PRIVACY POLICY

ABOUT THIS PRIVACY POLICY
 
This Statement contains our Privacy Policy so please read it carefully in order to get acquainted with the manner wherein we process your data. Privacy Policy describes the types of personal data we collect about our customers and explains how we use, share and transfer the personal information and the choices available to our customers regarding our processing of their personal data. In addition, we describe the measures we take to protect the security of the information and how you can contact us in relation to the personal data protection issues.
Please read this Policy carefully. We invite you to read the Policy from time to time to be aware of any modifications made to the conditions of collecting and processing of your personal data.
 
PERSONAL DATA CONTROLLER

The authorised representative of the L’OCCITANE brand in Croatia and personal data controller is the company STILLMARK ZAGREB Ltd with the seat in Hebrangova 6, registered with the Commercial court in Zagreb under registry number 080524715, PIN: 54598630910. We collect data in accordance with the Regulation (EU) 2016/679 of the European parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and in accordance with applicable law.
Ever since of its foundation, the company Stillmark Zagreb Ltd as well as the brand L’OCCITANE have been focused on satisfaction of the customers. Your enjoyment with L’OCCITANE products, good feeling in our stores and communication with us are very important to us as the satisfaction of our customers is a part of our fundamental values. Therefore, we process the personal data entrusted to us by our customers with special care and responsibility. We stand up for legal, fair, and transparent processing of personal data, whereby we are careful to allow access only to authorised and competent persons, who use the data exclusively within the frame of regulations and protect the data responsibly.
 
DATA COLLECTING
We may collect your personal information in various ways, some of which are:
  • When you register for our Zemlja ljepote L’occitane (L’OCCITANE Land of Beauty) database of customers. Registration form exists in a paper form at L’OCCITANE stores, and in a digital form at our website www.loccitane.hr. When you register in this manner, we will enter your data within 5 working days into a safe electronic database of our members, after which you shall receive our notifications (news, current promotions, special privileges for members) via contact data, which you provided.
  • When you place an order on the web shop www.loccitane.hr, by registering a customer
  • When you browse our online contents (cookies)
  • When you participate in a contest or game, or an activity for customers (e.g. facial treatments)
  • Via social media channels – publicly available data or data you send us via Facebook messages
  • Except these cases, we collect personal data only when You yourself give them at our disposal, e.g. by sending and e-mail or when you are contacting us regarding an inquiry, etc.
 
The types of personal information we may collect are the following:
  • Registration details (name, postal address, email address, mobile and/or other telephone number)
  • Personal details (data of birth, gender)
  • User name and password (when web-shopping, in order to safely log in)
  • Payment information (payment card number, expiration date, authorisation number, security code, delivery address and billing address)
  • Purchase and transaction information (the kind and the number of products bought and returned)
  • Customer service information, customer service enquiries and comments and information exchanged with our customer service team
  • Your interests and experience about our products and products of similar nature, and photographs, videos, and other comments you provide (e.g. a comment to a product on our web shop)
  • Location and geolocation data, you provide (e.g. if you want to automatically find the closest store on our website)
  • Information about you from publicly available sources, including publicly available contents on social media platforms
  • Other information you provide to us as a result of your request for a specific product and/or service
  • Information we may obtain from our third party service providers
 
USE OF PERSONAL DATA
 
We use the information described above only for the purposes specified at the time of collection and/or in this Privacy Policy. Those purposes are the following:
 
  • To send notifications about news, promotions, and special offers for member of Land of Beauty via communication channels, you provided (e-mail, mail, mobile phone)
  • To provide information about our products and services to you
  • To process transactions, including payments, made through Our Website and issuing R1 invoices
  • To create, register and manage special accounts of users (e.g. in the web-shop)
  • To verify your identity (e.g. when logging in to the web shop)
  • To communicate with you, and answer any queries that you may have
  • To administer your participation in promotions, special events (such as sweepstakes, contests, offers, surveys and market research) and our reward or loyalty programme or customer club Land of Beauty
  • To participate in our services (such as auto-replenishment service, express checkout)
  • To operate, evaluate and improve our products and services (such as new products and new advertising campaigns, analyse our customer base, perform data analytics and accounting, audit)
  • To conduct targeted marketing and behavioural advertising
  • To keep track of your preferences and habits with regards to our products and services
  • To conduct statistical or survey analysis to improve our services
  • To carry out our obligations arising from any contracts or agreements
  • To ensure that content from the website is presented in the most effective manner
  • To administer the website
  • To conduct research and analysis, including the effectiveness of our marketing and advertising campaigns
  • To analyse visits to the website adapted marketing
 
We would like to emphasize that processing of personal data for the purpose of analysis, with a purpose of improving our products may include the so-called "profiling". "Profiling" refers to every form of automatized processing of personal data, whereby personal aspects pertaining to an individual are assessed, such as personal preferences and interests. However, no decisions are passed based exclusively on automatized processing, nor do they produce legal effects, which pertain to you or have a significant effect on you.
Through third party ad buying networks, such as search engines like Google, and social media like Facebook, we can target our advertisement and messages to users.
As is the case with all websites, when accessing our website, our web server temporarily saves the domain name or IP address of the accessing computer, as well as the date of access, inquiries of web-page visitors about files (file name and the corresponding complete data about the internet address), http or https return code, type of browser and the size of files, transferred during the visit.
When you use our website, we may save data for various security reasons. This data may include the name of Your internet service provider, website through which you connected to our website, websites you visited from our website, and your IP address. This data may lead to Your identification, but we do not use it for that purpose.
 
This website uses Google Universal Analytics, activities of web-analysis by the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States („Google“) with a purpose of analysis of use thereof. Information collected by Google, pertaining to Your use of this website (e.g. starting URL, web search engine you used, Your language settings, Your computer system or screen resolution), are transferred to Google's server in the United States of America, are saved there, analysed, and the result is given to our disposal in an anonymised form. Google is certified regarding the EU-US Privacy Shield, and therefore the corresponding level of data protection is applied to processing of personal data by Google.
For further information about Google Analytics, please read the Google Analytics Terms of Service, Basics of security and protection of data by Google Analytics, as well as Google Privacy Policy.
When forwarding to other website ("links"), we are not responsible for its contents.
 
COOKIES
In order to make your visit to our website as pleasant as possible, it is necessary to save a small amount of information on the computer, so called cookies. Cookies usually save your settings, settings for the website, such as preferred language or delivery address. Cookies allow the website to "remember" the visitor's settings from his previous visits. Later, when you again open our website, it will not be necessary to again enter data, such as preferred language or delivery address.
Find a detailed explanation about cookies here: Information about cookies >
 
SHARING OF YOUR PERSONAL INFORMATION
 
We do not transfer your personal information we collect to third persons, except:
  • with our contract-bound service providers, such as the company, which assist us in maintenance of our websites, companies, which provide services of e-mail marketing or SMS marketing, and intermediaries and service providers, such as the company, which processes credit card payments (Payway), as well as research and analytical services (Google Analytics)
  • with legal persons within the L’Occitane group worldwide, including our ultimate holding company and its subsidiaries (“L’Occitane Group”);
  • with our affiliate companies, and our mutual processing controllers respectively, who are also authorised representatives and/or distributors of the brand L'Occitane in Croatia (Slovenian company Stillmark d.o.o. and Helichrysum d.o.o.)
  • with state authorities or other persons when we are required to do so by law
  • with law enforcement agencies, government officials or other parties in response to court order, legal procedures or subpoena
  • when you otherwise consent or direct us to share your information with third parties
 
We may share for collected data outside aforementioned cases for business purposes only if they have been pseudonymised and/or anonymised, including the number of visitors to the website and number of clicks to our adverts and/or e-mails.
In cases when we consign activities pertaining to the processing of data to third persons, in order for them to provide You with the product or provide You the service you requested or for other permitted purposes, we care that this third person is registered for performance of such activities, and that this person provides enough guarantees regarding the realization of protection and confidentiality of data.
 
PROTECTION AND STORAGE OF PERSONAL DATA
We treat carefully and with great responsibility the personal data of our customers in a lawful, honest and transparent way.
We use technical and organizational security measures in order to protect your information from misuse, loss, threat or access by unauthorized persons.
We store personal information for as long as it takes to provide the requested service or service for which your consent is given, or until you revoke consent, unless otherwise provided by the law.
In order to ensure the additional security of your data and to comply fully with the applicable regulations, we have also appointed the Personal Data Protection Officer: The Law Firm Vedriš & Partners Ltd, Ozaljska 136, 10 000 Zagreb. The Data Protection Officer is responsible for providing information and advising of the data controller or the data and the employees who perform the data processing of their duties; monitoring compliance with applicable data protection rules and policies of the data controller or the data processor with regard to the protection of personal data, including the distribution of responsibility, raising awareness and training of personnel involved in processing; providing advice upon  request, concerning the assessment of the effect on data protection and monitoring of its enforcement and cooperation with the Personal Data Protection Agency.
Furthermore, we reserve the right to completely delete the provided data from our records if we find out or assess that they are incorrect. Namely, when a customer enters the data, it may happen that he or she fails to fill in an application or scrabbles on the application or misread an instruction so that third-party data (family member instead of his own), wrong email contact or the like is written. Even though the buyer's self-signed signature confirms that he or she only provides correct and proper information and is older than 16, in practice, such omissions on the part of the customers occur, and we are unable to prevent them. Having in mind such cases, we reserve the right to delete the data without notice, after which if the customer wants to re-enter the L'OCCITANE beauty world, he or she can do it in the correct way.
 
YOUR RIGHTS
 
You can access to your personal data any time, namely you are entitled to receive from us the confirmation of the processing of your personal data and, if so, access to them, which includes the right to copy them.
Your personal right is to ask at any time, without explanation and consequences, that the company Stillmark Zagreb d.o.o. complete, correct, restrict or terminate the use of, and delete your personal data previously provided based on your consent. The withdrawal of the consent does not affect the lawfulness of the processing that took place until that moment.
 
If you would like us to stop using your personal data for specific purposes, you can always request that as follows:
 
• As a member of the Land of Beauty, you can unsubscribe from receiving a notice of news, promotions, and special offers for members via web app: https://privole.loccitane.com.hr. In the app, please enter the same email address which you entered when subscribing into Land of Beauty, check your inbox, and follow the link sent to you by the app. An alternative way to unsubscribe is by sending an email to news@loccitane.hr with the subject Unsubscribe and text with description requests (for example, I want to unsubscribe from email messages, SMS messages, mail, each and every listed mean ...), with the requests being processed within a maximum of 5 business days. If you do not have the ability to communicate via email, a paper form for unsubscribing is available at L'OCCITANE stores – you just need to ask our aesthetic counsellors.
• As a registered buyer on our website www.loccitane.hr, you can request to delete your data from our database of web customers by sending an email with the subject of the WEB Logout
• To disable the cookies that we collect from your review of our web pages, set your preferences in your own Internet browser
• To change or delete your personal data from our records and for other specific situations, just send us an email with the text of a specific request at news@loccitane.hr
Your rights include the right to object the processing of your personal data for direct marketing purposes, which includes making of a profile to the extent that is related with such direct marketing. Upon receipt of such an objection, we will stop processing your personal data for this purpose.
 
If you have any questions regarding the Privacy Policy or if you want to request a termination of processing, alteration of data or other options available to you, you can always contact us by using the following e-mail address: news@loccitane.hr.
We will respond as soon as possible, always taking care of the security of your personal data, and we will consult with our data protection officer if necessary. In case you do not have the possibility of email communication, you can send a written request to the postal address of the company: Stillmark Zagreb doo, Hebrangova 6, 10000 Zagreb.
If you feel that your personal information is collected or used in a manner contrary to applicable regulations, you have the right to file a complaint with the Personal Data Protection Agency, Martićeva ulica 14, 10000 Zagreb.
 
APPLICABLE LAW
 
All matters related to the Privacy Policy shall be governed by the Croatian law.
 

The Privacy Policy shall apply as of May 22nd, 2018.
(The updated Privacy Policy with additional unsubscribe feature shall apply as of March 31st, 2020.)