Privacy Policy
THE PROTECTION OF YOUR DATA IS IMPORTANT TO US!
For Eucerin not only the care and protection of your skin important. We also attach great importance to the protection of your personal data. That's why we respect your privacy and want you to be able to trust us as much when it comes to data protection as when it comes to skin care. We always inform you transparently about what we need your data for and if and for how long we store it.
List of Content
1. General Information
1.1 Definition of Personal Data
1.2 Data Controller
1.3 Rights of the Data Subject
1.4 Disclosure to Authorities
2. Collection and Processing of Personal Data when visiting our Website
2.1 Cookies
2.2 Web Analytics
2.3 Social Plug-ins
2.4 Social Login
2.5 YouTube videos
2.6 Captcha
2.7 Adform
2.8 SalesForce/Evergage
2.9 (Website) Facebook Custom Audiences (“Facebook Pixel”)
2.10 Online Advertising
2.10.1 Google Ads (formerly Google Adwords)
2.10.1.1 Google Ads Conversion
2.10.1.2 Google Ads Remarketing
2.10.2 Google Analytics Advertising Features
2.10.3 Google Remarketing
2.11. Google Tag Manager
2.12. Commerce Connector
2.13. Floodlights / DV360
2.14 Google Campaign Manager
2.15 Microsoft Advertising
3. Further services offered (on- and offline)
3.1 Contacting / communication / collaboration
3.2 Newsletter
3.3 Campaigns (e.g. Sweepstakes, Surveys, Product Tests)
3.4 Login Profile
3.5 Ratings and Reviews
4. Objection or Withdrawal of your consent to the Processing of Personal Data
The purpose of this privacy policy is to provide you with information concerning the processing of personal data when using our website and related services.
Processing of Personal Data
1.1. Definition of Personal Data
Personal data within the meaning of Section 2 of the Kenya Data Protection Act, 2019 (“DPA”) means any information relating to an identified or identifiable natural person, e.g., name, address, email address, etc.
1.2. Data Controller
Responsible for the processing of personal data within the meaning of the DPA is:Beiersdorf East Africa Limited[Delta Annex, 3rd floor, Westlands]Contact details of the Data Protection Officer (DPO): information.za@beiersdorf.com or via the postal address of the Data Controller for the attention of the “Data Protection Officer”.
1.3. Rights of the Data Subject
As a data subject affected by the processing of personal data, you have the following rights in accordance with Part IV of the Kenya Data Protection Act, 2019:Right to be informed about the collection and use of your personal data.Right of access to personal data we hold about you.Right to rectification of inaccurate or incomplete data.Right to erasure of your personal data (“right to be forgotten”), subject to legal or contractual restrictions.Right to restriction of processing in certain circumstances.Right to data portability, where applicable.Right to object to processing of your personal data, including for direct marketing.Right not to be subject to automated decision-making, where it significantly affects you.
Furthermore, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) concerning the processing of your personal data.
1.4. Disclosure to Authorities
In the event of a legal obligation, we reserve the right to disclose information about you if we are required to provide it to competent authorities or law enforcement bodies.Legal basis: Section 30 of the DPA
2. COLLECTION & PROCESSING OF PERSONAL DATA WHEN VISITING OUR WEBSITE
When visiting and using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data (such as log data) that your browser transmits to our server, which are technically necessary for us to display our website to you and to guarantee stability and security.
We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contractors (e.g., hosting, content management systems) strictly in accordance with the purposes required (for displaying the website and setting up its content).
The deletion of the log files takes place after 7 days.
Legal basis: Section 30 of the DPA
2.1 Cookies
In addition to the aforementioned data, cookies or other technologies like pixels (hereinafter referred to as “Cookies”) are used on your device when visiting and using our website. Cookies are small text files that are stored by your browser on your device to save certain information or image files, such as pixels. The next time you visit our website on the same device, the information saved in the cookies will subsequently be transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”).
Through the information saved and returned, the respective website recognizes that you have already accessed and visited it with the browser you use on that device. We use this information to be able to design and display the website in an optimum way in line with your preferences. In that respect, only the cookie itself is identified on your device. Beyond this, your personal data will only be stored upon your express consent or if it is strictly necessary for you to use the service you have accessed.
This website uses Strictly necessary (Type A) cookies, the scope and functionality of which are explained below.
You can find more information on the cookie types set and used in the description of the tools implemented on our websites in this privacy policy.
2.1.1 Strictly necessary cookies (Type A)
Strictly necessary cookies guarantee functions without which you cannot use our web pages as intended. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies will be returned only to our website.
Strictly necessary cookies serve, for example, to ensure that you as a registered user always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data every time you access a new page.
The use of strictly necessary cookies on our website is possible without your prior consent. For this reason, strictly necessary cookies cannot be activated or deactivated individually. However, you can deactivate cookies in your browser at any time (see below).
Legal basis: Section 30(1)(a) of the DPA
2.1.2 Functional and Performance Cookies (Type B)
Functional cookies enable our website to store information already provided (such as registered name or language selection) and to offer you improved and more personalised functions based on this information. These cookies collect and store only pseudonymised information so that they cannot track your movements on other websites.
Performance cookies collect information about how our websites are used in order to improve their attractiveness, content, and functionality. These cookies help us, for example, to determine which pages of our website are visited most frequently and what content users are particularly interested in.
As a result, we can tailor the content of our website more specifically to the needs of our users and optimise our offering. The IP address of your device transmitted for technical reasons is automatically anonymised and does not allow us to draw any conclusions about the individual user.
Functional and performance cookies are regarded as non-essential cookies under the DPA and therefore require your consent before they can be stored on your device. You can adjust your cookie settings at any time (activate or deactivate).
Legal basis: Section 30(1)(c) and Section 32 of the DPA
2.1.3 Consent-Based Cookies (Type C)
Cookies that are neither strictly necessary (Type A) nor functional or performance cookies (Type B) will be used only upon your express consent – for example, marketing cookies.
We may also use information obtained from cookies in an anonymous analysis of browsing behaviour to display targeted advertising for our products on our own websites. This allows us to provide you with advertising and content more relevant to your interests.
Marketing cookies come from external advertising companies (third-party cookies) and are used to collect information about the websites visited by the user in order to create target group-oriented advertising.
Opt-out for cookies used for online advertising:
You can also manage many companies’ cookies used for online advertising via consumer choice tools, such as: https://www.aboutads.info/choices/(US-based), or http://www.youronlinechoices.com/uk/your-ad-choices (EU-based).
You can withdraw your consent to the use of consent-based cookies (Type C) individually at any time with effect for the future by adjusting your cookie settings accordingly.
Legal basis: Section 32 of the DPA
2.1.4 Administration and deletion of all cookies
You can set your web browser to generally prevent cookies from being stored on your device and/or to ask each time whether you agree to cookies being enabled. You can also delete cookies that have already been stored at any time.
Details on how this works can be found in your browser’s help function. Please note that disabling cookies altogether may lead to functional restrictions on our website.
2.2 Web Analytics
2.2.1 Google Analytics
Purpose/Information: This website uses Google Analytics, a web analysis service of Google Ireland Ltd. (“Google”). Google Analytics uses a specific form of cookie, which is stored on your computer and enables an analysis of your use of our website. The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there.
We would like to point out that Google Analytics has been expanded on this website to include the code “gat._anonymizeIp();” to ensure the anonymized recording of IP addresses (so-called IP masking). Due to the IP anonymization on this website, your IP address is shortened by Google within Kenya or within another state recognised as providing adequate protection under the Kenya Data Protection Act, 2019. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google uses this information on our behalf to analyze your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
We use Google Analytics to analyse and regularly improve the usage of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. In addition, we gain information about the functionality of our site (for example, to detect navigation problems).
In the configuration of Google Analytics, we ensured that Google receives this data strictly as a processor under the Kenya DPA and is not permitted to use the data for its own purposes.
Used Cookies: Type B. (See Cookie Section)
Recipients: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
Further recipients: We may transfer the collected data to relevant internal departments for processing, and to other affiliated companies within the Beiersdorf Group or to external service providers, contractors (e.g., platform, hosting, support, and analysis providers).
Cross-border Transfers:
Where data is transferred outside Kenya (e.g., to the USA or EU), such transfer will comply with Sections 48–50 of the DPA, using appropriate safeguards such as standard contractual clauses (SCCs) or other ODPC-approved transfer mechanisms. More information on international data transfers under EU model clauses is available here: https://ec.europa.eu/info/law/law-topic/data-protection/datatransfers-outside-eu_en
Deletion/Objection:
You can deactivate Google Analytics via the Cookie Settings on this website. You can also prevent the storage of cookies by configuring your browser software. In addition, you can prevent Google from recording the data generated by the cookie (including your IP address) and from processing this data by downloading and installing the browser plugin available at: ttps://tools.google.com/dlpage/gaoptout?hl=en
Cookie lifetime: up to 12 months (this applies only to cookies which have been set by this website)
Maximum storage period of data: up to 26 months.
2.3 Social Plug-ins
Social plug-ins (“plug-ins”) of social networks are used on our websites, in particular the “Share” or “Share with friends” button of Facebook, whose website facebook.com is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland, is responsible for Facebook.com in Europe. The plug-ins are usually marked with a Facebook logo.
For data privacy reasons, we have deliberately decided against utilising direct plug-ins of social networks on our websites. Instead, we use the “Shariff” solution. With the aid of Shariff, we can determine for ourselves when and whether data is transmitted to the operator of the respective social network. For this reason, there is no automatic data transmission to social networks such as Facebook, Google+, X or Pinterest once you access our website. Data will be transmitted to social networks only if you actively click on the respective social network button. In this case, your web browser starts a connection to the respective social network's servers. By clicking on the respective button (e.g. “Pass on”, “Share” or “Share with friends”) you agree that your browser will produce a link to the respective social network's servers and transmit usage data to the respective operator of the social network and vice versa. We have no influence upon the nature and extent of the data that is then gathered by the social networks.
The social network provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers as notified below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php.
Further information regarding the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA;
https://www.google.com/policies/privacy/partners.
c) Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA;
http://about.pinterest.com/privacy/
Cross-border Transfers:
Where data is transferred outside Kenya, such transfer will comply with Sections 48–50 of the DPA.
2.4. Social Login
To register and log in to your customer account, you also have the option of authenticating yourself with your existing profile on one of the following social networks, Facebook, and finally registering or logging in.
For this purpose, you will find on the registration page or login page the corresponding symbols of the respective providers of the social networks supported by our website. Before a connection to the provider is established, you must expressly agree to the process and transmission of data described below:
By clicking on the respective symbol, a new pop-up window (so-called app) opens, in which you must log in with your login data for the social network. After you have successfully logged in, the social network will tell you, which data will be transmitted to us for authentication as part of the registration or login process. If you have agreed to this data transfer, the fields required by us for registration will be filled with the transmitted data. The information we require for registration or login is (i) your name and (ii) your email address.
Only after your express consent to the use of the transmitted and required data, your data will be stored by us and used for the purposes as stated within this Privacy Policy. There is no link beyond the authentication process between your customer account created with us and your account on the corresponding social network.
In order to perform the authentication process for registration and login, your IP address is transmitted to the respective social network provider. We have no influence on the purpose and scope of data collection and on the further processing of the data by the respective provider of the social network. For further information, please read the data protection information of the respective provider:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php.
Further information regarding the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA;
https://www.google.com/policies/privacy/partners.
Cross-border Transfers:
Any transfer of data outside Kenya will be done in accordance with Sections 48–50 of the DPA, using appropriate safeguards.
Facebook Connect
If a so-called “Facebook Connect Button” is placed on this website, you can log in to our website with your Facebook user data. In addition, Facebook Connect can automatically include information about your activities on our website in your Facebook profile. In this respect, when you activate the button, you will be given both the opportunity to expressly consent to access your Facebook user data and to publish information and activities in your Facebook profile. The use of further data (e.g. contact via your email address) only takes place with prior express consent. Please note that Facebook receives information about the application or website via Facebook Connect, including what you are doing. To personalize the connection process, Facebook may in some cases receive a limited amount of information prior to authorizing the application or website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and settings options for the protection of your privacy can be found in the privacy policy of Facebook.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php.
Further information regarding the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Cross-border Transfers:
Where personal data is transferred outside Kenya (e.g., to the USA), such transfers are carried out in accordance with Sections 48–50 of the DPA, using appropriate safeguards such as standard contractual clauses (SCCs) or other ODPC-approved mechanisms.
2.5 YouTube-Videos
We have integrated YouTube videos into our website, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user will be transmitted to YouTube, if you do not click on the videos to start playing them. Only when you play the videos the data referred to in the next paragraph will be transferred to YouTube. We have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 2 of this privacy policy will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy: Privacy Policy – Privacy & Terms – Google
Cross-border Transfers:
Where personal data is transferred outside Kenya (e.g., to the USA), such transfers are carried out in accordance with Sections 48–50 of the DPA, using appropriate safeguards.
2.6 Captcha
This website uses, in specific cases, the Google reCAPTCHA v2 service to avoid the use of text fields by automated programs/bots. It helps to support the security of our website and to avoid spam for the users. This is also our legitimate interest and fulfils our legal obligation to ensure website integrity.
The collected data includes hardware and software information, such as device and application data and the result of integrity checks. These data will be sent to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data will not be used by Google for personalised advertising.
Further information can be found in their privacy policy:
https://policies.google.com/privacy.
Legal basis: Section 30(1)(c) and DPA Section 30(1)(f), DPA
2.7 Adform
This website uses the online marketing tool Adform by Adform A/S, Denmark. Adform uses cookies to display ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ad more than once.
Adform uses a cookie ID to track which ads are displayed in which browser and to prevent them from being displayed more than once. In addition, Adform may use cookie IDs to collect conversions related to ad requests — e.g., when a user sees an Adform ad, later visits the advertiser’s website with the same browser, and makes a purchase.
Adform cookies do not contain any personal information such as email address, name, or postal address.
Your browser automatically establishes a direct connection to the Adform server once visiting our website. By integrating Adform, Adform receives the information that you have called the corresponding part of our Internet presence or clicked on an advertisement from us.
Adform cookies also allow us to understand whether you complete certain actions on our website(s) after viewing one of our display/video ads on Adform or other platforms (conversion tracking). Adform uses this cookie to understand the content with which you have interacted on our website(s) in order to be able to send you targeted advertising later.
Your Options to Object:
You can prevent your participation in this tracking process in various ways:
a) By setting your browser software accordingly (e.g., block third-party cookies);
b) By deactivating Adform cookies via your browser at: https://site.adform.com/privacy-center/platform-privacy/opt-out/;
c) By setting your cookie preferences on our website at:https://www.eucerin-cewa.com/about-us/cookies.
More information on Adform: https://site.adform.com/
Adform privacy centre: https://site.adform.com/privacy-center/overview
Used Cookies: Type C (see Cookie Section).
Cookie lifetime: up to 60 days after last interaction (for cookies set by this website).
Maximum storage period of data: up to 13 months.
Legal basis: Section 32, DPA and Section 32(7)
Purpose/Information: This website uses the Evergage (Salesforce Interaction Studio) tool for personalization. It allows us to display personalized content based on website actions (e.g. click, viewing time, entering a search term) and to better understand the needs of our website visitors. For example, we are then able to show you products that you might like or, as a my EUCERIN loyalty program user, send you a message by e-mail if you have forgotten products in your shopping cart.
Used Cookies: Type C (see Cookie Section 2.1).
Recipients: We transfer collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers/contract processors (e.g., platform, hosting, support, and analysis providers) in accordance with the required purposes (for website analysis and personalisation).
The main service provider is salesforce.com Germany GmbH, Germany. Platform/hosting providers may also access personal data from a third country (countries outside Kenya).
Cross-Border Transfers:
Where personal data is transferred outside Kenya (e.g., to Germany, the EU, or the USA), such transfers are carried out in accordance with Sections 48–50, DPA, using appropriate safeguards such as standard contractual clauses (SCCs) or other ODPC-approved mechanisms.
More information on SCCs and international data transfers is available here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en
Legal basis: Section 32, DPA – consent-based processing (personalisation and marketing).
Sections 48–50, DPA – international transfers with safeguards.
2.9 (Website) Facebook Custom Audiences (“Facebook Pixel”)
This website also uses the remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”) in order to contact you again within 13 months. This allows users of the website to see interest-based advertisements (“Facebook ads”) when visiting the social network Facebook or other websites that also use this tool
Your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding website of our Internet presence, or that you have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the providers may obtain and store your IP address and other identifying information.
The “Facebook Custom Audiences” function can be deactivated in the Cookie Settings [insert local cookie link] and for logged in users at https://www.facebook.com/settings/?tab=ads#_
Used Cookies: Type C. For further information, see Cookie Section.
Legal basis: Sections 32 and 30(1)(f), DPA.
2.10 Online Advertising
2.10.1 Google Ads (formerly Google Adwords)
2.10.1.1 Google Ads Conversion
We use the services of Google Ads to draw attention to our offers with the help of advertising materials (so-called Google Ads) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
The advertising materials are delivered by Google via so-called “Ad Servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the insertion of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads stores a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (mark that the user no longer wishes to be addressed) are usually stored as analysis values.
These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their device has not expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Ads customers. We do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognize which of the used advertising measures are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically starts a direct connection to the Google server. We have no influence on the extent and the further use of the data which are raised by the use of this tool by Google and inform you therefore according to our knowledge: By the integration of Ads conversion Google receives the information that you called the appropriate part of our Internet appearance or clicked an announcement of us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the providers may obtain and store your IP address.
2.10.1.2 Google Ads Remarketing
We use the remarketing function within the Google Ads service. The remarketing function allows us to present to users of our website advertisements based on their interests on other websites within the Google advertising network (in Google search or on YouTube, so-called "Google ads" or on other websites). For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users even after visiting our website on other pages. To do this, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, known as a "cookie", is used to record the visits of these users. The number is used to uniquely identify a web browser on a particular device and not to identify a person; personal data is not stored.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked by the domain www.googleadservices.com, https://www.google.de/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link http://www.google.com/settings/ads/plugin, e) by setting your cookie preferences accordingly (click here). Please note that in this case you may not be able to use all functions of this offer in full.
For more information on the purpose and scope of data collection and processing by Google, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.com/intl/en/policies/privacy.
Cross-border transfers outside Kenya (e.g., to the USA) are carried out in accordance with Sections 48–50 of the Kenya Data Protection Act, 2019 (DPA), using appropriate safeguards such as Standard Contractual Clauses (SCCs) or other ODPC-approved mechanisms. Alternatively, you will also find more information on the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
Used Cookies: Type C. For further information, see Cookie Section
Cookie lifetime: up to 1 month (this applies only for cookies which have been set by this website).
Legal basis: Sections 32 and 30(1)(f), DPA.
2.10.2 Google Analytics Advertising Features
This website also uses the extended functions of Google Analytics (Google Analytics Advertising Features) in addition to the standard functions. The Google Analytics Advertising Features implemented on this website include:
- Google Display Network Impression Reporting
- Google Analytics Demographics and Interest Reporting.
- Integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers.
We therefore use first-party cookies (e.g. Google Analytics cookies) and Google advertising cookies and identifiers together in order to optimize our website.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; b) via your Google ad settings on https://www.google.com/ads/preferences/?hl=en; c) by setting your cookie preferences accordingly (click here). Please note that in this case you may not be able to use all functions of this offer in full.
Legal basis: Sections 32 and 30(1)(f), DPA.
2.10.3 Google Remarketing
Furthermore, we use the application Google Remarketing in order to contact you again within 13 months. With this application after visiting our website, our ads might be displayed when you continue to browse on the Internet. This is done by means of Cookies, which are used to record and evaluate your usage behaviour by Google when visiting various websites. This is how Google can determine your previous visits to our website. According to Google's own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. According to Google, in particular pseudonymisation is used for remarketing.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked by the domain www.googleadservices.com, https://www.google.de/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link http://www.google.com/settings/ads/plugin, e) by setting your cookie preferences accordingly (click here). Please note that in this case you may not be able to use all functions of this offer in full.
For more information on the purpose and scope of data collection and processing by Google, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.com/intl/en/policies/privacy.
Cross-border transfers outside Kenya (e.g., to the USA) are carried out in accordance with Sections 48–50 of the DPA, using appropriate safeguards such as SCCs or other ODPC-approved mechanisms. Alternatively, you will also find more information on the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
Used Cookies: Type C. For further information, see Cookie Section.
Legal basis: Sections 32 and 30(1)(f), DPA.
2.11 Google Tag Manager
This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used, and no personal data is collected. The Google Tag Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.
2.12 Commerce Connector / Swaven
On our website, you may be redirected to external retailers to purchase our products. If you click a retailer link, our partner Commerce Connector GmbH, Germany, will place a cookie on your device valid for 7 days. If you purchase from the selected retailer during this period, Commerce Connector receives a general confirmation (via a unique cookie ID) for the purpose of compiling anonymous sales statistics. No personal data such as names, emails, or addresses are collected.
Cookies used: Type C (see Cookie Section).
Recipients: Commerce Connector GmbH, Deckerstr. 41, 70372 Stuttgart, Germany.
Deletion/Withdrawal: Cookie lifetime is 7 days. Further information can be found at Commerce Connector Privacy Policy.
Legal basis: Sections 32 and 30(1)(f), DPA (consent and legitimate interest).
Swaven
We also use Swaven SAS, Paris, to provide “Where to Buy” functions on our site. This allows you to see where our products are available at online retailers. The tool only collects analytical information for performance measurement; no cross-site tracking or purchase data is shared with us.
Cookies used: Type B.
Recipients: Swaven SAS, Paris, France.
Deletion/Withdrawal: Cookie lifetime up to 12 months. Further information: Swaven Cookie Policy.
Legal basis: Section 30(1)(f), DPA (legitimate interest).
2.13 Floodlights / DV360
Information/purpose:
This website uses Google’s DV360 Floodlight Tag to measure ad campaign effectiveness, prevent excessive ad frequency, and deliver ads relevant to your interests. Google uses cookie IDs to log which ads are displayed, prevent duplication, and track conversions (e.g., when you view an ad and later complete a purchase). Cookies do not contain personal identifiers such as names or emails.
Recipients: Google Ireland Ltd, with processing potentially occurring in third countries outside Kenya. Transfers are safeguarded in line with Sections 48–50 DPA using Standard Contractual Clauses or equivalent ODPC-approved measures.
Cookies used: Type C.
Deletion/Withdrawal: You can prevent participation by:
- Adjusting browser settings to block third-party cookies.
- Using the Google Ads plugin.
- Opting out via About Ads.
- Adjusting cookie preferences at Eucerin Kenya Cookies.
Cookie lifetime: Up to 180 days.
Legal basis: Sections 32 and 30(1)(f), DPA (consent and legitimate interest).
Information/purpose: This website also uses the online marketing tool Campaign Manager by Google. Campaign Manager uses Cookies to display ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to track which ads are displayed in which browser and to prevent them from being displayed more than once. In addition, Campaign Manager may use cookie IDs to collect conversions related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser's website with the same browser and buys something there.
Your browser automatically establishes a direct connection to the Google server once visiting our website. We have no influence on the extent and the further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating Campaign Manager, Google receives the information that you have called the corresponding part of our Internet presence or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the providers may obtain and store your IP address.
In addition to that, Campaign Manager (e.g. DoubleClick Floodlight) cookies allow us to understand whether you complete certain actions on our website(s) after viewing one of our display/video ads on Google or other platforms through Campaign Manager or clicking through one (conversion tracking). Campaign Manager uses this cookie to understand the content with which you have interacted on our website(s) in order to be able to send you targeted advertising later.
Used Cookies: Type C. For further information, see Cookie Section [Link to cookie section 2.1].
Recipients: Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Deletion/Withdrawal
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly (in particular by suppressing third-party cookies, you will not receive any ads from third-party providers); b) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices .This setting is deleted when you delete your cookies; c) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link http://www.google.com/settings/ads/plugin , d) by setting your cookie preferences accordingly (click here)
Cookie lifetime: up to 180 days after last interaction (this applies only to cookies which have been set by this website)
Legal basis: Sections 32 and 30(1)(f), DPA.
This advertiser uses Microsoft Advertising to promote their business online. To more effectively market their product or service, this advertiser uses a small text file known as a cookie to record the completion of your transaction. Microsoft Advertising wants to assure you that any information that is gathered will remain anonymous and cannot be used to identify you.
Browsers, such as Internet Explorer and Mozilla Firefox, let you delete cookies and choose what types of cookies you want to allow on your computer. Please check Help for your browser to learn how to delete cookies or change the privacy level on your computer.
Cookie lifetime: up to 180 days after last interaction (this applies only to cookies which have been set by this website)
Legal basis: Sections 32 and 30(1)(f), DPA.
3. Further services offered (on- and offline)
In addition to the purely informational use of our website, we offer various other services, for which we process your personal data. If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. External service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. We may also disclose your personal data to third parties when we offer promotions, sweepstakes, contracts or similar services in conjunction with partners.
Further information can be obtained at the time when you provide the data or in the description of the services below. Contrary to 1.2, in some cases a Beiersdorf Company is Controller for the services offered below, which has already been named to you as part of the communication. If reference is therefore made to sections of this privacy policy, e.g. by link, and a Controller has already been named, e.g. in the footer/signature of an e-mail or campaign card, this person is the Data Controller in accordance with the Act. If our service providers are based in a country outside the Republic of Kenya, international data transfers can occur. We will inform you of the consequences of this circumstance in the description of the service below
Section 30(1)(b) DPA (performance of a contract / responding to requests).
3.1 Contacting
When contacting or communicating with us, e.g. by email or via contact form on our website, the data you provide (your email address, if applicable your name and your telephone number, or personal data submitted during the conversation) will be stored and processed by us in order to answer your questions, requests or for the purpose of business related correspondence. We delete the data arising in this context once storage is no longer necessary, unless statutory retention obligations exist or periods of limitation must be observed.
In case of consumer inquiries through our internal consumer management tool the personal data will be usually deleted after one year.
We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contract Operators (e.g. hosting, call center service providers) in accordance with the purposes required (e.g. for establishing contacts, business related correspondence and customer care).
3.2 Newsletter
By subscribing, you receive personalised product news, offers, and promotions. Engagement data (e.g., clicks, purchases) may be analysed to tailor content. Inactivity for 18 months leads to deletion. You may unsubscribe anytime via the link in each newsletter or by contacting us.
Legal basis: Section 32 DPA (consent).
3.3 Campaigns (e.g. Sweepstakes, Surveys, Product Tests)
When you participate in sweepstakes, surveys or similar campaigns, we use the personal information you provide to conduct the campaign. Further information on the purposes can be found in the respective terms and conditions of the campaign.
We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contract Operators (e.g. hosting, shipping, processing service providers) in accordance with the purposes required (to carry out the campaign)
Your data will be deleted after the final processing of the campaign (see terms and conditions of participation), unless this conflicts with statutory retention obligations or statutes of limitations.
The provision of your personal data is necessary for the performance of a contract. You are not obliged to provide your personal data. If your data is not provided, you cannot participate in the campaign. Further information can be found in the respective terms and conditions of the campaign.
Legal basis: Section 30(1)(b) DPA (performance of contract).
3.4 Login Profile
By registering we provide you the opportunity to write reviews to create a favourite list, get a newsletter and we will provide you for the future only personalized content based on your behaviour; you agree that your data will be stored and used for market research and advertising purposes. We can then send you individualized advertising about our products or services.
We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contract Operators (e.g. hosting, consumer database, marketing agency, review supplier) in accordance with the required purposes (to carry out the advertising etc.).
Your data will be deleted as soon as you have logged off from the program, unless this conflicts with legal storage obligations or statutes of limitations. In order to delete your data, please log in to your customer account and complete the unsubscribe process or send us your withdrawal to the data processing by email. We delete your personal data automatically after 18 months inactivity.
Legal basis: Sections 32 and 30(1)(f) DPA (consent and legitimate interest).
Registered users have the possibility to submit ratings and reviews of products, processes or other evaluations within the scope of the website's offers in accordance with the terms of use. It is our legitimate interest that users can give their free opinion about products.
Your rating will be published with your username. We recommend that you use a pseudonym instead of your clear name. The ratings are not reviewed before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties.
We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contractors (e.g. hosting service providers, customer management service providers) in accordance with the required purposes (for publication on the website).
Legal Basis: Section 30(1)(f) DPA (legitimate interest).
4. OBJECTION OR WITHDRAWAL OF YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA
If you have given your consent to the processing of your personal data (Section 32, DPA), you may withdraw this consent at any time. Once withdrawn, we will no longer process your personal data based on that consent. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Where we process your personal data on the basis of legitimate interests (Section 30(1)(f), DPA), you have the right to object to such processing at any time. This applies in cases where processing is not strictly necessary for the performance of a contract with you, as described in the relevant sections of this Privacy Policy. If you raise an objection, please provide reasons why you believe we should not process your personal data in the manner described. We will carefully review your objection and either cease or adjust the processing, or provide compelling legitimate grounds which override your interests, rights, and freedoms and justify the continuation of the processing.
You also have the right to object at any time to the processing of your personal data for direct marketing or profiling for marketing purposes. In such cases, we will immediately stop processing your personal data for these purposes.
You can communicate your objection or withdrawal of consent at any time using the contact details of the Data Controller provided above.
