PRIVACY NOTICE
1. Data Controller (legal entity)
L’Oréal Danmark A/S
CVR no. 7071 0218 Havneholmen 25
1561 København V Denmark
L’Oréal Sverige AB
reg.no. 556048-3314
Box 15 222
167 15 Bromma
Sweden
L’Oréal Norge AS
reg.no. 954 790 088 Lysaker Torg 35
1366 Lysaker
Norway
L’Oréal Finland Oy
reg.no. 0346279-6 Keilaranta 13A
02150 Espoo
Finland
2. Purpose of the data processing
L’Oréal are collecting data, name, and addresses and sampling order for the medical sampling site for health care professionals only. The data are used to send samples and materials that the doctors or other health care professionals are ordering on the website. The order information are kept for 2 years and then deleted.
3. Legal basis for the data processing
The data processing is a “performance of a requested service”. A service L’Oréal is giving the health care professionals that sign up for the service.
4. Recipients of the data (departments or brands etc.)
Active cosmetic division’s medical team have accesses to the data: Medical director, product manager, medical visitors. External supplier of the website Gorm Larsen Nordic has access to the data.
5. Existence of data transfer outside E.E.A and the safeguards in place
The data is stored in the European union and not shared to other parties.
6. Data retention period
The data will be stored for 2 years and after that deleted from the data base.
7. List of individual rights and how to exercise them
Contact the medical director.
Line.bentsen@loreal.com
- Right to request access, rectification or erasure (“right to be forgotten”) of personal data.
- Right to restriction of processing.
- Right to object to processing.
- Right to data portability.
- Right to withdraw consent at any time, when processing is based on consent.
- Right to lodge a complaint with a supervisory authority.
8. If relevant the minimum personal data necessary to enable performing the services requested by the individual
Data request: clinic, name, address, city, post code, phone number, email and medical specialist all information is necessary for sending the samples and materials that they request. Phone number are used so custormer service can contact the clinic if there are problems with the delivery.
9. Exsistence of automated decision making
No automated processes are used. Only the amount of orders are counted for forecast purposes.
10. Contact Details of the Data Protection Officer
nordicdpo@loreal.com
