate in the initiative called “Prada Frames Hong Kong” (hereinafter the “Event”), will be processed in compliance with the current applicable legislation on the protection of Personal Data and the principles and rules of conduct contained in the Prada Group Code of Ethics.

1. Type and source of Personal Data

PRADA collects and processes the Personal Data of the Event’s attendees provided during their voluntary registration and participation in the Event. The items of data collected are title, name, surname, mobile phone number and email address, as well as photographs, video and /or sound recordings of your voice, image and likeness taken during the course of the Event, reproduced individually or in groups the subjects participating in the Event.

Minors

You need to be over 16 years old in order to provide us with your Personal Data.

If you are a minor, you should obtain prior consent from your parent or legal guardian before providing your Personal Data. If PRADA becomes aware that a minor has inadvertently provided Personal Data, without the prior consent of a parent or legal guardian, such data will be deleted or made anonymous.

2. Purpose and legal basis of the processing

Your Personal Data may be processed and used by PRADA:

• within the purposes of the Event, to register and manage your participation at the Event, including communication with you about the details of the Event and sending the personalised QR code;
• with your prior consent, as a result of your subscription to our newsletter service, to send you newsletters and other marketing communications regarding Prada and the other brands and initiatives of the Prada Group. You may unsubscribe at any time by clicking the link as set out in all our email correspondence or writing to us at the contact addresses indicated in Section 8; and
• to inform, communicate and promote the Event and the activities of the Prada Group, as well as for subsequent historical archival purposes.

3. Nature of the provision

The provision of data is optional, but if you do not provide your Personal Data we will not be able to complete your registration and communicate with you about the Event or proceed with your subscription to our newsletter service, without prejudice to your right to object to receiving further commercial communication from us at any time.

By attending the Event, you agree that you may be photographed and/or video recorded and grants PRADA, on a royalty-free basis, the irrevocable right to use, reproduce, distribute, publish, disclose, adapt, modify, alter, combine with other images, texts, graphics, videos and/or sounds, assemble, grant licenses or permission to third parties or authorize and otherwise exploit your image, anywhere worldwide and in perpetuity, in any print and/or digital media/support, including the internet, social media and digital channels, without any limitation, for the purposes of information, communication and promotion of the Event and the activities of the Prada Group and further archival and historical purposes.

4. Method of processing

Your Personal Data will be processed exclusively for the purposes for which they have been collected and according to criteria of lawfulness and correctness and protecting the security and confidentiality of data through the adoption of appropriate measures to prevent loss, alteration, cancellation, destruction, unauthorized access, processing or disclosure or processing beyond the purposes of collection.

Personal Data will be processed by the PRADA’s staff committed to the confidentiality and duly authorised to do so under their respective job duties.

Whenever necessary and/or instrumental to the abovementioned purposes, PRADA may delegate the processing of Personal Data to outside service providers, including to other companies belonging to the Prada Group. These service providers will act on behalf of PRADA as data processors with a contractual obligation of confidentiality in respect of the relevant personal information and will not use any personal data beyond the scope of the work outsourced. In particular, the data collection through the RSVP platform, as part of the Event, will be performed on behalf of PRADA by our service provider EPISODE Limited.

5. Disclosure and dissemination

As PRADA is part of an international network and uses global services your Personal Data may be transferred abroad in accordance with applicable legislation, including to locations outside Hong Kong S.A.R. and Italy, where PRADA pursues its interests, by adopting all appropriate security measures and safeguards to ensure an appropriate level of data protection and security. The Personal Data transferred to the Service Providers will be retained only to the extent necessary for the purposes of the service provided and to meet any regulatory requirements in accordance with any applicable laws. In relation and in the exclusive context of the information, communication and promotion purposes referred to in letter (c) of section 2, the photos and/or videos taken during the Event may be published on the PRADA’s website and social profiles or other media and/or communicated to the press.

6. Data retention period

The data will be processed and stored (i) for the duration of the Event (ii) as long as required to carry out the purposes for which the Personal Data were collected or (iii) until you revoke your consent to the processing of your Personal Data, where applicable.

After the conclusion of such period, and where there is no legal or business purpose for retaining your Personal Data, it will be permanently erase or made anonymous.

7. Your rights

Please note that you may exercise your rights under current legislation on the protection of Personal Data – including the Personal Data (Privacy) Ordinance, Chapter 486 of Laws of Hong Kong (“PDPO”) and the European General Data Protection Regulation, Regulation EU 2016/679 (“GDPR”) - at any time by contacting the Data Controller at the addresses indicated in the next paragraph.

In particular, under the PDPO, you may at any time request access to, and to correct, your Personal Data. You also have the right under the GDPR to request information as to whether your Personal Data is being processed and as to the characteristics of the processing, the right to rectification and erasure of your Personal Data, to limitation of the data processing, and/or the right to object to the processing and/or to request the transmission of your Personal Data to another data controller and/or to lodge a complaint with the competent supervisory authority or take legal action if you believe there is non-compliance with the provisions of the applicable laws.

8. Data controllers and contacts

Prada Asia Pacific Limited

8^th Floor, One Taikoo Place, 979 King’s Road, Quarry Bay, Hong Kong

Prada S.p.A.

Via Antonio Fogazzaro 28, 20135 Milan (Italy)

Group Data Protection Officer

e-mail: [email protected].

If you have any requests regarding your Personal Data, have any enquiries regarding this Privacy Policy, or you would like to exercise your rights, please contact (free of charge) the Group Data Protection Officer or the Data Controller by writing to the addresses/email address listed above.

Hong Kong, March 13^th, 2023