PERSONAL DATA PROTECTION POLICY
L’OREAL FRANCE
version updated on 01/04/2026
L’Oréal France’s ambition is to be an exemplary corporate citizen to help make the world a more beautiful place. We place great value on honesty and clarity and we are committed to building a strong and lasting relationship with our consumers based on trust and mutual benefit. Part of this commitment means safeguarding and respecting your privacy and your choices. Respecting your privacy is essential to us. This is why we set out below “Our Privacy Promise” and our full Personal Data Protection Policy.
OUR PRIVACY PROMISE
- We respect your privacy and your choices.
- We make sure that privacy and security are embedded in everything we do.
- We only send you marketing communications if you have asked us to. You can change your mind at any time.
- We never offer or sell your data.
- We are committed to keeping your data safe and secure. This includes only working with trusted partners.
- We are committed to being open and transparent about how we use your data.
- We do not use your data in ways that we have not told you about.
- We respect your rights, and always try to accommodate your requests as far as is possible, in line with our own legal and operational responsibilities.
To provide you with further details regarding our privacy practices, we set out below the types of personal data we may receive from you directly or from your interaction with us, how we may use it, who we may share it with, how we protect it, and your rights regarding your personal data. Of course, all situations may not apply to you. This policy gives you an overview of all possible situations in which we could interact together.
The more you communicate with us and share information about yourself, the better we can provide you with personalized services.
When you share personal data with us or when we collect personal data about you, we commit to using it in line with this Policy. Please read this information carefully, as well as our FAQ page (if available). If you have any questions or concerns, please contact us at: [email protected].
WHAT WILL YOU FIND IN THIS PRIVACY POLICY?
- Who are we?
- What is personal data?
- What personal data do we collect from you and how do we use it?
- How do we collect or receive your personal data?
- Automated individual decision-making for transaction security
- Profiling and advertising targeting
- Who may access your personal data?
- Where do we store your personal data?
- How long do we keep your personal data?
- Is your personal data secure?
- Links to third-party sites and social login
- Social media and user-generated content
- Your rights and choices
- Contact
- Specific provisions for France
1. WHO ARE WE?
L’Oréal France is responsible for the personal data you share with us. In accordance with applicable regulations, L’Oréal France is the “data controller”. L’Oréal France, a general partnership (société en nom collectif), with headquarters at 30 rue d’Alsace, 92300 Levallois-Perret, registered with the Nanterre Trade and Companies Register under number 919 434 894.
2. WHAT IS PERSONAL DATA?
“Personal data” means any information or pieces of information that could identify you either directly (e.g., your name) or indirectly (e.g., through pseudonymized data such as a unique ID number). This includes information such as email/postal addresses, mobile phone numbers, usernames, profile pictures, personal preferences, purchase habits, user-generated content, financial data, and beauty/well-being information. It may also include unique numerical identifiers like your computer’s IP address or your mobile device’s MAC address, as well as cookies.
3. WHAT PERSONAL DATA DO WE COLLECT FROM YOU AND HOW DO WE USE IT?
L’Oréal France believes that you, the consumer, are at the heart of everything we do. We love to learn about you to create products and services you enjoy.
3.1. How do we collect or receive your data?
We collect personal data from you, or receive it from you, via our websites, questionnaires, applications, devices, pages dedicated to L’Oréal France products or brands on social media, or by any other means. In some cases, you provide personal data to us directly (e.g., when you create an account, when you contact us, or when you make a purchase on our websites/applications or in a store/beauty salon). In other cases, we collect this data (e.g., using cookies to understand how you use our websites/applications) or the data is sent to us by third parties, including other L’Oréal Group entities.
When we collect data, we indicate mandatory fields using an asterisk. Some of the data we request is essential for the following reasons:
- The performance of the contract we have concluded with you (for example, to proceed with the delivery of goods you purchased on our website/application);
- The provision of the service you requested (for example, to send you a newsletter);
- Compliance with legal obligations (for example, invoicing);
- Our legitimate interest (for example, tailoring our marketing communications and understanding their effectiveness).
Failure to complete the fields marked with an asterisk may affect our ability to provide you with the products and services.
You will find more detailed information in the table below providing explanations on the following elements:
- During what interaction or situation may your personal data be provided or collected? This column lists the activities you engage in, or the situations you are in, when we use or collect your personal data. For example, whether you are making a purchase, signing up for a newsletter, or browsing a website/application.
- What personal data may we receive from you directly or resulting from your interaction with us? This column indicates the types of data about you that we are likely to collect depending on the situation.
- How and why may we use it? This column explains what we may do with your data and the purposes for which we collect it.
- What is the legal basis for using your personal data?This column explains the reason we may use your data. Depending on the purpose for which the data is used, the legal basis for processing your data can be:
- Your consent;
- Our legitimate interest, which may consist of:
- The improvement of our products and services, and more specifically our commercial interests, to help us better understand your needs and expectations and, thus, to improve our services, websites / applications / devices, products, and brands in the interest of our customers.
- Fraud prevention, to ensure that payments are made and have not been the subject of any fraud or malfeasance.
- Securing our tools, to ensure the protection and security of the tools you use (our websites/applications/devices) and to ensure they function properly and are continually improved.
- The performance of a contract, and more specifically the provision of the services you request from us.
- Legal obligations, when current legislation requires the processing of data.
Information overview on your interactions with us and their consequences on your personal data:
During what interaction or situation may your personal data be provided or collected? | What personal data may we receive from you directly or resulting from your interaction with us? | How and why may we use it? | What is the legal basis for processing your personal data? |
Account creation and management Data collected during account creation and/or joining a loyalty program, on L’Oréal France websites/applications, via social login, or in-store. | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Performance of a contract To provide you with the service you have requested (e.g., create an account, participate in a survey, or purchase a product). |
| Consent To send you marketing communications tailored to your interests. | ||
| Legitimate interest To maintain the security of our websites/applications and ensure protection against fraud, as well as to help us better know and understand your needs and expectations and, thereby, improve our services, products, and brands. | ||
Signing up for newsletters and marketing communications | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Consent To send you marketing communications tailored to your interests. |
|
Legitimate interest To tailor our marketing communications and understand their effectiveness, and ensure you benefit from the most appropriate experience, as well as to help us better know and understand your needs and expectations and, thereby, improve our services, products, and brands. | ||
|
Legal obligations To maintain your details on a suppression list if you have asked us no longer to send you marketing communications. | ||
Purchases and order management Data collected during the purchase process carried out on L’Oréal France websites/applications, social media pages, or in-store. | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Performance of a contract To provide you with the service you have requested (purchase a product). |
| Legitimate interest To ensure your and our protection against any fraudulent transaction and to ensure that payments are made and have not been the subject of any fraud or malfeasance, and to help us better understand your needs and expectations and thereby improve our services, products, and brands. | ||
| Consent To send you marketing communications tailored to your interests. | ||
Fraud management Data collected during the purchase process carried out on L’Oréal France websites/applications: this information is subject to algorithmic processing to detect fraudulent behavior and prevent any violation of our general terms and conditions of sale. |
| We use this data to:
| Legitimate interest To maintain the security of our platform and to enforce our terms of sale. |
Online navigation Data collected by cookies or similar technologies (hereinafter "Cookies"*) during your navigation on L'Oréal France websites/applications or on third-party websites/applications. For any information on specific Cookies placed via a given website/application, please consult the cookie table available on the concerned website/application. *Cookies are small text files stored on your device (computer, tablet, or mobile) when you browse the Internet, including L’Oréal Group websites. | Depending on the frequency of your interactions with us, this personal data may include:
Technical information:
| We use Cookies, where applicable, with other personal data you have already provided to us (e.g., previous purchases or whether or not you have signed up for our online newsletters) for the following purposes:
|
Legitimate interest To ensure that we offer you websites/applications, advertisements, and communications that function correctly, and to continuously improve cookies that are (i) essential for the functioning of our website, (ii) used to ensure the protection and security of our website. Consent For all other cookies. |
Promotional Operations Data collected during a game, contest, promotional offer, sample request, or survey participation. | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Performance of a contract To provide you with the service you have requested. |
| Legitimate interest To send you communications related to your request, and to help us better know and understand your needs and expectations and, thereby, improve our services, products, and brands. | ||
| Consent To send you marketing communications tailored to your interests. | ||
User Generated Content Data collected when you post content on one of our social media platforms or when you agree to our reuse of content you have posted online on social networks. | Depending on the frequency of your interactions with us, this personal data may include:
| In accordance with the specific terms and conditions you have accepted:
| Performance of a contract In accordance with the specific terms and conditions you have accepted, to reuse the content you have posted online and, thereby, improve and promote our services, products, and brands. |
| Legitimate interest To help us better know and understand your needs and expectations and, thereby, improve and promote our services, products, and brands. | ||
Use of apps and devices Data collected as part of your use of our apps and/or devices. | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Performance of a contract To provide you with the requested service (including, if necessary, the performance of an analysis by the research and innovation team of the algorithm required to provide the service). |
| Legitimate interest To constantly improve our products and services to meet your needs and expectations, and to advance research and innovation. | ||
| Consent To send you marketing communications tailored to your interests. | ||
Requests for information Data collected when you ask questions (e.g., via customer service) about our brands or our products and their use. | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Performance of a contract To provide you with the service you have requested. |
| Legitimate interest To help us better know and understand our customers' needs and expectations and, thereby, improve our services, products, and brands. | ||
For Cosmetovigilance purposes:
| Legal obligations To comply with the legal obligation to monitor the adverse effects of its products. | ||
Parrainage | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Legitimate interest To contact an individual at the request of another person. |
Transmission of your data by our business partners (list of partners available here) | Depending on the frequency of your interactions with us, this personal data may include:
| We use this data to:
| Consent (direct + obtained by our partners on our behalf) To send you marketing communications tailored to your interests.
|
3.2. AUTOMATED INDIVIDUAL DECISION-MAKING FOR TRANSACTION SECURITY
To secure your transactions and combat fraud, we use automated analysis systems that evaluate the risk of each order in real time. By analyzing the consistency of your data and your transaction history, these tools recommend the validation or rejection of the purchase. We reserve the right to refuse any order presenting a proven risk of fraud.
Our detection methods rely on advanced analysis tools using data matching, segmentation (clustering), and the identification of atypical behaviors (anomaly detection) through the intelligent exploitation of our databases.
Thus, in order to secure transactions made on our websites / applications / devices and to protect them against fraud and malfeasance, we use solutions developed by third-party providers.
In particular, one of our trusted partners, Forter Solutions UK Ltd (30 Old Bailey London EC4M 7AU, England), may process your identification data as well as your online navigation data to help us prevent online fraud, notably to combat the resale of our products via unauthorized distribution networks. You can learn about the terms under which they may use and process your personal information in their privacy policy: https://www.forter.com/privacy-policy/. This provider also uses the data under its own responsibility to improve its technologies and to formulate, across its network, recommendations for other merchants.
The fraud detection solution relies, in particular, on profiling and the following methods: simple comparisons, association rules, grouping (clustering), prediction, and outlier detection using intelligent agents, data fusion techniques, and various data mining techniques.
This fraud detection process may be completely automated or may involve human intervention in which the final decision is made by an individual. In all cases, we take all reasonable precautions and safeguards to limit access to your personal data.
Due to automated fraud detection: (i) the processing of your order / request may be delayed while we examine your transaction; and (ii) you may find yourself excluded from the benefit of a service, or access to the service may be limited if a risk of fraud is detected.
You have the right to access the information upon which our decision is based. Please refer to the "Your Rights and Choices" section below.
3.3. PROFILING AND ADVERTISING TARGETING
When we send or display personalized communications or content, we may have previously used certain techniques qualified as “profiling” (defined as any form of automated processing of personal data consisting of using those data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict elements concerning personal preferences, interests, financial situation, behavior, location, health, reliability, or movements of that natural person).
To carry out such profiling, we use personal data about you that we have collected in the different scenarios mentioned in the table above (for example, when you create an account online, purchase one of our products, subscribe to our newsletter, browse our websites, etc.). We may also, as indicated in the table above, receive personal data about you that has been transmitted to us by our business partners if you have given them your consent for such a transmission. We then centralize this data after having pseudonymized it (i.e., replaced your nominal data with a unique identifier), and then analyze it to evaluate and predict your personal preferences and/or interests and thus identify our products and services likely to interest you.
Based on this analysis, we send you communications and/or display on third-party sites (namely the sites and other communication services of our business partners and/or social media and/or search engines with which we have entered into a contract or advertising platforms with which we collaborate), content tailored to your preferences/interests and relating to one of the brands operated by L’Oréal France (including brands of which you are not yet a customer). We may also use your data to attempt to identify, within our database or the database of our partners and/or social media and/or search engines with which we contract, people presenting the same social-demographic characteristics and/or preferences as you and who are therefore likely to be interested in the same advertising content as you.
Please note that, in order to be able to display tailored advertisements on third-party sites, we must share your identification data with the publishers of these sites—namely your last name, first name, and contact data (notably, email address, phone number, postal address)—to allow said publishers (see the section below regarding the recipients of your data for more information on the publishers concerned) to find you among their customers/users and to display advertisements for our products and services to you (as well as to people presenting a profile/interests similar to yours). These organizations also provide us with reports on the results of our advertising campaigns (number of clicks, conversion rate, audience profile, etc.) to enable us to improve our future campaigns. We act, in the context of these activities, as a joint data controller with each organization concerned.
Such profiling and data sharing for advertising purposes will only be carried out with your prior consent.
3.4. WHO MAY ACCESS YOUR PERSONAL DATA?
We may share your personal data within the L’Oréal Group to comply with our legal obligations, prevent fraud and/or secure our tools, improve our products and services, or after obtaining your consent.
Depending on the purposes for which your data was collected, and only if necessary, some of your personal data may be accessible to L’Oréal Group entities worldwide, provided it is pseudonymized (not allowing direct identification) and where necessary to provide you with the requested services. We may also share your personal data in a pseudonymized form with L’Oréal Group Research & Innovation scientists, including those located outside your country, for research and innovation purposes.
We may also share some of your personal data between our brands, including profile information (such as your date of birth, gender, consumption habits, beauty profile, etc.) or data collected through cookies (where you have consented), in order to harmonize and update the information you provide us, enrich our customer knowledge, perform statistics based on your characteristics, and tailor our communications and the targeted advertisements we may display on third-party sites.
We invite you to visit the L’Oréal Group website for more information on the L’Oréal Group, its brands, and its sites.
We may communicate your personal data to third parties for commercial prospecting purposes (including advertising targeting).
We only share your personal data with third parties for commercial prospecting purposes (including advertising targeting) with your consent.
We only provide them with the information they need to perform the service and require that they do not use your personal data for any other purposes. We always use our best efforts to ensure that all these third parties we work with maintain the confidentiality and security of your data.
If you have agreed to receive direct communications (email, SMS) from a L’Oréal France partner through a dedicated registration/opt-in procedure, your data will be transmitted to the concerned partner and processed by them acting as a separate data controller under their own terms and conditions and in accordance with their own personal data protection policy. We recommend that you carefully review their information before consenting to the sharing of your data with that third party.
We may also communicate your personal data to our partners and/or search engines and/or social media of which you are a member and with which we contract, as well as to advertising platforms we collaborate with for advertising targeting purposes.
Indeed, as mentioned above in the profiling section, we are likely to share the personal data you have communicated to us (last name, first name, contact data (notably email address, phone number, postal address)) with the following organizations so they can find you among their customers/users and display targeted advertising for our products and services on their site(s) (including any other communication service) to you and to people with a profile similar to yours: (list of partners available here).
Please note that some of these partners (namely Facebook – see the section below for more information on data collected by Facebook – and Google) may also collect data directly from you during your navigation on our site, if you consent (notably through the placement of cookies).
The aforementioned organizations and L’Oréal France act in this context as joint data controllers. We can provide you with the main outlines of the data processing agreements concluded with these organizations upon request to the contact address indicated at the bottom of this Policy.
Your personal data may also be processed on our behalf by trusted service providers.
We rely on trusted third parties to perform a range of business operations and tasks on our behalf. We only provide them with the information they need to perform the service and require that they do not use your personal data for any other purposes. We always use our best efforts to ensure that all these third parties we work with maintain the confidentiality and security of your data. We may, for example, request services that require the processing of your personal data from:
- Third parties that assist and help us in providing digital and e-commerce services, such as social listening, store locators, loyalty programs, identity management, ratings and reviews management, customer relationship management (CRM), web analytics, search engines, and user-generated content creation tools;
- Advertising agencies, marketing agencies, social media and digital agencies to help us carry out advertising, marketing, and commercial campaigns, analyze their effectiveness, and manage your contacts and questions;
- Third parties we need to provide and deliver a product to you and invoice you, such as postal/delivery or billing services;
- Third parties that assist and help us in providing IT services, such as platform providers, hosting services, maintenance, and technical support for our databases as well as for our software and applications that may contain data about you (these services may sometimes require access to your data to perform the requested tasks);
- Payment service providers and credit reference agencies for the purposes of assessing your creditworthiness and verifying your information when required to enter into a contract with you;
- Third parties that assist us with customer service and cosmetovigilance.
We may also communicate your personal data to third parties:
- If we proceed with the sale of a business or assets, in which case we may share your personal data with the potential buyer of that business or those assets. If L’Oréal France or any part of its assets is acquired by a third party, the personal data held regarding its customers and related to those assets is one of the transferred assets. In such a case, the acquirer acting as the new data controller processes your data, and its personal data protection policy governs the processing of your personal data.
- If we are compelled to disclose or share your personal data to comply with a legal obligation, or to enforce or apply our terms of use/sale or any other conditions you have accepted; or to protect the rights, property, or security of L’Oréal France, its customers, or employees.
- If we have your consent.
- Or if the law authorizes us to do so.
We may communicate your personal data to our partners:
- If the service you subscribe to was co-createdby L’Oréal France in collaboration with a partner (e.g., a co-branded application). In this case, L’Oréal France and the partner concerned each process your personal data for their own purposes. Thus, your data is processed:
- By L’Oréal France in accordance with this Personal Data Protection Policy;
- By the partner also acting as a data controller according to its own terms and conditions and in accordance with its own personal data protection policy.
- We may publish content from social media on our platforms. If you view content from social media on our website/applications, a cookie from the concerned social network may be placed on your device. For any additional information, we invite you to read the Cookie Policy of these social networks.
We do not offer or sell your personal data.
3.5. WHERE DO WE STORE YOUR PERSONAL DATA?
The data we collect from you may be transferred to, accessed from, and stored in a country located outside the European Economic Area (the "EEA"). It may also be processed by staff members operating outside the EEA who work for us or for one of our service providers.
L’Oréal France transfers personal data outside the EEA only in a secure and lawful manner and in compliance with applicable legislation. As some countries may not have laws governing the use and transfer of personal data, we commit to taking all necessary measures to ensure that the third parties concerned adhere to the conditions set out in this Policy. These measures may include reviewing the standards applied by these third parties regarding personal data protection and security and/or the signing of appropriate contracts (based on the model adopted by the European Commission).
For any further information, please contact us in accordance with the instructions provided in the "Contact" section below.
3.6. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We keep your personal data only for as long as necessary to fulfill the purpose for which we hold the data, to meet your needs, or to comply with our legal obligations.
To determine the retention period of your data, we apply the following criteria:
- If you purchase products and services, we keep your personal data for the duration of our contractual relationship;
- Fraud Prevention: If your visit does not lead to a purchase, your data is kept for a maximum duration of one year. However, the majority of this information is deleted within two weeks. This data is in no way integrated into our decision-making models;
- If you sign up for a loyalty program, we keep your personal data for the duration of your participation in the program;
- If you participate in a contest, we keep your personal data for 12 months from the end of the concerned contest;
- If you wish to be informed of product availability, we keep your personal data for 3 months from the notification sent to you for this purpose;
- If you participate in a beauty profile (for example, to receive information on a tailored skincare routine), we keep your personal data for 3 months from the time this information is sent;
- If you participate in a promotional offer, we keep your personal data for the duration of the concerned promotional offer;
- If you contact us as part of an enquiry or complaint, we keep your personal data for the duration necessary to process your request;
- If you create an account, we keep your personal data until you ask us to delete it or after a period of inactivity (no active interaction with brands) defined in accordance with local regulations—currently up to 3 years of inactivity;
- If you have consented to receive commercial prospecting messages and benefit from advertisements tailored to your interests while browsing third-party sites, we keep your personal data until you unsubscribe and/or withdraw your consent, or until you ask us to delete it, or after a period of inactivity (no active interaction with brands) of 3 years;
- If cookies are placed on your computer, we keep your data only for the time necessary to achieve their purpose (e.g., for the duration of a session for shopping cart cookies or session ID cookies) and for any period defined in accordance with local regulations and instructions.
We may retain certain personal data to fulfill our legal or regulatory obligations, and to allow us to exercise our rights (e.g., to file a claim before any court) or for statistical or historical purposes.
When we no longer need to use your personal data, we erase it from our systems and files or proceed with its anonymization so that it can no longer identify you.
3.7. IS YOUR PERSONAL DATA SECURE?
We attach great importance to the protection of your personal data and take all reasonable precautions to do so. We contractually require that trusted third parties who handle your personal data for us do the same.
We always do our best to protect your personal data and once we have received your personal data, we use strict procedures and security features to try to prevent unauthorised access. As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our site. As such, any transmission is at your own risk.
3.8. LINKS TO THIRD PARTY SITES AND SOCIAL LOGIN
Our websites and Apps may from time to time contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we are not responsible or liable for these policies. Please check these policies before you submit any personal data to these websites.
We may also offer you the opportunity to use your social media login. If you do so, please be aware that you share your profile information with us depending on your social media platform settings. Please visit the relevant social media platform and review its privacy policy to understand how your personal data is shared and used in this context.
Information that Facebook collects and shares with us:
All Facebook features and services available on our websites/Apps are governed by the Facebook Privacy Policy, where you can find more information on your rights and settings options.
By using one of our websites/Apps, you can:
- Sign up with your Facebook account. In this case, you consent to share some of your public profile information with us;
- Use Facebook social plug-ins, such as "like" or "share" our content on the Facebook platform;
- Accept cookies from this website/App (also known as "Facebook Pixel"), which will help us understand your activities, including information about your device, how you use our services, the purchases you make, and the ads you view, whether or not you have a Facebook account or are logged in to Facebook.
3.9. SOCIAL MEDIA AND USER GENERATED CONTENT
Some of our websites and Apps allow users to submit their own content. Please remember that any content submitted to one of our social media platforms can be viewed by the public, so you should be cautious about providing certain personal data e.g. financial information or address details. We are not responsible for any actions taken by other individuals if you post personal data on one of our social media platforms and we recommend that you do not share such information.
4. YOUR RIGHTS AND CHOICES
L’Oréal France respects your right to privacy: it is important that you are able to maintain control over your personal data. You have the following rights:
Your rights | What this means |
The right to be informed | You have the right to obtain clear, transparent, understandable, and easily accessible information about how we use your personal data and about your rights. This is why we are providing you with the information in this Policy. |
The right of access | You have the right to access the personal data we hold about you (subject to certain restrictions). We may charge a reasonable fee taking into account the administrative costs incurred in providing the information. Manifestly unfounded, excessive, or repeated requests may not receive a response. To exercise your right of access, please contact us at the details below. |
The right of rectification | You have the right to have your personal data rectified if it is inaccurate or outdated and/or completed if it is incomplete. To exercise your right to rectification, please contact us at the details below. If you have an account, it may be easier to modify your own data via the "My Account" function. |
The right to erasure / right to be forgotten | In some cases, you have the right to obtain the erasure or deletion of your personal data. This is not an absolute right, as we may be obliged to retain your personal data for legal or legitimate reasons. If you wish for us to erase your data, please contact us at the details below. |
The right to object to direct marketing, including profiling | You can unsubscribe or object to receiving our direct marketing messages at any time. Simply click on the "unsubscribe" link in any email or communication we send you. You can also contact us at the details below. If you wish to object to profiling, please contact us at the details below. |
The right to withdraw consent at any time for data processing based on consent | You can withdraw your consent to the processing of your data if such processing is based on consent. The withdrawal of this consent does not affect the lawfulness of the processing based on consent carried out prior to its withdrawal. We invite you to consult the table in the section "What personal data do we collect from you and how do we use it?", and in particular the column "What is the legal basis for using your personal data?", to know if our processing is based on consent. If you wish to withdraw your consent, please contact us at the details below. |
The right to object to processing based on legitimate interest | You may object to the processing of your data at any time when the processing is based on legitimate interest. We invite you to consult the table in the section "What personal data do we collect from you and how do we use it?", and in particular the column "What is the legal basis for using your personal data?", to know if our processing is based on legitimate interest. If you wish to exercise your right to object, please contact us at the details below. |
The right to lodge a complaint with a supervisory authority | You have the right to contact and lodge a complaint with the data protection authority of your country to contest L’Oréal France's practices regarding personal data protection and respect for privacy. For France, you have the right to lodge a complaint with the CNIL: Complaints | CNIL. We invite you to contact us at the details below before lodging any complaint with the competent data protection authority. |
The right to data portability | You have the right to move, copy, or transfer data concerning you from our database to another. This only applies to data you have provided, when the processing is based on your consent or on a contract and it is carried out using automated processes. We invite you to consult the table in the section "What personal data do we collect from you and how do we use it?", and in particular the column "What is the legal basis for using your personal data?", to know if our processing is based on a contract or on consent. For further information, please contact us at the details below. |
The right to restriction of processing | You have the right to request the restriction of the processing we carry out on your data. This right means that the processing of your data is limited, so that we may keep the data but we cannot use or process it. This right applies in specific circumstances provided for by the General Data Protection Regulation, namely: <br>• the accuracy of the personal data is contested by the data subject (i.e., you), for a period enabling the data controller to verify the accuracy of the personal data; <br>• the processing is unlawful and the data subject (i.e., you) opposes the erasure of the data and requests the restriction of their use instead; <br>• the data controller (i.e., L’Oréal France) no longer needs the personal data for the purposes of the processing, but they are still required by the data subject for the establishment, exercise, or defense of legal claims; <br>• the data subject (i.e., you) has objected to processing based on the legitimate interests pursued by the data controller (i.e., L’Oréal France) pending the verification whether the legitimate grounds of the data controller override those of the data subject. <br><br>If you wish to obtain restriction of processing, please contact us at the details below. |
The right to disable Cookies | You have the right to disable Cookies. Internet browser settings are generally set by default to accept cookies, but you can easily change this by modifying your browser settings. Many cookies are used to improve the ergonomics and functionality of websites/applications; therefore, disabling cookies may prevent you from using certain parts of this site, as explained in the corresponding cookie table. If you wish to restrict or block all cookies placed by our websites/applications (which may prevent you from using certain parts of the site), or by other websites/applications, you can do so by going to your browser settings. Your browser's "Help" function will show you how. For more information, you can visit the following link: http://www.aboutcookies.org/ |
In order to respond to your request, we may require proof of identity.
5. CONTACT
If you have any questions or concerns about how we process and use your personal data, or if you would like to exercise any of your rights mentioned above, please contact us at the following email address: [email protected]
You may also contact our Data Protection Officer (DPO) at the following address: [email protected]
6. SPECIFIC PROVISIONS FOR FRANCE
We remind you that in accordance with the provisions of Article 85 of Law No. 78-17 of January 6, 1978, you have the right to provide general instructions (to a digital trusted third party certified by the CNIL) or specific instructions (to the data controller) regarding the retention, erasure, and communication of your personal data after your death.