DATA PROTECTION STATEMENT

This Data Protection Statement is designed to inform you of the type of data collected and how it is used. You will also learn how you can exercise your data subjects’ rights. The Data Protection Statement applies to this website / app (hereinafter uniformly referred to as “website”) and the other websites of the Schwarzkopf Professional area. 
 
Any changes to this Data Protection Statement will be published on this website. This enables you to inform yourself at any time about which data we are collecting and how we use such data. 
 
This Data Protection Statement does not apply to websites accessible via hyperlinks on this website.

Henkel AG & Co. KGaA, Henkelstrasse 67, 40589 Duesseldorf, Germany

hereinafter referred to as “Henkel” or “we”

To assert any data subjects’ rights, consent withdrawals or general data protection queries, you can contact us at Henkel AG & Co. KGaA, „Data Protection“, Henkelstrasse 67, 40191 Düsseldorf, Germany (E-Mail: datenschutz@henkel.com).

Henkel uses personal data to provide this website (including services contained therein) to the users. Any further processing of the data only occurs on the basis of other statutory duties or permissions or if the respective user has consented towards Henkel.

When users visit the website, Henkel automatically collects and stores certain data. This includes: the IP address or device ID allocated to the respective end-device which we need for transmitting requested content (especially texts, images, and product information as well as electronic files made available for download, etc.), the activity of users in the context of the website, the type of the respective end-device, the browser in use as well as the date and time of use.

Henkel stores this information for a maximum of 7 days for the purpose of recognizing and pursuing misuse.

Henkel uses this information also for improvements to the service’s presentation, features and functionalities as well as general administration tasks.

Aside from this, Henkel deletes or anonymizes the data on use, including the IP addresses, without undue delay as soon as they are no longer needed for the above mentioned purposes.

Such processing and use of your data is lawful because (1) the processing is necessary for the provision of the website as per Art. 6 para. 1 lit. b GDPR; or (2) Henkel has an overriding legitimate interest in ensuring and enhancing the functionality and error-free and secure operation of the website and that it is tailored to the users’ needs pursuant to Art. 6 para. 1 lit. f GDPR.

In order to provide the website and the services contained therein, Henkel may engage service-providers (e.g. for the hosting of Henkel’s websites, computing and database management, tracking etc.) which therefore generally may also process your personal data when you use our websites.

Most of these service providers are contractually bound to only process such personal data on behalf of Henkel and are located (i) within the EU/EEA, (ii) in countries for which the EU Commission has officially recognised the existence of an adequate level of data protection, including the US, insofar as the data recipients participate in the EU-U.S. Data Privacy Framework.

Where this is not the case or if service-providers themselves engage sub-contractors your personal data may potentially be transferred to third countries (i.e. countries outside of the EU/EEA without an adequate level of data protection).

All of our service-providers are, however, obligated to solely process in or transfer any of your personal data to third countries in case the additional requirements for international data transfers enshrined in Art. 44 et seq of the GDPR are complied with, predominantly by concluding EU Standard Contractual Clauses and, if required, implement additional measures in order to establish an adequate level of data protection. The EU Standard Contractual Clauses are model contracts provided by the EU Commission which – if required – together with additional measures are intended to ensure that your personal data are processed in accordance with European data protection standards even if the processing takes place outside the EU/EEA.

You may provide your e-mail address and select a password in order to create an account for our website, e.g., in the course of using the contact form (as an optional feature) or via an account creation page.

Creating a user account and the associated processing of personal data is required in order to use several functionalities offered on our website. Mere visiting or browsing the website does, however, not require a user account.

In case you provide us with further information during the use of our website and the functionalities contained therein (while logged in), such information is attributed to and stored in your user account following an interaction (e.g. a purchase). Alternatively, you may enter such additional information in your user account by yourself. Such information may include your name, job title, your telephone number, your birthday, product preferences, information about your company (sector/industry, size, your role in the company etc.), payment information as well as billing and shipping addresses. We will also store information about your purchases and provide you with an overview of current orders and order history in your user account (hereinafter jointly referred to as “Account Data”).

We process your Account Data to simplify and secure your use of our website and to provide you with a consolidated overview relating to your Account Data. After the initial registration of your user account, we will further use your provided e-mail address to send you a respective confirmation e-mail. You may reset and/or change your password at any time.

We process and use your Account Data for the purpose / legitimate interest of providing this functionality at your request based on Art. 6 para. 1 lit. b or lit. f GDPR or in accordance with your respective consent (Art. 6 para. 1 lit. a GDPR).

Across all user accounts, we further process the information contained therein for market research and other statistical analysis, e.g. in order to gain more insight about our client demographic, however, without analysing user accounts on an individual level or attributing any gained insights to individual users if they have not individually consented to any such processing of their Account Data (see below). 

Such processing and use of your Account Data is lawful pursuant to Art. 6 para. 1 lit. f GDPR because we have an overriding legitimate interest in optimizing our marketing and sales efforts based on such analyses and insights.

We store your Account Data until you delete the account via the respective functionality in your account profile page or as long as required in case any statutory retention obligation applies. Most of Account Data may further be removed from your account and/or modified by yourself individually at any time.

Your account will also allow you to set your preferences regarding if and which marketing communication you want to receive from us and by doing so provide your consent as per Art. 6 para. 1 lit. a GDPR to any such marketing communication and associated processing of your personal data. Purpose and scope of any such data processing are identified in the respective consent forms as well as the applicable sections in this data protection statement.

In case you provide us with any such consent, we will process your Account Data for the purpose(s) and to the extent identified in the consent forms as well as the applicable sections in this data protection statement. Such processing of your Account Data is based on your consent to the processing.

You may withdraw your consent at any time by unticking the relevant checkboxes in your account’s communication preferences. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Our user account also allows you to log in to certain other websites that require registration. This applies, for example, to the Persil Service website operated by Persil Service GmbH. For this purpose, we provide Persil Service GmbH with the necessary data, in particular name, e-mail address, postcode and individual system ID.

You may also use your access data to a social network, in particular from Facebook or Google, to log in to our website. In this case, we receive the necessary data from the provider of the respective network, e.g. META Platforms Ireland Ltd, Merrion Road, Dublin 4, Ireland or Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

In this context, the company providing the access data receives the information that you are participating in the respective service for which you are using the access data.

You may provide your contact data via our contact form, email, telephone call or otherwise together with an enquiry. We will use your data for the purpose of replying to your enquiry.

You also have the option of contacting our customer service team via the What's App messenger. Your message and telephone number will be forwarded to the next available customer service employee and processed there in order to answer your message.

Your personal data is processed for the purpose / legitimate interest of processing your request based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the respective aforementioned purpose or as long as required in case any statutory retention obligation applies.

We use the "Friendly Captcha" service, which serves to prevent the use of our website by automated programs and scripts (so-called "bots"). For this purpose, we have implemented a program code on our website that ensures that the end device you are using establishes a connection to our service provider (Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany) and a calculation task is set that must be solved. Thereby connection data, environmental data, interaction data and functional data, among other things, are transmitted to our service provider. On this basis, we can determine whether it is probably a human user or a bot and then deal with the request accordingly, e.g. allow or reject it.

IP addresses are only stored in hashed form, in which the addresses are converted into a unique character string from which the respective IP address cannot be recalculated.

Your personal data is processed for the purpose / legitimate interest of protecting our website from abusive access by bots, spam and attacks (e.g. through mass requests) on the basis of Art. 6 para. 1 lit. f GDPR.

If personal data is stored in this context, it will be deleted within 30 days.

You may make use of the function to make enquiries via live-chat or via a chatbot. We use data that you have provided before using the chat (e.g. contact details) and that you enter in the free text field while using the chat to respond to your enquiry. The same applies to technical data that must be processed to provide the chat function, such as the IP address, information about the browser used and the end device used. If we store the enquiry internally for improvement purposes, we will anonymise your data beforehand.

Your personal data is processed for the purpose / legitimate interest of providing you with the chat function and answering your enquiries on the basis of Art. 6 para. 1 lit. b or lit. f GDPR. Alternatively, you may also have given your consent to data processing in the context of the chat function. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein.

If you have not consented to a longer storage period, e.g. as part of our customer relationship management, we will only store the data for as long as we need it to fulfil the above-mentioned purpose or for as long as is necessary to fulfil statutory retention obligations.

You may provide your contact data and your address while participating in a raffle which we offer from time to time on our website. We will use your data for the purpose of conducting the raffle.

Your personal data is processed for the purpose / legitimate interest of conducting the raffle based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

You may provide your contact data and your address while participating in product tests. We will use your contact data as well as any other information you provide to us as part of the product test for the purpose of conducting the product test.

Your personal data is processed for the purpose / legitimate interest of conducting the product test based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

If you click on the “Find a distributor” functionality on the website, a list of e-retailers is presented to you where you can buy the respective product that is shown on our web-site. In order to provide you with that service, your data, such as your IP address and the product you are interested in, will be transferred to the provider of this service, NeuIntel, LLC, 20 Pacifica, Suite 1000, Irvine, CA 92618. If you decide to follow an in-dicated offer by clicking “Buy Now”, you will be forwarded to the website of the respective e-retailer. This forwarding as well as re-routing in the process is facilitated in the control of NeuIntel, LLC. 

Your personal data is processed for the purpose / legitimate interest of providing this service based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

You may provide your contact data, e.g. your email address prior to or during webinars. We will use your data for the purpose of providing the webinar. Webinars will be conducted via MS Teams or similar service and require further processing of your personal data. 
 
Your data may be passed on to affiliated companies of Henkel or to distributors responsible for the region and product category in question, either because these affiliated companies or distributors carry out the webinar or in order to facilitate a sales contact stemming from a webinar. 
 
Your personal data is processed for the purpose / legitimate interest of providing the webinar to you and for the purpose / legitimate interest of using the information about your participation in the webinar for sales purposes, in particular to inform you about products that may be of interest to you, in each case on the basis of Art. 6 para. 1 lit. b or lit. f GDPR. 
 
If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

You can participate in a survey on our website or on our service hotline or elsewhere. As the case may be, we may also ask you to participate in a subsequent satisfaction survey in connection with an interaction with us (e.g. contacting customer service). In case you participate in a survey, we will process your contact data, e.g your email address as well as your answers and any other information you decide to share with us in response to the survey. We will use the results of the survey for market and opinion research, quality assurance and training purposes as well as to generate further business insights.

The processing and use of your data is lawful because (i) the processing is necessary for conducting the survey as per Art. 6 para. 1 lit. b GDPR, and (ii) we have an overriding legitimate interest as per Art. 6 para. 1 lit. f GDPR in optimizing our marketing, services and sales efforts based on such analyses and insights. Alternatively, you may have provided consent to partake in the survey. In such case, we will process your provided information on basis of your consent and for the purposes and to the extent described therein.

If you have not given (additional) consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

The "virtual try-on" function allows you to "try-on" our hair colouring products virtually. You can select different colours, which are projected onto your live image, or an image uploaded by you.

If you make use of the virtual try-on function, we process your live image or your uploaded image to show you how your hair would look with the selected colour. If you specify your hair colour as part of the function, we process this information in order to be able to make a recommendation to you.

Your personal data is processed for the purpose / legitimate interest of providing you with the virtual try-on function on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

Images taken or uploaded by you during the "try-on" will be stored for the duration of use of the virtual try-on function and subsequently deleted.

The "find your colour" function helps you to find the products that will give you the hair colour you want. When you use this function, we ask you for certain information about your hair (e.g. colour, grey content and desired hair colour). We also process your live image, or an image uploaded by you. On this basis, we then determine suitable products for you to achieve the desired hair colour. If you click on a corresponding button, we will show you a list of online retailers where you can purchase the corresponding product. If you click on the button provided for this purpose, you will be directed to the website of the respective online retailer where you can purchase the product. Thereby in particular your IP address and information about the product you are interested in will be transmitted to the retailer.

Your personal data is processed for the purpose / legitimate interest of providing you with the “find your colour” function on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

We offer a function on our website for searching for product information using bar-codes (Barcode Scanner). You can scan the barcode of your product with a mobile device, and you will be directed to the corresponding product page in the eShop, which contains information about the scanned product. If you make use of the Barcode Scanner, we process in particular your IP address and information about your mobile device in order to be able to redirect you to the corresponding product page using the scanned barcode. 

Your personal data is processed for the purpose / legitimate interest of providing a customer-friendly product information search function on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

From time to time, we offer coupons on our website that can be used to purchase selected products at a discount. To download a coupon, you must log in to your user account and possibly provide additional information about your interests. We process this data as well as information about the use of the coupon campaign (e.g. number of downloads of a coupon) for the purpose of implementing and administering the coupon campaign.

Your personal data is processed for the purpose / legitimate interest of implementing the coupon campaign on the basis of Art. 6 para. 1 lit. b or lit. f GDPR and the administration of the coupon campaign on the basis of Art. 6 para. 1 lit. f GDPR. 

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

From time to time, we offer coupons on our website that can be used to purchase selected products at a discount. To download a coupon, you must log in to your user account and possibly provide additional information about your interests. We process this data as well as information about the use of the coupon campaign (e.g. number of downloads of a coupon) for the purpose of implementing and administering the coupon campaign.

Your personal data is processed for the purpose / legitimate interest of implementing the coupon campaign on the basis of Art. 6 para. 1 lit. b or lit. f GDPR and the administration of the coupon campaign on the basis of Art. 6 para. 1 lit. f GDPR.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

If you register your salon in our Salon Finder function or if we receive your details for this purpose from a sales representative or country representative, we will process your data in order to make your salon findable for users of the Schwarzkopf Professional websites via the Salon Finder function and to provide users with relevant information about your salon. The following data may be published (if available):

• Salon name

• Address

• Telephone number 

• Email address

• Description of your salon

• Opening hours

• Address of the respective salon website (URL) 

• Link to the social media profile of the salon

• Services offered in the salon

• Schwarz Professional brands used in the salon

• Link to the booking platform 

• Services offered

Your personal data is processed for the purpose / legitimate interest of making your salon and relevant information about your salon easier for customers to find, on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

Unless you have consented to a longer storage period, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

When you attend seminars and view learning modules via our online learning platform eAcademy, we process your data in order to provide you with the eAcademy and, in particular, the desired learning modules. In this context, we also record that you are taking part in a learning module. You then have the opportunity to rate these. We process this information in order to understand how our offer is received and to be able to display the average user rating to other users for information purposes. At the same time, after completing a learning module or seminar, we may also ask you to complete an evaluation form in which we can ask you more detailed questions about the evaluation and you can provide feedback. We process your answers to improve our offer, to analyse user preferences and to personalise our offers.

Your personal data is processed for the purpose / legitimate interest of providing you  the eAcademy and the seminars and learning modules you have requested, in order to evaluate our range of learning modules and to be able to make you interest-based offers on the basis of Art. 6 para. 1 lit. b or lit. f GDPR. Alternatively, you may also have given your consent to data processing in the context of the eAcademy, in particular for the personalisation of our offers and the analysis of user preferences. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein. Your consent is voluntary and can be withdrawn at any time with effect for the future.

If you book a fee-based seminar via our online booking tool as part of the eAcademy, we also process your master, contact and payment data in order to manage the booking, confirm it and process the payment

The processing of your personal data is carried out for the purpose / the legitimate interest of being able to process your booking on the basis of Art. 6 para. 1 lit. b or lit. f GDPR

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

For payment processing, we integrate payment services from third-party companies on our website. If you make a chargeable booking with us, your payment data (e.g. name, payment amount, account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The involvement of the payment service providers is based on Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be withdrawn at any time for the future.

We use the following payment services / payment service providers on this website:

Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter referred to as "Mastercard").

Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA
The provider of this payment service is Visa Europe Management Services Limited, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter referred to as "VISA").

The United Kingdom is considered a safe third country under data protection law. This means that the United Kingdom has a level of data protection that corresponds to the level of data protection in the European Union.

VISA may transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. 

Further information can be found in VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

As part of our "Shaping Futures" programme, we want to support people around the world who want to become hairdressers but do not have sufficient resources for the relevant training. In this context, we process the personal data of students, trainers and other supporters in order to enable participation in and support for the programme.

If you apply for the programme as a student, we will process your application data to check whether you qualify for the programme. We also process the personal data of students who have been admitted to the programme in order to organise their participation and issue a certificate upon successful completion of the programme. We also process the personal data of students who have applied for or been admitted to the programme in order to evaluate participation in the programme, in particular to be able to include (usually statistical) information on this in reports (such as the sustainability report).

The processing of students' personal data is carried out for the purpose / legitimate interest of processing the application, organising participation and preparing reports on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

If you would like to support the Shaping Futures programme as a trainer or make a financial contribution and contact us via our contact form, we will process your email address and first and last name so that we can get back to you. Optionally, you can also enter your customer number and your telephone number so that we can contact you by telephone and allocate you. We also process other information about you that you provide in this context, such as information about your skills and knowledge. We also process data about you in this case in order to be able to evaluate the participation of trainers in the programme / the support of the programme, in particular in order to be able to include (usually statistical) information on this in reports (such as the sustainability report). 

The processing of personal data is carried out for the purpose / legitimate interest of answering the enquiry, organising, implementing and processing your participation as a trainer or supporter in the programme and preparing reports on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

In some cases, we also process photos on our website on which people can be seen, in particular participants in this programme. The personal data is processed for the purpose / legitimate interest of presenting and promoting the programme. Insofar as we have concluded a usage agreement with you for this purpose, the data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. In addition, we base the processing for the aforementioned legitimate interest on Art. 6 para. 1 lit. f GDPR. Alternatively you may also have given your consent to this. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein. Your consent is voluntary and can be withdrawn at any time with effect for the future.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

From time to time, we organise the "Hairdressing Awards", in which hairdressers can submit photographs of the models they have styled in various categories. The winners, selected by a jury, receive a prize.

For registration and participation in the Hairdressing Awards, we process the master data and contact details of hairdressers. We also process the images submitted by the hairdressers, in which the faces of the models may be recognisable, in order to enable the jury to select the winners.

The processing of the personal data of hairdressers and models is carried out for the purpose / legitimate interest of processing the registration and selecting the winners on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

We will then publish the names of the winners and the winning photos on our website to honour the winners and their work and to raise awareness of the Hairdressing Awards. 

The processing of personal data is carried out for the purpose / legitimate interest of honouring the winners and promoting the event on the basis of Art. 6 para. 1 lit. f GDPR or, in particular if an agreement has been concluded with you for the publication of the photos, Art. 6 para. 1 lit. b GDPR. Alternatively, you may also have given your consent to this. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein. Your consent is voluntary and can be withdrawn at any time with effect for the future.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

We process the personal data of users of the House of Colour app in order to make the app available to them and to ensure the proper functioning and security of this app. 

When you visit the app, we automatically collect and store certain information. This includes the IP address or device ID assigned to the respective end device, which we require for the transmission of the requested content (in particular content, texts, images and product information as well as files made available for download), your activities within the app, the type of end device and the time of use. 

We also process this information to improve the presentation and functionality of the service and for general administrative purposes.

Otherwise, we delete or anonymise the usage data, including the IP addresses, immediately as soon as they are no longer required for the aforementioned purposes. 

The processing of personal data is carried out for the purpose of providing the app on the basis of Art. 6 para. 1 lit. b GDPR and for our legitimate interest in ensuring and improving the functionality and error-free operation of the app and tailoring it to the needs of users on the basis of Art. 6 para. 1 lit. f GDPR.

The “Selfie generator” function allows you to create or upload a photo of your face and then edit it by removing the photo background using artificial intelligence and selecting a new background colour. A Schwarzkopf logo can also be added to a corner of the photo. You then have the option of downloading the edited photo or sharing it on social media.

When you use the Selfie generator, we process your photo to enable you to create and edit the “selfie”. Your photo will be sent encrypted to an external service provider to remove the background. If you decide to share your photo on social media, the associated processing of your personal data takes place under the sole responsibility of the respective operator of the social medium. Further information on the data processing can be found in the privacy policy of the respective operator. 

Your personal data is processed for the purpose / legitimate interest of providing you with the Selfie generator function on the basis of Art. 6 para. 1 lit. f GDPR. Alternatively, you may also have given your consent to data processing in the context of the Selfie generator function. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein. Your consent is voluntary and can be withdrawn at any time with effect for the future.

Your photo will be stored for the duration of the editing and then deleted. 

The SalonLap app is primarily aimed at hairdressers. Using this app and a special device, the "Smart Analyzer", they can analyse their customers' hair, plan services together with the customer and create a customer file with a consultation history.  

If you want to use the app, you must first set up a salon account. To do this, we collect certain data from you, such as your name, your contact details and the name of your salon. You can then invite salon employees to use the SalonLab app by entering their name and email address. 

If customers would like to use this service, their hair is measured with the help of the Smart Analyser, e.g. for certain bonds. The results of the measurement are then visualised in the SalonLab app and further information relating to the hair, its care and the services asked for by the customer is requested. Recommendations for suitable products and services are then determined on this basis and displayed in the app. Customers are also shown recommendations for hair care at home. 

Against this background, customers can also create their own account to which the hairdresser can invite them using a QR code. Alternatively, customers can also enter their name and email address in the app. Customers can then use this to access the recommendations and consultation results, including the history. 

A client file is also created for authorised users of the SalonLab app, i.e. the person who created the SalonLab account and the employees registered there, which these people can access in the app. The measurements, analyses, hair and hair care information recorded in the app, as well as the consultations and recommendations described in more detail above, are stored in this client file.  

When you use the app, we automatically collect and store certain information about you. This includes the IP address or device ID assigned to the respective end device, which we require for the transmission of the requested content (in particular content, texts, images and product information as well as files made available for download), your activities within the app, the type of end device and the time of use. 

We process your personal data, the data of your employees who you have invited to the app, as well as the customer data transmitted via the Smart Analyser and entered into the app, e.g. on hair thickness and hair care, in order to make the app and its functions available and to ensure the proper functioning and security of this app. We also process this information to improve the presentation and functionality of the service and for general administrative purposes. 

The processing of personal data concerning you is carried out for the purpose of providing the app on the basis of Art. 6 para. 1 lit. b GDPR. If you use the app to analyse the hair of customers and invite them to the app, we process their data for the legitimate interest of you, the respective customer and us in being able to provide the functionalities of the app on the basis of Art. 6 para. 1 lit. f GDPR. The same applies to the processing of the data of your employees who you invite to use the app. If the invited customers or employees register, we also base the data processing on Art. 6 para. 1 lit. b GDPR. Insofar as we process data relating to you, your customers or employees for our legitimate interest in ensuring and improving the functionality and error-free operation of the app and tailoring it to the needs of users, this is done on the basis of Art. 6 para. 1 lit. f GDPR. 

Unless consent has been given for a longer storage period, e.g. as part of our customer relationship management, we do not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data. 

If you order a product or service via our eShop, we process your master and contact data as well as your payment data in order to be able to deliver the product you have ordered or provide the service you have ordered and at the same time to be able to process the payment you owe for this. Your personal data is processed for the purpose / legitimate interest of fulfilling the contract concluded between you and us and receiving the payment owed for this on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

For payment processing, we integrate payment services from third-party companies on our website. When you make a purchase/order from us, your payment details (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The involvement of the payment service providers is based on Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be withdrawn at any time for the future.

We use the following payment services / payment service providers on this website:

PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

The data transfer to the USA is based on the standard contractual clauses of the EU Commission or approved binding corporate rules. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

For more information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Stripe
The provider for customers within the EU is Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter referred to as "Stripe").

The data transfer to the USA is based on the standard contractual clauses of the EU Commission and the Data Privacy Framework. Details can be found here:

https://stripe.com/de/privacy and

https://stripe.com/de/guides/general-data-protection-regulation.

Further information on this can be found in Stripe's privacy policy at the following link: https://stripe.com/de/privacy.

Sofortüberweisung
The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as "Sofort GmbH"). With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfil our obligations. If you decide in favour of the "Sofortüberweisung" payment method, you transmit the PIN and a valid TAN to Sofort GmbH, with which it can log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, your turnover, the credit limit of the overdraft facility and the existence of other accounts and their balances are also automatically checked. In addition to the PIN and TAN, the payment data you have entered and your personal data are also transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and any other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent attempts at fraud. Details on payment with Sofortüberweisung can be found in the following links:

https://cdn.klarna.com/1.0/shared/content/legal/terms/de/sofort_open_banking  and

https://www.klarna.com/sofort/.

Amazon Pay
The provider of this payment service is Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

Details on how your data is handled can be found in Amazon Pay's privacy policy at the following link:

https://pay.amazon.de/help/201212490?ld=APDELPADirect.

Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter referred to as "Mastercard").

Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA
The provider of this payment service is Visa Europe Management Services Limited, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter referred to as "VISA").

The United Kingdom is considered a safe third country under data protection law. This means that the United Kingdom has a level of data protection that is comparable to the level of data protection in the European Union.

VISA may transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. 

Further information can be found in VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

For members of our website, we offer an online community in which they can provide content and communicate with each other, e.g. in a forum, their profile page and a messaging function, as well as comment on and "like" content.

If you participate in this online community, we process your data in order to make this online community available to you and the other members and to ensure the proper functioning and security of the community. In addition, we also process your data in order to improve our own offering and functions of the community as well as for general administrative tasks. 

The data processed about you in this context includes, in particular, the IP address or device ID of the end device you use, which we need to transmit requested content (e.g. content, texts, images, product information and files made available for download, etc.), the content and data you provide in the community, your user activities in connection with the community, the type of end device in question, the browser type and the date and duration of use.

We disclose your data to external recipients insofar as this is necessary for the above-mentioned purposes. This includes, in particular, other members of the online community. 

Your personal data is processed for the purpose / legitimate interest of providing a secure online community on the basis of Art. 6 para. 1 lit. b or lit. f GDPR and for the purpose / legitimate interest of ensuring and improving the functionality and error-free operation of the website and tailoring it to the needs of users on the basis of Art. 6 para. 1 lit. f GDPR.

Unless you have consented to a longer storage period, e.g. as part of our customer relationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data. 

a) General information
If you give your consent, we will process data about

• your use of this website and the services it contains (in particular frequency, time, interests, interactions with contact forms, campaigns and raffles, visitors to certain areas of the website, information provided by you (e.g. during registration), including your user profile),
• your use of our newsletter and other email advertising,
• your use of our other digital offerings (in particular other websites and apps, including user profiles and information you have provided there, e.g. when registering), 
• publicly accessible information from your social media contributions and
• your interactions with our online advertising 

in each case including usage analysis data about you, which we collect in this context by means of cookies, pixels, browser fingerprints and similar technologies (for this see for this website Section 4, as well as the data protection statements on the digital offerings from us and from Persil Service)

in order to

• send you newsletters and other email advertising with personalised advertising (including personalised surveys and enquiries for market research purposes) for products, services and events from the Schwarzkopf Professional area,
• provide you with a personalised experience on this website and other digital offerings (in particular websites and apps) from us, in particular by displaying personalised content and information,
• display to you personalised advertising (including personalised surveys and enquiries for market research purposes) for products, services and events from the Schwarzkopf Professional area 
  • by letter
  • on websites / digital offerings from us
  • on websites / digital offerings from third parties,
  • and in your social media
• send you individual offers from us, as well as
• generate statistical business reports from the data in anonymised form.

b) Display in social networks

Depending on your consent, personalised advertising may be displayed in the social media of the following providers:

• META Platforms Ireland Ltd (e.g. Facebook, Instagram), Merrion Road, Dublin 4, Ireland
• Google Ireland Ltd (e.g. YouTube), Gordon House, Barrow Street, Dublin 4, Ireland (possibly via the DV360 advertising network operated by the same company)
• TikTok, Technology Limited (Tiktok), 10 Earlsfort Terrace, Dublin, Ireland
• Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
• Amazon EU S.a.r.l., 5, Rue Plaetis, 2338 Luxembourg
• Snap Inc. (Snapchat), represented by Snap B.V., Keizersgracht 165, Amsterdam, The Netherlands

For this purpose, we may provide these providers with your (possibly hashed) email address or another online identifier - in addition to the above-mentioned data for personalisation and data on identified characteristics and interests - in particular in order to recognise you in the respective network. During hashing, the email address is converted into a unique character string, whereby the hashing of your email address always results in the same character string, from which your email address cannot be recalculated.

c) Display of personalised advertising on third-party websites
If you have consented to this, we will display personalised advertising on third-party websites via the advertising network of the provider The Trade Desk (The UK Trade Desk Ltd., 10th Floor, 1 Bartholomew Close, EC1A 7BL London, UK). In order for you to be recognised on third-party websites, we create a special online identifier (EUID) based on your hashed email address in joint controllership within the meaning of Art. 26 GDPR with The Trade Desk or the organisation to which the so-called "EUID framework" used by The Trade Desk is transferred. Further information on data processing in connection with EUID can also be found at the following address: https://www.transparentadvertising.eu/privacy. You can also withdraw your consent to the processing of your EUID via the following portal: https://www.transparentadvertising.eu/. In order to display personalised advertising, we may also transmit the above-mentioned personalisation data and data on identified interests and characteristics to The Trade Desk, which acts as our processor in this respect.

We will also display personalised advertising on third-party websites via Google's DV360 advertising network (Google Ireland Ltd. (e.g. YouTube), Gordon House, Barrow Street, Dublin 4, Ireland) if you have consented to this. In the same way as described above, we may provide the provider with your (possibly hashed) email address or another online identifier in addition to the above-mentioned data for personalisation and data on identified characteristics and interests.

d) Legal basis, withdrawal of your consent and storage period
We base the processing of your personal data in this context on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can withdraw your consent at any time with effect for the future by changing or deleting the respective consent in your user profile or by sending a letter or email to the contact addresses listed above. You can withdraw your consent to receive our newsletter / other email advertising by clicking on the hyperlink to withdraw your consent contained in our newsletter / other email advertising. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We will only process your personal data for the above-mentioned purposes for as long as the consent is valid or as long as it is necessary to fulfil any existing statutory retention obligation.

In case we have obtained your e-mail-address or mobile phone number in connection with the sale of a good or service, we will use it to send you communication (e-mail, SMS, MMS, instant message) in relation to our own similar goods and services provided that you have not objected to such use of your personal data.

You may object to receive such communication at any time with effect for the future, e.g. by sending an e-mail to datenschutz@henkel.com. Objecting does not lead to costs other than transmission costs in accordance with the basic rates.

The legal basis for such processing is the respective provision transposing Art. 13 (2) of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 7 para. 3 of the Law Against Unfair Competition (Gesetz gegen unlauteren Wettbewerb, UWG)  in conjunction with Art. 6 para. 1 lit. f GDPR, because it serves our legitimate interest in carrying out direct advertising.

We also process the data that we collect during our digital interactions with you (in particular in connection with the eShop, the eAcademy, the website and the newsletters) for sales and consulting activities by our sales staff or sales representatives. In particular, we store your master data (such as name and account information), your contact details (e.g. your address), details of your orders and transaction data (such as details of the contracting parties and bank details) in a special database in order to plan, manage and carry out direct sales and marketing measures. This includes, among other things, customer visits by sales staff/sales representatives. We also record these in the database, together with any orders placed in this context and reports on the visit

Your personal data is processed for the purpose / legitimate interest of carrying out sales and consulting activities on the basis of Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR. Alternatively, you may also have given your consent to data processing for the aforementioned purposes. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein. Your consent is voluntary and can be withdrawn at any time with effect for the future. 

Unless you have consented to a longer storage period, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing statutory storage obligation.

For the processing of goodwill services, we share your name and address with our logistics service provider and a shipping company in order to be able to deliver a parcel to you. You also have the option of receiving notifications from the shipping company about the delivery status by providing your e-mail address.

Your data is processed for the purpose / legitimate interest of being able to send you goodwill services on the basis of Art. 6 para. 1 lit. b or lit. f GDPR. You may also have given your consent to receive delivery notifications via your email address. In this case, your email address will be processed on the basis of your consent and for the purposes and to the extent described therein.

We store your data for as long as is necessary to fulfill the aforementioned purposes or for as long as is necessary to fulfill any existing legal obligation to retain data.

This website uses cookies and similar technologies (altogether “cookies”) that are stored on your device for the following purposes: Strictly necessary, Functional, Performance and Personalised marketing. These are explained in more detail below.

You can also find more information on the cookies used by our website, especially on their storage period, or exercise your right to withdraw your consent at any time with effect for the future under “Cookie Settings”. There, please move the respective slider to the left and click on “Accept selected purposes” if you want to withdraw your consent for single purposes or click on “Reject” if you want to withdraw your consent for all those purposes. In this case, only cookies that are technically necessary to provide you with this website will be used.

When using apps, you can usually withdraw your consent at any time in the app's “data protection settings” or otherwise marked areas with effect for the future. As the case may be, you can also adjust the receipt of personalized advertising in the settings of the respective operating system of your end device.

Your consent is set per browser and end device. Therefore, if you visit our website at home and work or with different browsers, you need to withdraw consent with every device or browser.

Henkel involves specialized service providers in processing personal data relating to you for the purposes described below that act as data processors for Henkel in accordance with Art. 28 GDPR or as separate data controllers. The companies that process personal data together with Henkel as joint controllers as per Art. 26 GDPR are listed below. 

Strictly necessary cookies are technically required to enable the use of our website (e.g., for displaying content, load balancing and IT security) and will be used automatically. The legal basis for this is the respective provision transposing Art. 5 (3) sentence 2 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 25 para. 2 no. 2 of the Telecommunications-Telemedia Data Protection Act (Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei digitalen Diensten, TDDDG) and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. b GDPR.

Functional cookies are used to provide you with functionalities which enable you to use our website in a more comfortable and personalised manner, e.g. by saving and analysing your preferences, entries and settings such as language choices. If you do not allow functional cookies, these functionalities may not be provided or may not function properly.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 25 para. 1 of the Telecommunications Digital Services Data Protection Act (TDDDG) and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

Functional cookies are used as part of the following tools. In the respective description, we also inform you how you can withdraw your consent specifically for the respective tool. Your general right to withdraw your consent for a purpose listed in this section or all purposes listed here as described above remains unaffected.

• Adobe Learning Manager (formerly Adobe Captivate Prime)

This website uses Adobe Learning Manager, a learning management system provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland) ("Adobe"), to enable training and personalised learning experiences.

If you have given your consent, two cookies called APRIMEID and primec are stored on your device for this purpose, through which the device can be recognised and users can be authenticated. The purpose of the cookies is to provide users with a seamless learning experience by displaying training content at the point where they previously interrupted the training when they return to the website and to provide other benefits.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookies" under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of Adobe Learning Manager cookies, you can follow this link (https://www.adobe.com/privacy/opt-out.html) and deactivate the collection and use of data (cookies and IP address) by Adobe Learning Manager. For apps, see also section 4.1.

• Amazon Pay

This website uses Amazon Pay, a payment solutions service provided by Amazon Payments Europe, S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg ("Amazon Payments"), which allows visitors to our website to pay using the information stored in their Amazon account.

For this purpose, cookies are stored on your device with your consent. These cookies contain data - such as an identification number, date and time of the server request - to ensure secure and user-friendly use of the Amazon Pay payment option when you visit our website. 

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". For apps, see also section 4.1.

Performance cookies are used to analyse your use of our website in order to measure and improve the performance of our website as well as the usage experience for the users. For this, especially your visits, activities and interactions on our and other websites as well as information about your browser and device are analysed and used to generate pseudonymous statistics. This helps us, for example, to know which pages of our website are the most and least popular and to see how users move around the site as well as to conduct tests and on such basis generate business insights in order to optimise our sales efforts. 

On our websites aimed at business customers, your data may also be used to analyse which company you are working for in order to maintain our information about business entities we may already have a business relationship or that are interested in our products and services. 

Furthermore, your data may also be used and analysed to track your purchases of our products in webshops, especially in order to understand which (groups of) website visitors (1) buy which kind of products and (2) where they are buying them from (i.e. from which e-retailer), as well as to analyse which other retailers and stores were visited.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 25 para. 1 TDDDG and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

Performance cookies are used in context of the following tools. In the respective description, we also inform you about how you can withdraw your consent for the respective tool specifically. Your general right to withdraw consent for one or all purposes in this section described above remains unaffected.

• Bazaarvoice

This website uses Bazaarvoice, a web analysis service provided by Bazaarvoice, Inc. (10901 Stonelake Blvd., Austin, TX 78759, USA) ("Bazaarvoice Inc."), to analyse your use of this website, in particular with regard to any customer reviews you may have submitted.

For this purpose, cookies are stored on your device with your consent. These cookies collect data such as browser and device information, location data, your IP address, user IDs, name, email address, websites visited, date and time of your visit and other clickstream data in order to analyse your use of the website.

Henkel uses the data collected to evaluate any customer reviews you may have submitted, to track and analyse your surfing and clicking behaviour across Henkel websites and third-party websites that are part of the Bazaarvoice network, and to optimise the content of our website and the user experience on this basis. In addition, the cookies stored on your device in this context enable us to better understand the added value of Bazaarvoice services (so-called ROI reporting). The collection of customer information (such as name or email address) enables the creation of user-generated content, but also serves to identify and prevent fraudulent activities and inauthentic content. 

Withdrawal of consent: 
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of Bazaarvoice cookies, you can follow this link (https://www.bazaarvoice.com/legal/privacy-policy/#opting-out) and deactivate the collection and use of data by Bazaarvoice. For apps, see also section 4.1.

• Dynatrace Real User Monitor

This website uses Dynatrace, Real User Monitoring, a service provided by Dynatrace LLC (1601 Trapelo Road, #116, Waltham, MA 02451, USA) ("Dynatrace"), to gain insights into the performance of our web applications and to understand how users use and navigate our web applications.

If you have given your consent, several cookies will be stored on your device. Dynatrace uses cookies to collect various usage data, such as clicks on buttons and links, usage times, JavaScript errors, browser types and the user's geographical region. We use this data to continuously improve the performance of our website and to recognise and rectify functional problems. We have activated IP address anonymisation, i.e. Dynatrace will truncate the last octet of the IP address. In addition, you can activate the "do-not-track" function that may be built into your browser to ensure that no identifying personal data is collected via Dynatrace.

The following cookies are set by Dynatrace with your consent:

• dtCookie - this cookie tracks a visit across multiple requests.

• dtLatC - this cookie measures the server latency for performance monitoring.

• dtPC - this cookie is required to identify the correct endpoints for beacon transmission; contains the session ID for mapping.

• dtSa - this cookie serves as a cache for cross-page actions.

• rxVisitor - this cookie contains the visitor ID for session allocation.

• rxvt - this cookie contains timestamps for session timeouts.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookies" under "Cookie settings". For apps, see also section 4.1.

• Matomo (formerly Piwik)

This website uses services provided by InnoCraft Limited, 7 Waterloo Quay, PO625, 6140 Wellington, New Zealand ("Matomo"; representative in the EU: ePrivacy Holding GmbH, Burchardstraße 14, 20095 Hamburg, Germany) to understand user behaviour on web applications and to measure the performance of our offering.

If you have given your consent, Matomo stores cookies on your device. The cookie "_pk_id.<appID>.<domainHash> " is used to recognise users and store various information (e.g. individual cookie identification number, timestamp of cookie setting, total number of visits, timestamp of current session, timestamp of last session, timestamp of last order). The cookie "_pk_ses.<appID>.<domainHash> " signals the user's active session and does not store any other information. The information as to whether the cookie is present on your device can be used to determine whether you have an active session on our website or whether your last session ended more than 30 minutes ago.  The purpose of using these cookies is to understand user behaviour on our website.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". For apps, see also section 4.1.

Cookies for personalised advertising/marketing may be used by us and our advertising partners stated below, some of whom act as separate controllers or together with us as joint controllers and to whom we may provide information on the status and scope of your consent. These cookies may be used by us and our partners to build a profile of your interests, usage behaviour and characteristics to show you relevant advertisements on our website and other media, such as websites, on social media platforms and in (mobile) applications that all might also be provided by third parties. For this, especially your usage behaviour (also on other websites, social media platforms and apps), including your interactions with content and advertisements, information that you have entered (e.g., in forms and surveys), occupational information about you (that is collected inter alia from LinkedIn) as well as information about your device and your location is analysed. This data may also be used to optimise and measure the success of advertisement campaigns as well as to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Furthermore, this data may be used to determine whether you use different devices and link them with each other, especially to combine the data collected about you via these different devices as well as to display (personalised) advertisement campaigns and measure the success of advertisements across devices.

Your data may also be processed to determine whether other devices may be assigned to your household and in this case be combined with data of members of your household for the purposes described in this section regarding personalised marketing, especially in order to display (personalised) advertising across devices assigned to your household.

If you do not allow cookies for personalised advertising/marketing, you might in particular experience advertising that might be less relevant for you.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 25 para. 1 TDDDG and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

Personalised advertising / marketing cookies are used in context of the following tools. In the respective description, we also inform you about how you can withdraw your consent for the respective tool specifically. Your general right to withdraw consent for one or all purposes in this section described above remains unaffected.

• Adobe Analytics

This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) (“Adobe”) for the purpose of analysing the usage of this website.

For this purpose, cookies are stored on your device with your consent. These cookies contain data such as browser and device information, your IP address, visited websites, and date and time of server request for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider as well as information about the interactions that users had with ads (clicking a text ad or viewing a video ad).

We have implemented Adobe Analytics in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP address is collected and This in any case performed prior to any further processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis.

Henkel will use the data collected to optimise this website and campaigns, retarget and personalise ads. For this purpose, the cookies stored on your device allow you to be retargeted on our as well as third party websites. For this purpose, your browser is identified during advertising delivery and assigned to a target group. This information is used to display relevant and interesting ads to you.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". For apps, see also section 4.1.

• Adobe Experience Platform

This website uses Adobe Experience Data Platform ("AEP"), a service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) ("Adobe"), to create, merge and activate real-time profiles of customers across channels.

For this purpose, a cookie is stored on your device with your consent. This cookie contains data such as browser and device information, your interaction with the website (e.g. adverts and products clicked on), your IP address, websites visited and the date and time of the server request.

With the help of the AEP, we consolidate, synchronize and manage customer data across all digital services and channels in one central location in order to obtain a comprehensive picture of our users. We use various data sources (including those mentioned below) via interfaces. Based on the data collected and managed in the AEP, (user) analyses, customer segmentation, the control of personalization (e.g. on our website or in newsletters) and the targeting of selected customers on digital advertising platforms (e.g. Meta, Google, LinkedIn) are carried out.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of AEP cookies, you can follow this link (https://www.adobe.com/de/privacy/opt-out.html) and deactivate the collection and use of data by Adobe. For apps, see also section 4.1.

• Adobe Target

This website uses Adobe Target, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) ("Adobe") for the purpose of user analysis and A/B testing.

For this purpose, a cookie is stored on your device with your consent. This cookie contains data such as browser and device information, your interaction with the website (e.g. advertisements and products clicked on), your IP address, websites visited and the date and time of the server request in order to evaluate your use of the website, conducting tests of our sites (in particular A/B-testing) and dynamically delivering personalised content when you visit our website.

The information collected by the cookie about your use of our website will be transmitted to and stored by Adobe on our behalf. We have implemented Adobe Target in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP address is collected and in any case performed prior to any further processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but however, you are uncomfortable with the use of Adobe Target cookies, you can follow this link (https://www.adobe.com/privacy/opt-out.html) and deactivate the Adobe collection and use of data. For apps, see also section 4.1.

• Amazon advertising solutions

This website uses Amazon advertising solutions, a service provided by Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg, to track and analyse your use of this website (e.g. your click behaviour with regard to so-called affiliate links).

To this end, cookies are stored on your device with your consent. These cookies contain data such as browser and device information, your IP address, websites visited and the date and time of the server request, in particular to analyse your clicks on Amazon affiliate links that are displayed on our website and lead to an Amazon domain.

Henkel uses the data collected to track and analyse user clicks on Amazon affiliate links in order to be able to assign a potential product purchase on an Amazon domain to a specific visitor to this website. On the other hand, Henkel collects this data for the purpose of retargeting, i.e. to display advertising after a user has visited this website and to optimise and personalise advertisements.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies but do not wish to receive personalised Amazon advertising, you can find information on how to customise your Amazon advertising settings under these links (https://advertising.amazon.com/resources/ad-policy/eu-data-protection-and-privacy and https://www.amazon.de/adprefs/?ref_=a20m_us_fnav_l_adprf_de). For apps, see also section 4.1.

• Criteo

This website uses the "Criteo" service, which is provided to us by Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo SA"), to show visitors of this website customised, interest-based advertisements in the Criteo advertising network.

For this purpose, cookies are stored on your device with your consent. These cookies contain data such as browser and device information, your IP address, cookie ID, Criteo ID, cross-device ID, mobile advertising IDs of your smartphone, browser events (i.e. data relating to your use of our website) and pseudonymised email addresses.

Criteo uses this data to display personalised advertising to users on websites and in mobile apps in the Criteo advertising network (personalised and contextual display advertising). For this purpose, the data is collected, organised and analysed so that Criteo can decide whether or not to display a specific ad to a user on the websites or in the mobile apps of advertisers and publishers (in particular providers of advertising space such as website or app operators). Cookies are also used to measure the success of the adverts displayed in order to (re)decide on the basis of this data which advert is displayed in which case.

In addition, the data collected is used to compare advertising successes (e.g. product purchases by visitors to Henkel websites) with campaign events such as clicks/playouts in order to optimise the respective advertising campaign.

In addition, the data is used to detect fraudulent or manipulative activities, to clarify and resolve technical incidents and to train Criteo's own data models in order to optimise the performance of Criteo advertising activities. Furthermore, the collected data can be used for billing purposes.

We are jointly responsible with Criteo SA for the collection and transmission of data as part of this process within the meaning of Art. 26 GDPR. For this purpose, we have concluded an agreement with Criteo, which you can find here under Section II: https://www.criteo.com/wp-content/uploads/2023/02/Criteo-Data-Protection-Agreement-Feb-23_DE.pdf. The agreement defines the respective roles and responsibilities for the fulfilment of the obligations under the GDPR with regard to joint controllership for processing. Within the framework of joint controllership, we act as the point of contact for the exercise of data subject rights in accordance with Art. 15-20 GDPR. Further details on your rights as a data subject can be found in section 6 of this privacy policy.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of Criteo cookies, you can follow this link (https://www.criteo.com/de/privacy/disable-criteo-services-on-internet-browsers/) and delete all Criteo cookies by clicking on the "Deactivate Criteo services" button. For apps, see also section 4.1.

• Google Ads

This website uses "Google Ads", a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to evaluate the effectiveness of advertising measures and to address you again.

When you visit our website, "Google Ads" stores a cookie on your device with your consent. With this cookie, Google processes the information generated by your device about the use of our website, interactions with our website and advertising measures as well as your IP address, browser information, your previously visited websites and the date and time of access for the purpose of analysing and visualising the reach measurement of our advertising and for displaying personalised advertising. For this purpose, it can also be determined whether different end devices belong to you or your household. With "remarketing", users of our website can be recognised and identified on other websites within the Google advertising network (e.g. in Google search or on YouTube) and advertisements tailored to their interests can be displayed to them.

In connection with Google Ads, we may provide Google with information on the status and scope of your consent.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies but do not wish to receive personalised Google advertising, you can find information on how to customise your advertising settings with Google at these links (https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de and https://support.google.com/ads/answer/7395996). For apps, see also section 4.1.

• Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) ("Google"), to analyse the use of this website.

For this purpose, a cookie is stored on your device with your consent. This cookie collects data such as browser and device information, your IP address, websites visited and the date and time of the server request in order to analyse your use of the website, compile reports on website activity for the website operator and provide the website provider with other services relating to website activity and internet usage. The cookie also collects information about users' interactions with adverts (clicking on a text advert or watching a video advert). In addition, we may provide Google with information on the status and scope of your consent.

Henkel uses the data collected to optimise this website and campaigns, for retargeting (i.e. to display advertising after you have visited our website) and to personalise advertisements. The cookies stored by Google on your device enable retargeting on Google's websites (e.g. as part of "Google Ads") and also (e.g. as part of "Google Campaign Manager 360") on our websites and - depending on your interests - when you visit websites of other partners. For this purpose, your browser is identified when the adverts are displayed and assigned to a target group. This information is used to show you relevant and interesting adverts.

As part of Google Analytics also the Google Signals feature is used. This is data collected by Google when you visit (other) third-party websites and apps, in particular about your use of these websites and apps. For example, your actions such as clicks on advertisements, the purchase of products and parts of a website you have seen can be captured. This data can be assigned to you if you are logged in with your Google account and have allowed personalized advertising. We subsequently receive (aggregated) reports from Google, in particular statistics. This allows us to better assess and predict your behaviour across devices and websites/apps. In particular, we can use this feature to better assign you to a target group and better control campaigns (across devices), especially by means of retargeting described above.

We have implemented Google Analytics in such a way that the last octet (the last part) of your IP address is immediately rendered unrecognisable if the IP address is collected within the EU or the EEA. Only in exceptional cases will the full IP address be sent to Google servers in the USA and shortened there.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating the cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of Google Analytics cookies, you can follow this link (https://tools.google.com/dlpage/gaoptout?hl=en) and download and install a browser plugin to deactivate the collection and use of data (cookies and IP address) by Google Analytics. For apps, see also section 4.1.

• Google Analytics for Firebase

In our mobile apps, we use Google Analytics for Firebase, a service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). This service allows us to record and analyse how you use our apps, e.g. how often you use the app, which pages you access within the app and which functions you use and when, as well as which buttons you click on and which actions you trigger. We may also collect and process information about the device you are using and your browser, your IP address, other websites visited/apps used, interactions with advertisments displayed there and technical information, e.g. about app updates and uninstallations as well as errors/crashes in the app. The information collected may vary depending on the device and environment. In addition, we may provide Google with information on the status and scope of your consent.

For these purposes, a user-resettable identifier provided by the operating system of the end device, namely the advertising ID "AdID" for Android operating systems and "IDFA" for Apple operating systems, is used with your consent. These IDs are used to assign activities to a specific device. 

We collect and analyse this information using Google Analytics for Firebase to detect and resolve technical errors within our app (e.g. to determine why a crash has occurred and how many users are affected), to analyse the use of our app, including its performance, to ensure the stability and performance of the app and to improve the app. We use the integrated tool Firebase Crashlytics for the purpose of error detection and correction.

We also collect and analyse this information for advertising purposes (e.g. to be able to display advertising tailored to users' interests), to plan campaigns, for retargeting (i.e. to display advertising after you have visited our website) and to personalise advertisements in our app and on other websites/apps in order to show you relevant and interesting advertising.

In this context, we also use the Google Signals feature. This is data collected by Google when you visit (other) third-party websites and apps, in particular about your use of these websites and apps. For example, your actions such as clicks on advertisements, the purchase of products and parts of a website you have viewed can be recorded. This data can be assigned to you if you are logged in with your Google account and have allowed personalised advertising. We subsequently receive (aggregated) reports from Google, in particular statistics. This allows us to better assess and predict your behaviour across devices and websites/apps. In particular, we can use this feature to better assign you to a target group and better target campaigns (across devices), especially by means of the retargeting described above.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:
You can withdraw your consent at any time in the "Privacy settings" of the app or otherwise marked areas of the app or the operating system of your end device with effect for the future. You can also adjust the receipt of personalised advertising in the settings of your device's operating system.

• Google Campaign Manager 360 (formerly DoubleClick)

We use Google Campaign Manager 360 (“Campaign Manager”), a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”), to display relevant ads to you.

For this purpose, Google stores a cookie on your device with your consent by using your IP address. In addition to IP address, browser and device information, visited websites and time of access, this cookie also collects information about the advertising shown in your browser and which advertisements you click. This allows Google and its partner sites to display interest-related ads based on the previous visits of Henkel-pages or other websites. The Campaign Manager cookies utilize a pseudonymous identification number assigned to your browser to check the on-screen and appealing ads. For this purpose, your browser is identified when ads are served, and assigned to a target group. The cookies stored on your device by Google thus allow you to be retargeted on the one hand (e.g. within the scope of “Google Ads”) on Google's websites and on the other hand (e.g. within the scope of “Google Campaign Manager 360”) on our websites and – depending on your interests – when you visit websites of other partners.

This information will also be used for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Within Campaign Manager, we use the conversion tracking system “Floodlight” in order to monitor and report on conversions after users interact with one of our Google display or search ads. To do this, Google installs a cookie on your device. Floodlight tracks user activity on our or a third-party website after the user has clicked a Google ad and recognises or re-identifies users by means of their User ID. This information can be used by Floodlight for conversion attribution. Floodlight also counts cross-environment conversions (e.g. user clicks a paid search ad on a mobile device but converts from a desktop computer) using – according to Google – various sources of aggregated and anonymized data. 

In connection with the Campaign Manager, we can provide Google with information on the status and scope of your consent.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings”. If you agree to the use of cookies in general, but however, you are uncomfortable with the use of Google Campaign cookies, you can follow this link (www.google.com/settings/ads/onweb) to deactivate the Campaign Manager service by Google. For apps, see also section 4.1.

• Google Display & Video 360

We use Google Display & Video 360 ("DV360"), a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 ("Google"), to measure the effectiveness of our advertising campaigns, manage and optimise them across platforms and to show you the most relevant ads possible via various channels of the Google advertising network. 

For this purpose, Google stores cookies on your device with your consent. In addition to IP address, cookie ID, advertising ID, browser and device information, websites visited and time of access, these cookies also collect information about your surfing and clicking behaviour (including so-called conversions), the advertisements displayed in your browser and which advertisements you click on. This enables Google and its partner websites to display personalised advertising to users based on previous visits by these users (from Henkel pages or other websites) and their interests. In addition, users can be targeted again with adverts based on the data collected in the Google advertising network after they have visited this website or interacted with our adverts (retargeting). The cookie ID is also used to record which adverts are shown in which browser; this prevents users from being shown the same advert too often.

The information collected is also used to analyze your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. In addition, the data collected enables us to measure the effectiveness of our advertising campaigns, to manage them across platforms (i.e. across the various advertising platforms of the Google advertising network such as YouTube) and to optimise them.

In connection with DV360, we may provide Google with information on the status and scope of your consent.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but are uncomfortable with the use of DV360 cookies, you can follow this link (https://adssettings.google.com/anonymous?hl=de) to disable Google's DV360 service. For apps, see also section 4.1.

• Mapp Intelligence (formerly Webtrekk)

We use a service provided by Mapp Digital Germany GmbH (Sandstr. 3, 80335 Munich, Germany) to collect and analyse usage data on websites and in mobile apps for marketing and optimisation purposes.

For this purpose, cookies are stored on your device or similar technologies are used with your consent to collect data on your use of our offerings, such as data on the browser and device you use to access our offerings, as well as activity data. Activity data includes both information about your use of our offerings and your interaction with our content outside of our websites and apps. Activity data in connection with the use of our offerings relates, for example, to which pages you have accessed and whether you have made use of a download function. Activity data outside of our offerings relates in particular to whether you have viewed or clicked on our advertising material, advertisements or other content on external platforms or in emails. The purpose of collecting and analysing this information is to be able to track the behaviour of our users across websites and apps and to measure and optimise the effectiveness of our marketing measures.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating the cookies on our website under "Cookies" under "Cookie settings" or by following this link: https://mapp.com/opt-out-mapp/ to install the opt-out cookie for Mapps). For apps, see also section 4.1.

• Meta Conversion API

We use the Meta Conversion API, a service provided to us by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) ("Meta"). This tool enables us to analyze and personalise our ads based on your use of our website in order to present you with ads that are specifically tailored to you.

For this purpose, data such as your IP address, browser information, surfing and clicking behaviour on our websites (including so-called conversions), hashed identifiers such as e-mail address, telephone number or name, "Facebook ID" or user ID as well as the date and time of the server request are recorded by our server with your consent (and possibly with the inclusion of cookies) and then forwarded to the meta-systems and servers (so-called server-side tracking).

The data collected is used to optimise campaigns and create custom audiences, which are groups of Facebook and Instagram users based on that data collected, to target ad campaigns on Facebook and Instagram (Facebook and Instagram Ads). For this purpose, it can also be determined whether different end devices belong to you or your household.

Insofar as data on your usage of our website is collected, personalised ad campaigns are optimised and custom audiences are created, we act as joint controller in accordance with Art. 26 GDPR together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. About this we have entered into an agreement with Meta which can be found here: https://www.facebook.com/legal/controller_addendum (“Controller Addendum”). The agreement determines the respective roles and responsibilities for fulfilling the obligation under the GDPR with regard to joint controllership.

The required information as per Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Meta’s privacy policy here: https://www.facebook.com/privacy/policy. In the section "What information do we collect?" / "Information from partners, providers and other third parties", Meta refers to the Controller Addendum (see above).

We have agreed with Meta that Meta is the contact point for the exercise of data subject rights pursuant to Articles 15-20 of the GDPR with regard to the processing activities in joint controllership.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". You can customise your advertising preferences by changing your browser settings or your Facebook settings if you do not wish to receive interest-based advertising on Facebook (https://de-de.facebook.com/help/windows/568137493302217). For apps, see also section 4.1.

• Meta Pixel

We use the Meta Pixel, which is provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) ("Meta"). With your consent, this tool enables us to analyze and personalise our ads based on your use of our website in order to provide you with ads that are tailored specifically to you. For this purpose, the Meta Pixel collects your IP address, browser information, the visits and actions you take on our websites, the "Facebook ID" or user ID and the date and time of the server request.

The data collected is used to optimise campaigns and to create individual target groups, i.e. groups of Facebook and Instagram users based on the data collected, for targeted advertising campaigns on Facebook and Instagram (Facebook and Instagram Ads). For this purpose, it can also be determined whether different end devices belong to you or your household.

Insofar as data about your use of our website is collected, personalised advertising campaigns are optimised and target groups are created, we act together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as joint controllers in accordance with Art. 26 GDPR. We have concluded an agreement with Meta on this, which you can find here: https://www.facebook.com/legal/controller_addendum ("Controller Addendum"). The agreement defines the respective tasks and responsibilities for fulfilling the obligations under the GDPR with regard to joint controllership.

The information required pursuant to Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Meta's privacy policy here: https://de-de.facebook.com/privacy/policy. In the section "What information do we collect?" / "Information from partners, providers and other third parties", Meta refers to the Controller Addendum (see above).

We have agreed with Meta that Meta is the point of contact for the exercise of data subject rights under Art. 15-20 GDPR in relation to processing activities under joint controllership.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". You can customise your advertising preferences by changing your browser settings or your Facebook settings if you do not wish to receive interest-based advertising on Facebook (https://de-de.facebook.com/help/windows/568137493302217). For apps, see also section 4.1.

• Pinterest Pixel

This website uses the conversion tracking technology of the social network “Pinterest” (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) in order to display relevant advertisements and offers on Pinterest to visitors to this website who have already taken an interest in our website and content/offers or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) and are Pinterest members, with their consent

For this purpose, a so-called conversion tracking pixel from Pinterest is integrated on our websites. With your consent, the pixel generates a cookie that stores your IP address, browser and device information, the visits and actions you perform on our websites, as well as the date and time of the server request.

With the Pinterest cookie, Pinterest can determine the visitors to our website as a target group for the display of advertisements (so-called "Pinterest ads"). If, for example, you have shown interest in our products on our website, you can be shown an ad for our products on Pinterest. With the Pinterest cookie, we can also track the effectiveness of the Pinterest ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Pinterest ad (so-called "conversion").

Insofar as we and Pinterest collect and share so-called “Activity Data” (such as offline sales measurement or a mobile measurement partner integration), we and Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) act as joint controllers in accordance with Art. 26 GDPR. In this respect, we have entered into an agreement with Pinterest which can be found here under “Exhibit B”: https://business.pinterest.com/en-gb/pinterest-advertising-services-agreement/germany/ (“JCA”). The agreement determines the respective roles and responsibilities for fulfilling the obligations under the GDPR with regard to joint controllership.

The required information as per Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Pinterest’s privacy policy here: https://policy.pinterest.com/en-gb/privacy-policy.

We have agreed with Pinterest that Pinterest is acting as contact point for the exercise of data subject rights pursuant to Articles 15-20 of the GDPR with regard to the processing activities in joint controllership.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". You can adjust your ad preferences by changing your browser settings or your Pinterest settings if you do not want to receive interest-based ads on Pinterest (https://help.pinterest.com/en/article/personalised-ads-on-pinterest). For apps, see also section 4.1.

• Snapchat Advertising

This website uses Snapchat Advertising, a service provided by Snap Inc. (2772 Donald Douglas Loop, North Santa Monica, CA 90405, USA), to display relevant advertising and offers on the social network "Snapchat" to visitors to this website who have already shown an interest in our website and content/offers or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) and are Snapchat members, with their consent.

For this purpose, cookies are stored on your device with your consent. These cookies contain data such as browser and device information, your IP address, cookie ID, mobile ad ID, websites visited, date and time of the server request, possibly your e-mail address and telephone number as well as your surfing and clicking behaviour (e.g. subpages accessed, completed product purchases, etc.).

With the help of these cookies or the information collected about them, Snapchat can determine the visitors to our website as a target group for the display of adverts (so-called "Snapchat ad") and show them interest-based Snapchat adverts ("retargeting"). For example, if you have shown interest in our products on our website, you may be shown an advert for our products on Snapchat. Snapchat cookies also allow us to track the effectiveness of the Snapchat ad for statistical and market research purposes by determining whether users were redirected to our website after clicking on a Snapchat ad (so-called "conversion").

In addition, third-party advertising partners of Snapchat such as Facebook or Bing (list can be viewed here) can use these cookies to create a profile of your interests and show you relevant adverts on other sites.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but you are uncomfortable with the use of Snapchat cookies, you can follow this link (https://www.snapchat.com/cookie-settings) and deactivate the collection and use of data by Snapchat under the "Marketing" section. For apps, see also section 4.1.

• Squarelovin

This website uses Squarelovin, a service provided by Anchor Media GmbH (Budapester Str. 47, 20359 Hamburg, Germany), to carry out marketing measures in social media.

This website offers the function of displaying content provided by social media users with their consent. For the purpose of displaying this content, cookies are stored on your device with your consent, which store functional information such as your language setting, the last stream loaded and the last stream viewed. In addition, cookies are used to collect and store information about your use of our offerings, such as your IP address, which products you have viewed or purchased and details of purchases. We use this information for analysis and statistical purposes in connection with our marketing measures. 

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookies" under "Cookie settings". For apps, see also section 4.1.

• Ströer Precision X

If you have given your consent, this website collects and stores data for marketing and optimization purposes using the technology of Ströer Precision X GmbH, Von-Werth-Str. 9-13, 50670 Cologne ("Ströer").

For this purpose, cookies are stored on your device with your consent. These cookies contain data such as browser and device information, your IP address, websites or apps visited and the date and time and approximate location of access. This data is stored and processed in anonymous or pseudonymous profiles (depending on the technology used and the service concerned). In addition to the data stored when you access the website (as set out above), this also concerns data about the website from which you access our website, the websites you visit while accessing our website and, if applicable, search terms you have used to find our website.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating the cookies on our website under "Cookie settings". For apps, see also section 4.1.

• The Trade Desk

This website uses the service "The Trade Desk" ("TTD"), which is provided to us by The UK Trade Desk Ltd (10th Floor, 1 Bartholomew close, EC1A 7BL London, UK), in order to display the most relevant ads possible to you via various channels of the TTD advertising network with your consent, to optimise our advertising campaigns across various channels and to measure their effectiveness.

For this purpose, cookies are installed on your device with your consent. These cookies contain data such as browser and device information, IP address, device ID, cookie ID, advertising ID, hashed e-mail addresses, websites visited and access times, surfing and clicking behaviour (including so-called conversions), location information, the advertisements displayed in your browser or on your device and which advertisements you click on. This enables TTD and its partner websites to display personalised advertising to users based on previous visits by these users (from Henkel pages or other websites) and their interests. In addition, users can be targeted again with adverts based on the data collected in the TTD advertising network after they have visited this website or interacted with our adverts (so-called retargeting). This data is also used to record which adverts were displayed where and when.

TTD can also use the data to combine IDs that are related to each other (e.g. same user, household, etc.) across devices in order to better personalise and measure advertising campaigns and to properly limit the number of repeated adverts for the same person or household.

The information collected is also used to track your interactions with advertisements and subsequent surfing and clicking behaviour, including certain successes (e.g. clicking on an advertisement, redirection to a Henkel product page and subsequent purchase of this product from Henkel) and to assign it to a person or ID in order to measure the effectiveness of our advertising campaigns, manage and optimise them across channels (i.e. across the various channels of the TTD advertising network such as websites, apps, audio, smart TVs and other video formats).

The data is also used to recognise and prevent fraudulent or otherwise illegal/malicious activities (e.g. infiltration of malware or harmful bots to collect advertising money for ads that are not shown to "real" users).

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of TTD cookies, you can deactivate them at the following link: https://www.adsrvr.org/. For apps, see also section 4.1.

• TikTok Pixel

This website uses the "TikTok Pixel" of the social network "TikTok" (TikTok Technology Limited, 10 Earlsfort Terrace, Co. Dublin, Ireland and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom) to show visitors to this website, with their consent, customised, interest-based advertisements on TikTok.

For this purpose, cookies are installed on your device with your consent. These cookies contain data such as browser and device information, your IP address, cookie ID, mobile ad ID, so-called "matched IDs", websites visited, date and time of the server request, possibly your e-mail address and your surfing and clicking behaviour or corresponding so-called "user events" (e.g. subpages accessed, completed product purchases, etc.).

TikTok uses this data to display targeted and personalised advertising on TikTok to users who also have a TikTok profile and to create interest-based user profiles. The collected data is also used to optimise advertising campaigns on TikTok and to create so-called audience groups, in which TikTok user groups with similar characteristics are combined. The data collected is also used to measure the performance and impact of advertising campaigns on TikTok and to visualise them in insight reports. The data is also used to ensure the security of

TikTok services, to detect and prevent fraudulent (or otherwise illegal/malicious) activities and to further develop and optimise TikTok products and services.

TikTok uses so-called "matched IDs" to be able to assign visitors to our website and their surfing behaviour to a user account on TikTok.

We are jointly responsible with TikTok Technology Limited Ireland and TikTok Information Technologies UK Limited for the collection and transmission of data as part of this process for the following purposes within the meaning of Art. 26 GDPR: Collection and transmission of usage or event data and developer data as well as performance measurement and insight reporting (however, the following processing purposes are not subject to joint controllership: the creation of audience groups, targeting, optimisation and personalisation of ads).

For this purpose, we have concluded an agreement with TikTok, which you can find here under "Part B, Section 3": https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms. The agreement sets out the respective roles and responsibilities for the fulfilment of the obligations under the GDPR in relation to joint controllership for processing.

The required information pursuant to Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in TikTok's privacy policy here: https://www.tiktok.com/legal/page/eea/privacy-policy/de.    

We have agreed with TikTok that TikTok will act as the point of contact for the exercise of data subject rights under Art. 15-20 GDPR in relation to the processing activities under joint controllership.

Withdrawal of consent:
You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of TikTok cookies, you can follow this link (https://www.tiktok.com/legal/page/global/cookie-policy/de) and the steps described in section 4 to prevent the display of personalised advertising on Tiktok, for example. For apps, see also section 4.1.

Social media content management services are embedded on our websites, in particular by means of plug-ins from various social media networks. The associated services are provided by the respective companies (“providers”). Purpose of these services are to enable you to view and share our content with your friends and professional networks. These providers are:

• Facebook is within the EU operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). For an overview of the Facebook plug-ins and their appearance, go to: https://developers.facebook.com/docs/plugins

• X is operated by X Corp., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“X”). For an overview of the X-buttons and their appearance, go to: https://developer.x.com/en/docs/twitter-for-websites

• YouTube is within the EU provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For an overview of the YouTube plugins, go to: https://developers.google.com/youtube/documentation 
• Instagram is within the EU provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland („Instagram“). For an overview of the Instagram plug-ins and their appearance, go to: https://developers.facebook.com/docs/instagram

• LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For an overview of the LinkedIn plug-ins and their appearance, go to: https://developer.linkedin.com/plugins#

To increase the protection afforded to your data when you visit our web pages, these plug-ins are implemented as “2-click buttons.” This form of integration ensures that, when accessing a page from within our website containing such plug-ins, you are not automatically connected to the providers’ servers. Only if you activate the plug-ins the browser will initiate a data transmission to the providers’ servers. The content of the various plug-ins is then transmitted by the provider concerned directly to your browser and then displayed on your screen.

The social media tool tells the provider your previously visited websites, your IP address, browser information, and the date and time of the server request. On making use of any of the social media functions (e.g. clicking the “Share” button, leaving a comment), also this information will be transmitted by the browser directly to the provider for retention. Those providers may use your data for any own purposes as for analytics, marketing, profiling and linking your data to other data collected about you (such as through your user account with the respective provider) even if you are not logged in to your social media account.

Please note: The providers may process the data partly also in countries outside of the EU/EEA not providing for an adequate level of data protection including the US if the provider is not a participant of the EU-U.S. Data Privacy Framework.

We base such processing and use of your data (if applicable, also including any direct transfer from Henkel to providers located outside of the EU/EEA) on Art. 6 para. 1 lit. b or f GDPR as it is required to provide this functionality to you once you decide to interact with a social media plugin implemented on this website.

Further information on the collection and use of data by the providers, in particular also with regard to measures implemented by the providers regarding the transfer of personal data outside of the EU/EEA, and on the rights and possibilities available to you for protecting your privacy in these circumstances can be found in the providers’ data protection/privacy policies:

• Data protection/privacy policy issued by Facebook: http://www.facebook.com/policy.php
• Data protection/privacy policy issued by X: https://x.com/en/privacy
• Data protection/privacy policy issued by Google: https://policies.google.com/privacy
• Data protection/privacy policy issued by Instagram: https://help.instagram.com/155833707900388/
• Data protection/privacy policy issued by LinkedIn: https://www.linkedin.com/legal/privacy-policy

Insofar as this is necessary in individual cases, we will also process the data about you stated in this data protection statement in order to etablish and exercise legal claims, to defend ourselves against legal claims and insofar as this is necessary in connection with corporate transactions, e.g. if parts of the company are to be sold. Processing for these purposes / legitimate interests is carried out on the basis of Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f GDPR.

Unless you have consented to a longer storage period, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data. 

At any time, you may assert the right to access your data. Additionally, provided that the respective requirements are met, you may assert the following rights:

• Right to rectification: You have the right to have false personal data concerning you corrected.
• Right to erasure: You may also request the deletion of your personal data, for example if your data are no longer required for the purposes for which they were collected or otherwise processed.
• Right to restriction of processing: You also have the right to request that the processing of your personal data be restricted; in such a case, the data will be blocked for any processing. This right exists in particular if the accuracy of the personal data between you and us is debated.
• Right to lodge a complaint with a data protection supervisory authority: You also have the right to file a complaint at any time with a supervisory authority, in particular a supervisory authority in the Member State where you are staying, working or the place of alleged infringement, if you believe that the processing of personal data concerning you is in violation of applicable data protection laws.
• Right to data portability: If we process your personal data to fulfil a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, provided and to the ex-tent that you have made the data available to us.
• Right to withdraw consent: if you have provided consent to us to process your personal data, you have the right to withdraw any such consent with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object
In case of processing activities involving your personal data that are carried out on basis of a legitimate interest of Henkel or a third party, you have the right to object against such processing of your personal data at any time for reasons resulting from your specific situation. Henkel will stop that processing unless Henkel can prove important reasons for the processing which deserve protection which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend against legal claims.

In addition, you have the right to object at any time to the processing of personal data concerning you for the purpose of direct marketing in accordance with Art. 21 para. 2 GDPR.

In these cases, or if you have any other questions (e.g. on agreements on data processing under joint controllership with other companies) or wishes in connection with regard to your personal data, please send an e-mail or a letter using the contact details provided above.

After answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.

You can contact our Data Protection Officer by post at Data Protection Officer, Henkel AG & Co. KGaA, Henkelstrasse 67, 40191 Düsseldorf, Germany or by e-mail at Datenschutz@henkel.com.