PIERRE FABRE GROUP PERSONAL DATA PROTECTION POLICY

We thank you for visiting us on our website. The protection and security of our customers’ and users’ personal data is a top concern for the Pierre Fabre group.
This Privacy Policy explains what information is collected when you visit and use our website and how this information is processed.

1. WHO ARE WE?

This website (hereinafter the « www.klorane.com/au-en »), is operated by Pierre Fabre Dermo-Cosmetique, Les Cauquillous - 81500 Lavaur - France (hereafter referred to as “ Pierre Fabre ” or “ Us ") who is responsible for processing personal data likely to be collected from you on the Website for the purposes described below.
We invite you to read this Privacy Policy carefully to find out the conditions for processing your personal data when you visit our Website. Please note that it may be updated at any time by Pierre Fabre. The date of the latest update will appear on this page. We therefore invite you to consult it regularly.

2. INFORMATION WE COLLECT ABOUT YOU

Depending on what services you use on our Website and how your device settings are configured (especially in terms of cookies and other trackers), personal information concerning you (hereinafter referred to as “ your Personal Data ”) collected and processed by Pierre Fabre include:
•    The data you have entered voluntarily in a form (newsletter subscription, contact, participation in a promotional event (competition, games or survey)), such as:
your first and last name, email address, telephone number, date of birth, sex, postal address, and any other information about you, communicated by you as part of your request (which may include health details).
•    The data generated by your browser, collected automatically by our server using “ cookies and other trackers ”.

•    Data specific to the web pages visited: the domain name; the date, time and duration of your visit; the pages, videos, adverts clicked on.

•    Data that is specific to you: your IP address (location of your network entry point; browser type, operating system).
We do not use this Personal Data collected automatically to try to identify you and do not link it to the Personal Data detailed above that you provide to us. 
We may also obtain Personal Data about you from third parties (e.g. from social media profiles if you are logged in to your social media account).

3. PERSONAL DATA PROCESSING PURPOSES

Below you will find an overview of the purposes of processing your Personal Data by our system and the reasons why this is necessary for us.

Personal Data essential for us to fulfil the purposes that are described above are marked with an asterisk on the various pages of the Website where they are collected.
If you choose not to fill in these mandatory fields, we may not be able to process your requests and/or provide you with the requested products and services. Other Personal Data is purely optional and allows us to get to know you better and improve our communications and services accordingly.

4. COMMUNICATION AND TRANSFER OF PERSONAL DATA

We are part of the international Pierre Fabre Group, and from time to time, we may disclose your Personal Data to the Pierre Fabre Group for the purposes set out above.

We may also appoint third-party service providers (who will operate in accordance with our instructions) to help us provide you with information, products or services, to direct and manage our business, or to manage and improve our Website. In such cases, those third parties may need to access your Personal Data.

If your Personal Data is transferred outside the EEA (European Economic Area) to other companies within the Pierre Fabre Group or service providers, we will take steps to ensure that your Personal Data is provided with the same level of protection as if they had remained within the EEA, including by concluding data transfer contracts, on the basis of standard contractual clauses approved by the European Commission as updated or revised or otherwise transfer mechanisms such as suitability decisions, Binding Corporate Rules or contracts approved by EU Data Protection Authorities where applicable.

We may also disclose your Personal Data to third parties as part of any actual or potential sale of Pierre Fabre or of any assets belonging to us or owned by affiliates, in which case the Personal Data that we hold on our users may be part of the transferred assets.

We will also respond to requests for information if the law requires us to do so, or if such disclosure is necessary to protect our rights and/or us, comply with a court order, a request from a regulator or any other legal or administrative process against us.

5. E-MARKETING

Where permitted by law, and subject to your consent where required, we may communicate with you by electronic means to present our products and services to you. If you wish to unsubscribe to no longer receive our communications, please use the "unsubscribe" link in our emails or send STOP by SMS to the number indicated, or contact us directly at the address "Contact us" and we will stop sending you messages.

6. STORAGE OF YOUR PERSONAL DATA

As a general rule, we only keep your Personal Data for the period necessary to achieve the purposes for which it was collected.
We only keep your Personal Data for as long as is strictly necessary to manage our relationship with you.

However, we will retain your Personal Data for direct marketing purposes for three years from the date of the last interaction between us if you are not a customer and as long as we remain in contact with you through our promotional activities if you are a customer, unless you object when you receive one of our marketing messages.

IP addresses collected for security purposes will not be stored for more than 10 days.

Finally, the connection logs that are collected will be kept, subject to your consent, using cookies and other trackers used on our Website, for a period of no more than thirteen (13) months in accordance with applicable laws and regulations. For further details, please refer to the “Cookies" section below.

We may need to retain your Personal Data in archive form beyond the period indicated below to comply with our legal obligations or if necessary, taking into account the applicable statute of limitation, to exercise one of our rights.
Once your Personal Data is no longer necessary for the purposes or archives to fulfil our legal obligations or statute of limitation, we ensure that they are either completely destroyed or anonymised.

7. EXTERNAL LINKS

The Website may contain links to third-party sites. As Pierre Fabre does not control nor is responsible for their data protection practices, we encourage you to review the policies of these third party-sites in terms of data protection. This policy applies solely to Personal Data collected by our Websites or in the course of our activities.

8. YOUR RIGHTS

In accordance with applicable regulations, you may have the following rights in respect to your Personal Data:
•    To obtain a copy of your Personal Data, information on how it is processed and the legal basis for this;
•    To correct incorrect Personal Data (including the right to complete incomplete Personal Data);
•    To delete your Personal Data provided that the legal basis for collecting the data allows you to do so. In addition, in certain cases this right can only be applied when the data are no longer necessary to achieve the purposes for which they were collected or processed;
•    To restrict the processing of your Personal Data where:
•    The accuracy of the Personal Data is contested;
•    The processing is unlawful but you oppose the erasure of your Personal Data;
•    We no longer need your Personal Data but they are still necessary for the establishment, exercise or defence of legal claims;
    To request the portability of your Personal Data in a machine-readable format for a third party (or for you) if our processing is based on your consent or on the performance of a contract that had been concluded with you;
    To obtain, or consult a copy of the appropriate measures taken to transfer your Personal Data to a third country or to an international organisation.
    To withdraw your consent to the processing of your Personal Data (if such processing is based on your consent) without prejudice to the lawfulness of processing based on consent before it is withdrawn.
    To provide general or specific instructions on how to process and use your Personal Data after your death.
    To object at any time the processing for marketing purposes. 
    In addition to the above rights, you have the right to object to any processing of your Personal Data justified by the legitimate interest of Pierre Fabre, including profiling (against your consent, or to perform a contract with you).
You also have the right to lodge a complaint with your local supervisory authority for data protection
To exercise these rights, please contact us using the contact details below, under “Contact information”.
Please note that we may request proof of identity, and we reserve the right to charge fees if permitted by law, for example, if your request is manifestly unfounded or excessive. We will try to respond to your request within the applicable time frame.

9. TYPES OF COOKIES WE USE

10. DELETION OF COOKIES

If you refuse cookies, we will not put any further cookies on your device, except the cookies set out above (including a cookie to memorise the fact that you do not want any cookies to be set when you visit the Website).
However, please note that if you choose to remove or reject certain cookies, it will affect certain features or services on our Website.

11. UPDATES TO THE PRIVACY POLICY

We may modify this Privacy Policy at any time to take into account changes in the law and/or our practices regarding the protection of personal data.

12. CONTACT INFORMATION

If you have any questions regarding this Privacy Policy or if you wish to exercise any of your rights, please contact our data protection officer at the following address: dpofr@pierre-fabre.com

Last modification: 01/06/2024