Privacy policy

PRIVACY POLICY

The entity processing your personal data on our website, which can be accessed at https://dk.loccitane.com (the "Website") in accordance with the privacy policy described below is L'Occitane Nordic AB, with its registered office at Ringvägen 52, 118 67 Stockholm, Sweden ("L'Occitane"). We process your personal data in accordance with data protection legislation.

This Privacy Policy and the related Cookie Policy, available at the Cookie Policy [https://se.loccitane.com/pages/information-om-cookies], apply to the information we collect about you when you use our website and apps. The Privacy Policy describes the types of personal data we collect from consumers, how we use, disclose, share and transfer this data, and how consumers can influence the processing of personal data. In addition, the Privacy Policy explains how we ensure the protection of personal data and how you can contact us regarding the processing of personal data. Please read this Privacy Policy carefully. If you do not want us to process your personal data as described in the Privacy Policy, we may not be able to respond to all your enquiries.

We ask you to review the Privacy Policy periodically to keep up to date with any changes, in particular regarding the way in which personal data is collected and the terms of processing.

Topics

1.          Collection of personal data

2.         Use of collected personal data

3.         Disclosure of personal data

4.        Transfer of personal data

5.         Retention period of personal data

6.        Protection of personal data

7.         Social media and user generated content

8.        Your rights

9.        Links to external sites and services

10.     Changes to the Privacy Policy

11.       Contact us

 

1.          Collection of personal information

Your personal information may be collected in various ways, in particular when you visit our Website, attend events, contact us, or use our online content or mobile applications.

These situations may include, for example, when you open à L’Occitane account or join our loyalty program, browse on our Website, shop online, participate in a contest or game, participate in activities we organize, such as opinion polls and social media campaigns, sign up for a newsletter or product catalog, register for an event, or contact us by email or phone.

We may also link and/or combine the information we collect about you from different devices that you use.

We collect the following personal data about you:

"Identification Data"

Surname, name, mailing address, e-mail address, mobile telephone number or other telephone number.

"Account Data"

Login email address and passwords, username, date of birth, title, language preference.

"Data About Your Interests"

Data about your interests and experiences with our products and products of a similar nature.

"Payment Data"

Payment Data (bank card number, expiry date, authorisation number, security code and billing address, identity or unique identifier of customer as applicable).

"Purchases Data"

Information on purchases and related transactions (delivery address, billing address, type and number of products purchased and returned).

"Customer Service Data"

History of contact with the customer service department, results of inquiries carried out and comments, collected by the customer service department and data exchanged with our customer service team.

"Opinion and Content Data"

Photographs, videos, questions, opinions, recommendations and other comments you provide, content you publish and exchanges within the L’Occitane community and/or the panel of testers. 

"Data of Relatives" 

Contact information of other people you provide to us for managing orders (name, delivery address, telephone number) and first name and data of birth of relatives in connection with use of the event reminder service.

"Location Data"

Location data and geolocation data. 

"Social Media Data"

Your social data on social media platforms if you log into one of Our Websites using a social media login (name, email address and date of birth), data about you from publicly available sources, including content available publicly on social media platforms, such as comments you post on L’Occitane’s social media pages.

"Browsing Data"

Data related to your browsing device and your operating system, IP address, the webpages or ads you view, details of your visits to our online content and social media, the emails sent by L’Occitane which you open, advertising or similar identifiers and your online actions collected automatically, such as cookies, web servers, pixels and web beacons.

"Third-Party Partners Data"

Data we may obtain from external third-party partners and, in particular, social media and advertising platforms, making it possible to know whether you have interacted with one of our ads and data measuring the effectiveness of marketing campaigns. 

 

In addition, as described in our Cookie Policy, we may collect certain information about you and track your online activity. This includes information about your device and operating system, your IP address, the websites and advertisements you see, information about your use of our online content and social media, advertising identifiers or similar identifiers. Information about online behavior is collected automatically, for example, through cookies, third-party cookies, web servers, pixels, web tags, and demographic means, based on topics and content that are of interest to you. Information is collected when you view our content, use our apps and social media, contact us in other ways, open emails sent by us or a third party on our behalf, or when you visit third-party websites where our ads are displayed. We are able to link the information we collect by automated means and, for example, combine your information with your browsing history and other information about you.

Data collected by third parties

Third-party applications, tools, and plug-ins on our website and apps, as well as third-party websites and services on which our ads are displayed (such as ad networks, digital advertising partners, and social media platforms), may also use automated and demographic means to collect information about topics and content that may be of interest to you, to track your behavior through these activities. and track your online behavior on an ongoing basis and through third-party websites. This information is collected directly by third-party vendors (in addition to the information we collect) based on their own policies. We cannot be held responsible for the practices of these third-party suppliers to the extent permitted by applicable law.

If you opt out of our collection of the above information, we may not be able to provide you with certain services, including those described in this Privacy Policy.

2.        Use of personal information collected

Why do we process your information?

How do we use your information for these purposes?

What are the legal bases for processing?

Providing your orders and returns

We use your personal data to provide you with products and services that are tailored to your needs.
We use this information to fulfil our contractual obligations to you.

Processing of transactions and payments on our website

We use information, including payment information, to process transactions on our website, for example in connection with orders.

We use this information to fulfil our contractual obligations to you.

Creating, registering and managing a customer account

To create, register and manage your account and your participation in the loyalty programme.
To enable you to receive our services (such as tracking your orders, managing your wish list, re-ordering and re-stocking reminder services, etc.) if you access your online account.
We use this information to fulfil our contractual obligations to you. If there is no contract, L’Occitane’s legitimate interest in administering its loyalty programme.

To offer you an Express Payment service

If you ask us to, through our payment intermediary, we can save your bank card information securely, with the exception of your security code, to make your next orders easier.

Managing customer reviews

To display the reviews, you publish on our products and share them with our cosmetics resellers and distributors, so your reviews can be displayed on their websites, as well as shared in our marketing campaigns. We use this information to fulfil our contractual obligations to you.

Although we do not have a contract with you, the processing of personal data for this purpose is necessary for L'Occitane's legitimate interest, i.e. to communicate better with you and to improve the quality of our products and services.

Communicating with customers and responding to customer inquiries

We use your personal data, such as your contact information and video chat information, to communicate with you and respond to your inquiries.

We use this information to fulfil our contractual obligations to you.

Although we do not have a contract with you, the processing of personal data for this purpose is necessary for the purposes of L'Occitane's legitimate interest, i.e. to enable us to communicate better with you.

Managing the data of individuals participating in promotions and special events (e.g. competitions, games, sweepstakes, offers, opinion polls and market research)

We use your personal data, such as purchase and usage data, to manage your participation in various promotions or special events.

We use this information to fulfill our contractual obligations to you (when you accept the rules of a competition, game or sweepstakes).

General and/or personalised marketing communications

To send general and/or personalised marketing communications based on your habits and preferences with respect to our products and services, your purchases and interests (including profiling), by email, ordinary mail, messaging applications (like Whatsapp), SMSs, push notifications and phone calls.

Within this framework, we may send you special offers, invitations to events or other types of promotional communications. We rely on your consent to general and personalised communications by email, messaging applications and SMSs and push notifications.
L’Occitane’s legitimate interest in carrying out promotion of its products and services for communications by mail and telephone.

Providing L'Occitane's event reminder service

To send you a reminder by email regarding a special event for your relatives (for ex.: birthday of a friend).

Advertising on third-party websites and applications

To enable the targeting of personalised ads on third-party websites and applications (including on social media and search engines like Google) by sharing your hashed email addressed securely with our partners to create ad audiences. These partners may combine your hashed email address with data you have provided to them in order to display targeted ads. L’Occitane’s legitimate interest in providing its event reminder service.

L’Occitane’s legitimate interest in promoting its products and services.

To show you store addresses and ads based on geographic location

We use personal information, such as location information, to show you the locations closest to you, contact information for the stores and customize our marketing communications based on your location.

We will ask for your consent before processing the data for these purposes.

Documenting your preferences and usage habits about products and services

We use your personal information, such as information about which products you are interested in and your experience with them, to understand how you use our products and services.
This processing is necessary for the purposes of L'Occitane's legitimate interest, i.e. to get to know you better.

To analyse opinion polls and statistical data in order to improve our website and services
We use your personal data, such as customer service information, survey responses, and customer service comments and information exchanged with it, in order to improve our website and services.
This processing is necessary for the purposes of L'Occitane's legitimate interest, i.e. to get to know you better.

To personalise Our Website (including advertising)

To personalise and ensure the readability of Our Website’s content (including targeted ads) by providing you with information and products tailored to your preferences. We use functionality cookies for this purpose.

Your consent.

To ensure the operation of Our Website and its security

To ensure that Our Website operates (e.g., that you can place products in your shopping cart or that you define your privacy protection preferences) and to put security measures in place to protect your browsing. We use cookies and solutions which block attacks on Our Website for this purpose.

L’Occitane’s legitimate interest in managing our Website so as to prevent fraud and fight against the risks of fraud, but also to ensure that Our Website is secure during your visits.

To fight against fraudulent transactions

As part of the fight against fraud, it is possible that the processing of your orders and requests will be slowed down so as to enable L’Occitane to perform necessary verifications. In the event of proven fraud, it is possible that we will be unable to provide you the goods and/or services you have ordered/requested.
We use a fraud detection solution. As part of it, we may identify fraudulent or suspicious transactions and make an automated decision based on an analysis of your transactions on Our Website (profiling) that restricts your ability to make purchases on Our Website if your transactions have characteristics indicating they are fraudulent. If you request it, you may obtain human intervention by contacting our Customer Service Department, express your point of view and dispute the decision.

L’Occitane’s legitimate interest in fighting against fraudulent transactions.

To analyze the effectiveness of marketing and advertising campaigns

To analyse the effectiveness of our marketing and advertising by determining whether you have interacted with our ads or one of our emails or if you have made a purchase after interacting with one of our ads. As part of this, we may also analyse the content you post on social media about L’Occitane and contact you to organise marketing operations if you are acting in a professional capacity.

Your consent (where requested); or L’Occitane’s legitimate interest in undertaking marketing and advertising activities.

Analysis of how our website is used and how much we use

We use your personal data, including cookies, to understand how you use our website.

This processing is necessary for the purposes of L'Occitane's legitimate interest, i.e. to analyse your
visits to our website and to better meet your expectations during your future visits.

Your consent.

To target the advertising and messages that we send to you

Via third-party advertising networks, including search engines such as Google and social media such as Facebook. We use data from social media networks and third-party networks that notably relate to demographic means linked to areas of interest and context, as well as your online activities, in an isolated or combined manner. After compiling this data with other information that we have provided to them, you will receive advertising messages suited to your interests on L'Occitane's website, on third-party sites and on social media. 

This processing is necessary for the legitimate interests of L'Occitane, namely measuring marketing effectiveness, and personalising and improving user experience.

To comply with our statutory obligations

To comply with our statutory and internal control obligations (including accounting and auditing), including our cosmetic vigilance obligations and to respond to requests from judicial, administrative and law enforcement authorities.

L’Occitane’s statutory obligations.

To enforce and defend our rights

To defend and enforce our rights vis-à-vis judicial, administrative and law enforcement authorities.

L’Occitane’s legitimate interest in enforcing and defending its rights.

To include your social media posts on Our Website

We may include on Our Website and as part of our online communications content about L’Occitane you have posted on social media (posts and photos).

Your consent.

3.        Disclosure of personal data

We do not disclose the personal data we collect about you, except in the following cases:

a)        Within the L'Occitane Group worldwide, meaning with subsidiaries and the company that ultimately controls us (“L'Occitane Group”).

b)        With service providers which provide services in our name, which help us in the maintenance and development of our Website, the administration of the loyalty program, and the distribution, development and marketing of our products and services. These include entities that process orders and provide web hosting, data storage services, email services, marketing services including direct marketing, development and analytics services, and tag management services such as Google Analytics. For more information about this analytics service and your rights to object to the processing of your data, please visit:

-            In English: https://support.google.com/analytics/answer/6004245

-            In Danish: https://support.google.com/analytics/answer/6004245?hl=da

c)        When we use the targeted marketing and behavioural advertising campaign services offered by our partners Google and Facebook. To find out more about how these partners use your personal data within this context, please refer to their Privacy policies and terms of service, which govern these services and the associated data processing

d)       The information is disclosed to the merchant network for the purpose of selling products in Denmark, in particular for the purpose of managing the pick-up points for products ordered through the website.

e)        The information is disclosed to our co-branding partners and in connection with joint marketing and communication campaigns and programs. The information will be disclosed to our partners for their own use so that they can provide you with information about third-party products and services that may be of interest to you, if you have given your consent to such use.

f)          Data is disclosed in cases required by law.

g)        Data is disclosed to law enforcement, authorities and other parties in connection with legal decisions, procedures and subpoenas.

h)        Information will be disclosed when we deem it necessary or necessary to prevent physical damage, financial loss, or fraud that may befall you or us. Data is disclosed to prevent or report illegal activities. Information is disclosed to protect rights and safety and in accordance with our Terms of Use and other agreements between us.

i)          Information is disclosed in connection with the sale of part or all of our business to a third party or as part of a business restructuring (including dissolution or liquidation).

We may share anonymous information that does not identify you for our own commercial objectives, or those of our partners, which includes the number of visitors to our Website and the number of clicks on our ads and/or e-mails.

4.        Transfer of personal data

The personal data we collect may be transferred, stored, accessed and processed for the purposes set out above in the countries or regions in which one or more subsidiaries of our Group L’Occitane or providers are located, including other countries the European Economic Area (EEA), Switzerland and the United States. Personal data may also be processed by our staff representatives outside the EEA and your home country.

Where the recipient is located in a country whose legislation has not been recognized by an adequacy decision of the European Commission, we implement the necessary measures to safeguard your personal data. These measures include the execution of the European Commission’s Standard Contractual Clauses, the implementation of supplementary contractual, organizational, and technical measures where necessary, and monitoring the data protection and security standards adopted by these service.

Some of our service providers located in the United States and to whom we transfer your personal data may be certified under the UE-US Data Privacy Framework with respect to their collection, use and retention of personal data from EEA member states. In such cases, these service providers are registered with the US Department of Commerce as complying with the principles of the Data Privacy Framework. You can consult the list of companies that are certified under the Data Privacy Framework via this link. [https://www.dataprivacyframework.gov/list]

Where our U.S.-based service providers participate in the EU-U.S. Data Privacy Framework, transfers of your personal data from the EEA to those service providers will be carried out on the basis of their certification under that framework.

You may obtain more information on these safeguards by contacting us by e-mail or ordinary mail at the addresses shown in the "Your Rights" and "Contact Us" sections below.

5.        Retention period of personal data

Unless indicated otherwise, we will store your personal data for the time strictly necessary to carry out the aforementioned purposes, in accordance with governing law.

As a general rule:

-            Unless you object or request that it be deleted, we retain your customer account data for the duration of our business relationship and for a further three-year period from the last contact or termination of this business relationship (no active interaction with Us), in accordance with the regulations and local guidelines. We may contact you again at the end of this three-year period to find out whether you would like us to keep your details in our customer database. If we do not receive a positive and explicit reply from you, your data will be deleted or archived temporarily for evidentiary purposes, in accordance with statutory provisions in force;

-            If you have subscribed to receive marketing material, we will retain your personal data until you unsubscribe, until such time as you ask us to delete it or after a three-year period of inactivity (no active interaction with Us);

-            Bank details are deleted once the transaction has been completed, or archived for evidentiary purposes, in accordance with the statutory provisions in force. Subject to your express agreement, this data may be retained until the expiry date on your bank card. Your visual cryptogram will not be retained;

-            Where applicable, data regarding your ID documents may be retained for up to one year in the event you exercise your rights;

-            The data required to establish proof of a right or contract, or retained to comply with a statutory obligation, will be archived in accordance with the statutory provisions in force;

-            Information relating to the recording of telephone conversations to improve the quality of our Customer Service will be retained for the length of time required for this purpose, up to a maximum of six months;

-            If you contact us as part of exercising your rights, we will retain your personal data for the length of time required to process your request as well as for evidentiary purposes, in accordance with the statutory provisions in force; and

-            If we install cookies on your device, we will retain your data only for the length of time required to fulfil their purpose (e.g., for the duration of a session for cookies linked to the shopping cart or session identification cookies) and for any given period in accordance with the regulations and local instructions.

In some cases, we are required to retain data for a longer period in order to fulfil our statutory and administrative obligations, to allow us to exercise our rights (e.g., filing court claims). We may also retain anonymized data for statistical purposes.

When we have no further need of the information, it will be deleted from our systems or anonymized so that it can no longer be used to identify you.

6.        Protection of personal data

We take the necessary technical and administrative measures to protect your personal data against accidental destruction, loss, alteration and unauthorized disclosure, access to and use of personal data.

7.         Social media and user-generated content

Some of our websites and apps include the ability to publish your own content. Please note that all updates posted on our social media platforms are public. So, remember to be cautious about posting personal information on these platforms, and don't publish your financial information, address, or health information. If you post your personal data on our social media platforms, we are not responsible for the actions of other people.

8.        Your rights

-            Right of access: You may request access to your personal data. If you request such access, we will provide you with all the information required by law, including in particular the purposes of the processing, categories of data processed, categories of recipients, data retention periods and your rights.

-            Right to portability: In certain cases, you may also obtain a copy of your personal data that is commonly used and machine-readable in order to enable you to exercise your right to data portability.

-            Right of rectification: You may also ask us to rectify all personal data pertaining to you that is inaccurate and to complete any incomplete information.

-            Right of erasure: Under certain circumstances, you may request that your personal data be erased. We may nevertheless need to retain certain limited data in an archived database, in particular if we have a statutory personal data retention obligation or if the data is necessary to exercise or defend a right in a court of law.

-            Right to limit processing: Under certain circumstances, you may request to limit the processing of your personal data, in particular when you request that your personal data be rectified.

-            Right to withdraw your consent: Where the processing of your personal data is based on your consent, you may at any time withdraw any consent you have previously given to us. Such withdrawal will not affect the lawfulness of the processing based on your consent prior to such withdrawal. 

-            Right to object: You may also object at any time to the processing of your Personal Data when it is used for commercial prospection purposes or for reasons related to your particular situation.

To exercise your rights: 

-            You may contact us by email or by letter at the addresses set forth in the “How to contact us” section below.

-            You may also correct, update and delete the information in your online account, as well as your preferences, at any time by logging in to your account and going to the “My Account” section.

-            As regards marketing communications by email, you may withdraw your consent by clicking on “Unsubscribe” or by following the instructions given in our communications. It may take several days to process your request, and it is possible that you will continue to receive promotional communications during this period. Exercising this right will not prevent us from sending you other types of non-promotional messages, such as emails confirming transactions.

-            If you have given your consent to the use of your Location Data to find the store nearest to you, you may change your preferences at any time by changing your browser’s settings. 

You may also contact L’Occitane's Data Protection Officer (“DPO”) by email for any question regarding the processing of your personal data, at the following address: dpo@loccitane.com.    

You also have the right to submit a complaint to the Danish Data Protection Agency.  

9.        Links to external sites and services

Our Websites and Apps may contain links to websites, applications and services not operated by L'Occitane, which may be operated by third parties. Please note that we are not responsible for the processing of your personal data on third-party websites, even if we provide a link to such a website. These companies have their own privacy policies and policies, which we encourage you to review. Our products and services may be offered to you through third-party platforms and channels. L'Occitane is not responsible in any way for the processing of personal data on websites, applications and services that are not operated by L'Occitane.

10.    Changes to the privacy policy

This Privacy Policy may be updated from time to time to reflect changes to our personal data processing practices. Your continued use of our website after the changes become effective will indicate your acceptance of the changes.

11.      Contact us

If you would like us to update information about your personal data and preferences, and in particular if you would like us to remove you from our distribution lists, to exercise your rights or if you have questions regarding the protection of your personal data, please contact us by email at info@loccitane.se,

or by letter to the following address:

L'Occitane Nordic AB

Ringvägen 52

118 67 Stockholm

Sweden

 

Last updated: 10/08/2026