Cookie Information

The entity processing your personal data on our website, which can be accessed at https://dk.loccitane.com (the "Website") in accordance with the privacy policy described below is L'Occitane Nordic AB, with its registered office at Ringvägen 52, 118 67 Stockholm, Sweden ("L'Occitane"). We process your personal data in accordance with data protection legislation.

The Privacy Policy and the related Cookie Policy, apply to the information we collect about you when you use our website and apps. The Privacy Policy describes the types of personal data we collect from consumers, how we use, disclose, share and transfer this data, and how consumers can influence
the processing of personal data. In addition, the Privacy Policy explains how we ensure the protection of personal data and how you can contact us regarding the processing of personal data. Please read this Privacy Policy carefully. If you do not want us to process your personal data as described in the Privacy
Policy, we may not be able to respond to all your enquiries. We ask you to review the Privacy Policy periodically to keep up to date with any changes, in particular regarding the way in which personal data is collected and the terms of processing.

Topics

1. Collection of personal data
2. Use of collected personal data
3. Disclosure of personal data
4. Transfer of personal data
5. Retention period of personal data
6. Protection of personal data
7. Social media and user generated content
8. Your rights
9. Links to external sites and services
10. Changes to the Privacy Policy
11. Contact us

1. Collection of personal information

Your personal information may be collected in various ways, in particular when you visit our Website,
attend events, contact us, or use our online content or mobile applications. These situations may include, for example, when you open à L’Occitane account or join our loyalty program, browse on our Website, shop online, participate in a contest or game, participate in activities we organize, such as opinion polls and social media campaigns, sign up for a newsletter or product catalog, register for an event, or contact us by email or phone.

We may also link and/or combine the information we collect about you from different devices that
you use.

We collect the following personal data about you:

"Identification Data"
Surname, name, mailing address, e-mail address, mobile telephone number or other telephone number.

"Account Data"
Login email address and passwords, username, date of birth, title, language preference.

"Data About Your Interests"
Data about your interests and experiences with our products and products of a similar nature.

"Payment Data"
Payment Data (bank card number, expiry date, authorisation number, security code and billing address, identity or unique identifier of customer as applicable).

"Purchases Data"
Information on purchases and related transactions (delivery address, billing address, type and number of products purchased and returned).

"Customer Service Data"
History of contact with the customer service department, results of inquiries carried out and comments, collected by the customer service department and data exchanged with our customer service team.

"Opinion and Content Data"
Photographs, videos, questions, opinions, recommendations and other comments you provide, content you publish and exchanges within the L’Occitane community and/or the panel of testers. 

"Data of Relatives"
Contact information of other people you provide to us for managing orders (name, delivery address, telephone number) and first name and data of birth of relatives in connection with use of the event reminder service.

"Location Data"
Location data and geolocation data. 

"Social Media Data"
Your social data on social media platforms if you log into one of Our Websites using a social media login (name, email address and date of birth), data about you from publicly available sources, including content available publicly on social media platforms, such as comments you post on L’Occitane’s social
media pages.

"Browsing Data"
Data related to your browsing device and your operating system, IP address, the webpages or ads you view, details of your visits to our online content and social media, the emails sent by L’Occitane which you open, advertising or similar identifiers and your online actions collected automatically, such as cookies, web servers, pixels and web beacons.

"Third-Party Partners Data"
Data we may obtain from external third-party partners and, in particular, social media and advertising platforms, making it possible to know whether you have interacted with one of our ads and data measuring the effectiveness of marketing campaigns. 

In addition, as described in our Cookie Policy, we may collect certain information about you and track your online activity. This includes information about your device and operating system, your IP address, the websites and advertisements you see, information about your use of our online content and social media, advertising identifiers or similar identifiers. Information about online behavior is collected automatically, for example, through cookies, third-party cookies, web servers, pixels, web tags, and demographic means, based on topics and content that are of interest to you. Information is collected when you view our content, use our apps and social media, contact us in other ways, open emails sent by us or a third party on our behalf, or when you visit third-party websites where our ads are displayed. We are able to link the information we collect by automated means and, for example, combine your information with your browsing history and other information about you.

Data collected by third parties

Third-party applications, tools, and plug-ins on our website and apps, as well as third-party websites and services on which our ads are displayed (such as ad networks, digital advertising partners, and social media platforms), may also use automated and demographic means to collect information about topics and
content that may be of interest to you, to track your behavior through these activities. and track your online behavior on an ongoing basis and through third-party websites. This information is collected directly by third-party vendors (in addition to the information we collect) based on their own policies. We cannot be held responsible for the practices of these third-party suppliers to the extent permitted by applicable law.

If you opt out of our collection of the above information, we may not be able to provide you with certain services, including those described in this Privacy Policy.

2. Use of personal information collected

Why do we process your information?
How do we use your information for these purposes?
What are the legal bases for processing?

Providing your orders and returns
We use your personal data to provide you with products and services that are tailored to
your needs. We use this information to fulfil our contractual obligations to you.

Processing of transactions and payments on our website
We use information, including payment information, to process transactions on our website, for example in connection with orders. We use this information to fulfil our contractual obligations to you.

Creating, registering and managing a customer account
To create, register and manage your account and your participation in the loyalty programme. To enable you to receive our services (such as tracking your orders, managing your wish list, re-ordering and re-stocking reminder services, etc.) if you access your online account. We use this information to fulfil our contractual obligations to you. If there is no contract, L’Occitane’s legitimate interest in administering its loyalty programme.

To offer you an Express Payment service
If you ask us to, through our payment intermediary, we can save your bank card information securely, with the exception of your security code, to make your next orders easier.

Managing customer reviews
To display the reviews, you publish on our products and share them with our cosmetics resellers and
distributors, so your reviews can be displayed on their websites, as well as shared in our marketing campaigns. We use this information to fulfil our contractual obligations to you.

Although we do not have a contract with you, the processing of personal data for this purpose is necessary for L'Occitane's legitimate interest, i.e. to communicate better with you and to improve the quality of our products and services.

Communicating with customers and responding to customer inquiries
We use your personal data, such as your contact information and video chat information, to communicate with you and respond to your inquiries. We use this information to fulfil our contractual obligations to you.
Although we do not have a contract with you, the processing of personal data for this purpose is necessary for the purposes of L'Occitane's legitimate interest, i.e. to enable us to communicate better with you.

Managing the data of individuals participating in promotions and special events (e.g. competitions, games, sweepstakes, offers, opinion polls and market research)
We use your personal data, such as purchase and usage data, to manage your participation in various promotions or special events. We use this information to fulfill our contractual obligations to you (when you accept the rules of a competition, game or sweepstakes).

General and/or personalised marketing communications
To send general and/or personalised marketing communications based on your habits and preferences with respect to our products and services, your purchases and interests (including profiling), by email, ordinary mail, messaging applications (like Whatsapp), SMSs, push notifications and phone calls. Within this framework, we may send you special offers, invitations to events or other types of promotional ommunications. We rely on your consent to general and personalised communications by email, mmessaging applications and SMSs and push
notifications.

L’Occitane’s legitimate interest in carrying out promotion of its products and services for
communications by mail and telephone.

Providing L'Occitane's event reminder service

To send you a
reminder by email regarding a special event for your relatives (for ex.:
birthday of a friend).

Advertising on third-party websites and applications

To enable the
targeting of personalised ads on third-party websites and applications
(including on social media and search engines like Google) by sharing your
hashed email addressed securely with our partners to create ad audiences. These
partners may combine your hashed email address with data you have provided to
them in order to display targeted ads. L’Occitane’s legitimate interest in
providing its event reminder service.

L’Occitane’s
legitimate interest in promoting its products and services.

To show you store addresses and ads based on
geographic location
We use personal
information, such as location information, to show you the locations closest to
you, contact information for the stores and customize our marketing
communications based on your location.

We will ask for
your consent before processing the data for these purposes.

Documenting your preferences and usage
habits about products and services

We use your personal information, such as information about which products you are
interested in and your experience with them, to understand how you use our
products and services.

This processing is necessary for the purposes of L'Occitane's legitimate
interest, i.e. to get to know you better.

To analyse opinion polls and statistical data
in order to improve our website and services


We use your personal data, such as customer service information, survey
responses, and customer service comments and information exchanged with it, in
order to improve our website and services.

This processing is necessary for the purposes of L'Occitane's legitimate
interest, i.e. to get to know you better.

To personalise Our Website (including
advertising)

To personalise
and ensure the readability of Our Website’s content (including targeted ads) by
providing you with information and products tailored to your preferences. We use
functionality cookies for this purpose.

Your consent.

To ensure the operation of Our Website and its
security

To ensure that
Our Website operates (e.g., that you can place products in your shopping cart
or that you define your privacy protection preferences) and to put security
measures in place to protect your browsing. We use cookies and solutions which
block attacks on Our Website for this purpose.

L’Occitane’s
legitimate interest in managing our Website so as to prevent fraud and fight
against the risks of fraud, but also to ensure that Our Website is secure
during your visits.

To fight against fraudulent transactions

As part of the
fight against fraud, it is possible that the processing of your orders and
requests will be slowed down so as to enable L’Occitane to perform necessary
verifications. In the event of proven fraud, it is possible that we will be
unable to provide you the goods and/or services you have ordered/requested.

We use a fraud detection solution. As part of it, we may identify fraudulent or
suspicious transactions and make an automated decision based on an analysis of
your transactions on Our Website (profiling) that restricts your ability to
make purchases on Our Website if your transactions have characteristics
indicating they are fraudulent. If you request it, you may obtain human
intervention by contacting our Customer Service Department, express your point
of view and dispute the decision.

L’Occitane’s
legitimate interest in fighting against fraudulent transactions.

To analyze the effectiveness of marketing and
advertising campaigns

To analyse the
effectiveness of our marketing and advertising by determining whether you have
interacted with our ads or one of our emails or if you have made a purchase
after interacting with one of our ads. As part of this, we may also analyse the
content you post on social media about L’Occitane and contact you to organise
marketing operations if you are acting in a professional capacity.

Your
consent (where requested); or L’Occitane’s legitimate interest in
undertaking marketing and advertising activities.

Analysis of how our website is used and
how much we use

We use your
personal data, including cookies, to understand how you use our website.

This processing
is necessary for the purposes of L'Occitane's legitimate interest, i.e. to
analyse your

visits to our website and to better meet your expectations during your future
visits.

Your consent.

To target the advertising and messages that we
send to you

Via third-party
advertising networks, including search engines such as Google and social media
such as Facebook. We use data from social media networks and third-party
networks that notably relate to demographic means linked to areas of interest
and context, as well as your online activities, in an isolated or combined
manner. After compiling this data with other information that we have provided
to them, you will receive advertising messages suited to your interests on
L'Occitane's website, on third-party sites and on social media. 

This processing
is necessary for the legitimate interests of L'Occitane, namely measuring
marketing effectiveness, and personalising and improving user experience.

To comply with our statutory obligations

To comply with
our statutory and internal control obligations (including accounting and
auditing), including our cosmetic vigilance obligations and to respond to
requests from judicial, administrative and law enforcement authorities.

L’Occitane’s
statutory obligations.

To enforce and defend our rights

To defend and
enforce our rights vis-à-vis judicial, administrative and law enforcement
authorities.

L’Occitane’s
legitimate interest in enforcing and defending its rights.

To include your social media posts on Our
Website

We may include on
Our Website and as part of our online communications content about L’Occitane
you have posted on social media (posts and photos).

Your consent.

3.       
Disclosure of personal data

We do not
disclose the personal data we collect about you, except in the following cases:

a)       
Within the L'Occitane Group worldwide, meaning
with subsidiaries and the company that ultimately controls us (“L'Occitane
Group”).

b)       
With service providers which provide services
in our name, which help us in the maintenance and development of our Website,
the administration of the loyalty program, and the distribution, development
and marketing of our products and services. These include entities that process
orders and provide web hosting, data storage services, email services,
marketing services including direct marketing, development and analytics
services, and tag management services such as Google Analytics. For more
information about this analytics service and your rights to object to the
processing of your data, please visit:

-           
In English: https://support.google.com/analytics/answer/6004245

-           
In Danish: https://support.google.com/analytics/answer/6004245?hl=da

c)       
When we use the targeted marketing and
behavioural advertising campaign services offered by our partners Google and
Facebook. To find out more about how these partners use your personal data
within this context, please refer to their Privacy policies and terms of
service, which govern these services and the associated data processing

d)      
The information is disclosed to the merchant
network for the purpose of selling products in Denmark, in particular for the
purpose of managing the pick-up points for products ordered through the
website.

e)       
The information is disclosed to our
co-branding partners and in connection with joint marketing and communication
campaigns and programs. The information will be disclosed to our partners for
their own use so that they can provide you with information about third-party
products and services that may be of interest to you, if you have given your
consent to such use.

f)         
Data is disclosed in cases required by law.

g)       
Data is disclosed to law enforcement,
authorities and other parties in connection with legal decisions, procedures
and subpoenas.

h)       
Information will be disclosed when we deem it
necessary or necessary to prevent physical damage, financial loss, or fraud
that may befall you or us. Data is disclosed to prevent or report illegal
activities. Information is disclosed to protect rights and safety and in
accordance with our Terms of Use and other agreements between us.

i)         
Information is disclosed in connection with
the sale of part or all of our business to a third party or as part of a
business restructuring (including dissolution or liquidation).

We may share anonymous information that does
not identify you for our own commercial objectives, or those of our partners,
which includes the number of visitors to our Website and the number of clicks
on our ads and/or e-mails.

4.       
Transfer of personal data

The personal data
we collect may be transferred, stored, accessed and processed for the purposes
set out above in the countries or regions in which one or more subsidiaries of
our Group L’Occitane or providers are located, including other countries the
European Economic Area (EEA), Switzerland and the United States. Personal data
may also be processed by our staff representatives outside the EEA and your
home country.

Where the
recipient is located in a country whose legislation has not been recognized by
an adequacy decision of the European Commission, we implement the necessary
measures to safeguard your personal data. These measures include the execution
of the European Commission’s Standard Contractual Clauses, the implementation
of supplementary contractual, organizational, and technical measures where
necessary, and monitoring the data protection and security standards adopted by
these service.

Some of our
service providers located in the United States and to whom we transfer your
personal data may be certified under the UE-US Data Privacy Framework with
respect to their collection, use and retention of personal data from EEA member
states. In such cases, these service providers are registered with the US
Department of Commerce as complying with the principles of the Data Privacy
Framework. You can consult the list of companies that are certified under the
Data Privacy Framework via this link. [https://www.dataprivacyframework.gov/list]

Where our
U.S.-based service providers participate in the EU-U.S. Data Privacy Framework,
transfers of your personal data from the EEA to those service providers will be
carried out on the basis of their certification under that framework.

You may obtain
more information on these safeguards by contacting us by e-mail or ordinary
mail at the addresses shown in the "Your Rights" and "Contact
Us
" sections below.

5.       
Retention period of personal data

Unless indicated
otherwise, we will store your personal data for the time strictly necessary to
carry out the aforementioned purposes, in accordance with governing law.

As a general
rule:

-           
Unless you object or request that it be deleted, we retain your customer
account data for the duration of our business relationship and for a further
three-year period from the last contact or termination of this business
relationship (no active interaction with Us), in accordance with the
regulations and local guidelines. We may contact you again at the end of this
three-year period to find out whether you would like us to keep your details in
our customer database. If we do not receive a positive and explicit reply from
you, your data will be deleted or archived temporarily for evidentiary
purposes, in accordance with statutory provisions in force;

-           
If you have subscribed to receive marketing material, we will retain
your personal data until you unsubscribe, until such time as you ask us to
delete it or after a three-year period of inactivity (no active interaction
with Us);

-           
Bank details are deleted once the transaction has been completed, or
archived for evidentiary purposes, in accordance with the statutory provisions
in force. Subject to your express agreement, this data may be retained until
the expiry date on your bank card. Your visual cryptogram will not be retained;

-           
Where applicable, data regarding your ID documents may be retained for
up to one year in the event you exercise your rights;

-           
The data required to establish proof of a right or contract, or retained
to comply with a statutory obligation, will be archived in accordance with the
statutory provisions in force;

-           
Information relating to the recording of telephone conversations to
improve the quality of our Customer Service will be retained for the length of
time required for this purpose, up to a maximum of six months;

-           
If you contact us as part of exercising your rights, we will retain your
personal data for the length of time required to process your request as well
as for evidentiary purposes, in accordance with the statutory provisions in
force; and

-           
If we install cookies on your device, we will retain your data only for
the length of time required to fulfil their purpose (e.g., for the duration of
a session for cookies linked to the shopping cart or session identification
cookies) and for any given period in accordance with the regulations and local
instructions.

In some cases, we
are required to retain data for a longer period in order to fulfil our
statutory and administrative obligations, to allow us to exercise our rights
(e.g., filing court claims). We may also retain anonymized data for statistical
purposes.

When we have no
further need of the information, it will be deleted from our systems or anonymized
so that it can no longer be used to identify you.

6.       
Protection of personal data

We take the
necessary technical and administrative measures to protect your personal data
against accidental destruction, loss, alteration and unauthorized disclosure,
access to and use of personal data.

7.        
Social media and user-generated content

Some of our
websites and apps include the ability to publish your own content. Please note
that all updates posted on our social media platforms are public. So, remember
to be cautious about posting personal information on these platforms, and don't
publish your financial information, address, or health information. If you post
your personal data on our social media platforms, we are not responsible for
the actions of other people.

8.       
Your rights

-           
Right of access: You may request access to your personal data. If
you request such access, we will provide you with all the information required
by law, including in particular the purposes of the processing, categories of
data processed, categories of recipients, data retention periods and your
rights.

-           
Right to
portability
: In
certain cases, you may also obtain a copy of your personal data that is
commonly used and machine-readable in order to enable you to exercise your
right to data portability.

-           
Right of
rectification
:
You may also ask us to rectify all personal data pertaining to you that is
inaccurate and to complete any incomplete information.

-           
Right of erasure: Under certain circumstances, you may request that
your personal data be erased. We may nevertheless need to retain certain
limited data in an archived database, in particular if we have a statutory
personal data retention obligation or if the data is necessary to exercise or
defend a right in a court of law.

-           
Right to limit
processing
: Under certain
circumstances, you may request to limit the processing of your personal data,
in particular when you request that your personal data be rectified.

-           
Right to withdraw
your consent
:
Where the processing of your personal data is based on your consent, you may at
any time withdraw any consent you have previously given to us. Such withdrawal
will not affect the lawfulness of the processing based on your consent prior to
such withdrawal. 

-           
Right to object: You may also object at any time to the processing of your Personal
Data when it is used for commercial prospection purposes or for reasons related
to your particular situation.

To
exercise your rights: 

-           
You
may contact us by email or by letter at the addresses set
forth in the “How to contact us” section below.

-           
You
may also correct, update and delete the information in your online account, as
well as your preferences, at any time by logging in to your account and going
to the “My Account” section.

-           
As
regards marketing communications by email, you may withdraw your consent by
clicking on “Unsubscribe” or by following the instructions given in our
communications. It may take several days to process your request, and it is possible that you will continue to receive
promotional communications during this period. Exercising this right will not
prevent us from sending you other types of non-promotional messages, such as
emails confirming transactions.

-           
If you have given your consent to the use of your Location Data to find
the store nearest to you, you may change
your preferences at any time by changing your browser’s settings. 

You may also contact L’Occitane's Data Protection
Officer (“DPO”) by email for any question regarding the processing of your
personal data, at the following address: dpo@loccitane.com.    

You also have the right to submit a complaint to the Danish
Data Protection Agency.  

9.       
Links to external sites and services

Our Websites and
Apps may contain links to websites, applications and services not operated by
L'Occitane, which may be operated by third parties. Please note that we are not
responsible for the processing of your personal data on third-party websites, even
if we provide a link to such a website. These companies have their own privacy
policies and policies, which we encourage you to review. Our products and
services may be offered to you through third-party platforms and channels.
L'Occitane is not responsible in any way for the processing of personal data on
websites, applications and services that are not operated by L'Occitane.

10.    Changes to the privacy policy

This Privacy
Policy may be updated from time to time to reflect changes to our personal data
processing practices. Your continued use of our website after the changes
become effective will indicate your acceptance of the changes.

11.      Contact us

If you would like
us to update information about your personal data and preferences, and in
particular if you would like us to remove you from our distribution lists, to exercise
your rights or if you have questions regarding the protection of your personal
data, please contact us by email at info@loccitane.se,

or by letter to
the following address:

L'Occitane Nordic AB

Ringvägen 52

118 67 Stockholm

Sweden

 

Last updated: 10/08/2026