3.4. Shop
If you would like to order products in our shop, it is required for the
conclusion of the contract that you enter your personal data, which we need for
the completion and execution of your order. Required information for the
execution of the order is marked separately, any other information you provide
is voluntary. We process the data provided by you only to process and execute
your order.
For this purpose we might transmit on the collected data to the relevant
internal departments for processing and to other affiliated companies within
the Beiersdorf Group or to external service providers, contractors (e.g.
payment providers, fulfilment providers, customer management service providers,
content management provider) in accordance with the required purposes (processing
and execution of the order). Platform/hosting providers may have access to
personal data from a third country (countries outside the European Economic
Area). As an appropriate safeguard we have agreed on standard contractual
clauses pursuant to Art. 46 GDPR with these providers or they are
(additionally) EU-U.S. Privacy Shield certified. More information on this topic
is published here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en.
To prevent unauthorized access to your personal data, especially
financial data, the order process is encrypted using TLS technology.
In addition, you can voluntarily create a customer account through which
we can store your data for future purchases. When you create such an account,
the data you have provided will be stored revocably. All other data, including
your user account, can always be deleted.
We may also process the information you provide in course of your
purchase in our shop to send you interesting product information based on the
products you have been purchased in our shop or to give you the possibility to
rate your purchased products. We therefore send you information by email in
context with your purchase. This is a special form of direct marketing, in
which we have a legitimate interest in strengthening consumer loyalty by suggesting
appropriate and interesting product information. Besides that, we may also send
you technical or other factual information in context with your purchase. You
can object at any time to receiving such information by following the
requirements as described in in Section 4.
We are obliged by commercial and applicable tax
laws to store your address, payment and order data for a period of up to ten
years.
Legal basis: Art. 6 (1) b, f GDPR.