本政策告知您如何访问和更新您的个人数据，以及如何对您个人数据的使用方式作出某些选择，包括有权反对我们进行某些处理（包括个性化营销），或在我们须征得您的同意方可处理数据的情况下，有权撤回该同意。有关您的偏好和权利的更多信息，请参阅下文第 8 段。

本政策涵盖我们的数据收集活动，包括通过我们的各种线上（如网站、应用程序和社交网络）和线下（如销售点、客户服务和活动）渠道收集的个人数据。本政策还解释了我们如何通过在我们的网站和应用程序上使用 Cookie 和相关技术来收集信息。某些段落可能对您不适用，具体取决于您向我们提供个人数据或与 La Prairie 互动的方式。请注意，我们会将通过一个渠道（如 La Prairie 网站）收集的个人数据与通过另一个渠道（如 La Prairie 销售点或门店活动）收集的个人数据相结合，包括可能将最初由位于不同国家/地区的不同 La Prairie 公司收集的个人数据相结合，以便向您提供适合您的偏好和兴趣的个性化服务。有关这些数据收集活动的更多信息将在下文中详述。

如果我们改变了处理您个人数据的方式，我们将更新本政策，并在适当的时候以适当的方式通知您或征求您的同意，通常是通过在我们的网站上发布更新后的政策。如果我们做出重大变更，对我们的隐私保护惯例造成实质性改变，我们也可能通过其他方式通知您，例如在变更生效前发送电子邮件。我们保留随时更改我们的做法和本政策的权利。请不时查看我们的网站，了解本政策的任何更新或变更。

我们在收集个人数据时，如果认为提供相关且及时的信息会有所帮助，也可能会向您提供额外信息。

What categories of personal data do we collect?

• Identifiers: This includes your name, home and mobile phone number, IP address, home address, country of residence, email address, social media account, signature, or other similar identifiers. This data will be sold or shared in accordance with our Privacy Policy.
• Personal Data Described in Subdivision (e) of California Civil Code Section 1798.80:
• - Billing Information. This includes your delivery address and payment details. This data is not sold or shared
• Website registration credentials. This includes your username and password. This data is not sold or shared.
• Preferences. This includes communication channels, preferred language, product preferences, and skincare wishes. This data will be sold or shared in accordance with this Privacy Policy.
• Personal life information and inferences. This includes life habits, interests, lifestyle, hobbies, and reactions to marketing campaigns. This data will be sold or shared in accordance with this Privacy Policy.
• Correspondence and communication between us and you. This data is not sold or shared.
• Information or content you provide to us. This includes photographs, videos, reviews, questions, survey response and comments. This data is not sold or shared.
• Social Media Information. If you accept targeting cookies from social networks on the Digital Platforms, or if you use the share button to share our content through those platforms, those third parties may collect and process your data in order to provide you with personalised advertising. This data will be sold or shared in accordance with this Privacy Policy.
• Information necessary to fight counterfeiting and infringements of La Prairie’s intellectual property rights. This includes identification and contact details and any other information and documents related to counterfeit and infringing activities. This data is not sold or shared.
• Information necessary to manage La Prairie’s selective distribution system in order to protect La Prairie brand and identify unauthorised resellers. This includes profiling activities on your purchase behaviours. This data is not sold or shared.
• Characteristics of Protected Classifications Under California or Federal Law: This includes your age, gender, and national origin. This data will be sold or shared in accordance with our Privacy Policy.
• Commercial Information: This includes your purchase history and interactions with us (such as order details, products bought and quantity, consultations, treatments, visits to our Digital Platforms or Points of Sale). This data will be sold or shared in accordance with our Privacy Policy.
• Internet or other Network Activity Information: This includes online activity such as browsing history, search history; information regarding your interaction with our websites or third-parties websites such as social media, applications or advertisements and other technical personal data or personal data shared by the service provider you are using; and technical information about your browser, device type, and operating system. This data will be sold or shared in accordance with our Privacy Policy.
• Geolocation Data: This includes location information when you visit our Digital Platforms in order to direct you to the appropriate domain (internet location) or when you request location services provided by us, for example in order to find the nearest store to you or to provide more precise location based content. This data will be sold or shared in accordance with our Privacy Policy.
• Audio, electronic, visual, thermal, olfactory, or similar information: This includes CCTV security camera data (such as your image) when you visit one of our boutiques that has a CCTV camera used to view and record individuals 24 hours per day, 7 days per week for security reasons. This data is not sold or shared.
• Inferences: We also may draw inferences from any of your information and interactions with us to enrich and supplement such profile, reflecting your preferences, characteristics, trends, predispositions, aptitudes and attitudes. This data will be sold or shared in accordance with our Privacy Policy.
• Sensitive Personal data: This includes Skin type and health information in case you participate in our beauty consultations or treatments or interact with our customer service. This data is not sold or shared, and it is used exclusively to provide you with the services you request.

What are the purposes for which we collect and use your personal data

Business and Commercial Purposes:

Additional Purposes:

• To provide you with the products and services you have purchased or requested in our Digital Platforms or Points of Sale. This includes for example the processing of your payment, credit card checks and fraud prevention activities, delivery and return management.
• To send you service-related communications. This includes communications related to your purchases, your beauty consultations, appointments or events you have registered to.
• To set up and manage your La Prairie profile and provide you with personalised services. All personal data we process about you will be linked and combined to create a profile about you and provide you with personalised services adapted to your interests and preferences. More details can be found in Section 2 under "Profiling".
• To communicate with you for marketing-related purposes if agreed by you. This includes communications about our products, services, promotions and events by telephone, post, SMS, e-mail, chat or via our applications or to send you samples, gifts and rewards in accordance with your communications preferences and to the extent permitted by applicable laws. These communications can be conducted by our beauty advisors or by any of our group companies (please see Section 8 below about how you can control your preferences and opt-out from these communications)
• To enrich your La Prairie profile. This includes supplementing your La Prairie profile with information related to your activities on social media and your browsing activity across different websites and devices through the use of cookies and similar technologies by us or third parties (such as social media - WeChat, WhatsApp, Baidu, Kakao Talk, Twitter, Facebook, Instagram or other online platforms). The privacy and cookie policies of these third parties will apply to their use of your personal data.
• To allow you to participate in the interactive features of the website and to place cookies and related technologies in accordance with Section 6 below.
• To ask your opinion or to take part in market research or client studies.
• To provide you with personalized advertising both on our Digital Platforms and other selected partner websites.
• To create lookalike campaigns that enable us to reach people who are likely to be interested in our products because they are similar to you. We may use cookies or other technologies that may rely on third parties (such as Meta, Instagram, WeChat and other online platforms). You may have provided your consent to those third parties and their respective privacy policies would apply.
• To monitor your account to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime in accordance with applicable law.
• To investigate any complaints or answer any inquiry received from you or from others about our Digital Platforms, Points of Sale or our products and services
• To monitor the use of our Digital Platforms and Points of Sale and use your information to help us monitor, improve and protect our products, brand, content, services and Digital Platforms and Points of Sale, both online and offline and your experiences with us including via research and demographic studies; analytics and data cleansing and measuring the effectiveness of our advertising campaigns.
• To use personal data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such personal data in connection with legal process or litigation) or to enforce or apply our Terms of Use or any other agreements, our selective distribution system or to protect the rights, property, or safety of La Prairie, our customers, or others.
• For our internal corporate reporting purposes.
• In response to requests by government or law enforcement authorities conducting an investigation.
• As otherwise permitted by law or as we may notify you. We may also use information you provide to us for other purposes as disclosed at the time you provide your information or otherwise with your consent.

Notice of third-party plugins that control collection of personal data:We use third party services on our Digital Platforms where the third party directly controls the collection of personal data on our behalf. These services are targeted marketing and advertising services. You have the right to opt-out of the "sale" or "sharing" of your personal data as detailed in our Privacy Policy.Data Retention:All of the categories of personal data described above will be retained for a certain period of time based on the following criteria: (i) as long as necessary to fulfil the purposes outlined in this Policy; (ii) any applicable legal requirements; or (iii) any request for deletion from you in applicable situations. You can find more information inSection 8.

Resources

• Notice of the Right to Opt-Out of the Sale or Sharing of Personal data: Section 9

We obtain personal data from or about you from various online and offline sources including when you: (i) interact with our websites listed on http://www.laprairie.com, mobile sites, applications or social media pages (together "the Digital Platforms"); (ii) create a La Prairie account on our Digital Platforms, or in our boutiques, stores, counters or spas ("Points of Sale"); (iii) interact with us on our chat services, forums or blogs; (iv) visit one of our Points of Sale; (v) participate in our events and demonstrations, loyalty or other client programs, competitions, promotions or surveys; (vi) subscribe to our marketing communications; (vii) make physical or distance purchases in our Digital Platforms or Points of Sale; (viii) participate in beauty consultations or treatments; or (ix) interact with our beauty advisors and customer service.

Our products are sold through various authorised business partners. Unless otherwise indicated at the time that you provide your personal data, this Policy does not apply to any personal data that our authorised business partners independently collect from you.

We collect and process the following personal data:

The list below is provided to give you an overview of the type of personal data we may collect and process. However, the collection and processing of these data are not systematic: only personal data necessary to fulfil each purpose will be collected and used.

Personal data provided by you (for example, by creating a La Prairie account, signing up to our loyalty or other client programmes, or by providing data about yourself to us in our Digital Platforms or Points of Sale):

• Contact information (such as your name, phone number (home and mobile), home address and email address);
• Identification information, (such as your age, date of birth, gender, nationality, country of residence, image, signature);
• Purchase history and interactions with us (such as order details, products bought and quantity, consultations, treatments, visits to our Digital Platforms or Points of Sale);
• Social media account;
• Billing information (including delivery address and payment details). We reserve the right to request additional evidence or proof of billing information where, in our reasonable opinion, this is necessary. Please note we do not keep your payment card details on file. We use a third-party data controller to process payment details;
• Website registration credentials (including username and password). By creating a La Prairie account, you can store and edit your delivery addresses and billing information and review your previous purchases and order history;
• Preferences (such as communication channels, preferred language, product preferences, skincare wishes);
• Personal life information and inferences (such as life habits, interests, lifestyle, hobbies, reactions to marketing campaigns);
• Skin type and health information in case you participate in our beauty consultations or treatments (such as allergies, medication, previous reactions) or you provide this information to our customer service;
• Information about your physical characteristics, skincare concerns and any other information obtained through the different interactions with us (such as a beauty consultation or treatments, a survey or when you visit our social media pages, blogs or forums or interact with customer service or our chat service);
• Correspondence and communication between us and you; and,
• Information or content you provide to us (such as photographs, videos, reviews, questions, survey response and comments).

We do not knowingly collect and process information about minors, nor do we knowingly sell or share personal data about individuals who are under the age of 16.

Information automatically collected and processed from us or from your use of our Digital Platforms, your visits to our Points of Sale or interaction with our online adverts.

We automatically collect and process the following information:

• technical information, including your device’s IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, unique device identifiers and advertising identifiers;
• information about your visit to our Digital Platforms, including the URL clickstream to, through and from our Digital Platforms (including date and time); products you viewed or searched for, the content (and any ads) that you view or interact with, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
• online activity, such as your internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with our websites or third-parties websites such as social media, applications or advertisements and other technical information or personal information shared by the service provider you are using;
• social media data – the use of our Digital Platforms does not generally involve processing data in relation to third party media platforms and/or social networks, such as Facebook or Instagram. However, if you accept the targeting cookies or if you use the share button to share our content through those platforms, those third parties may collect and process your data in order to provide you with personalised advertising. To find out more about how those third parties process your data and your data protection rights, please check their respective privacy policies;
• CCTV security camera data (such as your image) when you visit one of our boutiques that has a CCTV camera used to view and record individuals 24 hours per day, 7 days per week for security reasons. When a CCTV camera is in use at our boutiques, we will make sure that signs are displayed at the entrance of the surveillance zone to inform employees, clients and contractors. Other activities might be conducted at our boutiques, such as measurement and analysis of client’s movements and demographics in an aggregated and anonymous way. If they involve the processing of your personal data, additional and specific notice will be available at our boutiques and your consent will be requested if required by applicable laws;
• Information necessary to fight counterfeiting and infringements of La Prairie’s intellectual property rights, such as identification and contact details and any other information and documents related to counterfeit and infringing activities. This information may be collected directly by La Prairie or one of its vendors on its behalf and provided to La Prairie by external parties;
• Information necessary to manage La Prairie’s selective distribution system in order to protect La Prairie brand and identify unauthorised resellers. This will include profiling activities on client’s purchase behaviours (such as products bought, quantities, frequency and other transaction details) based on objective criteria but it does not imply automated decision making.

Some of this information is collected using cookies and related technologies. To learn more, please see Section 6 on "Cookies and related technologies".

Information collected and processed from third party sources

• From time to time (where permitted by applicable law), we collect information such as your preferences, interests and other demographic data from trusted third party sources (e.g. business and retail partners, payment and delivery services, social media networks, advertising networks, analytics providers, market research organisations, our affiliates, event partners, public authorities and search information providers) for example, when you have given consent to such third party to share your information with us. We may also instruct such third-party partners to provide their own information about you to external platforms. This information will be used for the purposes outlined in this Policy, and in particular, to enrich your La Prairie profile. The privacy and cookie policies of those third parties will apply to their processing of your personal data.
• Location information when you visit our Digital Platforms in order to direct you to the appropriate domain (internet location) or when you request location services provided by us, for example in order to find the nearest store to you or to provide more precise location based content.
• When you pay for your products, we may get information from our payment processing service provider who will carry out credit and antifraud checks on you and the payment method you provide in order to verify your identity, to validate your credit or debit card, to obtain an initial credit or debit card authorization and/or to authorize individual purchases.

Profiling

In order to ensure data accuracy and to offer you a better and personalised client experience no matter where and how you interact with us, we link or combine the information that we collect from the different sources and channels outlined above to provide personalised services, content, targeted communications and advertising and for analytics purposes (e.g. we combine data about your purchases in our Digital Platforms with information gathered at our Points of Sales such as details from a beauty consultation so that we can provide you with personalised service, offers and skincare recommendations). This includes combining personal data also collected by different La Prairie companies. All the information that La Prairie processes about you (including information provided by you or collected by us or by third parties) will be linked to your La Prairie profile. We also may draw inferences from any of your information and interactions with us to enrich and supplement such profile, reflecting your preferences, characteristics, trends, predispositions, aptitudes and attitudes. We will use your identification data such as email address or phone number to link the information to your profile. The above may also apply when checking out as a guest on our Digital Platforms and if you are a prospective client.

You do not have to provide personal data to us to purchase our products in the Points of Sale or access our Digital Platforms but certain functionalities and services (such as being able to buy our products via the website) will not otherwise be available to you. You may however choose whether or not to receive personalised marketing communications from us and we will only send you such communications where we have the appropriate consent to do so. For more information on your rights and preferences regarding how we use your personal data, please Section 8 below.

You must not provide to us information about anyone else unless you have their permission to do so.

We process your personal data for the reasons set out below:

Purpose
To provide you with the products and services you have purchased or requested in our Digital Platforms or Points of Sale.This includes for example the processing of your payment, credit card checks and fraud prevention activities, delivery and return management.

Legal basis

• To fulfil a contract or take steps linked to a contract

Purpose
To send you service-related communications.This includes communications related to your purchases, your beauty consultations, appointments or events you have registered to.

Legal basis

• To fulfil a contract or take steps linked to a contract

Purpose
To set up and manage your La Prairie profile and provide you with personalised services.All personal data we process about you will be linked and combined to create a profile about you and provide you with personalised services adapted to your interests and preferences. More details can be found inSection 2under "Profiling".

Legal basis

• To fulfil a contract or take steps linked to a contract
• Our legitimate interest in strengthening client loyalty by providing personalised services based on client’s interests and preferences
• Your consent (if required by local applicable laws)

Purpose
To communicate with you for marketing-related purposes if agreed by you.This includes communications about our products and services (including requests for you to leave a review for a product or service you have purchased), promotions and events by telephone, post, SMS, e-mail, social media, chat or via our applications or to send you samples, gifts and rewards in accordance with your communications preferences and to the extent permitted by applicable laws. These communications can be conducted by our beauty advisors or by any of our group companies (please seeSection 8below about how you can control your preferences and opt-out from these communications);

Legal basis

• Your consent

Purpose
To manage and display client reviews on our Digital Platforms. This includes processing the content of your reviews and ensuring compliance with our website terms and review guidelines. We use the data you provide in order to publish and maintain your review and rating on our website in accordance with ourReview Guidelines. Your review will be published under your nickname/pseudonym.

Legal basis

• Our legitimate interests to help us better understand our clients’ needs and expectations and, as a result, to improve and promote our services, products, and brand.

Purpose
To communicate with you regarding reviews you have submitted. This includes notifications if your review is rejected or requires modification, or if there are updates related to your review in order to ensure compliance with ourReview Guidelines.

Legal basis

• Our legitimate interests in enforcing our Review Guidelines and ensuring compliance with our content standards, and to protect the integrity of our platform, prevent misuse, and address any disputes or concerns related to submitted reviews.

Purpose
To enrich your La Prairie profile.This includes supplementing your La Prairie profile with information related to your activities on social media and your browsing activity across different websites and devices through the use of cookies and similar technologies by us or third parties (such as social media - WeChat, WhatsApp, Baidu, Kakao Talk, Twitter, Facebook, Instagram or other online platforms). The privacy and cookie policies of these third parties will apply to their use of your personal data.

Legal basis

• Your consent

Purpose
To allow you to participate in the interactive features of the website and to place cookies and related technologiesin accordance withSection 6below.

Legal basis

• Our legitimate interests to ensure the good performance of our website and user experience
• Your consent

Purpose
To ask your opinion or to take part in market research or client studies.

Legal basis

• Your consent

Purpose
To provide you with personalized advertisingboth on our Digital Platforms and other selected partner websites.

Legal basis

• Your consent

Purpose
To create lookalike campaignsthat enable us to reach people who are likely to be interested in our products because they are similar to you. We may use cookies or other technologies that may rely on third parties (such as Facebook, Instagram, WeChat and other online platforms). You may have provided your consent to those third parties and their respective privacy policies would apply.

Legal basis

• Your consent

Purpose
To monitor your accountto prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime in accordance with applicable law.

Legal basis

• Our legitimate interests to protect our business and our systems
• Comply with a legal obligation

Purpose
To investigate any complaints or answer any inquiryreceived from you or from others about our Digital Platforms, Points of Sale or our products and services.

Legal basis

• Our legitimate interests to provide customer service and protect and improve our business
• Comply with a legal obligation

Purpose
To monitor the use of our Digital Platforms and Points of Saleand use your information to help us monitor, improve and protect our products, brand, content, services and Digital Platforms and Points of Sale, both online and offline and your experiences with us including via research and demographic studies; analytics and data cleansing and measuring the effectiveness of our advertising campaigns.

Legal basis

• Our legitimate interests to analyse, understand and improve our business activities

Purpose
To use personal data in connection with legal claims, compliance, regulatory and investigative purposesas necessary (including disclosure of such personal data in connection with legal process or litigation) or to enforce or apply ourTerms of Useor any other agreements, our selective distribution system or to protect the rights, property, or safety of La Prairie, our customers, or others.

Legal basis

• Our legitimate interests to protect our company and the La Prairie brand and defend ourselves from legal claims
• Comply with a legal obligation

Purpose
For our internal corporate reporting purposes.

Legal basis

• Our legitimate interests

Purpose
In response to requests by government or law enforcement authoritiesconducting an investigation.

Legal basis

• Comply with a legal obligation

In addition to the La Prairie companies mentioned in the Data Controllers & Contact section below, we may share your personal data: (where permitted in accordance with applicable privacy laws) with the following third parties for the purposes outlined above:

Please note that the third parties listed above may be located in a country outside of your country of residence, including outside the European Economic Area, United Kingdom or Switzerland. When these third parties process your data on our behalf, we implement appropriate contractual arrangements with them that include strong data protection obligations. More details about international data transfers can be found below under "Data Transfers."

• companies in our group. A full list of our group companies can be found here;
• banks and our payment services provider for the purpose of transaction processing;
• third parties, where we have your permission to do so (e.g. social networks providers, concierge services, our authorised retail partners, or e-commerce platforms that sell our products). Your personal data, including product reviews you submit, may be transferred to these third parties through a process known as review syndication, allowing reviews to be displayed on multiple e-commerce platforms. Your personal data will become subject to the privacy policies of those third parties when your personal data is shared with them;
• prospective or eventual buyers of our business (if we or substantially all of our assets are acquired by or merged with a third party including through bankruptcy);
• any law enforcement agency, court, regulatory, government authority or other third party where in our reasonable opinion this is necessary to comply with a legal or regulatory obligations or otherwise to enforce or apply our Terms of Use or any other agreements and our selective distribution system; or to protect the rights, brand, property, or safety of La Prairie, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; or
• our third-party service providers (as well as group companies and authorised retail partners) who perform services on our behalf based on our instructions. We do not authorize these parties to use or disclose the information except as necessary to perform services on our behalf or to comply with legal requirements. Examples of these parties include employees of our authorised retailers partners that serve you in the stores, IT support service providers, companies that fulfil orders and manage refunds, and provide data hosting and support, content personalization, advertising and marketing services (including digital and personalized advertising) and data cleansing, management, segmentation and analysis.

We also share information with third parties including social media and search engine partners:

We aggregate your personal data with the information of other customers, creating a dataset of information about the usage of our platforms, purchase of our products, and other general, grouped information about our customers. Although this dataset is aggregated and anonymised, meaning it cannot directly identify you as an individual, it provides a valuable insight into the use of our Digital Platforms and Points of Sale and we will share it with select third parties. These parties include our group companies.

We also transfer information about you to ad technology providers and our social media and search engine partners (including Meta, TikTok, Google and Twitter) so that they may recognize your devices and deliver interest based content and advertisements. The information can include your name, postal address, email, device ID, or other identifier in encrypted form. The providers often process the information in hashed or de-identified form. These providers can collect additional information from you, such as your IP address and information about your browser or operating system; combine information about you with information from other companies in data sharing cooperatives in which we participate; and may place or recognize their own unique cookie on your browser. The third parties that generate these cookies have their own privacy policies that will apply.

In this regard, we have concluded a corresponding agreement with Meta for joint controllership, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This agreement defines the respective responsibilities for fulfilling the obligation under the applicable laws with regard to joint controllership. The contact details of the controller and the data protection officer of Meta can be found here: https://www.facebook.com/about/privacy. Without prejudice to this, the jurisdiction of the Rights of Data Subjects is not limited. We have agreed with Meta that Meta can be used as a contact point for the exercise of data subject rights (see Section 8).

Further information on how Meta processes personal data, including its legal basis and further information on the rights of data subjects can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of joint controllership based on the legitimate interest.

Information on the data security conditions can be found here. https://www.facebook.com/legal/terms/data_security_terms and on processing on the basis of standard contractual clauses can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Data Transfers

Your personal data is stored mainly on servers in the European Union. However, we operate globally and may transfer your personal information to other companies within the La Prairie group, third party service providers or to authorised retail partners in locations around the world, including countries that do not provide an adequate level of data protection. We want you to have the best service and client experience no matter how and where you interact with us, whether in our Digital Platforms or our Points of Sale all over the world. For this purpose, we may have to share your personal information outside the country where you have first shared it with us, always for the purposes described in this Policy and where we are satisfied with the levels of protection and security implemented by the third party in compliance with applicable laws. This sharing of your personal information is necessary to enable us to offer you a global and personalised client experience and services.

Where your personal data is transferred to countries outside the European Union or Switzerland and to countries that do not offer an adequate level of data protection in accordance with the European Commission and Swiss authorities, we will take steps to ensure your information is adequately protected by entering into the EU Commission and Swiss approved standard contractual clauses pursuant to Art. 46 (2) of the GDPR or put in place other measures under applicable laws to ensure that such transfer provides adequate safeguards. More information about this topic is published here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en

A copy of the relevant mechanism can be obtained for your review on request by using the contact details provided in Section 10.

您的个人数据将根据以下标准保留一段时间：(i) 实现本政策所述目的所需的时间；(ii) 任何适用的法律要求；或 (iii) 在适用情况下您提出的任何删除要求。

• 对于我们的客户，您的数据将在合同关系存续期内保存，并在合同关系结束后保存 7 年。
• 对于我们的潜在客户：您的数据将在您与我们最后一次互动后保存 3 年。

请注意，法律（如税务、会计或法定义务）可能要求我们将某些数据保存更长的时间。如需了解更多信息，请使用第 10 段中的详细信息与我们联系。

什么是 Cookie？

Cookie 是网站向您的电脑、移动设备或其他互联网连接设备发送的小文本文件，用于唯一识别您的浏览器或在您的浏览器中存储信息或设置。

我们使用并允许第三方服务提供商在我们的平台、社交媒体页面和通信中使用 Cookie、网络信标和其他类似技术。我们这样做是为了了解您对我们服务的使用情况，改善您的用户体验，实现个性化功能和内容；优化我们的广告和营销，并使第三方广告公司能够协助我们在互联网上提供符合您兴趣的特定广告。您可以在 Cookie 设置中查看完整的 Cookie 列表，并更新您的首选项。

我们使用的 Cookie 可分为以下几类：

这些 Cookie 是网站运行所必需的，无法在我们的系统中关闭。通常只有在您采取相当于服务请求的行动时，如设置您的隐私首选项、登录或填写表单时，才会设置这些 Cookie。您可以将浏览器设置为阻止或提醒您注意这些 Cookie，但这会导致网站的某些部分无法运行。这些 Cookie 不会存储任何个人身份信息。

• 严格必要的 Cookie

通过这些 Cookie，我们可以统计访问量和流量来源，从而衡量和改进网站的性能。它们有助于我们了解哪些网页最受欢迎，哪些网页最不受欢迎，并了解访客是如何在网站上移动的。只要技术上允许，这些 Cookie 收集的所有信息都是汇总的，因此是匿名的。
[如果您不允许这些 Cookie，我们将无法知道您何时访问过我们的网站。在征得您的同意后，我们将为此目的使用由 Google Inc 运营的 Google Analytics。要选择不被 Google Analytics 跟踪，可以访问 Cookie 设置或访问 https://tools.google.com/dlpage/gaoptout。

• 分析/性能 Cookie

这些 Cookie 使网站能够提供增强的功能和个性化服务。它们可能由我们或我们在网页中添加其服务的第三方供应商设置。如果您不允许这些 Cookie，部分或全部服务可能无法正常运行。

• 功能性 Cookie

这些 Cookie 可能由我们的广告合作伙伴通过我们的网站设置。这些 Cookie 可能会被这些公司用来建立您的兴趣档案，并在其他网站上向您展示相关广告。它们不会存储直接可识别的个人信息，而是基于对您的浏览器和互联网设备的唯一识别。如果您不允许这些 Cookie，您看到的针对性的广告会减少。

• 定向/广告 Cookie

网络服务器日志和网络信标

在通过 Cookie 获取信息的同时，我们的网络服务器可能会记录您的详细信息，如操作系统类型、浏览器类型、域和其他系统设置，以及您的系统使用的语言和您的设备所在的国家/地区和时区。网络服务器日志还可能记录一些信息，如将您链接到我们网站的网页地址以及您用于连接互联网的设备的 IP 地址。这些信息有助于我们排除故障、提高性能和维护数字平台的安全。为了控制哪些网络服务器会收集这些信息，我们可能会在网页上放置名为“网络信标”的标签。网络信标是将网页链接到特定网络服务器及其 Cookie 的计算机指令。我们还可能使用 Cookie 和类似技术（如网络信标），以便了解我们发送给您的电子邮件是否被打开和执行，以及我们的邮件工具是否正常工作，或者衡量性能，并提供与您更相关的内容和广告。

我可以选择不接受 Cookie 和类似技术吗？

您可以随时在 Cookie 设置中选择接受或拒绝我们的 Cookie。

拒绝或禁用 Cookie 可能会使您无法使用某些网站内容或功能。

由于网络信标与网页要素中包含的任何其他内容请求相同，因此您无法选择退出或拒绝它们。不过，您可以通过不下载所收到的邮件中包含的图像来禁用电子邮件中的网络信标（此功能因您个人电脑上使用的电子邮件软件而异）。不过，由于特定电子邮件软件的功能不同，这样做不一定能禁用电子邮件中的网络信标或其他类似技术。有关详细信息，请参阅电子邮件软件或服务提供商提供的信息。在某些情况下，选择退出 Cookie 或修改浏览器中的 Cookie 设置也可使网络信标失效。

我们致力于保护我们收集的个人数据，保证您的个人数据安全对我们来说非常重要。我们采取措施，确保您的个人数据受到保护，防止未经授权或非法的处理，防止意外丢失、损坏、毁坏或披露，我们仅限于允许有合理需要的人员访问您的个人数据，以便向您提供产品或服务。但是，没有哪套安全措施可以完全有效地应对所有安全威胁。

我们的数字平台可能包含指向第三方网站的链接，或通过第三方网站上的链接访问。如果您通过链接进入这些网站，请注意这些网站有自己的隐私政策，对于这些政策或第三方如何使用您的个人数据，我们不承担任何责任或义务。在您向这些网站提交任何个人数据之前，请查看这些政策。

如果您在我们这里创建了一个在线帐户，作为我们安全规程的一部分，我们会要求您提供一个帐户用户名和密码。您必须将此类信息视为机密信息，不得向任何第三方披露。

您的权利

根据适用法律，您可能拥有以下权利：

这些权利在某些情况下可能会受到限制，例如，我们可以证明我们有处理您的个人数据的法律要求或合同义务。在某些情况下，这可能意味着即使您撤回同意，我们也可以保留您的个人数据。在这种情况下，我们将采取适当的措施和保障来保护您的个人数据。

• 访问权和知情权：您有权以简洁、透明、易懂和易于获取的形式，获知我们处理有关您的哪些个人数据以及我们的处理方式。您还有权要求我们确认是否处理了您的个人数据，如果是，您还有权访问这些个人数据并获得副本。
• 更正权：您有权更正您的个人数据，如果数据不完整或不准确，您有权对其进行完善。
• 删除权：您有权要求我们删除您的个人数据。我们将删除您的个人信息或对其进行匿名化处理，除非适用的数据保护法律另有要求，或 La Prairie 有保留这些信息的合法权益。
• 限制处理的权利：在某些情况下，您有权要求限制对您个人数据的处理。
• 数据可携带权：您有权以结构化、常用且机器可读的格式接收您提供给我们的个人数据，并有权将这些个人数据传输给另一个控制方。
• 撤销同意的权利：如果您已对数据处理活动表示同意，您可以随时根据“您的偏好”部分的说明撤销此类同意。请注意，撤销同意并不影响撤销同意前基于同意所做处理的合法性。

反对权

当我们基于合法权益处理您的个人数据时，您有权反对此类处理。尽管如此，我们可能有合法理由继续处理您的个人数据。

如果您希望行使这些权利中的任何一项，请使用第 10 段中的详细信息联系我们。

您的偏好

针对您提供给我们的个人数据，我们努力为您提供多种选择。通过以下机制，您可以控制您的个人数据：

广告、营销和个性化（线下和线上）：如果您希望收到有关我们的产品和服务、活动、会员计划和其他客户计划以及其他促销活动的通知，您可以通过在我们的数字平台和销售点进行相关勾选，或通过回答我们的 Beauty Advisor 或门店代表提出的问题来表明您的通讯偏好。我们的某些活动和通讯可能会根据您的具体兴趣和偏好进行个性化处理（如果法律要求，将在您的许可下进行）。

如果您希望停止接收我们的营销通讯（和/或您希望仅退出某些类型的个性化营销通讯），只需按照相关通信中的退出说明或使用第 10 段中的详细信息随时通知我们即可。请注意，我们会发送不同类型的个性化营销通讯（如新闻简报、Beauty Advisor 电子邮件、调查等），您可以决定退出全部或部分通讯。选择退出个性化营销通讯并不会阻止您接收我们的服务消息（即非营销通讯，例如有关您的订单状态或您的帐户活动通知的电子邮件更新）。

请注意，您可能会被询问希望通过哪个渠道接收我们的通讯，您可以随时通过联系我们的 Beauty Advisor 或使用第 10 段中的联系方式来更改或更新该选择。

如果您在我们的数字平台上拥有 La Prairie 帐户，您可以在登录后在您的帐户个人资料下撤回您的同意和/或更新您的通讯偏好。

Cookie/类似技术和基于兴趣的广告： 您可随时在 Cookie 设置中设置您的 Cookie 首选项。

如果您是加州居民，您可以享受以下隐私权：

如果您是弗吉尼亚州居民，您可以根据《弗吉尼亚州法典》第 59.1-577 条行使某些隐私权。例如，您可以要求访问、更正或删除您的个人数据。由于根据弗吉尼亚州法律中的定义，我们有“出售”个人数据和发送“定向广告”的行为，因此您也可以行使权利，选择退出此类出售或定向广告。如果您主张隐私权时遭到拒绝，您有权提出上诉。

如何提交请求

如需行使加利福尼亚州或弗吉尼亚州法律规定的知情权、删除权或更正权，或就主张隐私权时遭到拒绝的问题提出上诉，请使用我们网站的客户服务页面向我们发送信息，或通过电话 1 800 821 5718 或使用下文中“数据控制方和联系方式”部分的联系信息与我们联系。在对您的访问和删除请求作出回应之前，我们可能会要求您提供某些信息，以核实您的身份。我们将在 10 个工作日内确认收到您的请求，并在适当核实后的 45 个日历日内对您的请求做出答复，除非我们需要更多时间，在这种情况下我们会通知您。

要行使您选择不出售或不共享个人数据的权利，请点击我们网站页脚的不出售或共享我的个人信息链接，或使用下文中“数据控制方和联系方式”部分提供的信息联系我们。

我们不会因为您依据隐私政策的本部分规定行使了权利而歧视您。

代理请求

您可以授权他人代表您提出隐私权请求（授权代理）。授权代理人需要证明您已授权他们代表您行事，或者必须证明他们拥有适用遗嘱法规定的授权。La Prairie 保留直接要求您确认代理人有权提出此类要求的权利，或要求提供更多信息以确认代理人身份的权利。授权代理人不得将消费者的个人数据或从消费者处收集的或关于消费者的任何信息用于满足消费者要求、验证或防止欺诈以外的任何目的。

短信

您可发送短信 SIGNUP 至 48442 以接收有关 La Prairie 的专属新闻，或通过在我们的网站注册获得订阅，从而用您提供的手机号码接收来自 La Prairie 的促销短信。同意接收营销短信不是购买任何商品或服务的必要条件。对于您接收的短信，您的移动服务或无线设备运营商可能会收取标准消息、数据、语音或其他费率。您收到短信的频率并不固定。

您可以对收到的任意短信回复 STOP 或发送 STOP 至 48442 随时退订短信服务。您可能会收到最后一条确认退订请求的短信。如需接收与帮助相关的短信，请对收到的任意短信回复 HELP 或发送 HELP 至 48442。您也可以使用第 10 段中的详细信息与我们联系。

我们在美国支持的运营商有：AT&T、Sprint、T-Mobile®、Verizon Wireless、Boost、Cricket、MetroPCS、U.S. Cellular、Virgin Mobile、ACS Wireless、Appalachian Wireless、Bluegrass Cellular、Carolina West Wireless、Cellcom、C-Spire Wireless（原 Cellsouth）、Cellular One of East Central Illinois、Cincinnati Bell Wireless、Cross (dba Sprocket)、Duet IP、Element Mobile、EpicTouch、GCI Communications、Golden State、Hawkeye（Chat Mobility）、Hawkeye（NW Missouri Cellular）、Illinois Valley Cellular、Immix（Keystone Wireless / PC Management）、Inland Cellular、iWireless、Mobi PCS（Coral Wireless LLC）、Mosaic、MTPCS / Cellular One（Cellone Nation）、Nex-Tech Wireless、nTelos、Panhandle Telecommunications、Peoples Wireless、Pioneer、Plateau、Revol Wireless、Rina - Custer、Rina - All West、Rina - Cambridge Telecom Coop、Rina - Eagle Valley Comm、Rina - Farmers Mutual Telephone Co、Rina - Nucla Nutria Telephone Co、Rina - Silver Star、Rina - South Central Comm、Rina - Syringa、Rina - UBET、Rina - Manti、South Canaan / CellularOne of NEPA、Thumb Cellular、Union Wireless、United、Viaero Wireless、West Central Wireless、Leaco、Nemont/Sagebrush。T-Mobile 不对延迟或未送达的消息负责。

• 知情权：您有权了解我们收集的关于您的个人数据，包括个人数据的类别、收集个人数据的来源类别、收集、出售或共享个人数据的业务或商业目的、我们向其披露个人数据的第三方类别以及我们收集的关于您的具体个人数据。
• 删除权：您有权删除我们向您收集的个人数据，但某些情况除外。请注意，有些情况下我们无法完全满足您的要求，例如我们需要为您完成交易、检测和防范欺诈和非法活动、行使我们的权利、用于内部目的或履行法律义务。
• 更正权：您有权更正我们可能保存的关于您的不准确个人数据，但须进行适当的核实。
• 选择退出出售或共享个人数据的权利：您有权选择退出将您的个人数据“出售”或“共享”（根据加州隐私法对此类术语的明确定义）给第三方或不具有相同品牌名称的附属公司。这意味着，如果您选择退出，今后我们不会将您的个人数据出售或共享给此类第三方用于其目的，包括跨情境行为广告，除非您后来指示我们进行此类操作。

数据保护披露

出于业务目的披露的个人数据类别

在过去十二个月中，La Prairie 出于业务目的披露了以下类别的个人数据（例如向我们的服务提供商或处理商披露，仅限于其根据书面合同，使用我们披露的个人数据向我们提供某些服务）：

• 标识符、账单信息和商业信息，披露给我们的附属公司、第三方服务提供商、支付处理商、电子邮件/短信服务提供商、客户服务和情报平台、云数据存储提供商以及反欺诈和反仿冒服务提供商。
• 网站注册凭据，披露给我们的云数据存储提供商。
• 偏好，披露给我们的附属公司、第三方服务提供商、电子邮件/短信服务提供商、客户服务和情报平台以及云数据存储提供商。
• 个人生活信息，披露给我们的附属公司、第三方服务提供商、客户服务和情报平台以及云数据存储提供商。
• 与您的沟通，披露给我们的附属公司、第三方服务提供商和云数据存储提供商。
• 您提供的内容，披露给我们的附属公司、第三方服务提供商和云数据存储提供商。
• 互联网或电子活动信息，披露给我们的附属公司、第三方服务提供商、支付处理商、电子邮件/短信服务提供商、客户服务和情报平台、云数据存储提供商以及反欺诈和反仿冒服务提供商。
• 人口统计信息，披露给我们的附属公司、第三方服务提供商、支付处理商、电子邮件/短信服务提供商、客户服务和情报平台、云数据存储提供商以及反欺诈和反仿冒服务提供商。
• 敏感个人数据，披露给我们的附属公司、第三方服务提供商、电子邮件/短信服务提供商、客户服务和情报平台以及云数据存储提供商。
• 音频或视频信息，披露给我们的安全服务提供商。
• 从上述类别中得出的推断，披露给我们的附属公司、第三方服务提供商、支付处理商、电子邮件/短信服务提供商、客户服务和情报平台、云数据存储提供商以及反欺诈和反仿冒服务提供商。

有关我们披露个人数据的商业目的的更多详情，请参阅上文“我们如何披露和传输您的个人数据？”

出售或共享的个人数据类别

在过去 12 个月中，La Prairie 出于本隐私政策所述目的（包括定向广告），向广告网络、广告平台和社交媒体公司出售或共享了以下类别的个人数据：

• 标识符
• 商业信息
• 偏好
• 个人生活信息
• 互联网或电子活动信息
• 社交媒体信息
• 人口统计信息
• 从上述类别得出的推断

我们不会在知情的情况下出售或共享 16 岁以下人士的个人数据。

If you have any questions about this Policy or privacy matters generally or to make a complaint about our compliance with applicable privacy laws, please contact us using the Contact us page of our website and our customer services team will be happy to assist you.

You can also use this Contact us if you wish to exercise your preferences and rights as detailed above.

We will acknowledge and investigate any complaint you make (including a complaint that we have breached your rights under applicable privacy laws). We hope that we can satisfy queries.

However, you have the right to lodge a complaint with the relevant data protection authority, in particular in the Member State of your habitual residence or place of the alleged infringement.

DATA CONTROLLER RESPONSIBLE FOR ALL ACTIVITIES (BOTH ONLINE AND OFFLINE)

LA PRAIRIE GROUP AG Bellerivestrasse 36CH-8008 Zurich Switzerland

Phone number: +41 44 947 82 10 Contact Us form:Contact us

Representative of La Prairie Group AG in the European Union:Email address:office@datenschutz-sued.de

Phone number: +49 931 304 976 0

Data Protection Officer of La Prairie Group AG (and its affiliates):Email address:Data.Privacy@LaPrairieGroup.ch

Phone number: +41 44 947 82 10

If indicated at the time you make a La Prairie purchase in our Points of Sale or you provide your details to one of our instore beauty advisors or representatives, the La Prairie group companies will also act as local data controllers. Please find here the list of companies and contact details: https://www.laprairiegroup.ch/contact-us.

PRIVACY POLICY - 18 DECEMBER 2024

1.General Information

1.1 Processing of Personal Data

The purpose of this privacy policy is to provide you with information concerning the processing of personal data when using our corporate and careers websites, and for related services if you are a service provider, business partner, or third-party vendor. This privacy policy applies to all websites or services that feature this privacy policy.

For more information about our data processing activities related to our application process, employees and contingent workers, please visit our dedicated Privacy Notice for Employees, Job Applicants and Contingent Workers, also available on our corporate careers website. 

For more information about our data processing activities related to our clients, clienteling activities and our e-commerce platforms, please visit our dedicated Privacy Policy, also available in all relevant languages depending on your region.

Personal Data refers to any information relating to an identified or identifiable natural person. This includes, but is not limited to, information such as name, address, email address, phone number, or any other data that can be used to directly or indirectly identify an individual. The definition and treatment of personal data are governed by applicable data protection laws and regulations in the relevant jurisdiction, which may include specific rules regarding the collection, processing, storage, and transfer of such data. 

1.2. Controller

Responsible for the processing of personal data is: 

La Prairie Group AG

Bellerivestrasse 36, 8008, Zürich Switzerland

Info[at]LaPrairieGroup.ch

+41 44 947 82 10

Contact details of the Data Protection Officer: 

Data.Privacy[at]LaPrairieGroup.ch, or under the postal address of the controller for the attention of the “Data Protection Officer”.

Specific data processing activities might occur under the responsibility of other controllers, including our local affiliates, in connection with local processing activities. It is indicated in the respective description of those activities below, where this is the case. For a list of contact details for all La Prairie affiliates, please visit our dedicated page here.

1.3. Rights of the Data Subject

As a data subject affected by the data processing activity, you have the following rights with regard to your personal data, subject to the applicable data protection laws and regulations in your relevant jurisdiction:

• Right of access;
• Right to rectification and to erasure;
• Right to restriction of processing;
• Right to data portability; and 
• Right to object. 

1.4 Recipients (general information)

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

When we work on your above-mentioned right, we may ask you for proof of your identity. For more information on how we process your data in this context, see Section 3.1.

In addition to the recipients that are listed within the recipients paragraph of each section below, we transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the La Prairie and Beiersdorf Group or to external service providers, contract processors in accordance with the purposes required. We also forward the data to the following recipients:

• Platform/hosting providers may have access to personal data from jurisdictions outside of your own. In such cases, appropriate safeguards are implemented, including legally binding agreements or contractual mechanisms that comply with applicable data protection laws and regulations. Where personal data is transferred to jurisdictions covered by specific adequacy decisions or similar rulings, those rulings will apply. For more information (such as a copy of the safeguards), you can contact us as outlined under Section 1.2.

• Analytical service providers may have access to personal data from jurisdictions outside of your own. In these instances, appropriate safeguards, such as legally binding agreements or other contractual mechanisms, are in place to ensure compliance with the relevant data protection laws and regulations. If the transfer is made to jurisdictions with recognized adequacy decisions or similar provisions, those rulings apply. For further details, including information about these guarantees, please contact us as mentioned under Section 1.2.

• IT support service providers may have access to personal data from jurisdictions outside of your own. To protect this data, legally binding agreements or similar mechanisms are used to ensure the protection of personal data in line with applicable data protection laws. In cases where an adequacy decision or equivalent applies, that decision will govern the transfer. More information, including copies of guarantees, is available upon request, as outlined in Section 1.2.

• Authorities: In the event of a legal obligation, we reserve the right to disclose your information if required to do so by competent authorities or law enforcement bodies in accordance with applicable data protection laws and regulations.

Further information can be found within the recipients paragraph of each section.

2. Collection and Processing of Personal Data when visiting our Website

When visiting and using our website we already collect personal data. You can find within this section more information about website specific processes and tools especially from external partners. Further information about processes which can also occur in an offline context can be found in Section 3.

2.1.Hosting

Purpose/Information:
When visiting and using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server, which are technically necessary for us to display our website to you and to guarantee stability and security.

Used Cookies/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
-Platform/hosting providers

-IT support service providers

Further recipients can be found in the general recipients Section 1.4.

Deletion:
The deletion of the log files takes place after 7 days.

2.2. Login functionalities

Our careers website might provide different login functionalities as described below.

2.2.1 Career Opportunities Login Profile

Purpose/Information: 
Our careers website allows you to create a centralised login profile and includes a separate consent during the registration process: When registering, La Prairie Group AG provides you with the opportunity to create an account with a password (login profile). This login profile will be created within the centralised login profile database and shall verify that you are the valid owner of the account and/or email address. This login database is in general only connected to the service you are registering to and handles only the verification part of your login profile. You will be asked to read and agree to our Privacy Notice for job applicants, a copy of which is also available under Section 3.4. The login profile will therefore also be accessible to the respective local La Prairie affiliate company from which you are demanding the service.   

Used Cookies: Type A. More information can be found in the “Cookies/Tools” section.

Controller: 
See Section 1.2 above.

Recipients: 
Platform/Hosting providers

Further recipients can be found in the general recipients Section 1.4.

Deletion / Withdrawal:  
Your login profile will be automatically deleted as soon as you have deleted your account on our careers website, unless this conflicts with legal storage obligations or statutes of limitations. An automatic deletion of candidate accounts in general take place after 12 months of inactivity.  

2.3. Cookies/Tools

This website uses cookies or other technologies/tools like pixels, local storage, tags, IDs or external services (hereinafter referred to as “Cookies/Tools”) and are used on when visiting and using our website. Cookies are small text files that are stored by your browser on your device to save certain information or image files, such as pixels. The next time you visit our website on the same device, the information saved in the cookies will subsequently be accessed on your device and transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”). 

Through the information saved and returned, the respective website can recognise that you have already accessed and visited it with the browser you use on that device. We use this information to be able to design and display the website in an optimum way in line with your preferences. In that respect, only the cookie itself is identified on your device. Beyond this extent, your personal data will only be saved upon your express consent or if it is strictly necessary to be able to use the service offered to and accessed by you accordingly.

This website uses the following types of cookies/tools, the scope and functionality of which are explained below:

• Type A: Technical/Audience Measurement – to ensure that the demanded service can be provided including basic analysis. 
• Type B: Functional and Performance – Additional tools to measure the performance/attractiveness of our website and to provide further additional (personalised) functionalities.
• Type C: Marketing/Advertising – Cross websites tools for marketing profiling based on user behaviour.

You can find more information on in the description of the tools implemented on our websites in this privacy policy.

For additional cookies relevant to this website that are not listed below, please refer to our Privacy Preference Center which is accessible by clicking “Cookies Settings” at the bottom of the page. This will allow you to review and manage your cookie preferences, including detailed information about the types of cookies used, their purposes, and the ability to opt in or out of specific categories of cookies, where applicable.

Please note that the tools listed in the following subsection might not be constantly in use.

2.3.1 OneTrust Cookie Consent – Central cookie management platform

Purpose/Information:
This website is using the consent management tool “OneTrust Cookie Consent” (www.onetrust.com) to obtain consent for data processing and use of cookies or comparable functions. "OneTrust Cookie Consent“ stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. 

By processing the data, OneTrust Cookie Consent helps us to fulfil our legal obligations (e.g. obligation to provide evidence). Our interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. "OneTrust Cookie Consent" stores your data as long as your user settings are active.

The provision of your personal data is required for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service.

Cookies/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider is OT Technology Spain, Passeo de la Castellana 77, 28046 Madrid, Spain.

Further recipients can be found in the general recipients Section 1.4.

Deletion:
The data will be stored for up to one year The choice you have made (consent/setting) will be stored for one year and can be viewed within the Cookie Settings. The Cookie Settings are located on the bottom of the main page. You can always delete your choice by deleting the cookies within your browser.

2.3.2 Google Analytics

Purpose/Information:
This website uses Google Analytics, a web analysis service of Google Ireland Ltd. (“Google”). 

Google Analytics uses a specific form of cookie, which is stored on your computer and enables an analysis of your use of our website. The cookies set by Google Analytics for measurement are first party cookies, which means that data subjects’ cookie values will be different for each customer (i.e. there is not a single Google Analytics cookie ID that is used on all sites using Google Analytics). The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. 

Google uses this information on our behalf to analyse your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. 

We use Google Analytics to analyse and regularly improve the usage of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. In addition, we gain information about the functionality of our site (for example to detect navigation problems).

In the configuration of Google Analytics, we ensured that Google receives this data as a processor and is therefore not allowed to use this data for its own purposes. The "Google Analytics Advertising Features" configuration is independent from this and is described in the appropriate section below, provided it is also used on this website. 

Cookies/Tools: Type B. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider: Google Ireland Ltd., Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion/Withdrawal:
You can deactivate this tool via the Cookie Settings. The Cookie Settings are located on the bottom of the main page.

Cookie lifetime: up to 24 months (this applies only to cookies which have been set by this website)

2.3.3 Google Analytics Advertising Features

This website also uses the extended functions of Google Analytics (Google Analytics Advertising Features) in addition to the standard functions. The Google Analytics Advertising Features implemented on this website include:

• Google Display Network Impression Reporting
• Google Analytics Demographics and Interest Reporting
• Remarketing Audiences based on specific behaviour, demographic, and interest data, sharing those lists with Google Ads
• Integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers
• Google Signals in order to receive more insights about you when you are signed in to your Google account in the browser with which you are accessing this website. This feature is only active if you have additionally consented within your Google settings to the data sharing/Ads Personalisation.

We therefore use first-party cookies (e.g. Google Analytics cookies) and Google advertising cookies and identifiers together in order to optimise our website.

Cookie/Tools: Type C. More information can be found in the “Cookies/Tools” section.

Information about Google Consent Mode:

Additionally, this website uses Google Consent Mode. Consent Mode sends statistical data via cookie-less pings about whether a user has clicked on an ad or link and has landed on our website (conversion). The statistical data is then used with a mathematical modelling to enhance the internal reporting. A ping contains by default technical information like the IP-address, platform type or screen resolution. As these data or the combination of it might theoretically be considered as personal data by Google Ireland Ltd, additional measures have been implemented to ensure that the ping data is not personal data: Certain information of the ping are being set to a default value by our server before sending it to Google analytics.

Recipients/Source:
Main service provider and source: Google Ireland Ltd., Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion/Withdrawal:
You can deactivate this tool via the Cookie Settings. The Cookie Settings are located on the bottom of the main page. 

Cookie lifetime: event data is stored for up to 50 months; your personal data as a user is stored for up to 14 months (this applies only for cookies which have been set by this website).

2.3.4 Google Tag Manager

Purpose/Information:
This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data are stored. The Google Tag Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.

Cookie/Tools: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:
Main service provider: Google Ireland Ltd, Ireland. 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion:
Aggregated event data is stored for up to 50 months; your personal data as a user is not stored in Google Tag Manager and therefore no retention period applies.

3. Further services offered (on- and offline)

In addition to the online use of our website, we offer various other services, for which we process your personal data also in an offline context. 

Contrary to Section 1.2, in some cases a legal entity within the La Prairie corporate group is the Controller for the services offered below; this will have already been identified within the communication itself. If reference is therefore made to sections of this privacy policy, and a Controller has already been named, e.g. in the footer/signature of an email or campaign card, this legal entity is the Controller in accordance with applicable data protection laws and regulations.  

3.1. Contacting/Communication/Collaboration

Purpose/Information:  
When communicating and/or collaborating with us, e.g. by email or via contact form on our website, or data exchange platform, be it e.g. as a business partner or customer, the data you provide (including but not limited to your email address, your name and your telephone number, or personal data submitted during the conversation) will be stored and processed by us in order to e.g. answer your questions, requests or for the purpose of business related correspondence.

With regard to the cooperation with our suppliers, we have implemented an internal evaluation process of due diligence which, in our legitimate interest, is intended to improve the business relationship. As a rule, we only process information about the company, but conclusions can be drawn about you as the contact person of that company, if the communication with suppliers is examined with regard to response times, reliability and transparency.

We may ask you when you contact us by telephone as a customer whether the telephone call may be recorded for quality assurance and training measures. If you agree to the recording, we will process all information that you share with us during the call (communication content, possibly also sensitive (health) data, as well as your phone number and other personal data).

When processing data arising in the course of communication, we have a legitimate interest in processing the data in accordance with legal requirements, for internal verification or in accordance with the respective communication request.

In certain cases, the provision of your personal data as a business partner or customer is required for the performance of the contract or a situation similar to a contract. Additionally, your personal data may be required for related purposes, such as compliance with legal obligations, responding to or conducting investigations, or handling legal or regulatory proceedings. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service. 

Recipients and sources:
If you are a business partner, we will regularly check your creditworthiness in certain cases (e.g. when concluding contracts). Our legitimate interest is the minimization of our financial risk. For this purpose, we cooperate with credit agencies from which we receive the necessary data. For this purpose we transmit your name and your contact data to the credit agencies.

If you are a business customer or partner, it may be necessary to transfer your personal data to prospective buyers as part of a company transaction. In the course of due diligence, usually anonymised data is processed. However, it may be necessary in specific individual cases to process personal data. Our legitimate interest lies in the execution of the company transaction.

We may transfer your collected data to our relevant internal departments for processing and to other affiliated companies within the La Prairie and Beiersdorf Group, to external service providers, contract processors, or, where necessary, to public authorities in compliance with legal obligations, regulatory requirements, or in response to lawful requests, all in accordance with the purposes required.

In the event of a legal obligation, we reserve the right to disclose information about you if we are required to surrender it to competent authorities or law enforcement bodies.

Additionally, we also forward the data to the following recipients:

• Platform/hosting providers;
• Analytical service providers; and/or,
• IT support service providers.

3.2. Job posting updates

For all recipients listed above, transfers of personal data to recipients in countries outside of the applicable jurisdiction may occur. Where required by law, appropriate safeguards, such as standard contractual clauses or other legally recognized mechanisms, are implemented to ensure adequate protection of personal data. For countries or entities subject to an adequacy decision, such a decision will apply. For more information or to request a copy of the relevant safeguards, please contact us at Data.Privacy[at]LaPrairieGroup.ch.

Further recipients can be found in the general recipients Section 1.4.

Deletion /Objection:
Your data will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless statutory retention obligations exist or periods of limitation must be observed.

Call recordings are stored for a maximum of 90 days. 

You can object to these processes according to the requirements under Section 4.

Purpose/Information: 
Job posting updates provide candidates with notifications about new job opportunities and relevant updates tailored to their preferences. By subscribing to these updates, candidates receive notifications based on their selected interests and preferences, such as keywords for specific roles, locations, or departments.

The updates are customized based on the preferences candidates set in their profiles. Candidates can adjust the frequency of these notifications through their candidate profiles under “Job Alerts” to receive updates every set amount of days on a recurring basis.

Recipients: 
-Platform/hosting provider

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion / Withdrawal: 
Candidates can unsubscribe from job posting updates at any time by logging into their candidate profile and updating their notification preferences. Job alerts and subscriptions will also be automatically deleted after 12 months of inactivity, at which point the entire candidate profile will be deleted.

3.3. Postal mailings

Purpose/Information:
As a selected customer or business partner, you may receive shipments from us by post (letter), including documents, products, or other materials necessary for the performance of a contract or based on our legitimate interests in facilitating business operations. These shipments are provided in the context of our professional relationship.

Recipients:
-Platform/hosting provider

-Communication service provider

-Shipping service provider 

Transfers of personal data to third countries as defined by applicable data protection legislation may occur. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection. For countries covered by an adequacy decision under applicable data protection legislation, the adequacy decision applies. For more information, including details about applicable safeguards, you can contact us as mentioned in Section 1.2.

Further recipients can be found in the general recipients Section 1.4.

Deletion / Objection:
Your data will be deleted as soon as the purpose for the shipment has been fulfilled unless legal storage obligations or statutes of limitations require otherwise. You can object to further postal mailings as described in the Section 4 below. We further delete your personal data after the contractual relationship between us has been terminated.

3.4. Data Privacy Statement for applicants (recruitment)

For more information about the application process please go to our dedicated Privacy Notice for Employees, Job Applicants and Contingent Workers, also available on our corporate careers website. 

4. Objection or Withdrawal of your consent to the Processing of Personal Data

If you have given your consent to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us. Withdrawing consent does not affect the lawfulness of any data processing that occurred prior to the withdrawal.

If we base the processing of your personal data on our legitimate interests, if relevant and as permitted by applicable law, you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the description of the functions/services. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing. 

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your objection under the above-mentioned contact details for the controller.