Personal data is any information about an identified physical person or a physical person that may be directly or indirectly identified via an identification number or one or more elements particular to them, such as their last name, first name, date of birth, customer number, order number, photo, etc.

We can collect your personal data when you:

• create a customer account on our website, apps, or in our stores;
• order goods from our website;
• make purchases in stores;
• join our loyalty program;
• use our online services, such as the chat service;
• agree to receive marketing communications from us by email, telephone, SMS or post, depending on your selection;
• answer surveys or satisfaction questionnaires based on your customer experience;
• interact with our Company via its official page on social networks;
• contact our customer service;
• send requests for information to our Maison;
• take part in an event we organise;
• when using digital experiences such as virtual beauty technology: the Virtual Try-On tool (if you choose to use this technology);
• your publications / mentions of our products on social networks.
• browse on the Internet using cookies or similar technology or when you click on advertisements for our products.

(i) As part of the services we provide, we may need to collect certain data directly from you using electronic forms on our website, mobile apps or in selected stores, or in paper form, for a range of purposes (see IV for a list of processing purposes).

Information we might collect includes:

• Your identity;
• Your contact details (e.g. email address);
• Your personal preferences in relation to the products we market or to our website (language);
• Information relating to your orders, their tracking and your purchase invoices;
• Information you may provide for our customer service;
• Information that you may provide when you interact with out chat;
• Specific health data if you notify us of any undesirable side-effects concerning any of our products;
• Your bank details if you place an order via our website;
• Your photos / images seen by Guerlain while using your experiments via the Virtual Try-On tool. (In particular, no photos or images are kept in connection with the Virtual Try-On tool when you conclude the session);
• Your publications / mentions relating to our products on social networks.

Please note that your bank details are not transmitted in clear text on Guerlain's servers. Payments are made via a secure payment platform, supplemented by control measures, in order to guarantee the security of purchases made on www.cybersource.com and to fight against fraud.
The details of your payment card communicated at the time of your order are never transmitted in clear text on the network.


Personal data essential to Guerlain is marked with an asterisk on all personal data collection forms on our website, in electronic form at some of our counters and stores, as well as off-line in paper form. If you do not fill in these compulsory fields, Guerlain will probably be unable to respond to your request and/or provide you with the requested services. Other information is optional and enables us to get to know you better and improve our communications and services with respect to you.

During your purchase journey, you will be able to choose between i) logging into your existing Guerlain account, ii) creating a new account, or iii) paying as a Guest. This last purchasing experience is thus summarized as follows. Payment for purchases as a Guest refers to the possibility for any Guerlain customer or prospect to make a purchase in our online store without logging into an account. Your information is collected for the process of payment and delivery of items or for Guerlain in order to comply with applicable laws. Your information may also be used for analytical purposes by Guerlain and for communication purposes via its preferred channel (for example: sending a general newsletter relating to the news of our Maison by email for which you have the right to object). For more information on these purposes, please go to the section "For what purpose is your personal data collected and used?".


(ii) We may also collect certain data generated by your purchases of products or services, online or in stores, particularly information regarding the amount and type of your purchases.


(iii) Lastly, we may collect information regarding the use of our website, especially with respect to your browsing (pages visited, links clicked, etc.). Some of this information may be collected using cookies placed in your web browser when you browse our website. For more information about cookies, read our cookie policy, here.
 

Guerlain processes your data to:

• enable you to create a customer account on our website, applications and at our counters and in our stores;
• manage your access to your customer account on the Internet or our applications;
• process and manage your online orders and their delivery;
• record purchases made at our counters or in our stores;
• secure online transactions, prevent fraud, payment incidents and manage debt collection (see our terms and conditions for more details) ;
• manage customer relations with respect to any requests for information or complaints you may send us via our website, customer service or social network pages;
• manage our loyalty program;
• when you interact with out chat, in order to respond to your requests; 
• trace and manage any alerts you may send us as part of our cosmetic vigilance obligations;
• manage and optimise your customer experience by improving our knowledge of our customers;
• propose appropriate, tailored services, particularly when we enhance our products and services;
• conduct statistical analyses to develop management, measuring and reporting tools in order to adjust and improve our sales, marketing and product manufacturing;
• to make it easier for you to see what the product you have chosen would look like on you (when using the Virtual Try-On tool);
• send a generic newsletter: you have the right to object if you no longer wish to receive it;
• analyze the performance of our brand on social networks in order to produce statistical analyses (studies of results by market, brand influence and analysis of campaigns implemented);
• to promote our brand on social networks;
• manage your participation in any events to which you have signed up;
• send you information about our offers, news and events on the communication media you have selected (in the channel preference manager if you have a customer account, otherwise you can contact our customer service (see section "What are your rights and how to exercise them");
• subject to your free, specific, informed and unambiguous consent: to send you personalized communication according to the communication preferences you have indicated to us and to use third party services to personalize your profile (in the channel preference manager if you have a customer account, otherwise you can contact our customer service (see section "What are your rights and how to exercise them").

In the latter interaction, when we send personalized communications or content, we may :

- Use so-called profiling techniques. For the sake of transparency within this Policy, profiling is currently defined as any kind of automated processing of personal data which consists of using that personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict elements relating to the preferences, interests, behaviour or location of that natural person. In these circumstances, you have the right to opt-out, meaning the right to withdraw your consent by unsubscribing or see the “Contact Us” section below.

- Share your data with Media Platforms. See the “Who can access my data” section.

If you consent to the processing of your personal data which will be transmitted to LVMH to allow a better analysis of your habits and preferences based on your purchase data in order to receive personalized recommendations and offers:

What is the context of the processing?  
Guerlain belongs to the LVMH Group, which comprises many exceptional Maisons that offer high quality products and services in all sectors including Fashion & Leather Goods, Perfumes & Cosmetics, Watches & Jewelry, Wines & Spirits, Selective Retailing and Hospitality, Culture & Leisure. The list of all LVMH Maisons is available at https://www.lvmh.com. If you are customer of our Maison, you may also be a customer of other LVMH Maisons.

What is the purpose of the processing?
We endeavor to improve your experience by proposing personalized offers and services and customized marketing communications that correspond to your interests. This relies on knowing your preferences and interests.

How is the processing conducted?
If you consent, we will share the purchases you have made with us during the last 3 years with LVMH, our parent company, in a pseudonymous way (which means that your name and your contact details will not be sent to LVMH). Your purchases will be analyzed and matched with purchases made from other Maisons of the LVMH Group where you have given a similar consent. Each Maison that has your consent will receive back from LVMH generalized information concerning your purchasing habits and preferences. 

Who is the Data Controller?
Guerlain will remain the sole data controller which means that it is the company that is responsible for the information that you provide to it. LVMH acts as our data processor, or service provider, and will not use your data for any purpose other than the one described above. For example, LVMH will not use your data for its own purposes, will not contact you for marketing purposes based on the data we provide, and will not share information about you with Maisons of the LVMH Group to which you are not a customer and/or to whom you have not given consent.
 

Guerlain processes your personal information:
 

• to perform the contract agreed between yourself and Guerlain, to manage your access to your customer account and to process and track your orders;
• Our legitimate interest: for example, to improve our products and services, to defend ourselves, to secure our tools or to refine our customer knowledge through our third-party partners' tools and in particular to:
  • to define the personalized profile of our customers based on their interests and to provide them with relevant offers of our brand on other websites.
  • to identify audiences similar to our target audience (in order to deliver our offers to audiences of people with similar profiles to our customers).
• when you have given your consent for the processing of your data, especially for the purposes of managing our personalized information, and of your browsing data via cookies, etc.
• within the framework of compliance with our legal obligations, particularly fiscal obligations (conserving purchase invoices) and cosmetic vigilance with regard to Regulation (EU) 1223/2009 of 30 November 2009 on cosmetic products.

Your personal data is processed by the personnel of Guerlain. We ensure that only authorised persons within Guerlain have access to your personal data when this is necessary for the purpose of managing our commercial relations or meeting our legal obligations.

We may also share your personal data with:

• other afilliates of Guerlain in France or abroad;
• other entities of the LVMH Group, with some of these entities acting as data processors;
• subcontractors, such as:
  • site hosting and maintenance service providers and the providers of our electronic personal data collection solutions at counters and in stores;
  • payment service providers;
  • anti-fraud service providers;
  • logistic service providers;
  • marketing solution service providers;
  • sales prospection and social network communication service providers;
  • customer service providers;
  • service providers for managing cosmetic vigilance alerts;
  • event organization service providers;
  • third parties who carry out statistics relating to our performance on social networks on our behalf;
  • third parties wishing to know your interests so that they can build up similar audiences and target prospects corresponding to your profile. In the context of this specific processing, these partners may re-use the personal data made available to them by carry out autonomous and distinct targeting for commercial prospecting purposes, for which they are responsuble, and are responsible for their legal and regulatory obligations.

Please note that in the context  of re-use, these patners act as data controllers. You should therefore refer to their own privacy policies. We illustrate some examples in the table below: 

• Facebook (Privacy policy accessible here)
• Google (Privacy policy accessible here)
• Instagram (Privacy policy accessible here)
• TikTok (Privacy policy accessible here)
• Snapchat (Privacy policy accessible here)
• Bing (Privacy policy accessible here)
• Pinterest (Privacy policy accessible here)
• X Twitter (Privacy policy accessible here)
• Rakuten (Privacy policy accessible here)
• LINE (Privacy policy accessible here)

Lastly, GUERLAIN may need to share your personal data with third parties to meet its legal, regulatory or treaty obligations, or to respond to requests from authorised legal authorities.

Because Guerlain operates in many countries around the world and in order to provide you with a personalized service worldwide, some of your data may be collected, accessed or stored outside your country of residence.

You should be aware that data protection and security requirements differ from place to place and may not provide the same level of protection as in your home country.

You are informed that your data may be transferred for the purposes mentioned above to companies located in countries outside the European Union which have a lower level of data protection than the European Union. Prior to the transfer outside the European Union, Guerlain will take all necessary measures and guarantees to secure such transfers.

Data may also be processed by staff operating outside the European Union who work for us or for one of our service providers.

Before transferring data between different countries, we take into account the risks that this operation could create for the data; where appropriate, we rely on the mechanisms in place, such as the Data Privacy Framework in the United States or standard contractual clauses, to ensure that your rights relating to your data are protected. Where data is shared with third parties, we require them to guarantee the same protection for your data as we do.
 

The legal retention periods defined by Guerlain respect the recommendations of the regulation(s) in force and the legal obligations to which Guerlain is subject.

In general, your personal data is kept in our database:

Data subject: Regular customer (i.e.: having a customer profile)
Duration: 5 years from the date of the first purchase or account creation
Specificity: This period will be renewed each time you interact with Guerlain (for example a purchase or an update of your profile) or your consent to continue to interact at the end of this period

Data subject: Prospect (i.e. never purchased products from Guerlain but registered for our communications)
Duration: 3 years from the date of data collection
Specificity: This period will be renewed each time you interact with Guerlain (e.g. participation in an event) or your consent to continue to interact at the end of this period

Data subject: Client ‘Guest’ (i.e. not having a client account)
Duration: 5 years from the date of first purchase
Specificity: This period will be renewed each time you interact with Guerlain (e.g. a purchase)

Data subject: customer care (i.e.: complaints or information)
Duration: duration of the processing of the request plus 5 years. For exercises of rights, under GDPR, the request is kept during its treatment plus 6 years.

Data subject: cosmetovigilance
Duration: duration of the processing of the request plus 5 years
Specificity: These data are sensitive, they are stored with adequate security measures

Data subject: Privileged interlocutors (e.g. agents, stylists, journalist, celebrity managers, artists) in relation to Maison Guerlain Public Relations services
Duration: 10 years from the date of your first contact
Specificity: This period will be renewed each time you interact with Guerlain (for example a request for information on the Guerlain)

When you interact with our chat, data relating to a complaint will be retained for 5 years by customer services, all other data will be deleted at the end of the conversation.

If cookies are placed on your computer, we keep them for a maximum of 6 months.

As stated above, when you choose to use our Virtual Try-On tool, no photos or images are retained or stored beyond the conclusion of the session.

When we no longer need to use your personal data, it is deleted from our systems and our registers or made anonymous so that it can no longer be identified, subject to retention for archival purposes. claims and litigation management as well as to meet our legal and / or regulatory obligations and / or to respond to requests from authorities authorized to make the request.
 

Guerlain has adopted the data protection and security practices described in this privacy policy for all individuals concerned. In addition, we have also identified and taken in to account the data protection and security measures required at local or regional level. This includes, for example, those required for residents of the European Union / European Economic Area under the General EU Data Protection Regulation (GDPR) 2016/679.
 

In particular, the GDPR provides the following rights:

• Right to information: you have the right to obtain clear, transparent and understandable information about how we use your personal data and about your rights. You will find all of this information in this Privacy policy.
• Right of access: you have the right to access the personal data that Guerlain holds about you. 
• Right of rectification: you have the right to have your personal data rectified if it is inaccurate or obsolete and / or to supplement it if it is incomplete.
• Right to erasure / right to be forgotten you have the right to have your data erased or deleted. However, this right may be limited by a legal reason or our legitimate interest in keeping your personal data.
• Right of opposition: you can at any time request to no longer receive our communications relating to our offers, news and events. You can in particular use the hypertext link provided for this purpose in each email or communication that we send to you. You can also request to receive non-personalized communications about our products and services.
• Right to withdraw consent at any time for data processing based on consent: you can withdraw your consent relating to our processing of your data when this processing is based on consent
• Right to data portability: you have the right to move, copy or transfer data from our database to another. This right only applies to the data you have provided, and provided that the processing is based on a contract or your consent and carried out using automated processes.
   

Please contact us at the contact details below to exercise these rights or if you have any questions or complaints regarding the processing of your personal data.
You can exercise these rights directly with Guerlain by sending an email to dpo@guerlain.fr or a non-registered letter by post to GUERLAIN

GUERLAIN
Service Relation Client: 23, rue de la Monnaie
75001 Paris Cedex
France
 

If, at any time, you no longer wish to receive details of our offers, news and events, you can unsubscribe using the hypertext link provided for this purpose in each mail we send you. You can also contact us by telephone by calling 01 41 27 32 16 (toll-free) from 9am to 6pm, 5 days a week or by post at the following address: Service Relation Client 23, rue de la Monnaie – 75001 Paris Cedex– France.
 

You also have the right to contact the data protection authority of your country in order to lodge a complaint against the data protection and privacy practices of Guerlain.
 

For all questions relating to the collection and processing of your data by Guerlain, you can contact the Guerlain Data Protection Officer at dpo@guerlain.fr.

Minors
Guerlain is particularly committed to respecting the privacy of minors. If Guerlain is aware that a customer is under 16 years of age, it will not collect their data without the consent of their legal guardian. If you are under 16 years of age, we advise you to contact your parents so that they can inform you about the best way to protect your privacy and authorize you to browse the site.

The best way to protect your privacy and authorize you to browse our website and use certain our website and to use some of our services. When you browse our website, in particular when you wish to create an account or purchase a product purchase a product on our site, we process some of your personal data

(for example: your name, first name for example: your surname, first name, email address, telephone number, postal address, etc.).
If you are over 16 years old, you can interact on our website.
If you are under 16, you must obtain the consent of your parents or legal guardian to use our services.
To find out more about how we handle your personal data, we invite you to read the full Privacy Policy. If you do not understand what is written on this page, or if you have any doubts about the use of your personal data, we advise you to speak to your parents or any other legal representative.

For holders of parental authority
Guerlain may process the personal data of your minor child.
If you create an account on our website on behalf of your child in your capacity as a parent or guardian, please be aware that your child's personal data will be processed by Guerlain in accordance with this Privacy Policy.

If your child under the age of 16 is browsing our website and their consent is required, we invite you in your capacity as the holder of parental authority to consent to the processing of your child's personal data in accordance with Article 8§1 of the GDPR and Article 45 of the French Data Protection Act (Loi Informatique et Libertés). As the holder of parental authority, you undertake to participate in your children's online activities to prevent data relating to your children under the age of 16 from being processed without your consent.

As the parent or guardian of a minor user, you can exercise your rights on behalf of your child and support them in doing so. In particular, you can request the deletion of your child's account. To do so, simply fill in the rights exercise form available here".