Privacy Notice - Processing of Personal Data acc. to Art. 13 and 14 GDPR

With the following privacy notice we would like to provide you with information regarding the processing of personal data by Beiersdorf.

The Controller of the processing of personal data is:

Beiersdorf UK Ltd., Trinity Business Park, Birmingham, B37 7ES („Beiersdorf“).

Contact details of the data protection officer: [dataprotection@beiersdorf.com] or via the postal address of the controller for the attention of the “data protection officer”.

The legal basis for the processing is Art. 6. 1 b) General Data Protection Regulation (GDPR) for fulfilling the purpose of the contract as stated above within the user rights agreement.

Data recipients:

Beiersdorf transfers the collected data for processing to the respective internal functions/units as well as to other affiliated companies within the Beiersdorf Group or to external service providers, processors (e.g. hosting, gaining agreement and content providing) in accordance with the purposes required (to fulfill the user rights agreement). in European or non-European third countries. Standard contractual clauses were concluded with these external service providers, unless they are located in countries with a decision on an adequacy basis pursuant to Art. 45 of GDPR. These standard contractual clauses are available at http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm. However, in the event of a legal obligation, Beiersdorf reserves the right to disclose information about you if it is required to surrender it by lawful authorities or law enforcement bodies.

Your data will be deleted after the ending of the above-mentioned user rights agreement, unless there are legal storage obligations or periods of limitation that must be complied with. As a general rule, the data will be used and stored for a maximum period of 10 years.

Your rights:

You may at any time object to the processing (applies only when legal basis is Art. 6(1) f) GDPR) or withdraw the consent (Art. 6 (1) a) GDPR) regarding the use of your personal data for the future. You may also request a rectification or a partial or complete deletion, request information about the data stored by us regarding your person (right of access), obtain restriction of the processing or a transfer of your data, unless this has been restrained in accordance with (local) legislation (e.g. § 34 German BDSG (new)) or if the respective law is not applicable (e.g. the objection is only applicable for the legal basis according to Art. 6 para. 1 e) and f)).

For this purpose, please contact the above-mentioned Controller.

In the event of your withdrawal/ objection, your personal data will not be processed further and will be subsequently deleted by us, unless further processing with the personal data is required, admissible or otherwise agreed on in accordance with the applicable data protection laws (in particular the General Data Protection Regulation) or any other legal provision.

In addition, you have the right to lodge a complaint with a supervisory authority at any time.