In addition to the La Prairie companies mentioned in the Data Controllers & Contact section below, we may share your personal data: (where permitted in accordance with applicable privacy laws) with the following third parties for the purposes outlined above:

Please note that the third parties listed above may be located in a country outside of your country of residence, including outside the European Economic Area, United Kingdom or Switzerland. When these third parties process your data on our behalf, we implement appropriate contractual arrangements with them that include strong data protection obligations. More details about international data transfers can be found below under "Data Transfers."

• companies in our group. A full list of our group companies can be found here;
• banks and our payment services provider for the purpose of transaction processing;
• third parties, where we have your permission to do so (e.g. social networks providers, concierge services, our authorised retail partners, or e-commerce platforms that sell our products). Your personal data, including product reviews you submit, may be transferred to these third parties through a process known as review syndication, allowing reviews to be displayed on multiple e-commerce platforms. Your personal data will become subject to the privacy policies of those third parties when your personal data is shared with them;
• prospective or eventual buyers of our business (if we or substantially all of our assets are acquired by or merged with a third party including through bankruptcy);
• any law enforcement agency, court, regulatory, government authority or other third party where in our reasonable opinion this is necessary to comply with a legal or regulatory obligations or otherwise to enforce or apply our Terms of Use or any other agreements and our selective distribution system; or to protect the rights, brand, property, or safety of La Prairie, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; or
• our third-party service providers (as well as group companies and authorised retail partners) who perform services on our behalf based on our instructions. We do not authorize these parties to use or disclose the information except as necessary to perform services on our behalf or to comply with legal requirements. Examples of these parties include employees of our authorised retailers partners that serve you in the stores, IT support service providers, companies that fulfil orders and manage refunds, and provide data hosting and support, content personalization, advertising and marketing services (including digital and personalized advertising) and data cleansing, management, segmentation and analysis.

We also share information with third parties including social media and search engine partners:

We aggregate your personal data with the information of other customers, creating a dataset of information about the usage of our platforms, purchase of our products, and other general, grouped information about our customers. Although this dataset is aggregated and anonymised, meaning it cannot directly identify you as an individual, it provides a valuable insight into the use of our Digital Platforms and Points of Sale and we will share it with select third parties. These parties include our group companies.

We also transfer information about you to ad technology providers and our social media and search engine partners (including Meta, TikTok, Google and Twitter) so that they may recognize your devices and deliver interest based content and advertisements. The information can include your name, postal address, email, device ID, or other identifier in encrypted form. The providers often process the information in hashed or de-identified form. These providers can collect additional information from you, such as your IP address and information about your browser or operating system; combine information about you with information from other companies in data sharing cooperatives in which we participate; and may place or recognize their own unique cookie on your browser. The third parties that generate these cookies have their own privacy policies that will apply.

In this regard, we have concluded a corresponding agreement with Meta for joint controllership, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This agreement defines the respective responsibilities for fulfilling the obligation under the applicable laws with regard to joint controllership. The contact details of the controller and the data protection officer of Meta can be found here: https://www.facebook.com/about/privacy. Without prejudice to this, the jurisdiction of the Rights of Data Subjects is not limited. We have agreed with Meta that Meta can be used as a contact point for the exercise of data subject rights (see Section 8).

Further information on how Meta processes personal data, including its legal basis and further information on the rights of data subjects can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of joint controllership based on the legitimate interest.

Information on the data security conditions can be found here. https://www.facebook.com/legal/terms/data_security_terms and on processing on the basis of standard contractual clauses can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Data Transfers

Your personal data is stored mainly on servers in the European Union. However, we operate globally and may transfer your personal information to other companies within the La Prairie group, third party service providers or to authorised retail partners in locations around the world, including countries that do not provide an adequate level of data protection. We want you to have the best service and client experience no matter how and where you interact with us, whether in our Digital Platforms or our Points of Sale all over the world. For this purpose, we may have to share your personal information outside the country where you have first shared it with us, always for the purposes described in this Policy and where we are satisfied with the levels of protection and security implemented by the third party in compliance with applicable laws. This sharing of your personal information is necessary to enable us to offer you a global and personalised client experience and services.

Where your personal data is transferred to countries outside the European Union or Switzerland and to countries that do not offer an adequate level of data protection in accordance with the European Commission and Swiss authorities, we will take steps to ensure your information is adequately protected by entering into the EU Commission and Swiss approved standard contractual clauses pursuant to Art. 46 (2) of the GDPR or put in place other measures under applicable laws to ensure that such transfer provides adequate safeguards. More information about this topic is published here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en

A copy of the relevant mechanism can be obtained for your review on request by using the contact details provided in Section 10.

Your personal data will be retained for a certain period of time based on the following criteria: (i) as long as necessary to fulfil the purposes outlined in this Policy; (ii) any applicable legal requirements; or (iii) any request for deletion from you in applicable situations.

• In relation to our clients, your data is stored for the duration of the contractual relationship and for 7 years afterwards.
• In relation to our prospects: your data is stored for 3 years from your last interaction with us.

Please note that we may be required by law (e.g. tax, accounting or legal obligations) to store certain data for a longer period of time. For more information, please contact us using the details in Section 10.

What are cookies?

Cookies are small text files that websites send to your computer, mobile device or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser.

We use and allow third party service providers to use cookies, web beacons and other similar technologies on our platforms, social media pages and communications. We do this to understand your use of our services, improve your user experience and enable personalized features and content; optimize our advertising and marketing and to enable third party advertising companies to assist us in serving ads specific to your interests across the Internet. View a full list of cookies and update your preferences in the Cookie Settings.

The cookies that we use can be categorised as follows:

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the website will not then work. These cookies do not store any personally identifiable information.

• Strictly necessary cookies

These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. Whenever technically possible, all information these cookies collect is aggregated and therefore anonymous.
[If you do not allow these cookies, we will not know when you have visited our site. Upon your consent, we use Google Analytics, run by Google Inc for this purpose. To opt out of being tracked by Google Analytics, you can visit the Cookie Settings or visit https://tools.google.com/dlpage/gaoptout.

• Analytical / Performance cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.

• Functional cookies

These cookies may be set through our website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly identifying personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

• Targeting/advertising cookies

Web server logs and web beacons

In conjunction with obtaining information through cookies, our web servers may log details such as your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone in which your device is located. The web server logs also may record information such as the address of the web page that linked you to our website and the IP address of the device you use to connect to the Internet. This information helps us to troubleshoot errors, improve performance and maintain the security of our Digital Platforms. To control which web servers collect this information, we may place tags on our web pages called “web beacons”. These are computer instructions that link web pages to particular web servers and their cookies. We may also use cookies and similar technologies (such as web beacons) to allow us to tell if an email we have sent to you has been opened and acted upon and whether our mailing tools are working correctly or, to measure performance and to provide content and ads that are more relevant to you.

Can I opt out of cookies and similar technologies?

You have the option to accept or reject our cookies at any time in the Cookie Settings.

By rejecting or disabling cookies, certain website content or functionality may not be available to you.

Because web beacons are the same as any other content request included in the recipe for a web page, you cannot opt out or refuse them. However, you may be able to disable web beacons in email messages by not downloading images contained in messages you receive (this feature varies depending on the email software used on your personal computer). However, doing this may not always disable a web beacon or other similar technologies in the email message due to specific email software capabilities. For more information about this, please refer to the information provided by your email software or service provider. Web beacons may also be rendered ineffective in some circumstances by opting out of cookies or amending your cookie settings in your browser.

Your rights

In accordance with applicable law, you may have the following rights:

These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement or contractual obligation to process your personal data. In some instances, this may mean that we are able to retain your personal data even if you withdraw your consent. In such a case, we will apply appropriate measures and safeguards to protect your personal data.

• Right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible form of the personal data we process about you and how we process it. You also have the right to obtain a confirmation from us on whether or not we process your personal data and if that is the case, access to such personal data and obtain a copy.
• Right to rectification: you have the right to rectify your personal data and to have it complete in case it is incomplete or inaccurate.
• Right to erasure: you have the right to ask us to delete your personal data. We will delete or anonymize your personal information, unless otherwise required by applicable data protection laws or if La Prairie has a legitimate interest to keep it.
• Right to restriction of processing: in some cases, you have the right to obtain restriction of the processing of your personal data.
• Right to data portability: you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit such personal data to another controller.
• Right to withdraw your consent: if you have given your consent to a data processing activity, you can withdraw this consent at any time as indicated under "Your preferences." Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

You have the right to object to the processing of your personal data when such processing is based on legitimate interests. Nevertheless, we may have legitimate reasons to continue processing your personal data.

If you wish to exercise any of these rights, please contact us by using the details in Section 10.

Your preferences

We strive to provide you with choices regarding the personal data that you provide to us. The following mechanisms give you control over your personal data:

Advertising, marketing and personalization (offline and online): If you wish to be notified about our products and services, events, loyalty and other client programmes as well as other promotional activities, you can indicate your communication preferences through the relevant checkbox(es) on our Digital Platforms and Points of Sale or by answering the question(s) presented by our beauty advisors or store representatives. Some of our activities and communications may be personalised to your specific interests and preferences (which will be done with your permission, if required by law).

If you wish to stop receiving our marketing communications (and/or you wish opt out of only some type of personalised marketing communications), simply let us know at any time by following the opt-out instructions in the relevant communication or using the details in Section 10. Please note that we send different types of personalised marketing communications (e.g. newsletters, beauty advisors’ emails, surveys, etc.) and you can decide to opt out of all of them or only some of them. Opting out of personalised marketing communications will not stop you from receiving service messages (i.e. non-marketing communications, such as e-mail updates on your order status or notifications about your account activities) from us.

Please note you may be asked about your preferred channel/s to receive our communications and you can change or update this at any time by contacting one of our beauty advisors or using the contact details in Section 10.

If you have a La Prairie account on our Digital Platforms, you can withdraw your consent and/or update your communication preferences under your account profile while logged in.

Cookies/Similar Technologies and Interest Based Advertising: You can set your cookie preferences at any time in the Cookie Settings.

If you are a California resident, you may take advantage of the following privacy rights:

If you are a Virginia resident, you may take advantage of certain privacy rights pursuant to Virginia Code 59.1-577. For example, you may request to access, correct, or delete your personal data. Because we "sell" personal data and engage in "targeted advertising" as these terms are defined in Virginia law, you may also exercise your right to opt-out of such sales or targeted advertising. You have the right to appeal a denial of your privacy rights.

How to submit a request

To take advantage of your right to know, delete, or correct under California or Virginia law, or to submit an appeal of a denial of your privacy rights, please use the Client Services page of our website to send us a note or contact us by phone at 1 800 821 5718, or by using the Data Controllers and Contact section below. We may request certain information to verify your identity before we can respond to your access and deletion requests. We will confirm receipt of your request within 10 business days and will respond to your request within 45 calendar days, after proper verification, unless we need additional time, in which case we will let you know.

To take advantage of your right to opt out of the sale or sharing of personal data, please click on the "Do Not Sell or Share My Personal Information" link which also is on our website footer or contact us using the Data Controllers and Contact section, below.

We will not discriminate against you because you exercised your rights under this section of the Privacy Policy.

Agent requests

You may authorize someone to make a privacy rights request on your behalf (an authorized agent). Authorized agents will need to demonstrate that you’ve authorized them to act on your behalf or must demonstrate they have power of attorney pursuant to applicable probate law. La Prairie retains the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity. An authorized agent is prohibited from using a consumer’s personal data, or any information collected from or about the consumer, for any purpose other than to fulfill the consumer’s requests, for verification, or for fraud prevention.

Text messages

You can text SIGNUP to 48442 to receive exclusive news about La Prairie, or by signing up through our website, you are subscribing to receive promotional text messages from La Prairie at the mobile number you provided. Consent to receive marketing text messages is not required as a condition of purchasing any goods or services. Standard message, data, voice, or other rates may apply from your mobile service or wireless device carrier for SMS messages you receive. Message frequency will vary.

You can opt out of texts at any time by replying STOP to any text message or text 48442. You may receive one final confirmation SMS message of your opt-out request. For help related texts, reply HELP to any text message or text 48442. You can also contact us using the details in Section 10.

Supported carriers in the US are: AT&T, Sprint, T-Mobile®, Verizon Wireless, Boost, Cricket, MetroPCS, U.S. Cellular, Virgin Mobile, ACS Wireless, Appalachian Wireless, Bluegrass Cellular, Carolina West Wireless, Cellcom, C-Spire Wireless (formerly Cellsouth), Cellular One of East Central Illinois, Cincinnati Bell Wireless, Cross (dba Sprocket), Duet IP, Element Mobile, EpicTouch, GCI Communications, Golden State, Hawkeye (Chat Mobility), Hawkeye (NW Missouri Cellular), Illinois Valley Cellular, Immix (Keystone Wireless / PC Management), Inland Cellular, iWireless, Mobi PCS (Coral Wireless LLC), Mosaic, MTPCS / Cellular One (Cellone Nation), Nex-Tech Wireless, nTelos, Panhandle Telecommunications, Peoples Wireless, Pioneer, Plateau, Revol Wireless, Rina - Custer, Rina - All West, Rina - Cambridge Telecom Coop, Rina - Eagle Valley Comm, Rina - Farmers Mutual Telephone Co, Rina - Nucla Nutria Telephone Co, Rina - Silver Star, Rina - South Central Comm, Rina - Syringa, Rina - UBET, Rina - Manti, South Canaan / CellularOne of NEPA, Thumb Cellular, Union Wireless, United, Viaero Wireless, West Central Wireless, Leaco, Nemont/Sagebrush. T-Mobile is not liable for delayed or undelivered messages.

• Right to Know: You have the right to know what personal data we have collected about you, including the categories of personal data, the categories of sources from which the personal data is collected, the business or commercial purpose for collecting, selling, or sharing personal data, the categories of third parties to whom we disclose personal data, and the specific pieces of personal data we have collected about you.
• Right to Delete: You have the right to delete personal data that we have collected from you, subject to certain exceptions. Note that there are some reasons we will not be able to fully address your request, such as if we need to complete a transaction for you, to detect and protect against fraudulent and illegal activity, to exercise our rights, for our internal purposes, or to comply with a legal obligation.
• Right to Correct: You have the right to correct inaccurate personal data that we may maintain about you, subject to appropriate verification.
• Right to Opt-Out of the Sale or Sharing of Personal Data: You have the right to opt-out of the "sale" or "sharing" of your personal data, as such terms are defined in California privacy laws, to third parties and to affiliated companies that do not share the same brand name. This means that, if you opt out, going forward, we will not sell or share your personal data with such third parties to use for their purposes, including cross-context behavioral advertising, unless you later direct us to do so.

Data Protection Disclosures

Categories of Personal Data Disclosed for Business Purposes

In the last 12 months, La Prairie has disclosed the following categories of personal data for a business purpose (such as with our service providers or processors, whose use of personal data we disclose is limited to providing certain service to us pursuant to a written contract):

• Identifiers, billing information and commercial information, disclosed to our affiliates, our third-party service providers, payment processors, email/SMS service providers, customer service and intelligence platforms, cloud data storage providers, and anti-fraud and anti-counterfeiting service providers.
• Website registration credentials, disclosed to our cloud data storage providers.
• Preferences, disclosed to our affiliates, our third-party service providers, email/SMS service providers, customer service and intelligence platforms, and cloud data storage providers.
• Personal life information, disclosed to our affiliates, our third-party service providers, customer service and intelligence platforms and cloud data storage providers.
• Communications with you, disclosed to our affiliates, our third-party service providers and our cloud data storage providers.
• Content you provide, disclosed to our affiliates, our third-party service providers and our cloud data storage providers.
• Internet or electronic activity information, disclosed to our affiliates, our third-party service providers, payment processors, email/SMS service providers, customer service and intelligence platforms, cloud data storage providers, and anti-fraud and anti-counterfeiting service providers.
• Demographic information, disclosed to our affiliates, our third-party service providers, payment processors, email/SMS service providers, customer service and intelligence platforms, cloud data storage providers, and anti-fraud and anti-counterfeiting service providers.
• Sensitive personal data disclosed to our affiliates, our third-party service providers, email/SMS service providers, customer service and intelligence platforms, and cloud data storage providers.
• Audio or visual Information disclosed to our security providers.
• Inferences drawn from the above categories, disclosed to our affiliates, our third-party service providers, payment processors, email/SMS service providers, customer service and intelligence platforms, cloud data storage providers, and anti-fraud and anti-counterfeiting service providers.

Additional detail on the business purposes for which we disclose personal data is provided above under "How we Disclose and Transfer Your Personal Data?"

Categories of Personal Data Sold or Shared

In the last 12 months, La Prairie has sold or shared the following categories of personal data with advertising networks, advertising platforms, and social media companies for the purposes described in this Privacy Policy, including for targeted advertising:

• Identifiers
• Commercial information
• Preferences
• Personal life information
• Internet or electronic activity information
• Social media information
• Demographic information
• Inferences drawn from the above categories

We do not knowingly sell or share personal data about persons under the age of 16.

If you have any questions about this Policy or privacy matters generally or to make a complaint about our compliance with applicable privacy laws, please contact us using the Contact us page of our website and our customer services team will be happy to assist you.

You can also use this Contact us if you wish to exercise your preferences and rights as detailed above.

We will acknowledge and investigate any complaint you make (including a complaint that we have breached your rights under applicable privacy laws). We hope that we can satisfy queries.

However, you have the right to lodge a complaint with the relevant data protection authority, in particular in the Member State of your habitual residence or place of the alleged infringement.

If indicated at the time you make a La Prairie purchase in our Points of Sale or you provide your details to one of our instore beauty advisors or representatives, the La Prairie group companies will also act as local data controllers. Please find here the list of companies and contact details: https://www.laprairiegroup.ch/contact-us.

PRIVACY POLICY - 18 DECEMBER 2024

1.General Information

1.1 Processing of Personal Data

The purpose of this privacy policy is to provide you with information concerning the processing of personal data when using our corporate and careers websites, and for related services if you are a service provider, business partner, or third-party vendor. This privacy policy applies to all websites or services that feature this privacy policy.

For more information about our data processing activities related to our application process, employees and contingent workers, please visit our dedicated Privacy Notice for Employees, Job Applicants and Contingent Workers, also available on our corporate careers website. 

For more information about our data processing activities related to our clients, clienteling activities and our e-commerce platforms, please visit our dedicated Privacy Policy, also available in all relevant languages depending on your region.

Personal Data refers to any information relating to an identified or identifiable natural person. This includes, but is not limited to, information such as name, address, email address, phone number, or any other data that can be used to directly or indirectly identify an individual. The definition and treatment of personal data are governed by applicable data protection laws and regulations in the relevant jurisdiction, which may include specific rules regarding the collection, processing, storage, and transfer of such data. 

1.2. Controller

Responsible for the processing of personal data is: 

La Prairie Group AG

Bellerivestrasse 36, 8008, Zürich Switzerland

Info[at]LaPrairieGroup.ch

+41 44 947 82 10

Contact details of the Data Protection Officer: 

Data.Privacy[at]LaPrairieGroup.ch, or under the postal address of the controller for the attention of the “Data Protection Officer”.

Specific data processing activities might occur under the responsibility of other controllers, including our local affiliates, in connection with local processing activities. It is indicated in the respective description of those activities below, where this is the case. For a list of contact details for all La Prairie affiliates, please visit our dedicated page here.

1.3. Rights of the Data Subject

As a data subject affected by the data processing activity, you have the following rights with regard to your personal data, subject to the applicable data protection laws and regulations in your relevant jurisdiction:

• Right of access;
• Right to rectification and to erasure;
• Right to restriction of processing;
• Right to data portability; and 
• Right to object. 

1.4 Recipients (general information)

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

When we work on your above-mentioned right, we may ask you for proof of your identity. For more information on how we process your data in this context, see Section 3.1.

In addition to the recipients that are listed within the recipients paragraph of each section below, we transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the La Prairie and Beiersdorf Group or to external service providers, contract processors in accordance with the purposes required. We also forward the data to the following recipients:

• Platform/hosting providers may have access to personal data from jurisdictions outside of your own. In such cases, appropriate safeguards are implemented, including legally binding agreements or contractual mechanisms that comply with applicable data protection laws and regulations. Where personal data is transferred to jurisdictions covered by specific adequacy decisions or similar rulings, those rulings will apply. For more information (such as a copy of the safeguards), you can contact us as outlined under Section 1.2.

• Analytical service providers may have access to personal data from jurisdictions outside of your own. In these instances, appropriate safeguards, such as legally binding agreements or other contractual mechanisms, are in place to ensure compliance with the relevant data protection laws and regulations. If the transfer is made to jurisdictions with recognized adequacy decisions or similar provisions, those rulings apply. For further details, including information about these guarantees, please contact us as mentioned under Section 1.2.

• IT support service providers may have access to personal data from jurisdictions outside of your own. To protect this data, legally binding agreements or similar mechanisms are used to ensure the protection of personal data in line with applicable data protection laws. In cases where an adequacy decision or equivalent applies, that decision will govern the transfer. More information, including copies of guarantees, is available upon request, as outlined in Section 1.2.

• Authorities: In the event of a legal obligation, we reserve the right to disclose your information if required to do so by competent authorities or law enforcement bodies in accordance with applicable data protection laws and regulations.

Further information can be found within the recipients paragraph of each section.

2. Collection and Processing of Personal Data when visiting our Website

When visiting and using our website we already collect personal data. You can find within this section more information about website specific processes and tools especially from external partners. Further information about processes which can also occur in an offline context can be found in Section 3.

2.1.Hosting

Purpose/Information:
When visiting and using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server, which are technically necessary for us to display our website to you and to guarantee stability and security.

Used Cookies/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
-Platform/hosting providers

-IT support service providers

Further recipients can be found in the general recipients Section 1.4.

Deletion:
The deletion of the log files takes place after 7 days.

2.2. Login functionalities

Our careers website might provide different login functionalities as described below.

2.2.1 Career Opportunities Login Profile

Purpose/Information: 
Our careers website allows you to create a centralised login profile and includes a separate consent during the registration process: When registering, La Prairie Group AG provides you with the opportunity to create an account with a password (login profile). This login profile will be created within the centralised login profile database and shall verify that you are the valid owner of the account and/or email address. This login database is in general only connected to the service you are registering to and handles only the verification part of your login profile. You will be asked to read and agree to our Privacy Notice for job applicants, a copy of which is also available under Section 3.4. The login profile will therefore also be accessible to the respective local La Prairie affiliate company from which you are demanding the service.   

Used Cookies: Type A. More information can be found in the “Cookies/Tools” section.

Controller: 
See Section 1.2 above.

Recipients: 
Platform/Hosting providers

Further recipients can be found in the general recipients Section 1.4.

Deletion / Withdrawal:  
Your login profile will be automatically deleted as soon as you have deleted your account on our careers website, unless this conflicts with legal storage obligations or statutes of limitations. An automatic deletion of candidate accounts in general take place after 12 months of inactivity.  

2.3. Cookies/Tools

This website uses cookies or other technologies/tools like pixels, local storage, tags, IDs or external services (hereinafter referred to as “Cookies/Tools”) and are used on when visiting and using our website. Cookies are small text files that are stored by your browser on your device to save certain information or image files, such as pixels. The next time you visit our website on the same device, the information saved in the cookies will subsequently be accessed on your device and transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”). 

Through the information saved and returned, the respective website can recognise that you have already accessed and visited it with the browser you use on that device. We use this information to be able to design and display the website in an optimum way in line with your preferences. In that respect, only the cookie itself is identified on your device. Beyond this extent, your personal data will only be saved upon your express consent or if it is strictly necessary to be able to use the service offered to and accessed by you accordingly.

This website uses the following types of cookies/tools, the scope and functionality of which are explained below:

• Type A: Technical/Audience Measurement – to ensure that the demanded service can be provided including basic analysis. 
• Type B: Functional and Performance – Additional tools to measure the performance/attractiveness of our website and to provide further additional (personalised) functionalities.
• Type C: Marketing/Advertising – Cross websites tools for marketing profiling based on user behaviour.

You can find more information on in the description of the tools implemented on our websites in this privacy policy.

For additional cookies relevant to this website that are not listed below, please refer to our Privacy Preference Center which is accessible by clicking “Cookies Settings” at the bottom of the page. This will allow you to review and manage your cookie preferences, including detailed information about the types of cookies used, their purposes, and the ability to opt in or out of specific categories of cookies, where applicable.

Please note that the tools listed in the following subsection might not be constantly in use.

2.3.1 OneTrust Cookie Consent – Central cookie management platform

Purpose/Information:
This website is using the consent management tool “OneTrust Cookie Consent” (www.onetrust.com) to obtain consent for data processing and use of cookies or comparable functions. "OneTrust Cookie Consent“ stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. 

By processing the data, OneTrust Cookie Consent helps us to fulfil our legal obligations (e.g. obligation to provide evidence). Our interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. "OneTrust Cookie Consent" stores your data as long as your user settings are active.

The provision of your personal data is required for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service.

Cookies/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider is OT Technology Spain, Passeo de la Castellana 77, 28046 Madrid, Spain.

Further recipients can be found in the general recipients Section 1.4.

Deletion:
The data will be stored for up to one year The choice you have made (consent/setting) will be stored for one year and can be viewed within the Cookie Settings. The Cookie Settings are located on the bottom of the main page. You can always delete your choice by deleting the cookies within your browser.

2.3.2 Google Analytics

Purpose/Information:
This website uses Google Analytics, a web analysis service of Google Ireland Ltd. (“Google”). 

Google Analytics uses a specific form of cookie, which is stored on your computer and enables an analysis of your use of our website. The cookies set by Google Analytics for measurement are first party cookies, which means that data subjects’ cookie values will be different for each customer (i.e. there is not a single Google Analytics cookie ID that is used on all sites using Google Analytics). The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. 

Google uses this information on our behalf to analyse your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. 

We use Google Analytics to analyse and regularly improve the usage of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. In addition, we gain information about the functionality of our site (for example to detect navigation problems).

In the configuration of Google Analytics, we ensured that Google receives this data as a processor and is therefore not allowed to use this data for its own purposes. The "Google Analytics Advertising Features" configuration is independent from this and is described in the appropriate section below, provided it is also used on this website. 

Cookies/Tools: Type B. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider: Google Ireland Ltd., Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion/Withdrawal:
You can deactivate this tool via the Cookie Settings. The Cookie Settings are located on the bottom of the main page.

Cookie lifetime: up to 24 months (this applies only to cookies which have been set by this website)

2.3.3 Google Analytics Advertising Features

This website also uses the extended functions of Google Analytics (Google Analytics Advertising Features) in addition to the standard functions. The Google Analytics Advertising Features implemented on this website include:

• Google Display Network Impression Reporting
• Google Analytics Demographics and Interest Reporting
• Remarketing Audiences based on specific behaviour, demographic, and interest data, sharing those lists with Google Ads
• Integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers
• Google Signals in order to receive more insights about you when you are signed in to your Google account in the browser with which you are accessing this website. This feature is only active if you have additionally consented within your Google settings to the data sharing/Ads Personalisation.

We therefore use first-party cookies (e.g. Google Analytics cookies) and Google advertising cookies and identifiers together in order to optimise our website.

Cookie/Tools: Type C. More information can be found in the “Cookies/Tools” section.

Information about Google Consent Mode:

Additionally, this website uses Google Consent Mode. Consent Mode sends statistical data via cookie-less pings about whether a user has clicked on an ad or link and has landed on our website (conversion). The statistical data is then used with a mathematical modelling to enhance the internal reporting. A ping contains by default technical information like the IP-address, platform type or screen resolution. As these data or the combination of it might theoretically be considered as personal data by Google Ireland Ltd, additional measures have been implemented to ensure that the ping data is not personal data: Certain information of the ping are being set to a default value by our server before sending it to Google analytics.

Recipients/Source:
Main service provider and source: Google Ireland Ltd., Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion/Withdrawal:
You can deactivate this tool via the Cookie Settings. The Cookie Settings are located on the bottom of the main page. 

Cookie lifetime: event data is stored for up to 50 months; your personal data as a user is stored for up to 14 months (this applies only for cookies which have been set by this website).

2.3.4 Google Tag Manager

Purpose/Information:
This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data are stored. The Google Tag Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.

Cookie/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider: Google Ireland Ltd, Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion:
Aggregated event data is stored for up to 50 months; your personal data as a user is not stored in Google Tag Manager and therefore no retention period applies.

3. Further services offered (on- and offline)

In addition to the online use of our website, we offer various other services, for which we process your personal data also in an offline context. 

Contrary to Section 1.2, in some cases a legal entity within the La Prairie corporate group is the Controller for the services offered below; this will have already been identified within the communication itself. If reference is therefore made to sections of this privacy policy, and a Controller has already been named, e.g. in the footer/signature of an email or campaign card, this legal entity is the Controller in accordance with applicable data protection laws and regulations.  

3.1. Contacting/Communication/Collaboration

Purpose/Information:  
When communicating and/or collaborating with us, e.g. by email or via contact form on our website, or data exchange platform, be it e.g. as a business partner or customer, the data you provide (including but not limited to your email address, your name and your telephone number, or personal data submitted during the conversation) will be stored and processed by us in order to e.g. answer your questions, requests or for the purpose of business related correspondence.

With regard to the cooperation with our suppliers, we have implemented an internal evaluation process of due diligence which, in our legitimate interest, is intended to improve the business relationship. As a rule, we only process information about the company, but conclusions can be drawn about you as the contact person of that company, if the communication with suppliers is examined with regard to response times, reliability and transparency.

We may ask you when you contact us by telephone as a customer whether the telephone call may be recorded for quality assurance and training measures. If you agree to the recording, we will process all information that you share with us during the call (communication content, possibly also sensitive (health) data, as well as your phone number and other personal data).

When processing data arising in the course of communication, we have a legitimate interest in processing the data in accordance with legal requirements, for internal verification or in accordance with the respective communication request.

In certain cases, the provision of your personal data as a business partner or customer is required for the performance of the contract or a situation similar to a contract. Additionally, your personal data may be required for related purposes, such as compliance with legal obligations, responding to or conducting investigations, or handling legal or regulatory proceedings. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service. 

Recipients and sources:
If you are a business partner, we will regularly check your creditworthiness in certain cases (e.g. when concluding contracts). Our legitimate interest is the minimization of our financial risk. For this purpose, we cooperate with credit agencies from which we receive the necessary data. For this purpose we transmit your name and your contact data to the credit agencies.

If you are a business customer or partner, it may be necessary to transfer your personal data to prospective buyers as part of a company transaction. In the course of due diligence, usually anonymised data is processed. However, it may be necessary in specific individual cases to process personal data. Our legitimate interest lies in the execution of the company transaction.

We may transfer your collected data to our relevant internal departments for processing and to other affiliated companies within the La Prairie and Beiersdorf Group, to external service providers, contract processors, or, where necessary, to public authorities in compliance with legal obligations, regulatory requirements, or in response to lawful requests, all in accordance with the purposes required.

In the event of a legal obligation, we reserve the right to disclose information about you if we are required to surrender it to competent authorities or law enforcement bodies.

Additionally, we also forward the data to the following recipients:

• Platform/hosting providers;
• Analytical service providers; and/or,
• IT support service providers.

3.2. Job posting updates

For all recipients listed above, transfers of personal data to recipients in countries outside of the applicable jurisdiction may occur. Where required by law, appropriate safeguards, such as standard contractual clauses or other legally recognized mechanisms, are implemented to ensure adequate protection of personal data. For countries or entities subject to an adequacy decision, such a decision will apply. For more information or to request a copy of the relevant safeguards, please contact us at Data.Privacy[at]LaPrairieGroup.ch.

Further recipients can be found in the general recipients Section 1.4.

Deletion /Objection:
Your data will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless statutory retention obligations exist or periods of limitation must be observed.

Call recordings are stored for a maximum of 90 days. 

You can object to these processes according to the requirements under Section 4.

Purpose/Information: 
Job posting updates provide candidates with notifications about new job opportunities and relevant updates tailored to their preferences. By subscribing to these updates, candidates receive notifications based on their selected interests and preferences, such as keywords for specific roles, locations, or departments.

The updates are customized based on the preferences candidates set in their profiles. Candidates can adjust the frequency of these notifications through their candidate profiles under “Job Alerts” to receive updates every set amount of days on a recurring basis.

Recipients: 
-Platform/hosting provider

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion / Withdrawal: 
Candidates can unsubscribe from job posting updates at any time by logging into their candidate profile and updating their notification preferences. Job alerts and subscriptions will also be automatically deleted after 12 months of inactivity, at which point the entire candidate profile will be deleted.

3.3. Postal mailings

Purpose/Information:
As a selected customer or business partner, you may receive shipments from us by post (letter), including documents, products, or other materials necessary for the performance of a contract or based on our legitimate interests in facilitating business operations. These shipments are provided in the context of our professional relationship.

Recipients:
-Platform/hosting provider

-Communication service provider

-Shipping service provider 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion / Objection:
Your data will be deleted as soon as the purpose for the shipment has been fulfilled unless legal storage obligations or statutes of limitations require otherwise. You can object to further postal mailings as described in the Section 4 below. We further delete your personal data after the contractual relationship between us has been terminated.

3.4. Data Privacy Statement for applicants (recruitment)

For more information about the application process please go to our dedicated Privacy Notice for Employees, Job Applicants and Contingent Workers, also available on our corporate careers website. 

4. Objection or Withdrawal of your consent to the Processing of Personal Data

If you have given your consent to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us. Withdrawing consent does not affect the lawfulness of any data processing that occurred prior to the withdrawal.

If we base the processing of your personal data on our legitimate interests, if relevant and as permitted by applicable law, you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the description of the functions/services. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing. 

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your objection under the above-mentioned contact details for the controller.