Version 8.0, March 2023
Essity AB and its subsidiaries and affiliates (collectively “Essity” or "we" or "us") are committed to respect your information and takes data privacy seriously. This Privacy Policy describes how Essity collect, use, disclose, store, and otherwise process information that you provide to us through our websites.
THIS GENERAL PRIVACY POLICY SHOULD BE READ IN CONJUNCTION WITH OUR SUPPLEMENTARY PRIVACY POLICY.
1. Categories of personal data and processing purposes
If you order a product via our website or app, Essity collects and processes the following personal data about you: Your account data, type and amount of product, purchase price, order date, order status, product returns, customer care requests. Essity processes such personal data for purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing, and exercising legal claims, and tailored marketing.
2. Third Parties
- Transfer to service providers
Essity may engage external service providers, who act as a data processor of Essity, to provide certain services to Essity, such as website service providers, marketing service providers or IT support service providers. When providing such services, the external service providers may have access to and/or may process your personal data. We request those external service providers to implement and apply security safeguards to ensure the privacy and security of your personal data.
- Other recipients
Essity may transfer - in compliance with applicable data protection law - personal data to law enforcement agencies, governmental authorities, legal counsel, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to the third parties being involve in the merger or acquisition.
- International transfers of Personal Data
The Personal Data that we collect or receive about you may be transferred to and processed by recipients, including agents in the same company group, which are located abroad, including inside or outside the European Economic Area ("EEA"). The countries include those which provide an adequate level of data protection from a European data protection law perspective or the applicable local law perspective. Essity will take all necessary measures to ensure that transfers out of the EEA, or out of other original territories, are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority, approved code of conducts together with binding and enforceable commitments of the recipient, other local legislation transfer mechanisms such as specific contractual clauses and binding corporate rules, or approved certification mechanisms together with binding and enforceable commitments of the recipient. You can ask for a copy of such appropriate safeguards by contacting us as set out in Sec. 9 (Contact us) below.
3. Legal basis for the processing
- You have given your consent to the processing of your data for one or more specific purposes.
- The processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract.
- The processing is necessary for compliance with a legal obligation to which we are subject to.
- The processing is necessary to protect your vital interests of you or of another natural person.
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
- The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of personal data, in particular if you are a child.
- Other applicable legal basis for data processing, especially provisions set out by member state law.
- You have given your explicit consent to the processing of your sensitive personal data for one or more specific purposes.
- The processing is necessary for the purposes of carrying out the obligations and exercising specific rights of Essity or of the data subject in the field of employment and social security and social protection law.
- The processing relates to personal data which are manifestly made public by the data subject.
- The processing is necessary for the establishment, exercise, or defense of legal claims or whenever courts are acting in their judicial capacity.
- The processing is needed for the compliance with legal obligations.
4. What rights do you have and how can you assert your rights?
5. Cookies and other tracking technologies
This website or app uses cookies. To improve your use and experience of the website or app, we work with partners for advertising on social networks. We also work for online advertising networks such as Google Ads and Google Analytics.
Analytics cookies allow us to analyze our performance to offer you a better online experience and evaluate the efficiency of our campaigns. Personalization cookies give you access to a customized experience of our website with usage-based offers and support. Advertising cookies are placed by third-party companies processing your data to create audiences lists to deliver targeted ads on social media and the internet. These cookies and tracking technologies are only used with your consent. You may freely give, refuse, or withdraw your consent at any time.
For further information please visit our Cookie Policy.
6. How long do we keep your Personal Data?
Your personal data will be retained as long as necessary to provide you with the services and products requested. Once our relationship has come to an end, we will either delete your personal data or anonymize your personal data, unless statutory retention requirements apply (such as for taxation purposes). We may retain your contact details and interests in our products or services for a long period of time if Essity is allowed to send you marketing materials. Also, we may be required by applicable law to retain certain of your personal data for a period of 10 years after the relevant taxation year. We may also retain your personal data after the termination of the contractual relationship if your personal data are necessary to comply with other applicable laws or if we need your personal data to establish, exercise or defend a legal claim, on a need-to-know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
7. Additional information for consumers in the United States
Consumers who reside in US states with dedicated state data protection laws (the “Supplemental States”) are also subject to Essity Supplemental State Privacy Policy, which can be accessed here.
8. Updates to our Privacy Policy:
We may need to update our Privacy Policy. The latest version of our Privacy Policy is always available on our website.