L'ORÉAL DANMARK A/S
PRIVACY POLICY TO OUR BUSINESS PARTNERS
It is L'Oréal's ambition to be an exemplary company and contribute to making the world a more beautiful place. We place great emphasis on honesty and clarity, and we are committed to building strong and lasting relationships with our consumers, based on trust and mutual benefit. Part of this commitment involves protecting and respecting your privacy and choices. Respect for your privacy is essential to us. That is why we present "Our Privacy Promise" and our full Privacy Policy below.
This Privacy Policy addresses how we use personal information that our customers share with us for business purposes, including, for example, salons, pharmacies, retailers, or other stakeholders, such as influencers.
The privacy policy is continuously updated and therefore it should be regularly reviewed. The last time we changed our Privacy Policy was in September 2024.
OUR PRIVACY PROMISE
- We respect your privacy and choices
- We make sure privacy and security are incorporated into everything we do
- We will not send you marketing material unless you have requested it. You can change your mind at any time
- We never offer or sell your information
- We are committed to protecting and keeping your information secure. This means that we only work with trusted partners
- We are committed to being open and transparent about our use of your information
- We do not use your information in contexts we have not informed you about
- We respect your rights and always try to accommodate your wishes, as far as possible, in accordance with our own legal and operational responsibilities.
For more detailed information about our privacy practices, we have set out below what personal data we may receive directly from you or through your interaction with us, how we use it, who we may share it with, how we protect it and store it securely, and your rights regarding your personal data. Not all situations will be relevant to you. This Privacy Policy gives you an overview of all potential situations in which we may interact with each other.
Please note that all the information below may not apply to you. Below we have made an overview of all possible situations where we are in contact / communicate with each other, and one or more of these may apply to you, depending on what contact / communication you have had with us. For example, if you have not uploaded a photo of yourself on your profile with us, this information does not apply to you.
When you share personal information with us or when we collect your personal information, we process it in accordance with this Policy. Please read this information carefully. If you have any questions or concerns regarding your personal data, please contact us.
NORDIC DATA PROTECTION OFFICER / DATABESKYTTELSESRÅDGIVER
L’Oréal Danmark A/S
Att.: Nordic Data Protection Officer (databeskyttelsesrådgiver)
Havneholmen 25
1561 Copenhagen V
Denmark
E-mail: [email protected]
WHAT WILL YOU FIND IN THIS PRIVACY POLICY?
- How do we collect or receive your information?
- Automated Decision Making
- Profiling
- Who may access your personal data?
- Where we store your personal data
- How long do we keep your personal data
- Is your personal data secure?
- Links to third party sites and social login
- Social media and user generated content
WHO ARE WE
L'Oréal has offices in 140 countries worldwide and covers many different brands and products. For more information on the L'Oréal Group, see http://www.loreal.com/group.
L'Oréal Danmark A/S is responsible for the personal data you share with us. When we say "L'Oréal", "us", "our" or "we" it is this company we are referring to. L'Oréal Danmark A/S is the data controller in accordance with applicable data protection legislation.
L'Oréal Danmark A/S
CVR no. 70710218
Havneholmen 25
1561 Copenhagen V
WHAT IS PERSONAL DATA?
"Personal data" means any information or pieces of information that can identify you either directly (e.g., your name) or indirectly (e.g., via pseudonymized information, such as a unique identifier). This means that personal data includes information such as email and postal address, telephone number, usernames, profile pictures, personal preferences, shopping habits, user-generated content, bank details and information about your characteristics. It may also include unique identifiers, such as your computer's IP address or your mobile device's MAC address, as well as cookies.
This Privacy Policy covers all your personal data collected and used by L'Oréal.
WHAT DATA DO WE COLLECT FROM YOU AND HOW DO WE USE IT?
You, as a customer, are at the heart of our activities. We are always happy to hear from you, learn more about you and develop and offer products that you like and can use to strengthen and develop your business.
L'Oréal's ambition is to develop relationships based on transparency and mutual trust.
We know that many of you are also happy to interact with us, so there are many ways in which you can share your personal information with us and in which we can collect it.
How do we collect or receive your information?
We may collect or receive information from you through our websites, forms, apps, devices, L'Oréal's social media product or brand pages, etc. Sometimes you provide us with the information directly (e.g. when you create an account, when you contact us or when you shop on our websites/apps and in shops/beauty salons), sometimes we collect it (e.g. by using cookies to understand how you use our websites/apps) and sometimes we receive your information from third parties; for example, other entities in the L'Oréal Group.
When we collect your information, we indicate the mandatory fields with stars. This information is necessary to process in order to:
- fulfil our agreement with you (e.g. deliver the products you have purchased on our websites/apps)
- provide you with the service you have requested (e.g. to provide a newsletter); or
- comply with legal requirements (e.g. when invoicing).
Failure to enter the information in the fields marked with a star may affect our ability to provide the Products and Services.
We describe in more detail in the overview below, and explain:
- Through what interaction may your information be provided or collected? This column explains what activity or situation you are involved in when we use or collect your information. For example, whether you complete a purchase, sign up for a newsletter, or look at a website / app.
- What information may we receive directly from you or from your interaction with us? This column describes what types of information we may collect about you, depending on the situation.
- How and why can we use them? This column describes what we may do with your information and the purposes for collecting it.
- What is the legal basis for using your personal data? This column describes the basis on which we may use your information.
Depending on the purpose for which the information is used, the legal basis for processing your information may be:
- Your consent
- Performance of a contract - This applies, among other things, when you disclose your personal data to us so that we can provide you with a service (e.g. if you ask us to create a profile for you as a customer or if you want to buy a product and we handle the associated logistics).
- Our legitimate interest, which may be:
- Improving our products and services: specifically, our business interest in better understanding your needs and expectations, and thereby improving our services, websites/apps/devices, products, and brands for the benefit of our consumers.
- Prevention of abuse: ensure that payment is made without fraud and abuse.
- Securing our tools: making sure that the tools used by you (our websites/apps/devices) are secure, that they work properly and that they are continuously improved.
- A legal obligation – It is in these cases that, as a result of our legal and regulatory obligations, we need to retain your personal data (e.g. when you make a purchase, we are required to store your transaction details for tax and accounting compliance).
Overview of possible interactions with us and how we use your personal data in these contexts
During what interactions can you provide and we collect your personal data? | What personal data may we receive directly from you or from your interaction with us? | How and why can we use them? | What is the legal basis for using your personal data? |
Creation and management of corporate customer account If your personal data is collected in connection with the creation or administration of a corporate customer account with L'Oréal (either directly or through our account management team or e.g. on L'Oréal websites/apps). | Depending on how much you interact with us, this information may be covered by:
| In order to:
| Performance of a contract |
| Consent | ||
| Legitimate interest | ||
Newsletters and marketing communications via subscription | Depending on how much you interact with us, this information may be covered by:
Social media profile (if you use social media login or share this information with us). | In order to:
| Consent |
| Legitimate interest | ||
| Legal obligation | ||
Managing purchases and orders Information collected during the purchase process on L'Oréal's website/apps/social media or in store. | Depending on how much you interact with us, this information may be covered by:
| In order to:
| Performance of a contract |
| Legitimate interest | ||
Online "surfing" Information collected through cookies or similar technologies ("Cookies"*) as part of your movement on L'Oréal websites/apps and/or on third party websites/apps.
For information about specific cookies placed via a given website/app, please see Cookie settings.
*Cookies are a small text file that is stored on your device (computer, tablet or mobile) when you are on the Internet, including L'Oréral Group websites. | Depending on how much you interact with us, this information may be covered by:
Technical information:
A unique identifier assigned to each visitor and the expiration date of such identifier. | We use cookies, where applicable, together with other personal data you have already shared with us (e.g. previous purchases or whether you have subscribed to our newsletter) or for the following purposes:
| Legitimate interest |
| Consent | ||
Campaigns Information collected during a game, contests, promotional offers, requests for samples, surveys. | Depending on how much you interact with us, this information may be covered by:
|
| Performance of a contract |
| Legitimate interest | ||
| Consent | ||
User-generated content Information collected in connection with your submission or sharing of content on one of our social media platforms or your acceptance of our repurposing of content you have shared on social media platforms | Depending on how much you interact with us, this information may be covered by:
|
| Consent |
Deliver targeted advertising on social media to show you:
| Legitimate interest | ||
Using apps and devices Information collected based on your use of our apps and/or devices |
Depending on how much you interact with us, this information may be covered by:
|
In order to:
Carry out research and innovation carried out by researchers in the L'Oréal Group;
Display advertisements on L'Oréal websites to create a unique experience when you visit our websites.
| Performance of a contract |
| Legitimate interest | ||
Inquiries Information collected when you ask questions (for example, through our customer service) regarding our brands and products and their use. | Depending on how much contact/communication there is with us, the information may include, among other things:
| In order to:
| Consent |
| Legitimate interest | ||
| Legal basis | ||
Sponsorship | Depending on how much contact/communication there is with us, the information may include, among other things:
| To send information about our products and/or information tagged on a wish list to someone at another person's request. | Performance of a contract And Legitimate interest |
Events, seminars and training sessions When you contact/communicate with us for business purposes as a customer, client, supplier, service provider, journalist, etc. |
|
In order to:
| Performance of a contract Our legitimate interest |
Engagement with our stakeholders (including influencers)
When we need to process your personal data to better involve you | Personal data that is clearly published by you, such as the content of your public profile, reviews or photos that you share, and personal information about you contained in publicly available material such as media coverage. For example:
| In order to:
| Legal basis |
| Legitimate Interests For influencers: for example, we assess whether the content you have posted on your social media profiles and personal information about you that is public is in line with our values, as stated in our Influencer Value Charter. We also have a legitimate interest when we want to ensure that you are not trying to buy followers or artificially increasing the number of your followers, for example by means of paid-for or "like-for-like". | ||
| Performance of a contract |
Automated Decision Making
We use third-party vendors' solutions to secure transactions on our websites/apps/devices against fraud and abuse. For example, the method of detecting fraud is based on simple juxtaposition, linking, grouping, prediction and detection of irregularities by using intelligent programs and various techniques for merging and sorting data.
The process of investigating possible fraud can be completely automated, but can also involve human intervention where a person makes the final decision. In any event, we take reasonable precautions and security measures to restrict access to your information.
As a result of the process of detecting possible fraud, you may experience (i) delay in processing your order/request while your payment is being reviewed by us and (ii) limited access to or being excluded from a Service if a fraud risk is identified. You have the right to access the information on which we base our decision. Please see the "Your Rights and Choices" section below.
Profiling
When sending or displaying personalised communications or content, we may use some techniques referred to as "profiling" (i.e. any form of automated processing of personal data consisting in using these to evaluate certain personal aspects relating to a natural person, in particular for the purpose of analysing or predicting aspects relating to the individual's personal preferences; interests, financial situation, behaviour, location, health information, reliability or whereabouts). This means that we may collect your personal data in the different scenarios mentioned in the overview above. We centralize this information and analyze it in order to assess and predict your personal preferences and/or interests.
Based on our analysis, we send or display communications and/or content tailored to your interests/needs.
Under certain circumstances, you have the right to object to the use of your information for "profiling". Please see the "Your Rights and Choices" section below.
Who may access your personal data?
We may share your personal data within the L'Oréal Group to comply with our legal obligations, to prevent fraud and/or secure our tools, improve our products and services, or after obtaining your consent to share the information.
Depending on the purposes for which they were collected, and only to the extent necessary, L'Oréal entities around the world may access your personal data, however, in pseudonymised form where possible (preventing direct identification) and where necessary to provide the requested services.
We may also share your personal data in pseudonymised form (preventing direct identification) with researchers from L'Oréal Research & Innovation, including those located outside your country, for research and innovation purposes.
Where permitted, we may also share your personal data, including those collected through cookies, between our brands in order to harmonise and update the information you share with us, to perform statistics based on your characteristics and to tailor our communications.
Please visit the L'Oréal Group website for more information about the L'Oréal Group, our brands and locations.
We may share your personal data for marketing purposes with third parties or entities within the L'Oréal Group.
We only share personal data with third parties for direct marketing purposes if we have your consent. If your data is processed by a third party, it acts as data controller and its own terms, conditions and privacy policy will apply. You should carefully review their documentation before consenting to disclose your information to the third party in question.
Your personal data may also be processed by our trusted third-party suppliers on our behalf.
Our trusted third parties carry out a number of business activities on our behalf. We only provide them with the information they need to perform the service, and we require them not to use your personal information for any other purpose. We always do our best to ensure that all third parties we work with process your personal data securely. For example, we may entrust services that require the processing of personal data to:
- Third parties that support and help us provide digital and e-commerce services, such as social listening, store localization, loyalty programs, identity management, ratings and reviews, CRM, web analytics and search engines, curation tools for user-generated content
- Advertising, marketing, marketing agencies that help us deliver advertising, marketing and promotions, to analyze their effectiveness and to help us manage your communications and questions
- Third parties required to deliver a product to you, e.g. postal/postal services
- Third parties who support and assist us in providing IT services such as platform providers, hosting services, maintenance and support of our databases, as well as our software and applications that may contain your personal data (such services may sometimes require access to your information to perform the necessary tasks)
- Payment services and credit rating providers for the purpose of assessing your creditworthiness and verifying your information where this is a condition for entering into a contract with you
- Third parties who help us with customer service and monitoring of adverse events when using cosmetics.
We may disclose your personal data to third parties:
- In the event that we sell a business entity or assets, we may disclose your personal data to the buyer of such business entity or assets. If L'Oréal or part of its assets is acquired by a third party, personal data of customers is one of the acquired assets. In this case, it is the buyer who is the new data controller and the processing of your personal data takes place in accordance with his privacy policy.
- If we are required to disclose or share your personal information to comply with a legal obligation or to enforce or apply our Terms of Use/Sale or other terms and conditions you have agreed to, or to protect L'Oréal's rights, property, or the safety of our customers and employees.
- If we have your consent to do so.
- If by law we are allowed to do so.
We may disclose your personal data to our business partners:
- If a service you subscribe to is made by L'Oréal and a partner (e.g. a co-branded app). In this case, L'Oréal and its partner will each process your personal data for their own purposes and your data will be processed:
- by L'Oréal in accordance with this Privacy Policy
- by the partner, who also acts as a data controller, on its terms and conditions and in accordance with its privacy policy.
- If you have agreed to receive marketing communications and commercial communications from an active L'Oréal partner (e.g. via an App branded by L'Oréal and made available to business partners). In this case, the partner processes your personal data and acts as a data controller on its own terms and conditions and in accordance with its own privacy policy.
- We may share our partners' content from the social networks. If you search for content from social networks on our websites/apps, a cookie from such a social network may be set on your device. We encourage you to read the cookie policies on the relevant social networks for further information.
- When we use Google's advertising services on our websites/apps, Google will access and use your personal data. To learn more about how Google uses your personal data in this regard, please refer to Google's Privacy Terms, which govern these services and data processing.
Information Meta collects and shares with us
All Meta features and services available on our website/app are governed by Metas Data Policy, where you can read more about your privacy rights and setup options.
When you use the website/app, you can:
- log in using your Meta password. If you do so, you consent to share some of your public profile information with us;
- use Metas social plug-ins, such as "Like" or "Share" our content on the Meta Platforms;
- Accept cookies from the website/app (also known as "Meta pixel") that help us understand your behavior, including information about your device, how you use our services, the purchases you make and the ads you read, whether you have a Meta account or are logged in to a Meta service.
When you use these Meta features, we collect information that helps us:
- Show you ads that you might be interested in on Meta services (Facebook, Instagram, Messenger etc.).
- measure and analyse the impact of our website/app and advertisements.
We may also use the personal data you have provided to us via the website/app (such as your name and surname, email address, gender and phone number) to find you on Meta services (Instagram, Messenger, Facebook or other Meta services) to show you ads that are even more relevant to you. When this happens, Meta will not share your personal data and will delete it as soon as the matching process is complete.
We do not offer or sell your personal data.
Where We Store Your Personal Data
The information we collect from you may be transferred to, accessed from and stored at a destination outside the European Economic Area ("EEA"). They may also be processed by employees outside the EEA who work for us or one of our service providers.
L'Oréal only transfers personal data outside the EEA in a secure and lawful manner. As not all countries have laws governing the use and transfer of personal data, we will take appropriate steps to ensure that third parties comply with the obligations of this Policy. These steps may include reviewing third parties' privacy policies and security standards and/or entering into appropriate contracts (based on the EU Commission template).
Please contact us for further information, as described under "Contact" below.
How Long Do We Keep Your Personal Data
We will only retain your personal data for as long as we need it for the purpose for which it was collected, to meet your needs or to comply with our legal obligations.
To set the deletion deadline for your information, we look at the following criteria:
- When you purchase products or services, we retain your personal data throughout our contractual relationship
- When you participate in a promotion, we will retain your personal data for the duration of the campaign
- When you contact us with an inquiry, we will retain your personal data for the time necessary for the processing of your enquiry
- When you create an account, we will retain your personal data until you request that it be deleted or after a period of inactivity (no active interaction with brands) defined in accordance with local rules and guidelines
- Once you have consented to direct marketing, we will retain your personal data until you unsubscribe or request to be deleted, or after a period of inactivity (no active interaction with brands) defined in accordance with local rules and guidelines
- When cookies are placed on your computer, we store them for as long as necessary to achieve their purpose (e.g. during the term of a shopping cart cookie or a session cookie) and for a defined period of time in accordance with local rules and guidelines.
We may retain some personal data to comply with our legal and regulatory obligations, as well as to exercise our rights (e.g. to bring our claims in court) or for statistical or historical purposes.
When we no longer need to use your personal data, it is removed from our systems and registers or anonymised so that you can no longer be identified from it.
Is Your Personal Data Secure?
We are obliged to keep your personal data secure and take all reasonable precautions to do so. We require by contract that trusted third parties who process your personal data on our behalf do the same.
We always do our best to protect your personal data and once we have received it, we have strict procedures and security measures in place to prevent unauthorised access. As the transmission of information is not completely secure, we cannot guarantee the security of your information sent to our site. Thus, any transfer is at your own risk.
Links to Third Party Sites and Social Login
Our websites and apps may from time to time contain links to and from our partners' networks, advertisers and affiliates. If you follow a link to one of these websites, please note that these sites have their own privacy policies and that we are not responsible or accountable for these policies. Please review the policies before submitting personal information to these pages.
We can also offer you the opportunity to use your login from a social media. If you do so, please note that, depending on your social media settings, you will share your profile information with us. Please refer to the relevant media platform and review its privacy policy to understand how your personal data is shared and used in this context.
Social Media and User Generated Content
Some of our websites and apps allow users to share their own content. Keep in mind that content posted on one of our social media platforms can be viewed by the public and you should therefore be careful about sharing certain personal information, such as financial information or information about your address. We are not responsible for the actions of other individuals if you have shared personal information on one of our social media platforms and we recommend that you do not share such information.
YOUR RIGHTS AND CHOICES
L'Oreal respects the right to privacy: it is important that you are able to have control over your own personal data. You have the following rights:
Your rights | What does this mean? |
The right to be informed | You have the right to receive clear, transparent and easy-to-understand information about how we use your personal data and about your rights. That's why we provide you with the information in this Policy. |
The right of access | You have the right to gain insight into the personal data we process about you (with certain limitations). We may charge a reasonable fee based on the administrative costs associated with providing the information. Requests that are clearly unfounded, exaggerated, or repetitive will not be answered with certainty. To do this, please contact us at the contact details below. |
The right to rectification | You have the right to have your personal data corrected if it is incorrect or outdated and/or completed if it is incomplete. To do this, please contact us at the contact details below. If you have an account, it may be easier to correct your own information through your "My Account" feature. |
The right to be deleted/the right to be forgotten | In some cases, you have the right to have your personal data deleted. Please note that this is not an absolute right as we may be legally obliged or have legitimate grounds for retaining your personal data. If you would like us to delete your personal data, please contact us at the contact details below. |
The right to object to direct marketing, including profiling | You can unsubscribe or opt out of our direct marketing at any time. The easiest way to do this is to click the "Unsubscribe" link in any email or communication we send you. Otherwise, you can contact us via the contact details below. If you wish to object to any profiling, please contact us at the contact details below. |
The right to withdraw consent, at any time, for the processing of data based on consent | You can withdraw your consent for us to process your personal data when such processing is based on consent. Withdrawing consent does not affect the lawfulness of processing based on consent before the consent has been withdrawn. We refer to the table in the section "What information do we collect from you and how do we use it?", in particular the column "What is the legal basis for using your information?" to identify where our processing is based on consent. If you wish to withdraw your consent, please contact us at the contact details below. |
The right to object to processing based on legitimate interests | You can object to our processing of your personal data at any time when such processing is based on legitimate interests. We refer to the table in the section "What information do we collect from you and how do we use it?", in particular the column "What is the legal basis for using your information?" to identify where our processing is based on legitimate interests. To do this, please contact us at the contact details below. |
The right to lodge a complaint with a supervisory authority | You have the right to contact the Data Protection Authority to lodge a complaint about L'Oréal's data protection and privacy practices: Datatilsynet Borgergade 28, 5. 1300 Copenhagen K You are welcome to contact us at the contact details below before submitting a complaint to the Danish Data Protection Agency. |
The right to data portability | You have the right to move, copy or pass information from our database to someone else. This only applies to information you have shared, where the processing is based on a contract or your consent and where the processing is carried out automatically. We refer to the table in the section "What information do we collect from you and how do we use it?", in particular the column "What is the legal basis for using your information?" to identify where our processing is based on performance of a contract or on consent. For further information, please contact us at the contact details below. |
Retten til begrænsning | You have the right to request the restriction of our processing of your personal data. This right means that our processing of your information is limited so that we can store it but not process it further. According to the General Data Protection Regulation, this applies if the following conditions apply:
If you wish to request restrictions, please contact us at the contact details below. |
The right to disable cookies | You have the right to disable cookies. WHAT ARE COOKIES? Cookies are small text files that are stored on your device (computer, tablet or mobile) when you are on the Internet, including on L'Oréal Group websites. For more information, please see the following link: http://www.aboutcookies.org. DISABLING COOKIES You can easily change the cookie settings in cookie settings. |
To accommodate your request, we may require proof of your identity.
CONTACT
Should you have any questions or concerns about how we process and use your personal data or would like to exercise any of your rights as described above, please contact us at:
Consumer Care Center:
Email: [email protected]
Address:
L'Oréal Danmark A/S
Havneholmen 25
1561 Copenhagen V
Denmark
Nordic Data Protection Officer / Databeskyttelsesrådgiver
Complaint to a supervisory authority
If you wish to lodge a complaint about our processing of your personal data, you can do so for www.datatilsynet.dk
If you wish to lodge a complaint about our use of cookies, you can do so www.erhvervsstyrelsen.dk