The institution responsible for collecting, processing and using personal data within the meaning of the Federal Data Protection Act (BDSG) is:
The purpose of this data privacy statement is to provide you with information concerning the collection, processing and use (hereinafter referred to as “use”) of personal data. You can find out here how to oppose the use of your personal data in accordance with the applicable data privacy provisions.
Personal data is information that identifies you, such as your name, e-mail or postal addresses. Beiersdorf does not collect personal data from you except when you specifically provide such data (e.g. when subscribing to e-mail newsletters, taking part in a survey, competition or sweepstake, ordering samples or brochures, or requesting for information) and consent to its use.
We store, use, or transfer your personal data only accordingly to your consent and to the extent – with respect to content and time – needed in each specific case, e.g. to respond to your questions or concerns, to fulfill your requests or to inform you about the results of a competition or sweepstake.
In order to do this, it may be necessary for Beiersdorf to transfer personal data to other companies within the worldwide Beiersdorf group or to external service providers for further data processing. Service providers may, for example, be commissioned in the context of shipping goods, distributing advertising material or in the scope of competitions. Beiersdorf requires that these parties agree to process personal data based on our instructions and in compliance with this data protection notice.
Any other transfer of your personal data, for example the transfer of logon data from our websites to a third party’s social community website or web service like Facebook or Twitter, requires your explicit prior consent. Beiersdorf guarantees that it will not sell or lease your personal data to a third party. We may, however, have to disclose information about you if we are required to do so by law or in response to enforceable governmental requests.
a. Creating a user profile based on the NIVEA customer account
“I am in agreement with a user profile being created to compile personalised content. I have read the data privacy statement. This consent can be revoked at any time.”*
*Sample consent
If you have agreed to a user profile being created using the sample declaration shown in the above box, we will use your data in the following ways:
As a registered NIVEA customer, you have the opportunity to order from our webshop more rapidly and conveniently. When you register we will furthermore set up a user profile for you, in which all your previous and future activities on our website will be compiled (participation in prize draws, subscribing to the NIVEA newsletter, orders from the webshop, ratings submitted etc.). Your personalised user profile provides us with the opportunity to be able to offer you highly individualised content concerning our products and services. The components and content of your user profile are visible for you at all times. As a registered user you can also submit ratings on our products. In that respect, we will display your first names and the rating you submitted.
If we wish to use the data stored in your customer account for promotional purposes, we will always obtain your additional express consent (via a subscription to the NIVEA newsletter or NIVEA FOR ME, see below).
Should you no longer be interested in having a NIVEA customer account, you can delete it at any time. For this purpose, please log in to your customer account and carry out the deregistration process, or send us your revocation of consent to keeping the customer account (opt out notification) by e-mail.
b. NIVEA Newsletter
“Yes, l would like to receive the NIVEA newsletter. I have read the data privacy statement. This consent can be revoked at any time.”*
*Sample consent
If you have subscribed to the NIVEA newsletter and have agreed to the declaration shown in the above box, we will use your data in the following ways:
The NIVEA newsletter contains news, offers and other information from NIVEA or other brands of Beiersdorf (e.g. Labello, 8x4) and Beiersdorf Hautpflege GmbH (hereinafter referred to as “NIVEA Haus”). In the NIVEA newsletter you will receive individualised advertising about our products or services, or proposals for participating in campaigns such as prize draws or product tests.
By registering for the NIVEA newsletter you declare that you are in agreement that, in order to put together a personalised compilation of news, offers and other information for the NIVEA newsletter and deliver this to you, we evaluate your purchasing and clicking patterns on our websites so that we can compile a newsletter for you that is customised in line with your requirements and interests. Your details are also saved and used for market research and promotional purposes. For this purpose we will only contact you by e-mail. Finally, we will also use your data to analyse and improve the effectiveness of our websites.
Should you no longer wish to receive the NIVEA newsletter, you can opt out from receiving the newsletter at any time and accordingly unsubscribe from it. To do that, please click on the link included in every newsletter. You will then be taken through the unsubscribing process, or you can send us your revocation of consent to receiving the newsletter (opt out notification) by e-mail.
c. NIVEA FOR ME (customer loyalty programme)
“Yes, I want to take part in the NIVEA FOR ME programme and thus receive the personal customer magazine, product samples, special offers and further information by e-mail and/or by post. I have read the terms and conditions of participation and the data privacy statement. This consent can be revoked at any time.”*
*Sample consent
If you wish to take part in the NIVEA FOR ME loyalty programme and have agreed to the sample declaration shown in the above box, we will use your data in the following ways:
NIVEA FOR ME, the NIVEA world of experience, is specially orientated towards the requirements of women. By taking part you will receive the personal customer magazine, product samples and special offers from NIVEA and other brands of Beiersdorf (e.g. Labello, 8x4) and Beiersdorf Hautpflege GmbH (“NIVEA Haus”) regularly by e-mail and/or by post.
By registering, you declare that you are in agreement with your details being saved and used for market research and promotional purposes. We can then send you individualised advertising about our products or services, or invite you to take part in campaigns such as competitions or product tests. For this purpose, we will contact you via those channels of communication that you specify to us in connection with your consent to being contacted, such as by e-mail, if you provide us with your e-mail address. Finally, we will also use your data to analyse and improve the effectiveness of our websites.
Should you no longer be interested in NIVEA FOR ME, you can unsubscribe at any time. For this purpose, please log in to your customer account and carry out the deregistration process, or send us your revocation of consent to take part in NIVEA FOR ME (opt out notification) by e-mail.
d. Chatbot (loyjoy)
Information/purpose:
This website provides the feature to get in a personalized dialog with us. With our chatbot you can participate on surveys or sweepstakes and order the newsletter or become part of the loyalty program. We therefore collect various communication/interaction data as provided by you. This gives us also the possibility to analyse the data and to evaluate them for statistical purposes.
Cookies used: Type b. More information can be found in the "Cookies" section.
Recipients:
We transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contract processors (e.g. hosting, processing service providers) in accordance with the required purposes (to carry out the chatbot and the demanded service (e.g. newsletter) etc.). Main service provider is Loyjoy GmbH, Muenster Germany. Platform/hosting providers will have access to personal data from a third country (countries outside the European Economic Area). As an appropriate safeguard we have agreed on standard contractual clauses pursuant to Art. 46 GDPR with these providers or they are (additionally) EU-U.S. Privacy Shield certified. More information on this topic is published here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en.
Deletion/objection:
The chat dialogs within the chatbot will be automatically deleted after 48 hours. The user has the possibility to delete the data earlier within the chatbot menu and to use further privacy rights. Depending on selected purposes (sweepstake, surveys, newsletter etc.) the data retention periods as mentioned in the corresponding context applies (see below).
Cookie lifetime: up to 24 months (this applies only to cookies which have been set by this website)
Legal basis:
Art. 6 (1) f GDPR (legitimate interest)
2.1 Salesforce/Evergage
Purpose/Information:
This website uses the Evergage (Salesforce Interaction Studio) tool for personalization. It allows us to display personalized content based on website actions (e.g. click, viewing time, entering a search term) and to better understand the needs of our website visitors. For example, we are then able to show you products that you might like or, as a myNIVEA loyalty program user, send you a message by e-mail if you have forgotten products in your shopping cart.
Used Cookies: Type C. For further information, see Cookie Section
Recipients:
We transfer also the collected data to the relevant internal departments for processing and to other affiliated companies within the Beiersdorf Group or to external service providers, contract processors (e.g. platform-, hosting, support and analysis service providers) in accordance with the required purposes (for website analysis). Main service provider is salesforce.com Germany GmbH, Germany. Platform/hosting providers will have access to personal data from a third country (countries outside the European Economic Area). As an appropriate safeguard we have agreed on standard contractual clauses pursuant to Art. 46 GDPR with these providers. More information on this topic is published here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en
Withdrawal/Deletion:
You can disable Evergage via the cookie settings
here.
If the data is merged with your profile, the data will be deleted accordingly when you delete your my
NIVEA profile.
Lifetime of cookies: up to 180 days (this only applies to cookies set via this website).
Storage period: 2 years (this only applies to the data collected from the cookies).
Legal basis:
Art. 6 (1) a GDPR (consent)
3. Period of time for which your data is stored
The data provided by us will only be stored by us as long as is necessary for fulfilling the respective purpose for which you have transmitted your data to us, or for complying with statutory provisions.
If you have given us your express consent to use your personal data for promotional purposes (subscribing to the
NIVEA newsletter or to
NIVEA FOR ME), we will use your data for such purposes until such time as you revoke your consent. You may
revoke the consent granted by you at any time with effect for the future.
4. Protection of your data when ordering and paying in the online shop
If you order products in our webshop either as a guest or a registered user, your personal data will only be transmitted in encrypted form. The payment processing is also in line with the highest security requirements. All data is transmitted encrypted, and is thereby protected from unauthorised access by third parties. Your credit and debit card data will, moreover, be processed and stored in accordance with the most stringent security requirements in the credit card industry, i.e. the Payment Card Industry Data Security Standard (abbreviated to “PCI DSS”), by the certified Payment Service Provider ConCardis GmbH (with registered office in Germany).
If you have decided on PayPal or immediate bank transfer as your method of payment, you declare that you are in agreement with your order data being gathered by PayPal (Europe) S.à r.l. et Cie, S.C.A. (with registered office in Luxembourg) or by Sofort AG, (with registered office in Germany) and processed for the purpose of handling the payment processing. The data privacy statements of the respective payment service providers shall apply.
If you have decided on giropay as your method of payment, you declare that you are in agreement that the IBAN and BIC data entered by you is transmitted to giropay GmbH (with registered office in Germany) in encrypted form for the purpose of handling the payment processing. The data transmitted will then be processed by giropay GmbH for this purpose. In such a case, the data privacy statement of the payment service provider shall also apply.
5. Limited passing on of data
When processing your request, it may be necessary for Beiersdorf to pass on your personal data to other affiliated companies within the Beiersdorf Group or an external service provider, also in respective European countries outside the EU, that exclusively act on our behalf. Such service providers may, for example, be commissioned with sending you product samples, distributing promotional materials or handling competitions or your order placed at our webshop, e.g. the shipping of the goods. Beiersdorf requires all affiliated companies within the Beiersdorf Group and its external service providers to keep your personal data exclusively in line with our specifications, and in compliance with this data privacy statement, as well as the statutory requirements on order data processing.
Furthermore, if you make an appointment with NIVEA Haus on our website, we will transmit your data that is required for that purpose to our 100% subsidiary, Beiersdorf Hautpflege GmbH, which operates NIVEA Haus, in accordance with the standards of this data privacy statement and the corresponding statutory regulations. Your data will only be saved and used for the purpose of your appointment.
Otherwise, we neither pass on personal data to third parties without your permission nor do we sell or lease data. We do, however, reserve the right to disclose information about you if we are legally obliged to do so or if we are requested to hand it over by legitimately acting authorities or criminal prosecution institutions.
6. Information saved automatically when you visit our websites/use of cookies
Cookies are used on our websites. Cookies are small units of data stored on the hard drive of your computer by your browser.
- COOKIES
To facilitate the use of our website, we are using "cookies". Cookies are small units of data stored on the hard drive of your computer by your browser that are necessary for using our website. We use cookies to better understand how our website is used and to allow improved navigation. Cookies help us determine, for example, whether a page on our website has already been viewed. Cookies may also tell us whether you have visited our website before or whether you are a new visitor. The cookies we use do not store any personal data or otherwise collect personally-identifiable information. If you do not wish to receive cookies, please configure your Internet browser to erase all cookies from your computer's hard drive, block all cookies or to receive a warning before a cookie is stored.
-
Cookies for use-based online advertising
We reserve the right to also use information that we have obtained by means of cookies from an analysis of the usage behaviour of visitors to our websites to show you specific advertising for certain of our products on our own websites. We believe that you as the user will benefit from this, because we show you advertising or content which, based on your user behaviour, we have reason to assume matches your interests, and you are therefore shown less randomly scattered advertising or certain content that could interest you less.
We as a company have voluntarily subjected ourselves to self-regulation of the German Data Privacy Council for Online Advertising (DDOW). You can find the self-regulatory code applicable to us and further information at this link: www.meine-cookies.org/ddow.html.
-
Here is how you can prevent cookies from being stored on your hard drive and/or delete them
You can set your web browser in such a way that cookies are prevented from being saved to your hard drive and/or you are asked each time whether you are in agreement with cookies being enabled. You can also at any time delete cookies that have been enabled again. You can find out how all this works in detail from your browser’s operating manual. You will find an explanation in words and pictures for the web browsers Firefox, Microsoft Internet Explorer and Google Chrome at this link: http://www.meine-cookies.org/cookies_verwalten/index.html. If you not allow cookies to be stored, this may lead to functional restrictions of our website.
-
Cookies used by us
(1) Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses a specific form of “cookie,”i.e. text file, which is stored on your computer and enables an analysis of your use of the website. The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. We would like to point out that Google Analytics has been expanded on this website to include the code “gat._anonymizeIp();” to ensure the anonymized recording of IP addresses (so-called IP masking). Due to the IP anonymization on this website, your IP address is shortened by Google within the territory of the EU and the Treaty States of the European Economic Community. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
Google uses this information on our behalf to analyze your use of this website in order to compile reports on website activities and provide additional services related to website use and Internet use to the website operator. The IP address transmitted to Google Analytics by your browser is not consolidated with other data by Google. You can prevent the storage of cookies by making the proper setting using your browser software, see Section 5 c), above. In addition, you can prevent Google from recording the data related to your use of the website generated by the cookie (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the link https://tools.google.com/dlpage/gaoptout?hl=en. You can find further information about terms of use and data protection at
http://www.google.com/analytics/terms/us.html,
http://www.google.com/analytics/learn/privacy.html?hl=en or
http://www.google.com/intl/en/policies/privacy/
(2) Google AdWords
This website uses Google AdWords, an analysis service of Google, and conversion tracking, which is part of Google AdWords. This is how it works: When you click on an advertisement displayed by Google, Google AdWords stores a cookie for conversion tracking (a “conversion cookie”) on the hard drive of your computer. Such cookies lose their validity after 30 days and do not make it possible for you to be personally identified. Should you visit certain pages on our website, we and Google can recognise that you have clicked on the advertisement and were re-directed to this page.
The information obtained by way of the conversion cookies serves the purpose of generating statistics for AdWords customers who utilise conversion tracking. Through these statistics we find out the total number of users who have clicked on the advertisement displayed by Google and accessed a page with a conversion tracking tag.
We also use Google Analytics to analyze data from AdWords and any cookies from “DoubleClick”for statistical purposes. If you do not want this to be done, you can deactivate it with the Ad Preferences Manager (https://www.google.com/settings/u/0/ads?hl=en).
With Google's remarketing function we reach users who have already visited our website. We can for example present advertising to our target groups who have already shown an interest in our products or services. In addition, based on user behaviour on websites in the Google advertising network (“display network”) in the previous 30 days and with the aid of the context-related search engine, AdWords establishes which common interests and features the users of our website share. Based on this information, AdWords then finds new potential customers for marketing purposes, whose interests and characteristics are similar to those of the users of our website. The target group-specific remarketing is carried out through the combined use of cookies, such as Google Analytics cookies and Google DoubleClick cookies.
For further information on the terms and conditions of use and data privacy with regard to Google AdWords, please visit: http://www.google.de/policies/technologies/ads/.
(3) Google DoubleClick
We use the Google DoubleClick function on our websites in order to evaluate the use of the website and make it possible for us, Google and other advertisers who co-operate with DoubleClick to be able to present to you with user-relevant advertising. For this purpose, a cookie is installed on the hard drive of your computer. With the aid of such cookies, your browser is allocated an anonymous identification number, and information on the advertising shown in your browser and its being accessed is collected. The information generated by the cookie on your use of websites is usually transferred to a Google server in the USA and saved there. Based on the information collected, interest-related categories are allocated to your browser. These categories are used to display interest-related advertisements.
Besides changing your browser settings, you can also permanently deactivate the DoubleClick cookie with the aid of a browser plug-in. With the plug-in, your deactivation settings for this browser are retained, even if you delete all cookies. You can obtain the browser plug-in for permanent deactivation here.
By using our website, you agree to the DoubleClick cookie being inserted and thus usage data from you being collected, saved and used in the manner described above for the purpose specified. You moreover agree that your data will be stored in cookies beyond the end of the browser session and can for example be accessed again when you next visit websites. You can revoke this consent at any time with effect for the future by deleting the DoubleClick cookie and permanently deactivating it.
(4) Optimizely
In order to be able to offer ideal displays and functions, the development of our offers is based on A/B tests and multi-variant analyses that are implemented with the web analysis service Optimizely of Optimizely Inc. This service uses cookies to identify a visitor's browser and analyse the use of this website. You can find further information on how Optimizely processes your data here. You can deactivate Optimizely tracking at any time by following the instructions at http://www.optimizely.com/opt_out, or follow this link: http://www.nivea.com.au/?optimizely_opt_out=true. Should you later wish to reactivate Optimizely tracking, please follow this link: http://www.nivea.com.au/?optimizely_opt_out=false.
(5) Bunchbox
In order to be able to offer ideal displays and functions, the development of our offers is based on A/B tests and multi-variant analyses that are, in certain circumstances, implemented using the site optimisation tool “Bunchbox”. This service uses cookies to identify a visitor's browser and optimise the use of the website. You can deactivate the Bunchbox tracking at any time by clicking on this link: http://www.nivea.com.au/?_bb_optout=1. Should you later wish to reactivate Bunchbox tracking, please follow this link: http://www.nivea.com.au/?_bb_optout=0.
7. Social plug-ins/integration through Shariff
Social plug-ins (“plug-ins”) of social networks are used on our websites, in particular the “Share” or “Share with friends” button of the provider “Facebook“, whose website facebook.com is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland, is responsible for the German website, facebook.de. The plug-ins are usually marked with a Facebook logo. Besides Facebook, we use plug-ins from “Google+” (Provider: Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA), “Twitter” (Provider: Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103) and “Pinterest” (Provider: Pinterest Inc., 808 Brannan Street San Francisco, CA 94103, USA).
For data privacy reasons, we have deliberately decided against utilising direct plug-ins of social networks on our websites. Instead, we use the “Shariff” solution. With the aid of Shariff, we can determine for ourselves when and whether data is transmitted to the operator of the respective social networks. For this reason there is essentially no data automatically transmitted to social networks such as Facebook, Google+, Twitter or Pinterest when you access our website. Only if you yourself actively click on the respective button does your web browser produce a connection to the respective social network's servers, i.e. by clicking on the respective button (e.g. “Pass on”, “Share” or “Share with friends”) you agree that your web browser will produce a link to the respective social network's servers and transmit usage data to the respective operator of the social network.
We have no influence upon the nature and extent of the data that is then gathered by the social networks. For more information regarding the purpose and scope of the collection and further processing and use of data by the respective social networks as well as your rights and settings options for protecting your private sphere in this respect, please consult the data privacy policy of the respective social networks – for Facebook, at http://www.facebook.com/about/privacy/ and http://www.facebook.com/help/?faq=186325668085084. You can find further notes on the use of data by “Google+” or “Twitter” at http://www.google.com.au/intl/policies/policies/privacy/ or http://twitter.com/privacy, and for Pinterest at http://about.pinterest.com/privacy/.
8. Social log-in
When registering for or logging into to the NIVEA customer account, you also have the option of authenticating yourself and thereafter registering or logging in with your existing profile at one of the following social networks: Facebook, Twitter or Google+.
For this purpose, you will find the corresponding symbols of the respective providers of the social networks supported by our website on the registration page or login page. Before a connection to the provider is established, you need to explicitly declare that you are in agreement with the process and data transmission described below:
When you click on the respective symbol, a new window (app) opens where you need to log in with your login data for the social network. After you have successfully logged in, the social network informs you which data (name and e-mail address) is transmitted to us for authentication within the scope of the registration or login process. Should you have agreed to this data transmission, the fields required by us for registration are filled in with the data transmitted. The data required by us to register or log in are (i) your name and (ii) your e-mail address.
Only once you have explicitly agreed to the use of the data transmitted and required will your data be stored by us and used for the purposes cited under No. 2. No link between the NIVEA customer account set up with us and your account at the corresponding social network takes place via the authentication process.
In order to be able to carry out the authentication process for registration and for logging in, your IP address is transmitted to the respective provider of the social network. We have no influence upon the purpose and scope of the collection and further processing of the data by the respective provider of the social network. For further information in this regard, please read the data privacy policy of the respective provider.
Facebook data privacy policy - https://www.facebook.com/about/privacy/
Google+ data privacy policy - http://www.google.com/policies/privacy/
Twitter data privacy policy - https://twitter.com/privacy?lang=de
9. Contact, request for information, revocation, blocking, deletion
You can at any time and free of charge for the future object to the use of your personal data, arrange for partial or complete deletion or blocking, or request information on or correction of the data stored by us about your person. It is not necessary to adhere to a particular form. You can, for example, write to us by e-mail at nivea@beiersdorf.com or use our contact form on the website.
10. Data security
We have adopted technical and organisational measures to protect your data from being lost, changed or accessed by a third party. The security procedures we use are regularly enhanced to reflect technological progress.
11. Updating and amendment
We may amend or update parts of the data privacy statement without informing you of this in advance. Please always check the data privacy statement before you use our website in order to be informed of the latest status in the event of any amendments or updates. Status of the data privacy statement: July 2020.
