Eucerin Privacy Policy [WIP TEST]

Introduction

THE PROTECTION OF YOUR DATA IS IMPORTANT TO US!

For Eucerin not only the care and protection of your skin is important. We also attach great importance to the protection of your personal data. That's why we respect your privacy and want you to be able to trust us as much when it comes to data protection as when it comes to skin care. We always inform you transparently about what we need your data for and if and for how long we store it. This allows you to decide for yourself for which purposes we may use your data. To ensure the best possible security, the information is always transmitted to us in encrypted form. If you no longer wish us to use your data, please let us know informally, for example by email.

1. General Information

The purpose of this privacy policy is to provide you with information concerning the processing of personal data when using our website and related services.

1.1 Processing of Personal Data

Personal data within the meaning of Art. 4 of the EU General Data Protection Regulation (GDPR) are all information relating to an identified or identifiable natural person, e.g. name, address, email address, IP address, etc.

1.2. Controller

Responsible for the processing of personal data within the meaning of Art. 4 (7) GDPR is:
Beiersdorf AG, Unnastrasse 48, 20253 Hamburg, Germany.
Telephone: +49 (40) 4909-0
Electronic contact

Contact details of the data protection officer: [Dataprotection[at]Beiersdorf.com] or under the postal address of the controller for the attention of the “data protection officer”.

1.3. Rights of the Data Subject

As data subject affected by the data processing activity, you have the following rights with regard to your personal data according to Art. 15 et seqq. GDPR:

  • Right of access;
  • Right to rectification and to erasure;
  • Right to restriction of processing;
  • Right to data portability; and 
  • Right to object. 

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

 

2. Collection and Processing of Personal Data when visiting our Website

When visiting and using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server, which are technically necessary for us to display our website to you and to guarantee stability and security.

We pass on the data collected to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contractors (e.g. hosting, content management system) in accordance with the purposes required (for displaying the website and setting up its content). 

Legal basis: Art. 6 (1) b GDPR. 

 

2.1 Cookies

In addition to the aforementioned data, cookies are stored on your computer when visiting and using our website. Cookies are small text files that are stored by your browser on your device to save certain information. The next time you visit our website on the same device, the information saved in the cookies will subsequently be transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”).

Through the information saved and returned, the respective website recognizes that you have already accessed and visited it with the browser you use on that device. We use this information to be able to design and display the website in an optimum way in line with your preferences. In that respect, only the cookie itself is identified on your device. Beyond this extent, your personal data will only be saved upon your express consent or if it is strictly necessary to be able to use the service offered to and accessed by you accordingly.

This website uses the following types of cookies, the scope and functionality of which are explained below:

  • Strictly necessary cookies (Type A)
  • Functionality, Performance and Marketing Cookies (Type B)
  • Consent based Cookies (Type C)

You can find more information on the cookie types set and used in the description of the tools implemented on our websites in this privacy policy. 

 

2.1.1 Strictly necessary cookies (Type A)

Strictly necessary cookies guarantee functions without which you cannot use our web pages as intended. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies will be returned to our website.

Strictly necessary cookies serve, for example, to ensure that you as a registered user always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data every time you access a new page.

The use of strictly necessary cookies on our website is possible without your consent. For this reason, strictly necessary cookies cannot be activated or deactivated individually. However, you can deactivate cookies in your browser at any time (see below).

Legal basis: Art. 6 (1) b GDPR.

 

2.1.2 Functionality, Performance and Marketing Cookies (Type B)

Functionality cookies enable our website to store information already provided (such as registered name or language selection) and to offer you improved and more personalized functions based on this information. These cookies collect and store only anonymous information so that they cannot track your movements on other websites.

Performance cookies collect information about how our websites are used in order to improve their attractiveness, content and functionality. These cookies help us, for example, to determine whether and which subpages of our website are visited and in which content users are particularly interested. In particular, we record the number of visits to a page, the number of subpages accessed, the time spent on our website, the order of the pages visited, which search terms led you to us, the country, region and, if applicable, the city from which access is made, and the proportion of mobile devices accessing our websites. We also capture movement, clicks and scrolling with the computer mouse to understand which areas of our website are of particular interest to users. As a result, we can tailor the content of our website more specifically to the needs of our users and optimize our offering. The IP address of your computer

transmitted for technical reasons is automatically made anonymous and does not allow us to draw any conclusions about the individual user. 

You can adjust at any time the cookie settings here (activate or deactivate).

Legal basis: Art. 6 (1) f GDPR.

2.1.3 Consent based Cookies (Type C)

Cookies, which are neither strictly necessary (Type A) nor functionality or performance cookies (Type B) will be used only upon your express consent, e.g. marketing cookies.

We also reserve the right to use information that we have obtained by means of cookies from an anonymous analysis of the usage behaviour of visitors to our website in order to display specific advertising for certain of our products on our own websites. We believe that you as a user benefit from this because we display advertising or content that we think suits your interests based on your surfing behaviour, so that you will see less randomly scattered advertising or certain content that might be of less interest to you. 

Marketing cookies come from external advertising companies (third party cookies) and are used to collect information about the websites visited by the user in order to create target group-oriented advertising for the user.

 

Opt-out for cookies used for online advertising: 

You can manage many companies’ cookies used for online advertising via the consumer choice tools created under self-regulation programs in many countries, such as the US-based https://www.aboutads.info/choices/ or the EU-based http://www.youronlinechoices.com/uk/your-ad-choices

You can withdraw your consent to the use of consent based cookies (Type C) individually at any time with effect for the future by adjusting your cookie settings accordingly. 

Legal basis: Art. 6 (1) a GDPR.

2.1.4 Administration and deletion of all cookies

You can set your web browser in such a way that cookies are generally prevented from being saved to your device and/or that you are asked each time whether you are in agreement with cookies being enabled. You can also at any time delete cookies that have been enabled again. You can find out how all this works in detail from your browser’s help function.

Please note that generally deactivating cookies may lead to functional restrictions of our website.

2.2 Web Analytics

2.2.1 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses a specific form of cookie, which is stored on your computer and enables an analysis of your use of our website. The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there.

We would like to point out that Google Analytics has been expanded on this website to include the code “gat._anonymizeIp();” to ensure the anonymized recording of IP addresses (so-called IP masking). Due to the IP anonymization on this website, your IP address is shortened by Google within the territory of the EU and the Treaty States of the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there. Google has submitted itself to the EU-US Privacy Shield, (https://www.privacyshield.gov/EU-US-Framework).

Google uses this information on our behalf to analyze your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. Google may also transfer this information to third parties as required by law or if said third parties process this data on behalf of Google. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You can prevent the storage of cookies by making the proper setting using your browser software. In addition, you can prevent Google from recording the data related to your use of the website generated by the cookie (including your IP address) and from processing this data by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.

Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Google Analytics Terms of Service: https://www.google.com/analytics/terms/gb.html, General overview on Google Analytics security and privacy principles: https://support.google.com/analytics/answer/6004245?hl=en, as well as Google’s privacy policy: https://policies.google.com/privacy?hl=en.

This website also uses Google Analytics for a device-independent analysis of visitor flows, which is carried out via a user ID. You can disable cross-device tracking of your usage in your Google Account under “My information”, “Personal information”.

Used Cookies: Type B. For further information, see Cookie Section [Link].

Maximum storage period of used Cookies: up to 12 months.

Legal basis: Art. 6 (1) f GDPR.

 

2.3 Social Plug-ins

Social plug-ins (“plug-ins”) of social networks are used on our websites, in particular the “Share” or “Share with friends” button of Facebook, whose website facebook.com is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland, is responsible for Facebook.com in Europe. The plug-ins are usually marked with a Facebook logo.

Besides Facebook, we use plug-ins from “Google+” (Provider: Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA).

For data privacy reasons, we have deliberately decided against utilising direct plug-ins of social networks on our websites. Instead, we use the “Shariff” solution. With the aid of Shariff, we can determine for ourselves when and whether data is transmitted to the operator of the respective social network. For this reason, there is no automatic data transmission to social networks such as Facebook, Google+, Twitter or Pinterest once you access our website. Data will be transmitted to social networks only if you actively click on the respective social network button. In this case, your web browser starts a connection to the respective social network's servers. By clicking on the respective button (e.g. “Pass on”, “Share” or “Share with friends”) you agree that your browser will produce a link to the respective social network's servers and transmit usage data to the respective operator of the social network and vice versa. We have no influence upon the nature and extent of the data that is then gathered by the social networks.

The social network provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers as notified below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy.

  1. Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;http://www.facebook.com/policy.php more information on the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo Facebook has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

  2. Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://policies.google.com/privacy/partners. Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

 

2.4 YouTube-Videos

We have integrated YouTube videos into our website, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user will be transmitted to YouTube, if you do not click on the videos to start playing them. Only when you play the videos the data referred to in the next paragraph will be transferred to YouTube. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 2 of this privacy policy will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy:
https://www.google.de/intl/de/policies/privacy; Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

2.5 Google Tag Manager

This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.

3. Further services offered (on- and offline)

In addition to the purely informational use of our website, we offer various other services, for which we process your personal data.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below.

External service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
If our service providers are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the service below.

3.1 Contacting

When contacting us, e.g. by e-mail or via a contact form on our website, the data you provide (your e-mail address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context again after storage is no longer necessary (usually after one year) or restrict processing if statutory retention obligations exist or periods of limitation must be observed.

We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contractors (e.g. hosting, call center service providers) in accordance with the purposes required (for establishing contacts and customer care).

Legal basis: Art. 6 (1) b GDPR.

3.2 Ratings and Reviews

Users have the possibility to submit ratings and reviews of products, processes or other evaluations within the scope of the website's offers in accordance with the terms of use. It is our legitimate interest that users can give their free opinion about products.

Your rating will be published with the nickname you select. We recommend that you use a pseudonym instead of your clear name. The ratings are reviewed before publication. We reserve the right to not publish comments if they are objected to as unlawful by third parties.

We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contractors (e.g. hosting service providers, customer management service providers) in accordance with the required purposes (for publication on the website).

Legal basis is Art. 6 (1) f GDPR

4. Objection or Withdrawal of your consent to the Processing of Personal Data

If you have given your consent (Art. 6 (1) a GDPR) to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us.

If we base the processing of your personal data on the weighing of interests (Art. 6 (1) f GDPR), you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the following description of the functions. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.


Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your objection at: [dataprotection[at]beiersdorf.com].