Privacy Policy
This Policy describes which of your personal data are collected by Tristate International SA (“Tristate”) and by Tristate’s legal entity which manage physical stores (referred to in this privacy policy as “We”), for which purposes and how they are processed. Below you will also find the necessary information to enforce your rights provided for by applicable data protection regulations, such as the Swiss Data Protection Act and EU Regulation 679/2016 ("GDPR"), each to the extent applicable (the "Applicable Data Protection Regulations").
Tristate International SA, Tax number CHE 147076577, with registered office in Via Canova 9, 6900 Lugano, privacy@eu.tristateww.com (“Tristate”) and Tristate’s legal entity which manage physical stores and Tristate’s selected distributors or commercial partners as listed in the following link are the joint controllers of the processing of your personal data.
According to the Applicable Data Protection Regulations such as art. 26 GDPR, We inform you that Tristate and the other legal entities are joint controllers of the processing of your personal data to provide you with a personalized shopping experience in the physical stores managed by one of Tristate’s legal entity or by one of Tristate’s selected distributors or commercial partners (“Store”) as listed above.
According to the Applicable Data Protection Regulations such as art. 26 GDPR, We inform you that Tristate is the Data Controller of the processing of your personal data, which is necessary for marketing purposes – also profiling activities – with your prior consent.
Your contact and purchase data. We will process the contact details you provide us (for instance, your first name, surname, address, telephone number, email, town and country of residence, language, sex, date of birth, ID document, your favorite store) when you create an account in Store and when We access to your account already created in order to obtain more information concerning your purchases for the purposes listed below. We may also process information referred to products you buy in our Store or update your contact details.
Directly from you. You will fill the form We will provide to you in an electronic copy.
You are not obliged to provide us with your personal data and in the event you choose not to do so, this choice will not affect your possibility to buy products offered for sale in the Store.
a) To send you commercial communications and to offer you products aligned with your tastes. With your consent, Tristate analyzes your personal data and your preferences and consumption of its products in order to improve its approach towards you and towards our customers in general, through automated processing activities, including profiling activities about for instance your sex, date of birth, preferred product and store. Tristate does this in order to make better decisions related to services, advertising, products and contents, based on a greater awareness of how our customers use our services and to ensure you a more customized user experience.
The legal basis of this processing is your explicit consent.
The retention period of your data is 12 months from the collection of your data.
b) For marketing purposes. With your prior consent, you may be contacted by email or by other means of telecommunication (e.g. whatsapp) by Tristate with information or offers concerning our products or services.
The legal basis of this processing is your explicit consent.
The retention period of your data is 24 months from the collection of your data.
c) To allow you to create an account. Tristate will use your personal data in order for you to create an account, whether you make a purchase in the Store (physical and/or online) or not.
The legal basis of such data processing is the performance of a contractual/pre-contractual request submitted by you.
The retention period of your data shall be equal to the period of validity of your account, which shall be in any case deactivated after 24 months from your last access or from the last action taken by you in your account and/or from the last use in the physical store of your account if you have not also created an account on the online store.
Moreover, Tristate may use your data for internal statistical purposes based on its legitimate interests. The relevant retention period is equal to the one mentioned above.
d) To provide you with a more personalized shopping experience in Store. If you have created an account, We may analyze your purchases made in one of the Stores, in order to provide you with a personalized shopping experience in the Store, with dedicated advice concerning our products, based on your preferences.
The legal basis of this processing is our legitimate interest.
The retention period is equal to the retention of your account.
Other purposes permitted by law. In certain circumstances, We may process your data if We have a legitimate interest, in accordance with Applicable Data Protection Regulations such as Article 6, paragraph 1 (f) of the GDPR, in compliance with your rights and with the restrictions required by law.
For the above-mentioned purposes, personal data are processed using manual, digital and online tools with a software that is closely connected to the said purposes and, in any case, such data are processed so as to ensure the safety and confidentiality of the said data in accordance with the applicable legislation.
The data are processed and stored at the offices of Joint Controllers and and IT systems of Tristate.
Your personal data could be communicated to third-party service providers - duly appointed as data processors pursuant to the Applicable Data Protection Regulations such as art. 28 GDPR. Such providers may have their legal office outside EU and, therefore, they may not have the same laws on data protection as the ones implemented in your country, and/or the level of personal data protection arising by such laws may be deemed not adequate, on the basis of your country standards.
Such transfers shall be authorized either upon:
· An adequate decision referred to the Extra-EU country to which personal data are transferred issued by the European Commission according to Applicable Data Protection Regulations such as art. 45 of GDPR; or
· Appropriate guarantees provided for by the Applicable Data Protection Regulations such as articles 46, 47 and 49 of GDPR (as the standard contractual clauses approved by the European Commission, the binding corporate rules, the contractual guarantees provided for by the involved data controllers, or as the exceptions to the prohibition on the transfer, which are applicable under certain circumstances) and upon the right to ask to the Data Controllers all the contacts of the data subjects to whom personal data are communicated, from whom you can receive information about how to obtain a copy of the processed data or about the place where data are available.
Being understood that, where required by law, We will obtain your prior consent and complete any formalities required by said law, We may share your data with the following third parties (acting as data processors):
Our service providers. We may share your data with third parties in order for them to provide us with services (for instance, IT service providers for the management of the Store online, companies providing us with profiling services and compliance automation) but in such cases, We will enter into an agreement with them pursuant to the Applicable Data Protection Regulations such as Article 28 of the GDPR in order to protect your data. These parties will only be in possession of the data required to perform their functions and shall only use it for the purpose of providing services on our behalf or complying with the law. You can find out the details of these processors pursuant to the Applicable Data Protection Regulations such as Article 28 of the GDPR by sending an email to privacy@eu.tristateww.com.
Where We deem it necessary in order to comply with our legal obligations or to legally protect ourselves or third parties. Where permitted or required by the law, We may also share the data requested by an administrative authority or by another authorized third party or organization, in order to protect or enforce our rights or those of third parties, or to limit or prevent fraud (including credit card fraud or other fraud, that We believe may have occurred during a raffle, promotion or event) and other offences.
We may have a legitimate interest, in accordance with recital (48) GDPR, to share your data with other company of the group to which We belong for internal administrative purposes.
The above-mentioned processing purposes are not intended for minors under the age of 18, but rather for adults. If you are a parent or guardian and you believe your child may have sent us their personal data, please feel free to contact us.
You can contact the Joint Controllers to request the access to, the rectification or erasure of your personal data, or the restriction of the processing, or to object to the processing and to request the portability of your data; you can also withdraw your consent at any time (this shall not affect the lawfulness of processing based on consent granted before its withdrawal).
When you exercise your right of access, you have the right to know whether your data is being processed, as well as the purpose of the processing, the categories of data being processed, the recipients or categories of recipients to whom your data have been disclosed (and, if they reside in a third country, the guarantees in place), the retention period for your data (or the criteria for determining the retention period), whether automated processing is being carried out (for instance through profiling), the reason for the processing, and the source of the data (when not initially collected by us).
You have the right to lodge a complaint to the competent Data Protection Authority.
You can exercise your rights by contacting the Joint Controllers (at the address mentioned above or by sending an email to: privacy@eu.tristateww.com
You can withdraw your consent to receive marketing communications including newsletters, following the instructions in the promotional message that you have received. Alternatively, you can withdraw your consent by emailing to privacy@eu.tristateww.com
Version updated to 25-09-2025
