Personal data is any information about an identified physical person or a physical person that may be directly or indirectly identified via an identification number or one or more elements particular to them, such as their last name, first name, date of birth, customer number, order number, photo, etc.

We can collect your personal data when you:

• create a customer account on our website, apps, or in our stores;
• order goods from our website;
• make purchases in stores;
• join our loyalty program;
• use our online services, such as the chat service;
• agree to receive marketing communications from us by email, telephone, SMS or post, depending on your selection;
• answer surveys or satisfaction questionnaires based on your customer experience;
• interact with our Company via its official page on social networks or when we suggest re-use of content that you have published on a social network;
• contact our customer service;
• send requests for information to our Company;
• take part in an event we organise;
• browse on the Internet using cookies or similar technology or when you click on advertisements for our products.

(i) As part of the services we provide, we may need to collect certain data directly from you using electronic forms on our website, mobile apps or in selected stores, or in paper form, for a range of purposes (see IV for a list of processing purposes).

Information we might collect includes:

• Your identity
• Your contact details (e.g. email address)
• Your personal preferences in relation to the products we market or to our website (language);
• Information relating to your orders, their tracking and your purchase invoices;
• Information you may provide for our customer service;
• Specific health data if you notify us of any undesirable side-effects concerning any of our products;
• Your bank details if you place an order via our website;

Personal data essential to Guerlain is marked with an asterisk on all personal data collection forms on our website, in electronic form at some of our counters and stores, as well as off-line in paper form. If you do not fill in these compulsory fields, Guerlain will probably be unable to respond to your request and/or provide you with the requested services. Other information is optional and enables us to get to know you better and improve our communications and services with respect to you.

(ii) We may also collect certain data generated by your purchases of products or services, online or in stores, particularly information regarding the amount and type of your purchases.

(iii) Lastly, we may collect information regarding the use of our website, especially with respect to your browsing (pages visited, links clicked, etc.). Some of this information may be collected using cookies placed in your web browser when you browse our website. For more information about cookies, read point 'Information on Cookie Management' at the end of this policy.

Guerlain processes your data to:

• enable you to create a customer account on our website, applications and at our counters and in our stores;
• manage your access to your customer account on the Internet or our applications;
• process and manage your online orders and their delivery;
• record purchases made at our counters or in our stores;
• secure online transactions, prevent fraud, payment incidents and manage debt collection (see our terms and conditions for more details) ;
• manage customer relations with respect to any requests for information or complaints you may send us via our website, customer service or social network pages;
• trace and manage any alerts you may send us as part of our cosmetic vigilance obligations;
• manage and optimise your customer experience by improving our knowledge of our customers;
• propose appropriate, tailored services, particularly when we enhance our products and services;
• conduct statistical analyses to develop management, measuring and reporting tools in order to adjust and improve our sales, marketing and product manufacturing;
• subject to your consent, send you information on our offers, news and events on your chosen communication media;
• manage your participation in any events to which you have signed up;

Guerlain processes your personal information:

• to perform the contract agreed between yourself and Guerlain, to manage your access to your customer account and to process and track your orders;
• within the framework of its legitimate interest for the purposes of marketing management, securing its digital media (websites, applications, etc.) and combating fraud ;
• when you have given your consent for the processing of your data, especially for the purposes of managing our sales prospection, and of your browsing data via cookies, etc.
• within the framework of compliance with our legal obligations, particularly fiscal obligations (conserving purchase invoices) and cosmetic vigilance with regard to Regulation (EU) 1223/2009 of 30 November 2009 on cosmetic products;

Your personal data is processed by the personnel of Guerlain. We ensure that only authorised persons within Guerlain have access to your personal data when this is necessary for the purpose of managing our commercial relations or meeting our legal obligations.

We may also share your personal data with;

• other entities of the LVMH Group, with some of these entities acting as data processors;
• subcontractors, such as:
  • site hosting and maintenance service providers and the providers of our electronic personal data collection solutions at counters and in stores;
  • payment service providers;
  • anti-fraud service providers;
  • logistic service providers;
  • marketing solution service providers;
  • sales prospection and social network communication service providers;
  • customer service providers;
  • service providers for managing cosmetic vigilance alerts;
  • event organisation service providers;

Lastly, GUERLAIN may need to share your personal data with third parties to meet its legal, regulatory or treaty obligations, or to respond to requests from authorised legal authorities.

Some recipients of your personal data may be located abroad, including outside of the European Economic Area.

All data transfers outside of the European Economic Area are subject to appropriate guarantees, especially contractual, technical and organisational guarantees, that comply with applicable regulations relating to the protection of personal data.

We keep and proceed your personal data for as long as it is required in order to fulfil the purposes described in this Privacy Policy and as long as it may be required by law such as for tax and accounting purposes.

Under current regulations, particularly the GDPR, you have the right to access and correct your personal data, request erasure, object to processing on legitimate grounds and obtain limitation or portability, insofar as this is applicable.

You can exercise these rights directly with Guerlain by sending an email to dpo@guerlain.fr or a non-registered letter by post to GUERLAIN GUERLAIN – Service Relation Client: 125, rue du Président Wilson – 92593 Levallois-Perret Cedex – France including a document proving your identity.

If, at any time, you no longer wish to receive details of our offers, news and events, you can unsubscribe using the hypertext link provided for this purpose in each mail we send you. You can also send a non-registered letter to GUERLAIN – Service Relation: Client 125 rue du Président Wilson – 92593 Levallois Perret Cedex – France.

You may also lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL) at the following address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

For all questions relating to the collection and processing of your data by Guerlain, you can contact the Guerlain Data Protection Officer at dpo@guerlain.fr.