UK Essity Ltd and BSN Medical Colombia (“Essity”, “we” or “us”) take data privacy seriously. This Privacy Policy describes how Essity, as controller within the meaning of the UK General Data Protection Regulation (“GDPR”), collects and processes the personal data and other information when you engage with the Issviva brand.
This Privacy Policy applies when you visit the Issviva website and app, when you purchase Issviva products and services and/or when you engage with the Issviva brand (such as when taking part in consumer engagement surveys).
TABLE OF CONTENTS
1. Personal data we collect
2. Why we process your personal data and our lawful basis for processing
3. Who we share your personal data with
4. International transfers of personal data
5. What rights do you have and how can you assert your rights?
6. Cookies and other tracking technologies
7. How long do we keep your personal data?
8. Contact us
1. Personal data we collect
Information you provide us
Account. If you create an account on/in our website or app, you may be asked to provide personal data about you, for example: name, postal address, email address, selected password, telephone number, bank account details, credit card details, invoicing and delivery address, interests in certain products/services (voluntary), request to receive marketing emails (voluntary).
Product Orders. If you order a product via our website or app, Essity collects and processes the following personal data about you: Your account data, type and amount of product, purchase price, order date, order status, product returns, and customer care requests.
Consumer Engagement Surveys. If you participate in one our consumer engagement surveys (for example, if you take part in the Issviva Community to help build a better menopause experience), you may be asked to provide personal data about you, for example: name, email address, response to survey questions (such as your experience with Issviva products and services). As part of these consumer engagement surveys, you may either provide information via a survey form or during a phone or in-person interview. As part of our consumer engagement surveys, you may also agree to test product samples, in which case we will also collect your postal address for the purposes of sending you the product samples.
Customer Support / Communications. If you contact us for customer support or otherwise communicate with us, you may provide us with personal data about you, for example: name, contact details (email address, postal address, phone number), and any other information relevant to your query (such as product / order information).
Sweepstakes. If you participate in a sweepstake, Essity collects and processes the following personal data about you: name, postal address, email address, date of entry, selection as winner, prize, answer to quiz.
Information we automatically collect
Referral page, data and time of access, data volume transmitted, status of transmission, type of web browser, IP-address, operating system and interface, language, and version of browser software.
Your IP-address will be used to enable your access to our website or app. Once the IP-address is no longer necessary for this purpose, we will shorten your IP-address by removing the last octet of your IP-address. The metadata, including the shortened IP-address will be used to improve the quality and services of our website or app by analysing the usage behaviour of our users.
Information we collect from third parties
Third party partners. Where we work with third party partners, we receive your personal data from those third parties. For example, we work with Facebook for the purposes of running our consumer engagement surveys on the Facebook platform. Where you engage with our consumer engagement surveys on Facebook’s platform, Facebook will share with us your personal data, including your name, contact details and survey responses. For more information about how Facebook processes your personal data, please see Facebook’s own privacy policy.
Special categories of personal data
Health data. Given the nature of our products and services we may collect information about your health for the purposes of providing you with our products and services, providing customer care services, as well as when you engage in our consumer engagement surveys. For example, you may provide us with information about your health condition / symptoms and any adverse side effects when using our products. Health data is special category personal data within the meaning of the GDPR and Essity takes all necessary steps to protect such data as legally required.
2. Why we process your personal data and our lawful basis for processing
|
Purpose for processing |
Description of processing |
Lawful basis for processing |
|
For the purposes of providing you with our products and services |
Account set up. Essity processes your personal data, such as name, email address and password, for the purposes of setting up your account on the Essity website and/or app. |
Necessary to perform our contract with you. |
|
Delivering our website and app. Essity processes your personal data for the purposes of providing you with our website and app. |
Necessary to perform our contract with you. |
|
|
Product orders. Essity processes your personal data, such as name, email address, postal address, and product order information for the purposes of fulfilling your order requests. |
Necessary to perform our contract with you. |
|
|
Customer support. Essity processing your personal data, such as name, contact details and information relevant to your query, for the purposes of responding to customer support queries and other communications from you. |
Necessary to perform our contract with you and where necessary for our legitimate interests in responding to your communications. |
|
|
Sweepstakes. Essity processes your personal data, such as name, postal address, email address, date of entry, selection as winner, prize, answer to quiz., for the purposes of carrying out the sweepstake, informing the winner, delivering the price to the winner, carrying out the event, and marketing. |
Necessary to perform our contract with you. |
|
|
For the purposes of maintaining the security and integrity of our systems and services |
Security. It is in our legitimate business interests to process your personal data for the purpose of ensuring the security and integrity of our systems and services (including our website and app). |
Our legitimate interests in ensuring the security and integrity of our systems and to protect your personal data. |
|
For marketing purposes |
Sending you marketing communications. Essity processes your name, email address and marketing preferences for the purposes of sending you marketing emails promoting Essity’s products and services. With your consent, Essity also processes your health data for the purposes of tailoring our marketing communications to you. |
Our legitimate interest or, where required by applicable law, with your consent. Where we process your health data for tailoring marketing communications, we rely on your explicit consent. |
|
Sharing your details with Essity Group Companies for marketing purposes. Where you have consented, Essity may share your name, email and marketing preferences with other Essity Group Companies for the purposes of sending you email marketing about other Essity brands. (See also “Who we share your personal data with” below.) |
Your consent |
|
|
For the purposes of improving our products and services |
Consumer Engagement Surveys. Where you participate in one our consumer engagement surveys, Essity processes your name, email address, response to survey questions for the purposes of gathering feedback on its products and services and for developing improvements. As part of these surveys, we also process your data, such as address, for the purposes of providing you with product samples for the same purposes. Given the nature of Essity’s products, some of our surveys may ask for your health data, also for the purposes of better understanding the impact of menopause on our customers and for improving our products and services. Your responses to these questions are entirely voluntary and you do not have to take part. |
Our legitimate interests in better understanding the consumer market in which we operate, and to improve our products and services. Where we process your health data for these purposes, we rely on your explicit consent. |
|
Improving our website and apps. When using our website and app we collect your usage data for the purposes of understanding how you interact with our products and services and to improve our products and services. (See also “Information we collect automatically” above.) |
Our legitimate interests in improving our products and services for customers. |
|
|
For the purposes of complying with our legal obligations |
Legal obligations – such as corporate and tax requirements. In certain circumstances we are required by law to process and retain your personal data for the purposes of complying with our legal obligations. |
Legal obligation |
|
Disclosure to regulatory authorities. In certain circumstances we disclose your personal data, including health data, to regulatory authorities where required by law. |
Legal obligation |
|
|
For the establishment, exercise or defence of legal claims |
Legal claims. Essity retains your personal data, such as name, contact details, and historic order information, for the purposes of establishing, exercising or defending against legal claims. We may also share your personal data with third parties, such as external legal advisors, consultants, or government authorities and courts, for the same purposes. |
Our legitimate interests in establishing, exercising or defending against legal claims. Where we process your health data for these purposes, we rely on necessary for the establishment, exercise or defence of legal claims. |
In certain circumstances, the provision of your personal data is required by a statutory or contractual obligation or is necessary to enter into a contract with us or to receive our services/products as requested by you. Please note that in these circumstances, failing to provide your personal data may result in disadvantages for you, e.g. you may not be able to receive certain products and services.
3. Who we share your personal data with
We share your personal data with the following third parties:
Other Essity Group Companies. Where necessary for the purposes of providing our products and services, we may share your personal data with our other Essity group companies. Where you have consented, we share your personal data with other Essity Group Companies dealing with other Essity brands for marketing purposes. For a full list of Essity Group Companies, please see here. And for a full list of Essity Group brands click here.
Third party service providers. Essity engages external service providers to provide certain services to Essity. When providing such services, the external service providers may have access to and/or may process your personal data. We request those external service providers to implement and apply security safeguards to ensure the privacy and security of your personal data. Third party service providers include:
- Website service providers, marketing service providers or IT support service providers, who act as processor’s on our behalf.
- Third party agencies that assist with our consumer engagement surveys, for example, to conduct consumer interviews.
- Payment providers, to the extent our services require payment, your payment information are processed directly by our third party payment processors.
External advisors. Essity may transfer your personal data to external advisors, such as legal counsel or external consultants. For example, for the purposes of establishing, exercising and defending legal claims.
Law enforcement / government agencies. Essity may transfer – in compliance with applicable data protection law – personal data to law enforcement agencies, governmental authorities. For example, where required by law.
Business sale or merger. In case of a corporate merger or acquisition, personal data may be transferred to the third parties involved in the merger or acquisition.
4. International transfers of Personal Data
Your personal data will be processed by UK Essity Ltd and BSN Medical Limitada. One of the controllers (BSN Medical Limitada) is based in Colombia, meaning that when we collect or receive your personal data it will be transferred to and processed by us outside of the United Kingdom. Essity processes your personal data in compliance with UK data protection law.
In addition, the personal data that we collect or receive about you may be transferred to and processed by other recipients which are located in countries outside of the United Kingdom that do not provide an equivalent level of protection for your personal data. Where this is the case, we will put in place appropriate safeguards, such as standard data protection clauses adopted by the UK government. You can ask for a copy of such appropriate safeguards by contacting us as set out in “Sec. 8 (Contact us)” below.
5. What rights do you have and how can you assert your rights?
Under applicable data protection law, you may be entitled to certain rights. In particular, you may have the right (i) to request access to your personal data, (ii) to request rectification of your personal data, (iii) to request erasure of your personal data, (iv) to request restriction of processing of your personal data, (v) to request data portability, (vi) to object to the processing of your personal Data (including objection to profiling), and (vii) to object to automated decision making (including profiling).
Where the lawful basis for our processing of your personal data is your consent, you can revoke this consent at any time with future effect. Please note that withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.
Where the lawful basis for our processing of your personal data is our legitimate interest, you have the right to object to the use of your personal data for those purposes. In addition, where we process your personal data for direct marketing purposes, you have the right to object at any time to our processing of your personal data for these purposes.
To exercise your rights please contact us as stated under “Sec. 8 (Contact us)” below.
In case of complaints you also have the right to lodge a complaint with the competent data protection supervisory authority. In the UK, the competent data protection supervisory authority is the UK Information Commissioner’s Office: https://ico.org.uk/.
6. Cookies and other tracking technologies
This website or app uses cookies. For further information please visit our Cookie Policy.
7. How long do we keep your personal data?
Your personal data will be retained for as long as necessary to provide you with the services and products requested. Once our relationship has come to an end, we will either delete your personal data or anonymize your personal data.
However, there may be certain situations where we still retain your personal data after the termination of the contractual relationship, for example:
- Where required for compliance with statutory retention requirements. For example, we may be required by applicable law to retain certain of your personal data for a period of 10 years after the relevant taxation year;
- Where necessary to comply with other applicable laws; or
- If we need your personal data to establish, exercise or defend a legal claim, on a need to know basis only.
To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
Where we anonymize your personal data, meaning we are no longer able to identify you, we will continue to use this data for our own legitimate business purposes and in accordance with the law.
8. Contact us
If you want to exercise your data subject rights or if you have any other questions concerning this Privacy Policy, please submit/email your request to:
UK Essity Ltd, Southfields Road, LU6 3EJ, Dunstable – UK
BSN Medical Limitada, Carrera 36 #13-451, Yumbo Valle del Cauca – Colombia·
Account.
If you create an account on/in our website or app, you may be asked to provide personal data about you, for example: name, postal address, email address, selected password, telephone number, bank account details, credit card details, invoicing and delivery address, interests in certain products/services (voluntary), request to receive marketing emails (voluntary).
