Update date: February 2025
This privacy notice ("Notice"), pursuant to Article 13 of Regulation (EU) 2016/679 General Data Protection Regulation ("Regulation" or "GDPR"), describes how Moleskine S.r.l. ("Moleskine", the ""Company", "we", "our", "us") processes personal data in its capacity as the data controller.
In particular, this Notice is meant to explain how Moleskine processes users’ personal data collected through "Moleskine Notes" App (the "App").
The Data Controller is Moleskine S.r.l, with registered address in Via Bergognone 34, 20144, Milan (MI), Italy.
In pursuing the purposes described in this Notice, we may collect and process the following categories of personal data referred to you:
i. Personal information: name, last name, date of birth;
ii. E-mail address which will properly be encrypted by Moleskine;
iii. Information related to your App Store or Google Play Store account (such as tokens);
iv. Information related to your Google Drive account or your Microsoft OneDrive account associated with the App;
v. Data related to other Moleskine devices that you associate to the App (e.g. the MAC address of your Moleskine Pen or the SKU Number of your Moleskine Notebook);
vi. Information related to the use of your Moleskine Smart-Writing Set associated with the App (e.g. number of pages used of the Moleskine Notebooks);
vii. Data revealing the geolocation (with your prior consent);
viii. Photos, multimedia contents and files on your device accessed through or uploaded in the APP (with your prior consent). Those data are protected through appropriate security and technical measures, including encryption technologies, which prevent the access by third parties. Access to this data will only be granted to persons duly authorised by Moleskine who will process such data if it is necessary to solve technical problems related to the use of the App reported by you.
The provision of your data referred to in points i, ii, iii is necessary and in case of failure we will not able to provide you with the services of the App.
Failure to provide us with your data referred to in points iv, v, vi, vii and viii or failure to provide consent (where applicable) cannot prevent you from downloading and using the App but will prevent you from enjoying some features of the App for which the provisions of this data is necessary or technical support in case viii.
The personal data will be processed for the following purposes and in pursuance of the lawful basis indicated:
a. provision of the services through the App by Moleskine. If you create an account and choose to benefit of the advanced services offered by Moleskine in connection with the App, this includes synchronization, and back-up in cloud of your data, documents and images you uploaded (including data sub viii). Legal basis: need to perform a contract or related pre-contractual obligations (Article 6(1)(b) GDPR).
b. To improve the service provided by Moleskine through the App through data revealing your geolocation. Legal basis: consent (Article 6(1)(a) GDPR).
c. sending promotional e-mail newsletters, such as sending promotional material on news, specific promotions, offers, new products or services offered by Moleskine Legal basis: consent (Article 6(1)(a) GDPR) or legitimate interest of Moleskine for the promotion, exclusively via e-mail, of products and services similar to the App (Article 6(1)(f) GDPR and Article 130 of Legislative Decree n. 196/2003 ("Italian DP Code"”)).
d. Profiling. Subject to your specific consent, marketing activities (whether you are already our customers or not) may also take into account the preferences concerning Moleskine’s products you showed through your use of the App. This will allow us to provide you with customised communications, to keep you up to date on Moleskine products that best suit your personal interests and tastes. Legal basis: consent (Article 6(1)(a) GDPR).
e. To provide feedback and/or technical support to your requests in relation to the use of the APP and related Moleskine products. Legal basis: performance of contractual obligations and related pre-contractual measures (Art. 6 (1)(b) GDPR).
f. Comply with legal obligations to which Moleskine is subject. Legal basis: need to comply with a legal obligation to which the controller is subject (Article 6(1)(c) GDPR).
g. If necessary, to protect or defend a right or a legitimate interest of Moleskine before a competent authority. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Your data resides on your device but if you create a Moleskine account to take advantage of the additional services in the App, your data will also be saved by Moleskine and synchronised via a cloud service. Optionally, data can also be saved on a third-party provider's cloud space so that you can access it from all the devices through which you have access to your account.
In particular, you can choose to synchronize your data through one of the following cloud platforms.
i. Use of your Google Drive account data
Information related to your Google Drive account can be used only to associate it with the App and to grant to the account permission for the purpose of backing up content files generated by the App and importing notebook data generated by the previous version of the App.
ii. Use of your Microsoft OneDrive account data
Information related to your Microsoft OneDrive account can be used only to associate it with the App and to grant to the account permission for the purpose of backing up content files generated by the App and importing notebook data generated by the previous version of the App.
The processing of your personal data is carried out by computers, automated and/or manual means in compliance with the principles of lawfulness, fairness, transparency, accuracy, integrity, data minimization and limitation of purposes and storage, as well as in accordance with the provisions of the GDPR and current legislation on the protection of personal data, and with the adoption of appropriate security measures.
Your personal data is collected, elaborated, transferred and stored using appropriate security measures (physical, logical and organisational) to protect it from possible breaches (such as destruction, loss, alteration, unauthorised disclosure or accidental or unlawful access to such personal data) and to ensure that processing is carried out only for the purposes described in this Notice.
In particular, Moleskine had adopted a proper encryption program ensuring that the confidentiality, integrity and availability of your data are constantly and properly protected.
Moleskine will store your personal data for the period strictly necessary to pursue the purposes they were collected for. In particular, Moleskine will retain personal data necessary for the use of the App for the whole period of time the App is used and installed on your device and will erase it once you will have deleted the App. Similarly, Moleskine will store the data in you account until you delete your account and all personal data associated with it.
Moleskine will process your personal data for direct marketing purposes (included profiling activities, as described in paragraph 3(d) above) for a period not exceeding twenty-four (24) months and will ask you to restate your consent at the end of that period.
Moleskine may extend the maximum retention period of your data where this is necessary to comply with a statutory obligation or to defend a right of Moleskine before a judicial, administrative, regulatory body or other authority.
In case of your request for assistance, Moleskine will only process your data for the sole purpose of fulfilling your request and for the period strictly necessary to provide you with assistance.
To the extent necessary to pursue the purposes described in this Notice, your personal data may be disclosed to third parties indicated in this paragraph. We require these third parties to take measures to maintain the confidentiality of any personal data they may receive from Moleskine to carry out their activities, in line with our Notice, and we ask them not to use this information for any other purpose. Your personal data may be communicated to:
If you consent to the processing of your personal data for marketing and profiling purposes (as defined at letters c) and d) of paragraph 3 above) your data will also be transferred on a CRM platform managed by an external provider, which acts as processor on behalf of Moleskine.
Where necessary for the exercise or protection of our rights, as well as to comply with statutory obligations, your personal data may also be disclosed to third parties such as judicial and/or administrative authorities, law enforcement agencies and/or auditors, legal advisors and DPOs
You may request more detailed information on those subjects whom Moleskine may share your personal data with by contacting us as indicated in the "How to contact us" section of this Notice.
When necessary for the purposes of the processing described in this Notice, your Personal Data may be transferred to countries outside the European Economic Area ("EEA").
Moleskine guarantees that all transfers outside the EEA will be made in such a way as to guarantee the full protection of your rights and freedoms according to Articles 44ff GDPR. If, with regard to the third country to which the data is transferred, no adequacy decision has been taken by the European Commission, the data transfers will be regulated by the application of appropriate safeguards pursuant to Articles 46 and following GDPR, such as standard contractual clauses issued by the European Commission, or to countries for which an Adequacy Decision has been issued by the European Commission.
In accordance with the applicable legislation, and in particular with the provisions of the GDPR, your rights in relation to the personal data that we process under this Notice are the following:
To exercise your rights, and for any query or clarification on how your personal data is processed and used pursuant to this Notice, you can contact us by writing to the e-mail address privacy@moleskine.com.
In order to ensure you the best possible protection of your rights and freedoms, Moleskine has also appointed a Data Protection Officer (“DPO") you may address any request relating to the processing of your personal data and to the exercise of your rights. The Moleskine DPO can be contacted at dpo@moleskine.com
If you decide to contact us, all the data you provide will be processed exclusively for the purpose of providing you with prompt feedback and to ensure the proper management of your request.
In order to protect your rights and your personal data, you may at any time decide also to lodge a complaint with the competent supervisory authority or to bring an action before the competent national courts.
We however always invite you to contact us for any need relating to the exercise of your rights.
This Notice is subject to periodic updating. To this end, we indicate the last update date at the beginning of this Notice. If you have already submitted your personal data, any change that substantially affects the processing of personal data, will be communicated to you through the appropriate channels in order to ensure that you are effectively aware of the way your data is processed, with a view to full transparency of the processing activities and a full and adequate protection of your rights.