PRIVACY NOTICE
Shiseido values your privacy and your privacy choices. We are committed to building strong and lasting relationships with our customers based on trust and transparency. In accordance with this philosophy, the protection of your personal data is essential to us and we wish to inform you via this Privacy Policy of how we collect and process this data.
This Privacy Policy (“Policy”) explains in detail the types of personal data we may collect about you when you use the “SCENT & LEARN” Application, (hereinafter referred to as the “Application”).
We may from time to time update and/or amend this Privacy Policy to ensure that it is consistent with any changes in applicable legal or regulatory requirements subject to your rights at law, you agree to be bound by the prevaililng terms of the Privacy Policy as updated and/or amended from time to time on this Application. We encourage you to check this page regularly for updated information on the handling of your Personal Data.
We hope the following sections will answer any questions you have but if not, please do get in touch with us.
What is our role?
The SCENT & LEARN application is operated by Beauté Prestige International, the trading name of which is Shiseido EMEA (hereafter “we” or “Shiseido”).
On what grounds do we process your personal data?
Data protection law in the European Union contains a number of "lawful bases" for processing personal data. These are legal justifications which mean organisations like us are allowed to have your personal information in the first place. We have been careful to ensure we have a lawful basis for all processing of data we undertake.
The processing activities on your Personal Data performed via the application is based on Shiseido’s legitimate interests.
What personal data do we collect and from what sources?
We collect data directly from you when you register in the Application.
To create a smoother onboarding, we might use the personal data that have been collected over the course of the registration in one of our previous training website, so your profile is automatically completed when you enter your email address.
We may collect the following personal data about you:
Your name and surname,
Your email address,
Your relationship with Shiseido,
Your role within the Shiseido group,
Your location (country and city),
The brands you are working with,
The retailer you work for,
Your IP address.
Data related to e-Learning activities. Including which courses, lessons, assignments, your achievements, quizzes that you have started and completed and their respective results and feedbacks if applicable.
Data related to shared content (e.g. reviews, messages sent, texts, pictures, videos, audios posted on the Application).
We collect your personal data when you sign up to the Application, in the context of the use of the Application and in the context of trainings you complete.
In all cases, we only collect data about you that is strictly necessary and relevant for the use of the Application and for training purposes.
For what purposes do we use you data?
Your personal data will be used by Shiseido for the following purposes:
Creation and administration of your personal account on the Application;
Administration, conduct and management of the Application;
Assess your skills, qualifications, and offer you adequate trainings;
Shiseido’s internal reporting;
Managing, developing and improving our trainings;
Meeting any legal or regulatory requirements relating to our provision of services and to make disclosure under the requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular or code applicable to us or to our affiliates
How long do we retain your Personal Information?
We will delete your personal data after a period of 3 years after your last of inactivity on your account. This retention period corresponds to the period necessary to fulfil the purposes outlined in this Policy.
With whom do we share your data?
Shiseido is a leading beauty care and perfume company with products sold in over 120 countries. As a global business, we may share your personal information with Shiseido Group companies and trusted third parties based outside the country in which you live so that they may process that data on our behalf. We will never rent, trade or sell your personal information to third party companies for their own marketing use.
For the purposes described above, we may need to share your personal data with the following authorized third parties:
Our third-party service providers, management companies, contractors, agents or other parties, acting on our behalf for the above mentioned purposes;
Any persons, government agencies, statutory authorities and/or industry regulatords, for the purpose of complying with applicable laws or regulations;
Anyone to whom we transfer or may transfer our rights and duties, including any actual or proposed assignee or transferee of the business of Shiseido, or a merged entity in the event Shiseido is merged to create such merged entity
Any other party to whom you authorize us to disclose your personal data.
All our affiliates and third-party service providers are required to comply with data protection laws and implement appropriate security measures to protect your Personal Data in line with our policies. We do not allow our third-party service providers to use your Personal Data for their own purposes. We only permit them to process your Personal Data for specified purposes and in accordance with our instructions and subject to a duty of confidentiality.
Where may your data be transferred?
Shiseido may need to transfer (via access, visualization, storage, etc.) your Personal Data to other countries, including from the European Economic Area or Switzerland outside the European Economic Area, in countries which may not be considered as providing the same level of protection as the jurisdiction you are based in.
In cases where we may need to transfer your data outside the European Economic Areaor Switzerland, we will ensure that adequate safeguards are implementedas required under applicable data protection regulation. If you would like to know more about the safeguards we put in place when transferring your Personal Dataoutside the European Economic Areaor to obtain a copy of these safeguards, please contact our Data Protection Officer using the contact details at the end of this Policy.
Third party sites
This Application may contain links to third-party websites, applications or services that are outside our control. We are not responsible for the privacy practices of the websites, applications or services operated by third parties, or the security or privacy of the websites, applications or services operated by third party websites, applications or services. Some of these websites or applications may display our logo our trademark even though they are not operated or maintainted by us. We would encourage you to exercise caution, and review the privacy statements applicable to the third party websites, applications and services you use to determine how they will handle any information they collect from you. To the fullest extent permitted under applicable laws, we cannot be responsible for a third party’s acts, omissions, data policies or their use of cookies nor the content or security of any third-party websites or applications, even if linked to this Application. Any such liability is expressly disclaimed and excluded.
Your rights and choices
You have the legal right to request:
Request access to the personal data we hold about you.
Request the correction of your personal data which is wrong.
Request the erasure of your personal data.
Object to our use of your data where our 'lawful basis' is legitimate interests and
wehave no legitimate overriding interest, or once the purpose for which we hold the data has come to an end;
Object to profiling
In specific cases, request that we restrict our processing of your personal data;
You have the right to request a copy of any personal data we hold that relates to you. To ask for your information, please contact our Data Protection Officer at the following address: dpo@emea.shiseido.com.
If we choose not to action your request we will explain to you the reasons for our refusal.
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Policy. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.
If you have any complaints regarding our compliance with this Policy, please first contact us. We will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with this Policy.
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint to your local data protection authority.