Last revised December 16, 2020
Note that other Kao Group websites or mobile apps may be governed by other privacy policies.
1. Categories of Personal Data and Processing Purposes - What personal data do we process about you and why?
You may use the Website without providing any personal data about you. In this case, we will collect only the following metadata that result from your usage of the Website: browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Website, date and time of accessing our Website and internet protocol (IP) address.
Your IP address will be used to enable your access to our Website. The metadata will be used to improve the quality and services of our Website and services by analyzing the usage behavior of our users.
1.2 Contact form
On our website, we offer you the opportunity to contact us via a contact form. For this we need the following personal data from you: name, email, phone number, and message.. The personal data that you provide us in the context of this contact request will only be used to answer your inquiry / contact request and for the associated technical administration. The transfer to third parties does not take place. Your personal data will be deleted as soon as we have processed your request or you revoke your according consent.
1.3 Adobe Analytics
This website also uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited ("Adobe"). Adobe Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of your use of the website. If the information generated by the cookie about the use of the website is transmitted to an Adobe server, the settings ensure that the IP address is anonymized prior to geolocation and replaced with a generic IP address before being stored. On behalf of the operator of this website, Adobe will use this information to evaluate users' use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address sent by your browser as part of Adobe Analytics will not be merged with any other data from Adobe. You can prevent the storage of cookies by a corresponding setting of your browser. However, please be aware that if you do this you may not be able to use the full functionality of this website. In addition, you may prevent the collection by Adobe of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Adobe by using the browser plug-in available under the following link. In download and install: http://www.adobe.com/privacy/opt-out.html
2. Processing Basis and Consequences - What is the legal justification for processing your personal data and what happens if you choose not to provide it?
We rely on the following legal grounds for the collection, processing, and use of your personal data:
The provision of your personal data is not required by a statutory or contractual obligation. The provision of your personal data is necessary to enter into a contract with us or to receive our services/products as requested by you. The provision of your personal data is voluntary for you.
Not providing your personal data may result in disadvantages for you-for example, you may not be able to receive certain products and services. However, unless otherwise specified, not providing your personal data will not result in legal consequences for you.
3. Categories of Recipients and International Transfers - Who do we transfer your personal data to and where are they located?
We may transfer your personal data to third parties for the processing purposes described above as follows:
Any access to your personal data is restricted to those individuals that have a need-to-know in order to fulfill their job responsibilities.
International transfers. The personal data that we collect or receive about you may be transferred to and processed by recipients that are located inside or outside the European Economic Area ("EEA"). For recipients located outside of the EEA, some are certified under the EU-U.S. Privacy Shield and others are located in countries with adequacy decisions (in particular, Andorra, Argentina, Canada (for non-public organizations subject to the Canadian Personal Information Protection and Electronic Documents Act), Switzerland, Faeroe Islands, Guernsey, Israel, Isle of Man, Jersey, and New Zealand, and, in each case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective. Other recipients might be located in countries which do not adduce an adequate level of protection from a European data protection law perspective. We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we will base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority, approved codes of conduct together with binding and enforceable commitments of the recipient, or approved certification mechanisms together with binding and enforceable commitments of the recipient. You can ask for a copy of such appropriate safeguards by contacting us as set out in Section 7 below.
4. Retention Period - How long do we keep your personal data?
Your personal data will be retained as long as necessary to provide you with the services and products requested. Once you have terminated the contractual relationship with us or otherwise ended your relationship with us, we will remove your personal data from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which the Kao Company is subject-e.g., taxation purposes).
We may retain your contact details and interests in our products or services for a longer period of time if the Kao Company is allowed to send you marketing materials. Also, we may be required by applicable law to retain certain of your personal data for a period of 10 years after the relevant taxation year. We may also retain your personal data after the termination of the contractual relationship if your personal data are necessary to comply with other applicable laws or if we need your personal data to establish, exercise or defend a legal claim, on a need to know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
5. Your Rights - What rights do you have and how can you assert your rights?
Right to withdraw your consent: If you have declared your consent regarding certain collecting, processing and use of your personal data (in particular, regarding the receipt of direct marketing communication via email, SMS/WhatsApp, and telephone), you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. Please contact us as stated in Section 7 below to withdraw your consent. Further, you can object to the use of your personal data for the purposes of marketing without incurring any costs other than the transmission costs in accordance with the basic tariffs.
Additional data privacy rights: Pursuant to applicable data protection law, you may have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data (including objection to profiling).
Please note that these aforementioned rights might be limited under the applicable local data protection law.
Below please find further information on your rights to the extent that the GDPR applies:
You may have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data. Such right to object may especially apply if we collect and process your personal data for profiling purposes in order to better understand your interests in our products and services or for direct marketing.
If you have a right to object and you exercise this right, your personal data will no longer be processed for such purposes by us. You may exercise this right by contacting us as stated in Section 7 below.
Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
To exercise your rights, please contact us as stated under Section 7 below. You also have the right to lodge a complaint with the competent data protection supervisory authority.
6. Cookies and other tracking technologies
7. Questions and Contact Information
The Data Protection Officer of Kao Germany GmbH can be contacted at firstname.lastname@example.org