La présente Politique vous indique également la façon dont vous pouvez accéder à vos données personnelles, les mettre à jour et faire certains choix concernant la façon dont celles-ci sont utilisées, notamment le droit de vous opposer à certaines parties du traitement (y compris au marketing personnalisé) que nous effectuons ou, lorsque nous nous basons sur votre consentement, le droit de le retirer. Vous trouverez plus d’informations à propos de vos préférences et de vos droits au Paragraphe 8 ci-dessous.

La présente Politique couvre nos activités de recueil de données, y compris les données personnelles que nous recueillons via différentes sources en ligne (par exemple via les sites Internet, applications et réseaux sociaux) et hors ligne (comme sur les points de vente, via le service clientèle et lors d’événements). Elle explique également comment nous recueillons certaines informations au travers de l’utilisation de cookies et de technologies similaires sur nos sites Internet et nos applications. Certains paragraphes peuvent ne pas vous être applicables en fonction de la façon dont vous nous communiquez vos données personnelles ou dont vous interagissez avec La Prairie. Veuillez noter que nous associons les données personnelles que nous recueillons de différentes manières (par ex. un site Internet La Prairie) avec des données personnelles que nous recueillons d’une autre manière (par ex. un point de vente La Prairie ou un événement dans un magasin La Prairie). Cela peut comprendre l’association de données personnelles initialement recueillies par différentes entités La Prairie dans différents pays afin de vous offrir un service personnalisé adapté à vos préférences et centres d’intérêt. Vous trouverez de plus amples informations à propos de ces activités ci-dessous.

Si nous changeons la façon dont nous traitons vos données personnelles, nous mettrons la présente Politique à jour et vous en notifierons, ou nous vous demanderons votre consentement le cas échéant et au moment approprié, généralement en publiant une Politique mise à jour sur nos sites Internet. Si nous apportons des changements affectant significativement nos pratiques en matière de confidentialité, nous pourrons également vous en notifier par d’autres moyens, notamment en vous envoyant un e-mail avant que lesdits changements entrent en vigueur. Nous nous réservons le droit d’apporter des changements à nos pratiques et à la présente Politique à tout moment. Nous vous invitons à consulter de temps à autre nos sites Internet pour prendre connaissance de toutes mises à jour ou modifications de la présente Politique.

Nous pouvons également vous fournir des informations supplémentaires lorsque nous recueillons des données personnelles et lorsque le moment nous semble opportun pour vous fournir ces informations.

What categories of personal data do we collect?

• Identifiers: This includes your name, home and mobile phone number, IP address, home address, country of residence, email address, social media account, signature, or other similar identifiers. This data will be sold or shared in accordance with our Privacy Policy.
• Personal Data Described in Subdivision (e) of California Civil Code Section 1798.80:
• - Billing Information. This includes your delivery address and payment details. This data is not sold or shared
• Website registration credentials. This includes your username and password. This data is not sold or shared.
• Preferences. This includes communication channels, preferred language, product preferences, and skincare wishes. This data will be sold or shared in accordance with this Privacy Policy.
• Personal life information and inferences. This includes life habits, interests, lifestyle, hobbies, and reactions to marketing campaigns. This data will be sold or shared in accordance with this Privacy Policy.
• Correspondence and communication between us and you. This data is not sold or shared.
• Information or content you provide to us. This includes photographs, videos, reviews, questions, survey response and comments. This data is not sold or shared.
• Social Media Information. If you accept targeting cookies from social networks on the Digital Platforms, or if you use the share button to share our content through those platforms, those third parties may collect and process your data in order to provide you with personalised advertising. This data will be sold or shared in accordance with this Privacy Policy.
• Information necessary to fight counterfeiting and infringements of La Prairie’s intellectual property rights. This includes identification and contact details and any other information and documents related to counterfeit and infringing activities. This data is not sold or shared.
• Information necessary to manage La Prairie’s selective distribution system in order to protect La Prairie brand and identify unauthorised resellers. This includes profiling activities on your purchase behaviours. This data is not sold or shared.
• Characteristics of Protected Classifications Under California or Federal Law: This includes your age, gender, and national origin. This data will be sold or shared in accordance with our Privacy Policy.
• Commercial Information: This includes your purchase history and interactions with us (such as order details, products bought and quantity, consultations, treatments, visits to our Digital Platforms or Points of Sale). This data will be sold or shared in accordance with our Privacy Policy.
• Internet or other Network Activity Information: This includes online activity such as browsing history, search history; information regarding your interaction with our websites or third-parties websites such as social media, applications or advertisements and other technical personal data or personal data shared by the service provider you are using; and technical information about your browser, device type, and operating system. This data will be sold or shared in accordance with our Privacy Policy.
• Geolocation Data: This includes location information when you visit our Digital Platforms in order to direct you to the appropriate domain (internet location) or when you request location services provided by us, for example in order to find the nearest store to you or to provide more precise location based content. This data will be sold or shared in accordance with our Privacy Policy.
• Audio, electronic, visual, thermal, olfactory, or similar information: This includes CCTV security camera data (such as your image) when you visit one of our boutiques that has a CCTV camera used to view and record individuals 24 hours per day, 7 days per week for security reasons. This data is not sold or shared.
• Inferences: We also may draw inferences from any of your information and interactions with us to enrich and supplement such profile, reflecting your preferences, characteristics, trends, predispositions, aptitudes and attitudes. This data will be sold or shared in accordance with our Privacy Policy.
• Sensitive Personal data: This includes Skin type and health information in case you participate in our beauty consultations or treatments or interact with our customer service. This data is not sold or shared, and it is used exclusively to provide you with the services you request.

What are the purposes for which we collect and use your personal data

Business and Commercial Purposes:

Additional Purposes:

• To provide you with the products and services you have purchased or requested in our Digital Platforms or Points of Sale. This includes for example the processing of your payment, credit card checks and fraud prevention activities, delivery and return management.
• To send you service-related communications. This includes communications related to your purchases, your beauty consultations, appointments or events you have registered to.
• To set up and manage your La Prairie profile and provide you with personalised services. All personal data we process about you will be linked and combined to create a profile about you and provide you with personalised services adapted to your interests and preferences. More details can be found in Section 2 under "Profiling".
• To communicate with you for marketing-related purposes if agreed by you. This includes communications about our products, services, promotions and events by telephone, post, SMS, e-mail, chat or via our applications or to send you samples, gifts and rewards in accordance with your communications preferences and to the extent permitted by applicable laws. These communications can be conducted by our beauty advisors or by any of our group companies (please see Section 8 below about how you can control your preferences and opt-out from these communications)
• To enrich your La Prairie profile. This includes supplementing your La Prairie profile with information related to your activities on social media and your browsing activity across different websites and devices through the use of cookies and similar technologies by us or third parties (such as social media - WeChat, WhatsApp, Baidu, Kakao Talk, Twitter, Facebook, Instagram or other online platforms). The privacy and cookie policies of these third parties will apply to their use of your personal data.
• To allow you to participate in the interactive features of the website and to place cookies and related technologies in accordance with Section 6 below.
• To ask your opinion or to take part in market research or client studies.
• To provide you with personalized advertising both on our Digital Platforms and other selected partner websites.
• To create lookalike campaigns that enable us to reach people who are likely to be interested in our products because they are similar to you. We may use cookies or other technologies that may rely on third parties (such as Meta, Instagram, WeChat and other online platforms). You may have provided your consent to those third parties and their respective privacy policies would apply.
• To monitor your account to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime in accordance with applicable law.
• To investigate any complaints or answer any inquiry received from you or from others about our Digital Platforms, Points of Sale or our products and services
• To monitor the use of our Digital Platforms and Points of Sale and use your information to help us monitor, improve and protect our products, brand, content, services and Digital Platforms and Points of Sale, both online and offline and your experiences with us including via research and demographic studies; analytics and data cleansing and measuring the effectiveness of our advertising campaigns.
• To use personal data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such personal data in connection with legal process or litigation) or to enforce or apply our Terms of Use or any other agreements, our selective distribution system or to protect the rights, property, or safety of La Prairie, our customers, or others.
• For our internal corporate reporting purposes.
• In response to requests by government or law enforcement authorities conducting an investigation.
• As otherwise permitted by law or as we may notify you. We may also use information you provide to us for other purposes as disclosed at the time you provide your information or otherwise with your consent.

Notice of third-party plugins that control collection of personal data:We use third party services on our Digital Platforms where the third party directly controls the collection of personal data on our behalf. These services are targeted marketing and advertising services. You have the right to opt-out of the "sale" or "sharing" of your personal data as detailed in our Privacy Policy.Data Retention:All of the categories of personal data described above will be retained for a certain period of time based on the following criteria: (i) as long as necessary to fulfil the purposes outlined in this Policy; (ii) any applicable legal requirements; or (iii) any request for deletion from you in applicable situations. You can find more information inSection 8.

Resources

• Notice of the Right to Opt-Out of the Sale or Sharing of Personal data: Section 9

We obtain personal data from or about you from various online and offline sources including when you: (i) interact with our websites listed on http://www.laprairie.com, mobile sites, applications or social media pages (together "the Digital Platforms"); (ii) create a La Prairie account on our Digital Platforms, or in our boutiques, stores, counters or spas ("Points of Sale"); (iii) interact with us on our chat services, forums or blogs; (iv) visit one of our Points of Sale; (v) participate in our events and demonstrations, loyalty or other client programs, competitions, promotions or surveys; (vi) subscribe to our marketing communications; (vii) make physical or distance purchases in our Digital Platforms or Points of Sale; (viii) participate in beauty consultations or treatments; or (ix) interact with our beauty advisors and customer service.

Our products are sold through various authorised business partners. Unless otherwise indicated at the time that you provide your personal data, this Policy does not apply to any personal data that our authorised business partners independently collect from you.

We collect and process the following personal data:

The list below is provided to give you an overview of the type of personal data we may collect and process. However, the collection and processing of these data are not systematic: only personal data necessary to fulfil each purpose will be collected and used.

Personal data provided by you (for example, by creating a La Prairie account, signing up to our loyalty or other client programmes, or by providing data about yourself to us in our Digital Platforms or Points of Sale):

• Contact information (such as your name, phone number (home and mobile), home address and email address);
• Identification information, (such as your age, date of birth, gender, nationality, country of residence, image, signature);
• Purchase history and interactions with us (such as order details, products bought and quantity, consultations, treatments, visits to our Digital Platforms or Points of Sale);
• Social media account;
• Billing information (including delivery address and payment details). We reserve the right to request additional evidence or proof of billing information where, in our reasonable opinion, this is necessary. Please note we do not keep your payment card details on file. We use a third-party data controller to process payment details;
• Website registration credentials (including username and password). By creating a La Prairie account, you can store and edit your delivery addresses and billing information and review your previous purchases and order history;
• Preferences (such as communication channels, preferred language, product preferences, skincare wishes);
• Personal life information and inferences (such as life habits, interests, lifestyle, hobbies, reactions to marketing campaigns);
• Skin type and health information in case you participate in our beauty consultations or treatments (such as allergies, medication, previous reactions) or you provide this information to our customer service;
• Information about your physical characteristics, skincare concerns and any other information obtained through the different interactions with us (such as a beauty consultation or treatments, a survey or when you visit our social media pages, blogs or forums or interact with customer service or our chat service);
• Correspondence and communication between us and you; and,
• Information or content you provide to us (such as photographs, videos, reviews, questions, survey response and comments).

We do not knowingly collect and process information about minors, nor do we knowingly sell or share personal data about individuals who are under the age of 16.

Information automatically collected and processed from us or from your use of our Digital Platforms, your visits to our Points of Sale or interaction with our online adverts.

We automatically collect and process the following information:

• technical information, including your device’s IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, unique device identifiers and advertising identifiers;
• information about your visit to our Digital Platforms, including the URL clickstream to, through and from our Digital Platforms (including date and time); products you viewed or searched for, the content (and any ads) that you view or interact with, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
• online activity, such as your internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with our websites or third-parties websites such as social media, applications or advertisements and other technical information or personal information shared by the service provider you are using;
• social media data – the use of our Digital Platforms does not generally involve processing data in relation to third party media platforms and/or social networks, such as Facebook or Instagram. However, if you accept the targeting cookies or if you use the share button to share our content through those platforms, those third parties may collect and process your data in order to provide you with personalised advertising. To find out more about how those third parties process your data and your data protection rights, please check their respective privacy policies;
• CCTV security camera data (such as your image) when you visit one of our boutiques that has a CCTV camera used to view and record individuals 24 hours per day, 7 days per week for security reasons. When a CCTV camera is in use at our boutiques, we will make sure that signs are displayed at the entrance of the surveillance zone to inform employees, clients and contractors. Other activities might be conducted at our boutiques, such as measurement and analysis of client’s movements and demographics in an aggregated and anonymous way. If they involve the processing of your personal data, additional and specific notice will be available at our boutiques and your consent will be requested if required by applicable laws;
• Information necessary to fight counterfeiting and infringements of La Prairie’s intellectual property rights, such as identification and contact details and any other information and documents related to counterfeit and infringing activities. This information may be collected directly by La Prairie or one of its vendors on its behalf and provided to La Prairie by external parties;
• Information necessary to manage La Prairie’s selective distribution system in order to protect La Prairie brand and identify unauthorised resellers. This will include profiling activities on client’s purchase behaviours (such as products bought, quantities, frequency and other transaction details) based on objective criteria but it does not imply automated decision making.

Some of this information is collected using cookies and related technologies. To learn more, please see Section 6 on "Cookies and related technologies".

Information collected and processed from third party sources

• From time to time (where permitted by applicable law), we collect information such as your preferences, interests and other demographic data from trusted third party sources (e.g. business and retail partners, payment and delivery services, social media networks, advertising networks, analytics providers, market research organisations, our affiliates, event partners, public authorities and search information providers) for example, when you have given consent to such third party to share your information with us. We may also instruct such third-party partners to provide their own information about you to external platforms. This information will be used for the purposes outlined in this Policy, and in particular, to enrich your La Prairie profile. The privacy and cookie policies of those third parties will apply to their processing of your personal data.
• Location information when you visit our Digital Platforms in order to direct you to the appropriate domain (internet location) or when you request location services provided by us, for example in order to find the nearest store to you or to provide more precise location based content.
• When you pay for your products, we may get information from our payment processing service provider who will carry out credit and antifraud checks on you and the payment method you provide in order to verify your identity, to validate your credit or debit card, to obtain an initial credit or debit card authorization and/or to authorize individual purchases.

Profiling

In order to ensure data accuracy and to offer you a better and personalised client experience no matter where and how you interact with us, we link or combine the information that we collect from the different sources and channels outlined above to provide personalised services, content, targeted communications and advertising and for analytics purposes (e.g. we combine data about your purchases in our Digital Platforms with information gathered at our Points of Sales such as details from a beauty consultation so that we can provide you with personalised service, offers and skincare recommendations). This includes combining personal data also collected by different La Prairie companies. All the information that La Prairie processes about you (including information provided by you or collected by us or by third parties) will be linked to your La Prairie profile. We also may draw inferences from any of your information and interactions with us to enrich and supplement such profile, reflecting your preferences, characteristics, trends, predispositions, aptitudes and attitudes. We will use your identification data such as email address or phone number to link the information to your profile. The above may also apply when checking out as a guest on our Digital Platforms and if you are a prospective client.

You do not have to provide personal data to us to purchase our products in the Points of Sale or access our Digital Platforms but certain functionalities and services (such as being able to buy our products via the website) will not otherwise be available to you. You may however choose whether or not to receive personalised marketing communications from us and we will only send you such communications where we have the appropriate consent to do so. For more information on your rights and preferences regarding how we use your personal data, please Section 8 below.

You must not provide to us information about anyone else unless you have their permission to do so.

We process your personal data for the reasons set out below:

Purpose
To provide you with the products and services you have purchased or requested in our Digital Platforms or Points of Sale.This includes for example the processing of your payment, credit card checks and fraud prevention activities, delivery and return management.

Legal basis

• To fulfil a contract or take steps linked to a contract

Purpose
To send you service-related communications.This includes communications related to your purchases, your beauty consultations, appointments or events you have registered to.

Legal basis

• To fulfil a contract or take steps linked to a contract

Purpose
To set up and manage your La Prairie profile and provide you with personalised services.All personal data we process about you will be linked and combined to create a profile about you and provide you with personalised services adapted to your interests and preferences. More details can be found inSection 2under "Profiling".

Legal basis

• To fulfil a contract or take steps linked to a contract
• Our legitimate interest in strengthening client loyalty by providing personalised services based on client’s interests and preferences
• Your consent (if required by local applicable laws)

Purpose
To communicate with you for marketing-related purposes if agreed by you.This includes communications about our products and services (including requests for you to leave a review for a product or service you have purchased), promotions and events by telephone, post, SMS, e-mail, social media, chat or via our applications or to send you samples, gifts and rewards in accordance with your communications preferences and to the extent permitted by applicable laws. These communications can be conducted by our beauty advisors or by any of our group companies (please seeSection 8below about how you can control your preferences and opt-out from these communications);

Legal basis

• Your consent

Purpose
To manage and display client reviews on our Digital Platforms. This includes processing the content of your reviews and ensuring compliance with our website terms and review guidelines. We use the data you provide in order to publish and maintain your review and rating on our website in accordance with ourReview Guidelines. Your review will be published under your nickname/pseudonym.

Legal basis

• Our legitimate interests to help us better understand our clients’ needs and expectations and, as a result, to improve and promote our services, products, and brand.

Purpose
To communicate with you regarding reviews you have submitted. This includes notifications if your review is rejected or requires modification, or if there are updates related to your review in order to ensure compliance with ourReview Guidelines.

Legal basis

• Our legitimate interests in enforcing our Review Guidelines and ensuring compliance with our content standards, and to protect the integrity of our platform, prevent misuse, and address any disputes or concerns related to submitted reviews.

Purpose
To enrich your La Prairie profile.This includes supplementing your La Prairie profile with information related to your activities on social media and your browsing activity across different websites and devices through the use of cookies and similar technologies by us or third parties (such as social media - WeChat, WhatsApp, Baidu, Kakao Talk, Twitter, Facebook, Instagram or other online platforms). The privacy and cookie policies of these third parties will apply to their use of your personal data.

Legal basis

• Your consent

Purpose
To allow you to participate in the interactive features of the website and to place cookies and related technologiesin accordance withSection 6below.

Legal basis

• Our legitimate interests to ensure the good performance of our website and user experience
• Your consent

Purpose
To ask your opinion or to take part in market research or client studies.

Legal basis

• Your consent

Purpose
To provide you with personalized advertisingboth on our Digital Platforms and other selected partner websites.

Legal basis

• Your consent

Purpose
To create lookalike campaignsthat enable us to reach people who are likely to be interested in our products because they are similar to you. We may use cookies or other technologies that may rely on third parties (such as Facebook, Instagram, WeChat and other online platforms). You may have provided your consent to those third parties and their respective privacy policies would apply.

Legal basis

• Your consent

Purpose
To monitor your accountto prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime in accordance with applicable law.

Legal basis

• Our legitimate interests to protect our business and our systems
• Comply with a legal obligation

Purpose
To investigate any complaints or answer any inquiryreceived from you or from others about our Digital Platforms, Points of Sale or our products and services.

Legal basis

• Our legitimate interests to provide customer service and protect and improve our business
• Comply with a legal obligation

Purpose
To monitor the use of our Digital Platforms and Points of Saleand use your information to help us monitor, improve and protect our products, brand, content, services and Digital Platforms and Points of Sale, both online and offline and your experiences with us including via research and demographic studies; analytics and data cleansing and measuring the effectiveness of our advertising campaigns.

Legal basis

• Our legitimate interests to analyse, understand and improve our business activities

Purpose
To use personal data in connection with legal claims, compliance, regulatory and investigative purposesas necessary (including disclosure of such personal data in connection with legal process or litigation) or to enforce or apply ourTerms of Useor any other agreements, our selective distribution system or to protect the rights, property, or safety of La Prairie, our customers, or others.

Legal basis

• Our legitimate interests to protect our company and the La Prairie brand and defend ourselves from legal claims
• Comply with a legal obligation

Purpose
For our internal corporate reporting purposes.

Legal basis

• Our legitimate interests

Purpose
In response to requests by government or law enforcement authoritiesconducting an investigation.

Legal basis

• Comply with a legal obligation

In addition to the La Prairie companies mentioned in the Data Controllers & Contact section below, we may share your personal data: (where permitted in accordance with applicable privacy laws) with the following third parties for the purposes outlined above:

Please note that the third parties listed above may be located in a country outside of your country of residence, including outside the European Economic Area, United Kingdom or Switzerland. When these third parties process your data on our behalf, we implement appropriate contractual arrangements with them that include strong data protection obligations. More details about international data transfers can be found below under "Data Transfers."

• companies in our group. A full list of our group companies can be found here;
• banks and our payment services provider for the purpose of transaction processing;
• third parties, where we have your permission to do so (e.g. social networks providers, concierge services, our authorised retail partners, or e-commerce platforms that sell our products). Your personal data, including product reviews you submit, may be transferred to these third parties through a process known as review syndication, allowing reviews to be displayed on multiple e-commerce platforms. Your personal data will become subject to the privacy policies of those third parties when your personal data is shared with them;
• prospective or eventual buyers of our business (if we or substantially all of our assets are acquired by or merged with a third party including through bankruptcy);
• any law enforcement agency, court, regulatory, government authority or other third party where in our reasonable opinion this is necessary to comply with a legal or regulatory obligations or otherwise to enforce or apply our Terms of Use or any other agreements and our selective distribution system; or to protect the rights, brand, property, or safety of La Prairie, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; or
• our third-party service providers (as well as group companies and authorised retail partners) who perform services on our behalf based on our instructions. We do not authorize these parties to use or disclose the information except as necessary to perform services on our behalf or to comply with legal requirements. Examples of these parties include employees of our authorised retailers partners that serve you in the stores, IT support service providers, companies that fulfil orders and manage refunds, and provide data hosting and support, content personalization, advertising and marketing services (including digital and personalized advertising) and data cleansing, management, segmentation and analysis.

We also share information with third parties including social media and search engine partners:

We aggregate your personal data with the information of other customers, creating a dataset of information about the usage of our platforms, purchase of our products, and other general, grouped information about our customers. Although this dataset is aggregated and anonymised, meaning it cannot directly identify you as an individual, it provides a valuable insight into the use of our Digital Platforms and Points of Sale and we will share it with select third parties. These parties include our group companies.

We also transfer information about you to ad technology providers and our social media and search engine partners (including Meta, TikTok, Google and Twitter) so that they may recognize your devices and deliver interest based content and advertisements. The information can include your name, postal address, email, device ID, or other identifier in encrypted form. The providers often process the information in hashed or de-identified form. These providers can collect additional information from you, such as your IP address and information about your browser or operating system; combine information about you with information from other companies in data sharing cooperatives in which we participate; and may place or recognize their own unique cookie on your browser. The third parties that generate these cookies have their own privacy policies that will apply.

In this regard, we have concluded a corresponding agreement with Meta for joint controllership, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This agreement defines the respective responsibilities for fulfilling the obligation under the applicable laws with regard to joint controllership. The contact details of the controller and the data protection officer of Meta can be found here: https://www.facebook.com/about/privacy. Without prejudice to this, the jurisdiction of the Rights of Data Subjects is not limited. We have agreed with Meta that Meta can be used as a contact point for the exercise of data subject rights (see Section 8).

Further information on how Meta processes personal data, including its legal basis and further information on the rights of data subjects can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of joint controllership based on the legitimate interest.

Information on the data security conditions can be found here. https://www.facebook.com/legal/terms/data_security_terms and on processing on the basis of standard contractual clauses can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Data Transfers

Your personal data is stored mainly on servers in the European Union. However, we operate globally and may transfer your personal information to other companies within the La Prairie group, third party service providers or to authorised retail partners in locations around the world, including countries that do not provide an adequate level of data protection. We want you to have the best service and client experience no matter how and where you interact with us, whether in our Digital Platforms or our Points of Sale all over the world. For this purpose, we may have to share your personal information outside the country where you have first shared it with us, always for the purposes described in this Policy and where we are satisfied with the levels of protection and security implemented by the third party in compliance with applicable laws. This sharing of your personal information is necessary to enable us to offer you a global and personalised client experience and services.

Where your personal data is transferred to countries outside the European Union or Switzerland and to countries that do not offer an adequate level of data protection in accordance with the European Commission and Swiss authorities, we will take steps to ensure your information is adequately protected by entering into the EU Commission and Swiss approved standard contractual clauses pursuant to Art. 46 (2) of the GDPR or put in place other measures under applicable laws to ensure that such transfer provides adequate safeguards. More information about this topic is published here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en

A copy of the relevant mechanism can be obtained for your review on request by using the contact details provided in Section 10.

Vos données personnelles seront conservées pour une période définie et fondée sur les critères suivants : (i) aussi longtemps que nécessaire pour accomplir les finalités décrites dans la présente Politique ; (ii) pour la durée nécessaire afin de se conformer à toutes les exigences légales applicables ; ou (iii) pour la durée nécessaire afin de répondre à toute demande de suppression de votre part dans les situations où cela est applicable.

• Si vous êtes un client, vos données seront conservées pendant la durée de la relation contractuelle et puis pendant 7 années à l’issue de cette durée.
• Si vous êtes un prospect, vos données seront conservées pendant 3 ans à compter de votre dernière interaction avec nous.

Notez que nous pourrions être tenus par la loi (par ex. obligations fiscales, comptables ou légales) de conserver certaines données plus longtemps. Pour obtenir plus d’informations, veuillez nous contacter en utilisant les coordonnées figurant au Paragraphe 10.

Que sont les cookies ?

Les cookies sont de petits fichiers texte que les sites Internet envoient à votre ordinateur, votre appareil mobile ou tout autre équipement connecté à Internet afin d’identifier de façon unique votre navigateur ou de stocker des informations ou des paramètres dans votre navigateur.

Nous faisons appel à des prestataires de service tiers et les autorisons à utiliser des cookies, des pixels et d’autres technologies similaires sur nos plateformes, nos pages de réseaux sociaux et dans nos communications. Nous faisons cela pour comprendre votre utilisation de nos services, améliorer votre expérience en tant qu’utilisateur et activer des fonctions et du contenu personnalisés ; optimiser nos publicités et notre marketing et permettre à des agences publicitaires tierces de nous aider à diffuser des annonces correspondant à vos centres d'intérêts en ligne. Affichez la liste complète des cookies et modifiez vos préférences dans les Paramètres des cookies.

Les cookies que nous utilisons sont classés comme suit :

• Cookies strictement nécessaires

Ces cookies sont nécessaires au fonctionnement du site Internet et ne peuvent pas être désactivés dans nos systèmes. Ils sont généralement placés uniquement en réponse à vos actions qui correspondent à une demande de services, comme la définition de vos préférences de confidentialité, la connexion ou le remplissage de formulaires. Vous pouvez configurer votre navigateur pour qu’il bloque ces cookies ou vous alerte en cas d’envoi de ceux-ci, mais certaines parties du site Internet ne fonctionneront pas si ces cookies sont bloqués. Ces cookies ne stockent aucune information nominative.

• Cookies analytiques/de performance

Ces cookies nous permettent de compter les visites et les sources de trafic, afin que nous puissions mesurer et améliorer les performances de notre site. Ils nous aident à identifier les pages les plus et les moins populaires et suivre la navigation des visiteurs sur le site. Lorsque cela est techniquement possible, toutes les informations que ces cookies recueillent sont agrégées et donc anonymes.
[Si vous n’autorisez pas ces cookies, nous ne saurons pas à quel moment vous avez consulté notre site. À cette fin et avec votre consentement, nous utilisons Google Analytics, exécuté par Google Inc. Pour désactiver Google Analytics, vous pouvez aller dans les Paramètres des cookies ou vous rendre sur https://tools.google.com/dlpage/gaoptout.

• Cookies de fonctionnalité

Ces cookies permettent au site Internet de fournir des fonctionnalités et une personnalisation améliorées. Ils peuvent être placés par nos soins ou par des fournisseurs tiers dont nous avons ajouté les services sur nos pages. Si vous n’autorisez pas ces cookies, certains de ces services ou la totalité de ceux-ci pourraient ne pas fonctionner correctement.

• Cookies de ciblage/publicitaires

Ces cookies peuvent être placés via notre site Internet par nos partenaires publicitaires. Ils peuvent être utilisés par ces sociétés pour créer un profil à partir de vos centres d’intérêt et vous livrer des publicités susceptibles de vous intéresser sur d’autres sites. Ils ne stockent pas directement d’informations personnelles, mais sont basés sur une identification unique de votre navigateur et de votre appareil. Si vous n’autorisez pas ces cookies, vous verrez des publicités moins ciblées.

Journaux de serveur Web et pixels

En plus d’obtenir des informations via des cookies, nos serveurs Web peuvent enregistrer des renseignements tels que le type de votre système d’exploitation, type de navigateur, domaine et autres paramètres système, de même que la langue que votre système utilise et le pays et fuseau horaire dans lesquels votre appareil est situé. Les journaux de serveur Web peuvent également enregistrer des informations telles que l’adresse de la page Web qui vous a dirigé sur notre site Internet et l’adresse IP de l'appareil que vous utilisez pour vous connecter à Internet. Ces informations nous aident à corriger les erreurs, améliorer la performance et maintenir la sécurité de nos Plateformes numériques. Afin de contrôler quels serveurs Web recueillent ces informations, nous pouvons placer des balises sur nos pages Web appelées « pixels ». Il s’agit d’instructions informatiques qui lient les pages Web à des serveurs Web particuliers et à leurs cookies. Nous pouvons également utiliser des cookies et technologies similaires (comme des pixels) pour nous permettre de déterminer si un courrier électronique que nous vous avons envoyé a été ouvert et a entraîné une action et si nos outils de publipostage fonctionnent correctement ou afin de mesurer leur performance et fournir le contenu et les annonces qui vous sont adaptés.

Puis-je refuser les cookies et technologies similaires ?

Vous avez la possibilité d’accepter ou de refuser nos cookies à tout moment dans les Paramètres des cookies.

En refusant ou en désactivant les cookies, certains contenus ou certaines fonctionnalités du site Internet peuvent ne pas vous être accessibles.

Étant donné que les pixels sont identiques à toute autre demande de contenu incluse dans la recette d’une page Web, vous ne pouvez les refuser. Cependant, vous pouvez être en mesure de désactiver les pixels dans des messages électroniques si vous ne téléchargez pas les images contenues dans les messages que vous recevez (cette fonction varie en fonction du logiciel d’e-mail utilisé sur votre ordinateur personnel). Procéder de la sorte ne désactivera néanmoins pas toujours un pixel ou d’autres technologies similaires dans le message électronique en raison des capacités spécifiques au logiciel d’e-mail. Pour plus d’informations à ce sujet, veuillez consulter les informations fournies par votre logiciel d’e-mail ou prestataire de services. Les pixels peuvent également être désactivés dans certaines circonstances en refusant les cookies ou en modifiant vos paramètres de cookie dans votre navigateur.

Nous nous engageons à protéger les données personnelles que nous recueillons. Assurer la sécurité de vos données personnelles est d’une importance primordiale pour nous. Nous prenons des mesures pour garantir que vos données personnelles soient protégées de tout traitement non autorisé ou illégal et de tout(e) perte, dommage ou destruction accidentelle et nous limitons l’accès à vos données personnelles aux personnes qui en ont raisonnablement besoin afin de vous fournir des produits ou des services. Cependant, aucun mécanisme de sécurité n’est efficace à 100 % contre toutes les menaces de sécurité.

Nos Plateformes numériques peuvent contenir des liens vers et en provenance de sites Internet tiers. Si vous suivez l’un des liens vers ces sites Internet, veuillez noter que ces sites Internet ont leurs propres politiques de confidentialité et que nous déclinons toute responsabilité quant à ces politiques ou à la façon dont ces tiers sont susceptibles d’utiliser vos données personnelles. Veuillez consulter ces politiques avant d’envoyer toute donnée personnelle à ces sites Internet.

Si vous créez un compte en ligne chez nous, il vous sera demandé de fournir un nom d’utilisateur et un mot de passe pour votre compte dans le cadre de nos procédures de sécurité. Vous devez traiter ces données comme des informations confidentielles et ne devez pas les divulguer à des tiers.

Vos droits

Conformément au droit applicable, vous disposez des droits suivants :

• Droit d’accès et d’information : vous avez le droit d’être informé d’une façon concise, transparente, compréhensible et aisément accessible, en des termes clairs et simples, des données personnelles que nous traitons vous concernant et de la manière dont nous les traitons. Vous avez également le droit d’obtenir une confirmation de notre part que nous traitons ou non vos données personnelles et, le cas échéant, d’y accéder et d’en obtenir une copie.
• Droit de rectification : vous avez le droit de rectifier vos données personnelles et de les faire compléter au cas où elles seraient incomplètes ou inexactes.
• Droit à l’effacement : vous avez le droit de nous demander de supprimer vos données personnelles. Nous supprimerons ou anonymiserons vos informations personnelles, sauf disposition contraire établie par les lois applicables en matière de protection des données ou si La Prairie a un intérêt légitime à les conserver.
• Droit à la limitation du traitement : dans certains cas, vous avez le droit d’obtenir la limitation du traitement de vos données personnelles.
• Droit à la portabilité des données : vous avez le droit de recevoir vos données personnelles, que vous nous avez fournies, dans un format structuré, couramment utilisé et lisible par machine, et vous avez le droit de transmettre ces données personnelles à un autre responsable du traitement.
• Droit de retirer votre consentement : si vous avez donné votre consentement à une activité de traitement des données, vous pouvez retirer ce consentement à tout moment comme indiqué dans la section « Vos préférences ». Notez que le retrait du consentement ne compromet pas la licéité du traitement effectué sur la base du consentement avant son retrait.

Ces droits peuvent être limités dans certaines situations – par exemple, lorsque nous pouvons démontrer que nous sommes tenus par une obligation légale ou contractuelle de traiter vos données personnelles. Dans certains cas, cela peut signifier que nous pouvons conserver vos données personnelles même lorsque vous avez retiré votre consentement. Nous appliquerons alors les mesures et précautions appropriées afin de protéger vos données personnelles.

Droit d’opposition

Vous avez le droit de vous opposer au traitement de vos données personnelles lorsque ce traitement est fondé sur des intérêts légitimes. Néanmoins, nous pourrions avoir des raisons légitimes de continuer à traiter vos données personnelles.

Si vous souhaitez exercer l’un quelconque de ces droits, veuillez nous contacter en utilisant les coordonnées figurant au Paragraphe 10.

Vos préférences

Nous faisons tout notre possible pour vous donner le choix s’agissant des données personnelles que vous nous communiquez. Les mécanismes suivants vous donnent le contrôle sur vos données personnelles :

Publicité, marketing et personnalisation (hors ligne et en ligne) : Si vous souhaitez recevoir des informations à propos de nos produits et services, événements, programmes de fidélité ou autres programmes client ainsi que d’autres activités promotionnelles, vous pouvez nous faire part de vos préférences en matière de communication en cochant la ou les case(s) correspondante(s) sur nos Plateformes numériques et dans nos points de vente ou en répondant à la ou aux question(s) que vous poseront nos conseillers beauté ou nos représentants en magasin. Certaines de nos activités et communications peuvent être personnalisées en fonction de vos centres d'intérêts spécifiques et vos préférences (ce qui sera fait avec votre permission, si la loi l’exige).

Si vous ne souhaitez plus recevoir nos communications commerciales (et/ou ne souhaitez plus recevoir de communications commerciales personnalisées), veuillez simplement nous le faire savoir à tout moment en suivant les instructions de désabonnement dans la communication concernée ou en utilisant les coordonnées figurant au Paragraphe 10. Notez que nous envoyons différents types de communications commerciales personnalisées (p. ex., newsletters, courriers électroniques de conseillers beauté, enquêtes, etc.) et que vous pouvez décider de refuser toutes ces communications ou seulement certaines d’entre elles. Si vous refusez les communications commerciales personnalisées, vous continuerez de recevoir des messages de service (c.à.d. des communications non commerciales, telles que des mises à jour par courrier électronique sur le statut de votre commande ou des notifications à propos des activités de votre compte) de notre part.

Notez qu’il pourrait vous être demandé d’indiquer vos canaux préférés pour recevoir nos communications, et que vous pouvez les modifier ou les mettre à jour à tout moment en contactant l’un de nos conseillers beauté ou en utilisant les coordonnées figurant au Paragraphe 10.

Si vous avez un compte La Prairie sur nos Plateformes numériques, vous pouvez retirer votre consentement et/ou modifier vos préférences de communication dans votre profil de compte lorsque vous êtes connecté.

Cookies/Technologies similaires et Publicité basée sur vos centres d'intérêts : Vous pouvez définir vos préférences en matière de cookies à tout moment dans les Paramètres des cookies.

Si vous résidez en Californie, vous bénéficiez des droits à la protection de la vie privée suivants :

• Droit de savoir : Vous avez le droit de savoir quelles données personnelles nous avons recueillies vous concernant, y compris les catégories de données personnelles, les catégories de sources à partir desquelles celles-ci sont recueillies, la finalité commerciale du recueil, de la vente ou du partage de données personnelles, les catégories de tiers auxquels nous divulguons des données personnelles et les données personnelles spécifiques que nous avons recueillies à votre sujet.
• Droit de suppression : Vous avez le droit de supprimer les données personnelles que nous avons recueillies auprès de vous, sous réserve de certaines exceptions. Notez que dans certains cas, nous ne pourrons pas satisfaire pleinement à votre demande, par exemple si nous devons effectuer une transaction pour vous, pour détecter et prévenir les activités frauduleuses et illégales, pour exercer nos droits, pour nos besoins internes ou pour respecter une obligation légale.
• Droit de rectification : Vous avez le droit de corriger les données personnelles inexactes que nous pourrions conserver à votre sujet, sous réserve d’une vérification appropriée.
• Droit d’opposition à la vente ou au partage de données personnelles : Vous avez le droit de vous opposer à la « vente » ou au « partage » de vos données personnelles, au sens donné à ces termes par les lois californiennes sur la protection de la vie privée, à des tiers et à des sociétés affiliées qui ne partagent pas le même nom commercial. Cela signifie que si vous vous y opposez, à l’avenir, nous ne vendrons ni ne partagerons vos données personnelles avec ces tiers pour qu’ils les utilisent à leurs fins, y compris pour la publicité comportementale multi-contexte, à moins que vous ne nous demandiez de le faire ultérieurement.

Si vous résidez en Virginie, vous bénéficiez de certains droits à la protection de la vie privée en vertu de l’article 59.1-577 du Code de Virginie (Virginia Code 59.1-577). Par exemple, vous pouvez demander à accéder à vos données personnelles, à les corriger ou à les supprimer. Étant donné que nous « vendons » des données personnelles et pratiquons le « ciblage publicitaire », au sens donné à ces termes par la législation de Virginie, vous pouvez également exercer votre droit d’opposition à cette vente ou ce ciblage publicitaire. Vous avez le droit de faire appel d’un refus d’application de vos droits à la protection de la vie privée.

Comment soumettre une demande

Pour exercer votre droit de savoir, de suppression ou de correction en vertu de la législation de Californie ou de Virginie, ou pour faire appel d’un refus d’application de vos droits à la protection de la vie privée, veuillez utiliser la page du Service client de notre site Internet pour nous envoyer un message ou nous contacter par téléphone au 1 800 821 5718 ou aux coordonnées figurant dans la section Responsables du traitement des données et Contact ci-dessous. Nous pourrions vous demander certaines informations pour vérifier votre identité avant de pouvoir répondre à vos demandes d’accès et de suppression. Nous confirmerons la réception de votre demande sous 10 jours ouvrables et répondrons à votre demande sous 45 jours civils, après vérification appropriée, à moins que nous n’ayons besoin de plus de temps, auquel cas nous vous en informerons.

Pour exercer votre droit d’opposition à la vente ou au partage de données personnelles, veuillez cliquer sur le lien « Ne pas vendre ou partager mes informations personnelles » qui se trouve également dans le bas de la page de notre site Internet, ou nous contacter en utilisant les coordonnées figurant dans la section Responsables du traitement des données et Contact ci-dessous.

Nous ne vous discriminerons pas pour avoir exercé vos droits en vertu de cette section de la Politique de confidentialité.

Demandes d’agent

Vous pourriez autoriser un tiers à faire une demande d’exercice de droits à la protection de la vie privée en votre nom (un agent autorisé). Les agents autorisés devront prouver que vous les avez autorisés à agir en votre nom ou qu’ils disposent d’une procuration conformément au droit applicable. La Prairie se réserve le droit de vous demander directement confirmation que l’agent est autorisé à faire une telle demande, ou de demander des informations supplémentaires pour vérifier l’identité de l’agent. Il est interdit à un agent autorisé d’utiliser les données personnelles d’un consommateur, ou toute information recueillie auprès du consommateur ou à son sujet, à toute fin autre que pour satisfaire aux demandes du consommateur ou à des fins de vérification ou de prévention de la fraude.

SMS

Vous pouvez envoyer SIGNUP par SMS au 48442 pour recevoir des actualités exclusives sur La Prairie. En vous inscrivant sur notre site Internet, vous vous abonnez sinon pour recevoir des SMS promotionnels de La Prairie au numéro de téléphone portable que vous avez fourni. L’octroi du consentement à recevoir des SMS commerciaux n’est pas une condition préalable requise pour l’achat de biens ou de services. Votre opérateur peut appliquer les tarifs standard pour les messages, données, voix ou autres services concernant les messages SMS que vous recevez. La fréquence des messages est variable.

Vous pouvez vous désinscrire des SMS à tout moment en répondant STOP à n’importe quel SMS ou en envoyant un SMS au 48442. Vous pouvez recevoir un dernier SMS de confirmation de votre demande de désinscription. Pour obtenir de l’aide pour les SMS, répondez HELP à n’importe quel SMS ou envoyez un SMS au 48442. Vous pouvez également nous contacter en utilisant les coordonnées figurant au Paragraphe 10.

Les opérateurs pris en charge aux États-Unis sont : AT&T, Sprint, T-Mobile®, Verizon Wireless, Boost, Cricket, MetroPCS, U.S. Cellular, Virgin Mobile, ACS Wireless, Appalachian Wireless, Bluegrass Cellular, Carolina West Wireless, Cellcom, C-Spire Wireless (formerly Cellsouth), Cellular One of East Central Illinois, Cincinnati Bell Wireless, Cross (dba Sprocket), Duet IP, Element Mobile, EpicTouch, GCI Communications, Golden State, Hawkeye (Chat Mobility), Hawkeye (NW Missouri Cellular), Illinois Valley Cellular, Immix (Keystone Wireless / PC Management), Inland Cellular, iWireless, Mobi PCS (Coral Wireless LLC), Mosaic, MTPCS / Cellular One (Cellone Nation), Nex-Tech Wireless, nTelos, Panhandle Telecommunications, Peoples Wireless, Pioneer, Plateau, Revol Wireless, Rina - Custer, Rina - All West, Rina - Cambridge Telecom Coop, Rina - Eagle Valley Comm, Rina - Farmers Mutual Telephone Co, Rina - Nucla Nutria Telephone Co, Rina - Silver Star, Rina - South Central Comm, Rina - Syringa, Rina - UBET, Rina - Manti, South Canaan / CellularOne of NEPA, Thumb Cellular, Union Wireless, United, Viaero Wireless, West Central Wireless, Leaco, Nemont/Sagebrush. T-Mobile n’est pas responsable des retards dans la distribution des messages, ni des messages non distribués.

Informations sur la protection des données

Catégories de données personnelles divulguées à des fins commerciales

Au cours des 12 derniers mois, La Prairie a divulgué les catégories suivantes de données personnelles à des fins commerciales (par exemple, avec nos prestataires de services ou sous-traitants, dont l’utilisation des données personnelles que nous divulguons est limitée à la fourniture de certains services à nous en vertu d’un contrat écrit) :

• Identifiants, informations de facturation et informations commerciales, divulgués à nos sociétés affiliées, à nos prestataires de services tiers, aux processeurs de paiement, aux prestataires de services de messagerie électronique/SMS, aux plateformes de service client et de renseignement, aux prestataires de services de stockage de données dans le cloud et aux prestataires de services anti-fraude et anti-contrefaçon.
• Les identifiants de connexion au site Internet, divulgués à nos prestataires de services de stockage de données dans le cloud.
• Les préférences, divulguées à nos sociétés affiliées, à nos prestataires de services tiers, aux prestataires de services de messagerie électronique/SMS, aux plateformes de service client et de renseignement, et aux prestataires de services de stockage de données dans le cloud.
• Les informations sur la vie personnelle, divulguées à nos sociétés affiliées, à nos prestataires de services tiers, aux plateformes de service client et de renseignement, et aux prestataires de services de stockage de données dans le cloud.
• Les communications avec vous, divulguées à nos sociétés affiliées, à nos prestataires de services tiers et à nos prestataires de services de stockage de données dans le cloud.
• Le contenu que vous fournissez, divulgué à nos sociétés affiliées, à nos prestataires de services tiers et à nos prestataires de services de stockage de données dans le cloud.
• Les Informations sur l’activité Internet ou électronique, divulguées à nos sociétés affiliées, à nos prestataires de services tiers, aux processeurs de paiement, aux prestataires de services de messagerie électronique/SMS, aux plateformes de service client et de renseignement, aux prestataires de services de stockage de données dans le cloud et aux prestataires de services anti-fraude et anti-contrefaçon.
• Les Informations démographiques, divulguées à nos sociétés affiliées, à nos prestataires de services tiers, aux processeurs de paiement, aux prestataires de services de messagerie électronique/SMS, aux plateformes de service client et de renseignement, aux prestataires de services de stockage de données dans le cloud et aux prestataires de services anti-fraude et anti-contrefaçon.
• Les données personnelles sensibles, divulguées à nos sociétés affiliées, à nos prestataires de services tiers, aux prestataires de services de messagerie électronique/SMS, aux plateformes de service client et de renseignement, et aux prestataires de services de stockage de données dans le cloud.
• Les informations audio ou visuelles divulguées à nos prestataires de services de sécurité.
• Les déductions issues des catégories ci-dessus, divulguées à nos sociétés affiliées, à nos prestataires de services tiers, aux processeurs de paiement, aux prestataires de services de messagerie électronique/SMS, aux plateformes de service client et de renseignement, aux prestataires de services de stockage de données dans le cloud et aux prestataires de services anti-fraude et anti-contrefaçon.

Des informations supplémentaires sur les finalités commerciales pour lesquelles nous divulguons des données personnelles sont fournies ci-dessus sous « Comment divulguons-nous et transférons-nous vos données personnelles ? »

Catégories de données personnelles vendues ou partagées

Au cours des 12 derniers mois, La Prairie a vendu ou partagé les catégories suivantes de données personnelles avec des réseaux publicitaires, des plateformes publicitaires et des sociétés de réseaux sociaux aux fins décrites dans la présente Politique de confidentialité, y compris pour le ciblage publicitaire :

• Identifiants
• Informations commerciales
• Préférences
• Informations sur la vie personnelle
• Informations sur l’activité Internet ou électronique
• Informations sur les réseaux sociaux
• Informations démographiques
• Déductions issues des catégories ci-dessus

Nous ne vendons ni ne partageons sciemment de données personnelles concernant des personnes âgées de moins de 16 ans.

If you have any questions about this Policy or privacy matters generally or to make a complaint about our compliance with applicable privacy laws, please contact us using the Contact us page of our website and our customer services team will be happy to assist you.

You can also use this Contact us if you wish to exercise your preferences and rights as detailed above.

We will acknowledge and investigate any complaint you make (including a complaint that we have breached your rights under applicable privacy laws). We hope that we can satisfy queries.

However, you have the right to lodge a complaint with the relevant data protection authority, in particular in the Member State of your habitual residence or place of the alleged infringement.

DATA CONTROLLER RESPONSIBLE FOR ALL ACTIVITIES (BOTH ONLINE AND OFFLINE)

LA PRAIRIE GROUP AG Bellerivestrasse 36CH-8008 Zurich Switzerland

Phone number: +41 44 947 82 10 Contact Us form:Contact us

Representative of La Prairie Group AG in the European Union:Email address:office@datenschutz-sued.de

Phone number: +49 931 304 976 0

Data Protection Officer of La Prairie Group AG (and its affiliates):Email address:Data.Privacy@LaPrairieGroup.ch

Phone number: +41 44 947 82 10

If indicated at the time you make a La Prairie purchase in our Points of Sale or you provide your details to one of our instore beauty advisors or representatives, the La Prairie group companies will also act as local data controllers. Please find here the list of companies and contact details: https://www.laprairiegroup.ch/contact-us.

PRIVACY POLICY - 18 DECEMBER 2024

1.General Information

1.1 Processing of Personal Data

The purpose of this privacy policy is to provide you with information concerning the processing of personal data when using our corporate and careers websites, and for related services if you are a service provider, business partner, or third-party vendor. This privacy policy applies to all websites or services that feature this privacy policy.

For more information about our data processing activities related to our application process, employees and contingent workers, please visit our dedicated Privacy Notice for Employees, Job Applicants and Contingent Workers, also available on our corporate careers website. 

For more information about our data processing activities related to our clients, clienteling activities and our e-commerce platforms, please visit our dedicated Privacy Policy, also available in all relevant languages depending on your region.

Personal Data refers to any information relating to an identified or identifiable natural person. This includes, but is not limited to, information such as name, address, email address, phone number, or any other data that can be used to directly or indirectly identify an individual. The definition and treatment of personal data are governed by applicable data protection laws and regulations in the relevant jurisdiction, which may include specific rules regarding the collection, processing, storage, and transfer of such data. 

1.2. Controller

Responsible for the processing of personal data is: 

La Prairie Group AG

Bellerivestrasse 36, 8008, Zürich Switzerland

Info[at]LaPrairieGroup.ch

+41 44 947 82 10

Contact details of the Data Protection Officer: 

Data.Privacy[at]LaPrairieGroup.ch, or under the postal address of the controller for the attention of the “Data Protection Officer”.

Specific data processing activities might occur under the responsibility of other controllers, including our local affiliates, in connection with local processing activities. It is indicated in the respective description of those activities below, where this is the case. For a list of contact details for all La Prairie affiliates, please visit our dedicated page here.

1.3. Rights of the Data Subject

As a data subject affected by the data processing activity, you have the following rights with regard to your personal data, subject to the applicable data protection laws and regulations in your relevant jurisdiction:

• Right of access;
• Right to rectification and to erasure;
• Right to restriction of processing;
• Right to data portability; and 
• Right to object. 

1.4 Recipients (general information)

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

When we work on your above-mentioned right, we may ask you for proof of your identity. For more information on how we process your data in this context, see Section 3.1.

In addition to the recipients that are listed within the recipients paragraph of each section below, we transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the La Prairie and Beiersdorf Group or to external service providers, contract processors in accordance with the purposes required. We also forward the data to the following recipients:

• Platform/hosting providers may have access to personal data from jurisdictions outside of your own. In such cases, appropriate safeguards are implemented, including legally binding agreements or contractual mechanisms that comply with applicable data protection laws and regulations. Where personal data is transferred to jurisdictions covered by specific adequacy decisions or similar rulings, those rulings will apply. For more information (such as a copy of the safeguards), you can contact us as outlined under Section 1.2.

• Analytical service providers may have access to personal data from jurisdictions outside of your own. In these instances, appropriate safeguards, such as legally binding agreements or other contractual mechanisms, are in place to ensure compliance with the relevant data protection laws and regulations. If the transfer is made to jurisdictions with recognized adequacy decisions or similar provisions, those rulings apply. For further details, including information about these guarantees, please contact us as mentioned under Section 1.2.

• IT support service providers may have access to personal data from jurisdictions outside of your own. To protect this data, legally binding agreements or similar mechanisms are used to ensure the protection of personal data in line with applicable data protection laws. In cases where an adequacy decision or equivalent applies, that decision will govern the transfer. More information, including copies of guarantees, is available upon request, as outlined in Section 1.2.

• Authorities: In the event of a legal obligation, we reserve the right to disclose your information if required to do so by competent authorities or law enforcement bodies in accordance with applicable data protection laws and regulations.

Further information can be found within the recipients paragraph of each section.

2. Collection and Processing of Personal Data when visiting our Website

When visiting and using our website we already collect personal data. You can find within this section more information about website specific processes and tools especially from external partners. Further information about processes which can also occur in an offline context can be found in Section 3.

2.1.Hosting

Purpose/Information:
When visiting and using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server, which are technically necessary for us to display our website to you and to guarantee stability and security.

Used Cookies/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
-Platform/hosting providers

-IT support service providers

Further recipients can be found in the general recipients Section 1.4.

Deletion:
The deletion of the log files takes place after 7 days.

2.2. Login functionalities

Our careers website might provide different login functionalities as described below.

2.2.1 Career Opportunities Login Profile

Purpose/Information: 
Our careers website allows you to create a centralised login profile and includes a separate consent during the registration process: When registering, La Prairie Group AG provides you with the opportunity to create an account with a password (login profile). This login profile will be created within the centralised login profile database and shall verify that you are the valid owner of the account and/or email address. This login database is in general only connected to the service you are registering to and handles only the verification part of your login profile. You will be asked to read and agree to our Privacy Notice for job applicants, a copy of which is also available under Section 3.4. The login profile will therefore also be accessible to the respective local La Prairie affiliate company from which you are demanding the service.   

Used Cookies: Type A. More information can be found in the “Cookies/Tools” section.

Controller: 
See Section 1.2 above.

Recipients: 
Platform/Hosting providers

Further recipients can be found in the general recipients Section 1.4.

Deletion / Withdrawal:  
Your login profile will be automatically deleted as soon as you have deleted your account on our careers website, unless this conflicts with legal storage obligations or statutes of limitations. An automatic deletion of candidate accounts in general take place after 12 months of inactivity.  

2.3. Cookies/Tools

This website uses cookies or other technologies/tools like pixels, local storage, tags, IDs or external services (hereinafter referred to as “Cookies/Tools”) and are used on when visiting and using our website. Cookies are small text files that are stored by your browser on your device to save certain information or image files, such as pixels. The next time you visit our website on the same device, the information saved in the cookies will subsequently be accessed on your device and transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”). 

Through the information saved and returned, the respective website can recognise that you have already accessed and visited it with the browser you use on that device. We use this information to be able to design and display the website in an optimum way in line with your preferences. In that respect, only the cookie itself is identified on your device. Beyond this extent, your personal data will only be saved upon your express consent or if it is strictly necessary to be able to use the service offered to and accessed by you accordingly.

This website uses the following types of cookies/tools, the scope and functionality of which are explained below:

• Type A: Technical/Audience Measurement – to ensure that the demanded service can be provided including basic analysis. 
• Type B: Functional and Performance – Additional tools to measure the performance/attractiveness of our website and to provide further additional (personalised) functionalities.
• Type C: Marketing/Advertising – Cross websites tools for marketing profiling based on user behaviour.

You can find more information on in the description of the tools implemented on our websites in this privacy policy.

For additional cookies relevant to this website that are not listed below, please refer to our Privacy Preference Center which is accessible by clicking “Cookies Settings” at the bottom of the page. This will allow you to review and manage your cookie preferences, including detailed information about the types of cookies used, their purposes, and the ability to opt in or out of specific categories of cookies, where applicable.

Please note that the tools listed in the following subsection might not be constantly in use.

2.3.1 OneTrust Cookie Consent – Central cookie management platform

Purpose/Information:
This website is using the consent management tool “OneTrust Cookie Consent” (www.onetrust.com) to obtain consent for data processing and use of cookies or comparable functions. "OneTrust Cookie Consent“ stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. 

By processing the data, OneTrust Cookie Consent helps us to fulfil our legal obligations (e.g. obligation to provide evidence). Our interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. "OneTrust Cookie Consent" stores your data as long as your user settings are active.

The provision of your personal data is required for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service.

Cookies/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider is OT Technology Spain, Passeo de la Castellana 77, 28046 Madrid, Spain.

Further recipients can be found in the general recipients Section 1.4.

Deletion:
The data will be stored for up to one year The choice you have made (consent/setting) will be stored for one year and can be viewed within the Cookie Settings. The Cookie Settings are located on the bottom of the main page. You can always delete your choice by deleting the cookies within your browser.

2.3.2 Google Analytics

Purpose/Information:
This website uses Google Analytics, a web analysis service of Google Ireland Ltd. (“Google”). 

Google Analytics uses a specific form of cookie, which is stored on your computer and enables an analysis of your use of our website. The cookies set by Google Analytics for measurement are first party cookies, which means that data subjects’ cookie values will be different for each customer (i.e. there is not a single Google Analytics cookie ID that is used on all sites using Google Analytics). The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. 

Google uses this information on our behalf to analyse your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. 

We use Google Analytics to analyse and regularly improve the usage of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. In addition, we gain information about the functionality of our site (for example to detect navigation problems).

In the configuration of Google Analytics, we ensured that Google receives this data as a processor and is therefore not allowed to use this data for its own purposes. The "Google Analytics Advertising Features" configuration is independent from this and is described in the appropriate section below, provided it is also used on this website. 

Cookies/Tools: Type B. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider: Google Ireland Ltd., Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion/Withdrawal:
You can deactivate this tool via the Cookie Settings. The Cookie Settings are located on the bottom of the main page.

Cookie lifetime: up to 24 months (this applies only to cookies which have been set by this website)

2.3.3 Google Analytics Advertising Features

This website also uses the extended functions of Google Analytics (Google Analytics Advertising Features) in addition to the standard functions. The Google Analytics Advertising Features implemented on this website include:

• Google Display Network Impression Reporting
• Google Analytics Demographics and Interest Reporting
• Remarketing Audiences based on specific behaviour, demographic, and interest data, sharing those lists with Google Ads
• Integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers
• Google Signals in order to receive more insights about you when you are signed in to your Google account in the browser with which you are accessing this website. This feature is only active if you have additionally consented within your Google settings to the data sharing/Ads Personalisation.

We therefore use first-party cookies (e.g. Google Analytics cookies) and Google advertising cookies and identifiers together in order to optimise our website.

Cookie/Tools: Type C. More information can be found in the “Cookies/Tools” section.

Information about Google Consent Mode:

Additionally, this website uses Google Consent Mode. Consent Mode sends statistical data via cookie-less pings about whether a user has clicked on an ad or link and has landed on our website (conversion). The statistical data is then used with a mathematical modelling to enhance the internal reporting. A ping contains by default technical information like the IP-address, platform type or screen resolution. As these data or the combination of it might theoretically be considered as personal data by Google Ireland Ltd, additional measures have been implemented to ensure that the ping data is not personal data: Certain information of the ping are being set to a default value by our server before sending it to Google analytics.

Recipients/Source:
Main service provider and source: Google Ireland Ltd., Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion/Withdrawal:
You can deactivate this tool via the Cookie Settings. The Cookie Settings are located on the bottom of the main page. 

Cookie lifetime: event data is stored for up to 50 months; your personal data as a user is stored for up to 14 months (this applies only for cookies which have been set by this website).

2.3.4 Google Tag Manager

Purpose/Information:
This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data are stored. The Google Tag Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.

Cookie/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider: Google Ireland Ltd, Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion:
Aggregated event data is stored for up to 50 months; your personal data as a user is not stored in Google Tag Manager and therefore no retention period applies.

3. Further services offered (on- and offline)

In addition to the online use of our website, we offer various other services, for which we process your personal data also in an offline context. 

Contrary to Section 1.2, in some cases a legal entity within the La Prairie corporate group is the Controller for the services offered below; this will have already been identified within the communication itself. If reference is therefore made to sections of this privacy policy, and a Controller has already been named, e.g. in the footer/signature of an email or campaign card, this legal entity is the Controller in accordance with applicable data protection laws and regulations.  

3.1. Contacting/Communication/Collaboration

Purpose/Information:  
When communicating and/or collaborating with us, e.g. by email or via contact form on our website, or data exchange platform, be it e.g. as a business partner or customer, the data you provide (including but not limited to your email address, your name and your telephone number, or personal data submitted during the conversation) will be stored and processed by us in order to e.g. answer your questions, requests or for the purpose of business related correspondence.

With regard to the cooperation with our suppliers, we have implemented an internal evaluation process of due diligence which, in our legitimate interest, is intended to improve the business relationship. As a rule, we only process information about the company, but conclusions can be drawn about you as the contact person of that company, if the communication with suppliers is examined with regard to response times, reliability and transparency.

We may ask you when you contact us by telephone as a customer whether the telephone call may be recorded for quality assurance and training measures. If you agree to the recording, we will process all information that you share with us during the call (communication content, possibly also sensitive (health) data, as well as your phone number and other personal data).

When processing data arising in the course of communication, we have a legitimate interest in processing the data in accordance with legal requirements, for internal verification or in accordance with the respective communication request.

In certain cases, the provision of your personal data as a business partner or customer is required for the performance of the contract or a situation similar to a contract. Additionally, your personal data may be required for related purposes, such as compliance with legal obligations, responding to or conducting investigations, or handling legal or regulatory proceedings. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service. 

Recipients and sources:
If you are a business partner, we will regularly check your creditworthiness in certain cases (e.g. when concluding contracts). Our legitimate interest is the minimization of our financial risk. For this purpose, we cooperate with credit agencies from which we receive the necessary data. For this purpose we transmit your name and your contact data to the credit agencies.

If you are a business customer or partner, it may be necessary to transfer your personal data to prospective buyers as part of a company transaction. In the course of due diligence, usually anonymised data is processed. However, it may be necessary in specific individual cases to process personal data. Our legitimate interest lies in the execution of the company transaction.

We may transfer your collected data to our relevant internal departments for processing and to other affiliated companies within the La Prairie and Beiersdorf Group, to external service providers, contract processors, or, where necessary, to public authorities in compliance with legal obligations, regulatory requirements, or in response to lawful requests, all in accordance with the purposes required.

In the event of a legal obligation, we reserve the right to disclose information about you if we are required to surrender it to competent authorities or law enforcement bodies.

Additionally, we also forward the data to the following recipients:

• Platform/hosting providers;
• Analytical service providers; and/or,
• IT support service providers.

3.2. Job posting updates

For all recipients listed above, transfers of personal data to recipients in countries outside of the applicable jurisdiction may occur. Where required by law, appropriate safeguards, such as standard contractual clauses or other legally recognized mechanisms, are implemented to ensure adequate protection of personal data. For countries or entities subject to an adequacy decision, such a decision will apply. For more information or to request a copy of the relevant safeguards, please contact us at Data.Privacy[at]LaPrairieGroup.ch.

Further recipients can be found in the general recipients Section 1.4.

Deletion /Objection:
Your data will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless statutory retention obligations exist or periods of limitation must be observed.

Call recordings are stored for a maximum of 90 days. 

You can object to these processes according to the requirements under Section 4.

Purpose/Information: 
Job posting updates provide candidates with notifications about new job opportunities and relevant updates tailored to their preferences. By subscribing to these updates, candidates receive notifications based on their selected interests and preferences, such as keywords for specific roles, locations, or departments.

The updates are customized based on the preferences candidates set in their profiles. Candidates can adjust the frequency of these notifications through their candidate profiles under “Job Alerts” to receive updates every set amount of days on a recurring basis.

Recipients: 
-Platform/hosting provider

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion / Withdrawal: 
Candidates can unsubscribe from job posting updates at any time by logging into their candidate profile and updating their notification preferences. Job alerts and subscriptions will also be automatically deleted after 12 months of inactivity, at which point the entire candidate profile will be deleted.

3.3. Postal mailings

Purpose/Information:
As a selected customer or business partner, you may receive shipments from us by post (letter), including documents, products, or other materials necessary for the performance of a contract or based on our legitimate interests in facilitating business operations. These shipments are provided in the context of our professional relationship.

Recipients:
-Platform/hosting provider

-Communication service provider

-Shipping service provider 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion / Objection:
Your data will be deleted as soon as the purpose for the shipment has been fulfilled unless legal storage obligations or statutes of limitations require otherwise. You can object to further postal mailings as described in the Section 4 below. We further delete your personal data after the contractual relationship between us has been terminated.

3.4. Data Privacy Statement for applicants (recruitment)

For more information about the application process please go to our dedicated Privacy Notice for Employees, Job Applicants and Contingent Workers, also available on our corporate careers website. 

4. Objection or Withdrawal of your consent to the Processing of Personal Data

If you have given your consent to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us. Withdrawing consent does not affect the lawfulness of any data processing that occurred prior to the withdrawal.

If we base the processing of your personal data on our legitimate interests, if relevant and as permitted by applicable law, you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the description of the functions/services. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing. 

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your objection under the above-mentioned contact details for the controller.