Data Protection Statement

1. General

This Data Protection Statement is designed to inform you of the type of data collected and how it is used. You will also learn how you can exercise your data subjects’ rights. The Data Protection Statement applies to this website / app (hereinafter uni-formly referred to as “website”) and the other websites of the JOICO area.

Any changes to this Data Protection Statement will be published on this website. This enables you to inform yourself at any time about which data we are collecting and how we use such data.

This Data Protection Statement does not apply to websites accessible via hyperlinks on this website.

2. Controller responsible for data processing / Contact details

Henkel Nederland B.V.

Jaarbeursboulevard 284, 3521 BC Utrecht, The Netherlands

hereinafter referred to as “Henkel” or “we”

To assert any data subjects’ rights, consent withdrawals or general data protection queries, you can contact us at Henkel Nederland B.V. „Data Protection“, Jaarbeursboulevard 284, 3521 BC Utrecht, The Netherlands (email: compliance.benelux@henkel.com).

3. Collection, use and processing of personal data

3.1 General Usage of Website

Henkel uses personal data to provide this website (including services contained there-in) to the users. Any further processing of the data only occurs on the basis of other statutory duties or permissions or if the respective user has consented towards Henkel.

When users visit the website, Henkel automatically collects and stores certain da-ta. This includes: the IP address or device ID allocated to the respective end-device which we need for transmitting requested content (especially texts, images, and prod-uct information as well as electronic files made available for download, etc.), the activi-ty of users in the context of the website, the type of the respective end-device, the browser in use as well as the date and time of use.

Henkel stores this information for a maximum of 7 days for the purpose of recognizing and pursuing misuse.

Henkel uses this information also for improvements to the service’s presentation, fea-tures and functionalities as well as general administration tasks.

Aside from this, Henkel deletes or anonymizes the data on use, including the IP ad-dresses, without undue delay as soon as they are no longer needed for the above mentioned purposes.

Such processing and use of your data is lawful because (1) the processing is neces-sary for the provision of the website as per Art. 6 para. 1 lit. b GDPR; or (2) Henkel has an overriding legitimate interest in ensuring and enhancing the functionality and error-free and secure operation of the website and that it is tailored to the users’ needs pur-suant to Art. 6 para. 1 lit. f GDPR.

3.2 Service-Providers / International Data Transfers

In order to provide the website and the services contained therein, Henkel may engage service-providers (e.g. for the hosting of Henkel’s websites, computing and database management, tracking etc.) which therefore may also process your personal data when you use our websites.

Most of these service providers are contractually bound to only process such personal data on behalf of Henkel and are located (i) within the EU/EEA, (ii) in countries for which the EU Commission has officially recognised the existence of an adequate level of data protection, including the US, insofar as the data recipients participate in the EU-U.S. Data Privacy Framework.

Where this is not the case or if service-providers themselves engage sub-contractors your personal data may potentially be transferred to third countries (i.e. countries out-side of the EU/EEA without an adequate level of data protection).

All of our service-providers are, however, obligated to solely process in or transfer any of your personal data to third countries in case the additional requirements for interna-tional data transfers enshrined in Art. 44 et seqq. of the GDPR are complied with, pre-dominantly by concluding EU Standard Contractual Clauses and, if required, imple-ment additional measures in order to establish an adequate level of data protection. The EU Standard Contractual Clauses are model contracts provided by the EU Com-mission which – if required – together with additional measures are intended to ensure that your personal data are processed in accordance with European data protection standards even if the processing takes place outside the EU/EEA.

3.3 Customer enquiry

You may provide your contact data via our contact form, email, telephone call or oth-erwise together with an enquiry. We will use your data for the purpose of replying to your enquiry.

Your personal data is processed for the purpose / legitimate interest of processing your request based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our cus-tomer relationship management we will store the data no longer than needed in order to fulfil the respective aforementioned purpose or as long as required in case any statu-tory retention obligation applies.

3.4 Raffles

You may provide your contact data and your address while participating in a raffle which we offer from time to time on our website. We will use your data for the purpose of conducting the raffle.

Your personal data is processed for the purpose / legitimate interest of conducting the raffle based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our cus-tomer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory reten-tion obligation applies.

3.5 Product test

You may provide your contact data and your address while participating in product tests. We will use your contact data as well as any other information you provide to us as part of the product test for the purpose of conducting the product test.

Your personal data is processed for the purpose / legitimate interest of conducting the product test based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our cus-tomer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory reten-tion obligation applies.

3.6 Webinar

You may provide your contact data, e.g. your email address prior to or during webinars. We will use your data for the purpose of providing the webinar. Webinars will be con-ducted via MS Teams or similar service and require further processing of your personal data.

Your data may be passed on to affiliated companies of Henkel or to distributors re-sponsible for the region and product category in question, either because these affiliat-ed companies or distributors carry out the webinar or in order to facilitate a sales con-tact stemming from a webinar.

Your personal data is processed for the purpose / legitimate interest of providing the webinar to you and for the purpose / legitimate interest of using the information about your participation in the webinar for sales purposes, in particular to inform you about products that may be of interest to you, in each case on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our cus-tomer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory reten-tion obligation applies.

3.7 Surveys

You can participate in a survey on our website or on our service hotline or elsewhere. As the case may be, we may also ask you to participate in a subsequent satisfaction survey in connection with an interaction with us (e.g. contacting customer service). In case you participate in a survey, we will process your contact data, e.g your email ad-dress as well as your answers and any other information you decide to share with us in response to the survey. We will use the results of the survey for market and opinion re-search, quality assurance and training purposes as well as to generate further busi-ness insights.

The processing and use of your data is lawful because (i) the processing is necessary for conducting the survey as per Art. 6 para. 1 lit. b GDPR, and (ii) we have an overrid-ing legitimate interest as per Art. 6 para. 1 lit. f GDPR in optimizing our marketing, ser-vices and sales efforts based on such analyses and insights. Alternatively, you may have provided consent to partake in the survey. In such case, we will process your provided information on basis of your consent and for the purposes and to the extent described therein.

If you have not given (additional) consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.8 Downloads

On our website, we make documents, educational materials and other files (hereinaf-ter collectively referred to as "files") available for download. When you download these, we process data about you in order to provide you the files, such as your IP address. You may also need to log in, in order to access the download files.

Your personal data is processed for the purpose / legitimate interest of being able to provide you with the Download Centre and the files you have requested on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

Unless you have consented to a longer storage period, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is nec-essary to fulfil any existing legal obligation to retain data.

3.9 eAcademy

When you attend seminars and view learning modules via our online learning platform eAcademy, we process your data in order to provide you with the eAcademy and, in particular, the desired learning modules. In this context, we also record that you are taking part in a learning module. You then have the opportunity to rate these. We pro-cess this information in order to understand how our offer is received and to be able to display the average user rating to other users for information purposes. At the same time, after completing a learning module or seminar, we may also ask you to complete an evaluation form in which we can ask you more detailed questions about the evalua-tion and you can provide feedback. We process your answers to improve our offer, to analyse user preferences and to personalise our offers.

Your personal data is processed for the purpose / legitimate interest of providing you the eAcademy and the seminars and learning modules you have requested, in order to evaluate our range of learning modules and to be able to make you interest-based offers on the basis of Art. 6 para. 1 lit. b or lit. f GDPR. Alternatively, you may also have given your consent to data processing in the context of the eAcademy, in par-ticular for the personalisation of our offers and the analysis of user preferences. In this case, we will process your personal data on the basis of your consent and for the pur-poses and to the extent described therein. Your consent is voluntary and can be with-drawn at any time with effect for the future.

If you book a fee-based seminar via our online booking tool as part of the eAcademy, we also process your master, contact and payment data in order to manage the book-ing, confirm it and process the payment

The processing of your personal data is carried out for the purpose / the legitimate in-terest of being able to process your booking on the basis of Art. 6 para. 1 lit. b or lit. f GDPR

Unless you have consented to a longer storage period, e.g. as part of our customer re-lationship management, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

3.10 Color Talent Awards

From time to time, we organise the "Color Talent Awards", in which hairdressers can submit photographs of the models they have styled in various categories. The win-ners, selected by a jury, receive a prize.

For registration and participation in the Color Talent Awards, we process the master data and contact details of hairdressers. We also process the images submitted by the hairdressers, in which the faces of the models may be recognisable, in order to enable the jury to select the winners.

The processing of the personal data of hairdressers and models is carried out for the purpose / legitimate interest of processing the registration and selecting the winners on the basis of Art. 6 para. 1 lit. b or lit. f GDPR.

We will then publish the names of the winners and the winning photos on our website to honour the winners and their work and to raise awareness of the Color Talent Awards.

The processing of personal data is carried out for the purpose / legitimate interest of honouring the winners and promoting the event on the basis of Art. 6 para. 1 lit. f GDPR or, in particular if an agreement has been concluded with you for the publica-tion of the photos, Art. 6 para. 1 lit. b GDPR. Alternatively, you may also have given your consent to this. In this case, we will process your personal data on the basis of your consent and for the purposes and to the extent described therein. Your consent is voluntary and can be withdrawn at any time with effect for the future.

3.11 Marketing Communication within Existing Customer Relationships

In case we have obtained your email-address or mobile phone number in connection with the sale of a good or service, we will use it to send you communication (email, SMS, MMS, instant message) in relation to our own similar goods and services provid-ed that you have not objected to such use of your personal data.

You may object to receive such communication at any time with effect for the future, e.g. by sending an email to: compliance.benelux@henkel.com. Objecting does not lead to costs other than transmission costs in accordance with the basic rates.

The legal basis for such processing is the respective provision transposing Art. 13 (2) of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established.

4. Cookies, Pixel, Fingerprints and similar technologies

4.1 General information and information about your right to withdraw your consent

This website uses cookies and similar technologies (altogether “cookies”) that are stored on your device for the following purposes: Strictly necessary, Functional, Performance and Per-sonalised marketing. These are explained in more detail below.

You can also find more information on the cookies used by our website, especially on their storage period, or exercise your right to withdraw your consent at any time with effect for the future under “Cookie Settings”. There, please move the respective slider to the left and click on “Accept selected purposes” if you want to withdraw your consent for single purposes or click on “Reject” if you want to withdraw your consent for all those purposes. In this case, only cookies that are technically necessary to provide you with this website will be used.

When using apps, you can usually withdraw your consent at any time with effect for the future in the app's “data protection settings” or otherwise marked areas of the app or the operating system of your end device. As the case may be, you can also adjust the receipt of personal-ized advertising in the settings of the respective operating system of your end device.

Your consent is set per browser and end device. Therefore, if you visit our website at home and work or with different browsers, you need to withdraw consent with every device or browser.

Your consent is valid for all of our websites of the JOICO area. Thus, the cookies listed below can with your consent be placed and used on all JOICO websites. For cookies that are strictly necessary your consent is not required.

Henkel involves specialized service providers in processing personal data relating to you for the purposes described below that act as data processors for Henkel in accordance with Art. 28 GDPR or as separate data controllers. The companies that process personal data together with Henkel as joint controllers as per Art. 26 GDPR are listed below.

4.2 Strictly necessary cookies

Strictly necessary cookies are technically required to enable the use of our website (e.g., for displaying content, load balancing and IT security) and will be used automatically. The legal basis for this is the respective provision transposing Art. 5 (3) sentence 2 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for the processing of personal data relating to you for this pur-pose Art. 6 (1) lit. b GDPR.

4.3 Functional cookies

Functional cookies are used to provide you with functionalities which enable you to use our website in a more comfortable and personalised manner, e.g. by saving and analysing your preferences, entries and settings such as language choices. If you do not allow functional cookies, these functionalities may not be provided or may not function properly.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic com-munications 2002/58/EC into national law in the jurisdiction where Henkel is established, for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

Functional cookies are used as part of the following tools. In the respective description, we also inform you how you can withdraw your consent specifically for the respective tool. Your general right to withdraw your consent for a purpose listed in this section or all purposes listed here as described above remains unaffected.

4.4 Performance cookies

Performance cookies are used to analyse your use of our website in order to measure and improve the performance of this website as well as the usage experience for the users. For this, especially your visits, activities and interactions on our website as well as information about your browser and device are analysed and used to generate pseudonymous statistics. This helps us, for example, to know which pages of our website are the most and least popular and to see how users move around the offers as well as to conduct tests and on such basis generate business insights in order to optimise our sales efforts.

On our websites aimed at business customers, your data may also be used to analyse which company you are working for in order to maintain our information about business entities we may already have a business relationship or that are interested in our products and services.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic com-munications 2002/58/EC into national law in the jurisdiction where Henkel is established, and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

Performance cookies are used in context of the following tools. In the respective description, we also inform you about how you can withdraw your consent for the respective tool specifical-ly. Your general right to withdraw consent for one or all purposes in this section described above remains unaffected.

Dynatrace Real User Monitor

This website uses Dynatrace, Real User Monitoring, a service provided by Dynatrace LLC (280 Congress Street, 11th Floor, Boston, MA 02210, USA) ("Dynatrace"), to gain insights into the performance of our web applications and to understand how users use and navigate our web applications.

If you have given your consent, several cookies will be stored on your device. Dynatrace uses cookies to collect various usage data, such as clicks on buttons and links, usage times, Ja-vaScript errors, browser types and the user's geographical region. We use this data to contin-uously improve the performance of our website and to recognise and rectify functional prob-lems. We have activated IP address anonymisation, i.e. Dynatrace will truncate the last octet of the IP address. In addition, you can activate the "do-not-track" function that may be built into your browser to ensure that no identifying personal data is collected via Dynatrace.

The following cookies are set by Dynatrace with your consent:

- dtCookie - this cookie tracks a visit across multiple requests.

- dtLatC - this cookie measures the server latency for performance monitoring.

- dtPC - this cookie is required to identify the correct endpoints for beacon transmission; contains the session ID for mapping.

- dtSa - this cookie serves as a cache for cross-page actions.

- rxVisitor - this cookie contains the visitor ID for session allocation.

- rxvt - this cookie contains timestamps for session timeouts.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookies" under "Cookie settings". For apps, see also section 4.1.

Matomo (formerly Piwik)

This website uses services provided by InnoCraft Limited, 7 Waterloo Quay, PO625, 6140 Wellington, New Zealand ("Matomo"; representative in the EU: ePrivacy Holding GmbH, Bur-chardstraße 14, 20095 Hamburg, Germany) to understand user behaviour on web applications and to measure the performance of our offering.

If you have given your consent, Matomo stores cookies on your device. The cookie "_pk_id.<appID>.<domainHash> " is used to recognise users and store various information (e.g. individual cookie identification number, timestamp of cookie setting, total number of visits, timestamp of current session, timestamp of last session, timestamp of last order). The cookie "_pk_ses.<appID>.<domainHash> " signals the user's active session and does not store any other information. The information as to whether the cookie is present on your device can be used to determine whether you have an active session on our website or whether your last session ended more than 30 minutes ago. The purpose of using these cookies is to under-stand user behaviour on our website.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". For apps, see also section 4.1.

4.5 Cookies for personalised advertising and marketing

Cookies for personalised advertising/marketing may be used by us and our advertising part-ners stated below, some of whom act as separate controllers or together with us as joint con-trollers and to whom we may provide information on the status and scope of your consent. These cookies may be used by us and our partners to build a profile of your interests, behav-iour and characteristics to show you advertisements which are relevant for you or the salon you are working for on this website and other media, that all might also be provided by third parties, to provide you with a personalized experience For this, especially your usage behav-iour (also on other websites, social media platforms), including your interactions with content and advertisements, information that you have entered (e.g., in forms and surveys), occupa-tional information about you (that is collected inter alia from LinkedIn) as well as information about your device and your location is analysed. This data may also be combined with data about your commercial interactions with us (respectively of the company you are working for) and data about your colleagues working for the same salon for the above-mentioned purposes and to provide your colleagues with a personalized experience. Your data may also be used to optimise and measure the success of advertisement campaigns as well as to predict the be-haviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Furthermore, this data may be used to determine whether you use different devices and link them with each other, especially to combine the data collected about you via these different devices as well as to display (personalised) advertisement campaigns and measure the suc-cess of advertisements across devices.

Your data may also be processed to determine whether other devices may be assigned to your household and in this case be combined with data of members of your household for the purposes described in this section regarding personalised marketing, especially in order to display (personalised) advertising across devices assigned to your household.

If you do not allow cookies for personalised advertising/marketing, you might in particular ex-perience advertising that might be less relevant for you.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic com-munications 2002/58/EC into national law in the jurisdiction where Henkel is established, and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

Personalised advertising / marketing cookies are used in context of the following tools. In the respective description, we also inform you about how you can withdraw your consent for the respective tool specifically. Your general right to withdraw consent for one or all purposes in this section described above remains unaffected.

Adobe Analytics

This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, Citywest Business Campus, Dublin 24, D24 DCW0 Ireland) (“Adobe”) for the purpose of analyzing the usage of this website.

For this purpose, cookies are stored on your device with your consent. These cookies collect data such as browser and device information, your IP address, visited websites, and date and time of server request for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activi-ty and internet usage to the website provider as well as information about the interactions that users had with ads (clicking a text ad or viewing a video ad).

We have implemented Adobe Analytics in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP address is collected and that this is in any case performed prior to any further processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis.

Henkel will use the data collected to optimize this website and campaigns, retarget and per-sonalize ads. For this purpose, the cookies stored on your device allow you to be retargeted on our as well as third party websites. For this purpose, your browser is identified during ad-vertising delivery and assigned to a target group. This information is used to display relevant and interesting ads to you.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". For apps, see also section 4.1.

Adobe Target

This website uses Adobe Target, a web analytics service provided by Adobe Systems Soft-ware Ireland Limited (4-6 Riverwalk, Citywest Business Campus, Dublin 24, D24 DCW0, Ire-land) ("Adobe") for the purpose of user analysis and A/B testing.

For this purpose, a cookie is stored on your device with your consent. This cookie collects data such as browser and device information, your interaction with the website (e.g. adver-tisements and products clicked on), your IP address, websites visited and the date and time of the server request in order to evaluate your use of the website, conducting tests of our sites (in particular A/B-testing) and dynamically delivering personalised content when you visit our website.

The information collected by the cookie about your use of our website will be transmitted to and stored by Adobe on our behalf. We have implemented Adobe Target in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP ad-dress is collected and in any case performed prior to any further processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but howev-er, you are uncomfortable with the use of Adobe Target cookies, you can follow this link (https://www.adobe.com/privacy/opt-out.html) and deactivate the Adobe collection and use of data. For apps, see also section 4.1.

Google Ads

This website uses "Google Ads", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland ("Google"), to evaluate the effectiveness of advertising measures and to address you again.

When you visit our website, "Google Ads" stores a cookie on your device with your consent. With this cookie, Google processes the information generated by your device about the use of our website, interactions with our website and advertising measures as well as your IP ad-dress, browser information, your previously visited websites and the date and time of access for the purpose of analysing and visualising the reach measurement of our advertising and for displaying personalised advertising. For this purpose, it can also be determined whether dif-ferent end devices belong to you or your household. With "remarketing", users of our website can be recognised and identified on other websites within the Google advertising network (e.g. in Google search or on YouTube) and advertisements tailored to their interests can be dis-played to them.

In connection with Google Ads, we may provide Google with information on the status and scope of your consent.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for per-sonalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you generally agree to the use of cookies but do not wish to receive personalised Google advertising, you can find information on how to customise your advertising settings with Google at these links (https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de and https://support.google.com/ads/answer/7395996). For apps, see also section 4.1.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Lim-ited (Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland) and Google LLC (1600 Am-phitheatre Parkway Mountain View, CA 94043, USA) ("Google"), to analyse the use of this website.

For this purpose, a cookie is stored on your device with your consent. This cookie collects data such as browser and device information, your IP address, websites visited and the date and time of the server request in order to analyse your use of the website, compile reports on website activity for the website operator and provide the website provider with other services relating to website activity and internet usage. The cookie also collects information about us-ers' interactions with adverts (clicking on a text advert or watching a video advert). In addition, we may provide Google with information on the status and scope of your consent.

Henkel uses the data collected to optimise this website and campaigns, for retargeting (i.e. to display advertising after you have visited our website) and to personalise advertisements. The cookies stored by Google on your device enable retargeting on Google's websites (e.g. as part of "Google Ads") and also (e.g. as part of "Google Campaign Manager 360") on our websites and - depending on your interests - when you visit websites of other partners. For this purpose, your browser is identified when the adverts are displayed and assigned to a target group. This information is used to show you relevant and interesting adverts.

As part of Google Analytics also the Google Signals feature is used. This is data collected by Google when you visit (other) third-party websites and apps, in particular about your use of these websites and apps. For example, your actions such as clicks on advertisements, the purchase of products and parts of a website you have seen can be captured. This data can be assigned to you if you are logged in with your Google account and have allowed personalized advertising. We subsequently receive (aggregated) reports from Google, in particular statistics. This allows us to better assess and predict your behaviour across devices and websites/apps. In particular, we can use this feature to better assign you to a target group and better control campaigns (across devices), especially by means of retargeting described above.

We have implemented Google Analytics in such a way that the last octet (the last part) of your IP address is immediately rendered unrecognisable if the IP address is collected within the EU or the EEA. Only in exceptional cases will the full IP address be sent to Google servers in the USA and shortened there.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating the cook-ies on our website under "Cookie settings". If you generally agree to the use of cookies, but are uncomfortable with the use of Google Analytics cookies, you can follow this link (https://tools.google.com/dlpage/gaoptout?hl=en) and download and install a browser plugin to deactivate the collection and use of data (cookies and IP address) by Google Analytics. For apps, see also section 4.1.

Google Campaign Manager 360 (formerly DoubleClick)

We use Google Campaign Manager 360 (“Campaign Manager”), a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”), to display relevant ads to you.

For this purpose, Google stores a cookie on your device with your consent by using your IP address. In addition to IP address, browser and device information, visited websites and time of access, this cookie also collects information about the advertising shown in your browser and which advertisements you click. This allows Google and its partner sites to display inter-est-related ads based on the previous visits of Henkel-pages or other websites. The Campaign Manager cookies utilize a pseudonymous identification number assigned to your browser to check the on-screen and appealing ads. For this purpose, your browser is identified when ads are served, and assigned to a target group. The cookies stored on your device by Google thus allow you to be retargeted on the one hand (e.g. within the scope of “Google Ads”) on Goog-le's websites and on the other hand (e.g. within the scope of “Google Campaign Manager 360”) on our websites and – depending on your interests – when you visit websites of other partners.

This information will also be used for the purpose of evaluating your use of the website, com-piling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Within Campaign Manager, we use the conversion tracking system “Floodlight” in order to monitor and report on conversions after users interact with one of our Google display or search ads. To do this, Google installs a cookie on your device with your consent. Floodlight tracks user activity on our or a third-party website after the user has clicked a Google ad and recog-nises or re-identifies users by means of their User ID. This information can be used by Flood-light for conversion attribution. Floodlight also counts cross-environment conversions (e.g. user clicks a paid search ad on a mobile device but converts from a desktop computer) using – according to Google – various sources of aggregated and anonymized data.

In connection with the Campaign Manager, we can provide Google with information on the status and scope of your consent.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings”. If you agree to the use of cookies in general, but howev-er, you are uncomfortable with the use of Google Campaign cookies, you can follow this link (www.google.com/settings/ads/onweb) to deactivate the Campaign Manager service by Google. For apps, see also section 4.1.

Google Display & Video 360

We use Google Display & Video 360 ("DV360"), a service provided by Google LLC, 1600 Am-phitheatre Parkway, Mountain View, CA 94043 ("Google"), to measure the effectiveness of our advertising campaigns, manage and optimize them across platforms and to show you the most relevant ads possible via various channels of the Google advertising network.

For this purpose, Google stores cookies on your device with your consent. In addition to IP address, cookie ID, advertising ID, browser and device information, websites visited and time of access, these cookies also collect information about your surfing and clicking behavior (in-cluding so-called conversions), the advertisements displayed in your browser and which ad-vertisements you click on. This enables Google and its partner websites to display personal-ized advertising to users based on previous visits by these users (from Henkel pages or other websites) and their interests. In addition, users can be targeted again with adverts based on the data collected in the Google advertising network after they have visited this website or interacted with our adverts (retargeting). The cookie ID is also used to record which adverts are shown in which browser; this prevents users from being shown the same advert too often.

The information collected is also used to analyze your use of the website, to compile reports on website activity for website operators and to provide other services related to website ac-tivity and internet usage. In addition, the data collected enables us to measure the effective-ness of our advertising campaigns, to manage them across platforms (i.e. across the various advertising platforms of the Google advertising network such as YouTube) and to optimize them.

In connection with DV360, we may provide Google with information on the status and scope of your consent.

Google may also process the data concerning you in order to predict the behavior of other users who have not consented to the use of cookies and the processing of their data for per-sonalized marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but are un-comfortable with the use of DV360 cookies, you can follow this link (https://adssettings.google.com/anonymous?hl=de) to disable Google's DV360 service. For apps, see also section 4.1.

Meta Conversion API

We use the Meta Conversion API, a service provided to us by Meta Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) ("Meta"). This tool enables us to analyze and personalise our ads based on your use of our website in order to present you with ads that are specifically tailored to you.

For this purpose, data such as your IP address, browser information, surfing and clicking be-haviour on our websites (including so-called conversions), hashed identifiers such as email address, telephone number or name, a specific ID assigned to you or user ID as well as the date and time of the server request are recorded by our server with your consent (and possibly with the inclusion of cookies) and then forwarded to the meta-systems and servers (so-called server-side tracking).

The data collected is used to optimise campaigns and create custom audiences, which are groups of Facebook and Instagram users based on that data collected, to target ad campaigns on Facebook and Instagram (Facebook and Instagram Ads). For this purpose, it can also be determined whether different end devices belong to you or your household.

Insofar as data on your usage of our website is collected, personalised ad campaigns are op-timised and custom audiences are created, we act as joint controller in accordance with Art. 26 GDPR together with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. About this we have entered into an agreement with Meta which can be found here: https://www.facebook.com/legal/controller_addendum (“Controller Addendum”). The agree-ment determines the respective roles and responsibilities for fulfilling the obligation under the GDPR with regard to joint controllership.

The required information as per Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Meta’s privacy policy here: https://www.facebook.com/privacy/policy. In the section "What information do we collect?" / "Information from partners, providers and other third parties", Meta refers to the Controller Ad-dendum (see above).

We have agreed with Meta that Meta is the contact point for the exercise of data subject rights pursuant to Articles 15-20 of the GDPR with regard to the processing activities in joint control-lership.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookie settings". You can customise your advertising preferences by changing your browser settings or your Facebook settings if you do not wish to receive inter-est-based advertising on Facebook (https://facebook.com/help/windows/568137493302217). For apps, see also section 4.1.

Meta Pixel

We use the Meta Pixel, which is provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) ("Meta"). With your consent, this tool enables us to analyze and personalise our ads based on your use of our website in order to provide you with ads that are tailored specifically to you. For this purpose, the Meta Pixel collects your IP address, browser information, the visits and actions you take on our websites, the "Pixel ID" or user ID and the date and time of the server request.

The data collected is used to optimise campaigns and to create individual target groups, i.e. groups of Facebook and Instagram users based on the data collected, for targeted advertising campaigns on Facebook and Instagram (Facebook and Instagram Ads). For this purpose, it can also be determined whether different end devices belong to you or your household.

Insofar as data about your use of our website is collected, personalised advertising campaigns are optimised and target groups are created, we act together with Meta Platforms Ireland Lim-ited, Merrion Road, Dublin 4, D04 X2K5, Irelandas joint controllers in accordance with Art. 26 GDPR. We have concluded an agreement with Meta on this, which you can find here: https://www.facebook.com/legal/controller_addendum ("Controller Addendum"). The agree-ment defines the respective tasks and responsibilities for fulfilling the obligations under the GDPR with regard to joint controllership.

The information required pursuant to Art. 13 para. 1 lit. a, b GDPR with regard to data pro-cessing as joint controllers can be found in Meta's privacy policy here: https://facebook.com/privacy/policy. In the section "What information do we collect?" / "Infor-mation from partners, providers and other third parties", Meta refers to the Controller Adden-dum (see above).

We have agreed with Meta that Meta is the point of contact for the exercise of data subject rights under Art. 15-20 GDPR in relation to processing activities under joint controllership.

Withdrawal of consent:

Pinterest Pixel

This website uses the conversion tracking technology of the social network “Pinterest” (Pinter-est Europe Ltd., 3rd Floor, Waterloo Exchange, Waterloo Road, Dublin 4, D04 E5W7, Ireland) in order to display relevant advertisements and offers on Pinterest to visitors to this website who have already taken an interest in our website and content/offers or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the web-sites visited) and are Pinterest members, with their consent

For this purpose, a so-called conversion tracking pixel from Pinterest is integrated on our web-sites. With your consent, the pixel generates a cookie that stores your IP address, browser and device information, the visits and actions you perform on our websites, as well as the date and time of the server request.

With the Pinterest cookie, Pinterest can determine the visitors to our website as a target group for the display of advertisements (so-called "Pinterest ads"). If, for example, you have shown interest in our products on our website, you can be shown an ad for our products on Pinterest. With the Pinterest cookie, we can also track the effectiveness of the Pinterest ads for statisti-cal and market research purposes by seeing whether users were redirected to our website after clicking on a Pinterest ad (so-called "conversion").

Insofar as we and Pinterest collect and share so-called “Activity Data” (such as offline sales measurement or a mobile measurement partner integration), we and Pinterest (Pinterest Eu-rope Ltd., 3rd Floor, Waterloo Exchange, Waterloo Road, Dublin 4, D04 E5W7, Ireland) act as joint controllers in accordance with Art. 26 GDPR. In this respect, we have entered into an agreement with Pinterest which can be found here under “Exhibit B”: https://business.pinterest.com/en-gb/pinterest-advertising-services-agreement/germany/ (“JCA”). The agreement determines the respective roles and responsibilities for fulfilling the obligations under the GDPR with regard to joint controllership.

The required information as per Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Pinterest’s privacy policy here: https://policy.pinterest.com/en-gb/privacy-policy.

We have agreed with Pinterest that Pinterest is acting as contact point for the exercise of data subject rights pursuant to Articles 15-20 of the GDPR with regard to the processing activities in joint controllership.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". You can adjust your ad preferences by changing your browser settings or your Pinterest settings if you do not want to receive interest-based ads on Pinterest (https://help.pinterest.com/en/article/personalised-ads-on-pinterest). For apps, see also section 4.1.

Ströer Precision X

If you have given your consent, this website collects and stores data for marketing and optimi-zation purposes using the technology of Ströer Precision X GmbH, Von-Werth-Str. 9-13, 50670 Cologne ("Ströer").

For this purpose, cookies are stored on your device with your consent. These cookies collect data such as browser and device information, your IP address, websites or apps visited and the date and time and approximate location of access. This data is stored and processed in anonymous or pseudonymous profiles (depending on the technology used and the service concerned). In addition to the data stored when you access the website (as set out above), this also concerns data about the website from which you access our website, the websites you visit while accessing our website and, if applicable, search terms you have used to find our website.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating the cook-ies on our website under "Cookie settings". For apps, see also section 4.1.

Woovly

This website uses Woovly, a service provided by Woovly India Private Limited (Flat No. 001, Ground Floor, HM Delphi 7th C Main, 3rd Block, Koramangala, Bangalore, Karnataka, India – 560034), to carry out marketing measures in social media.

This website offers the function of displaying content provided by social media users with their consent. For the purpose of displaying this content, cookies are stored on your device with your consent, which store functional information such as your language setting, the last stream loaded and the last stream viewed. In addition, cookies are used to collect and store infor-mation about your use of our offerings, such as your IP address, which products you have viewed or purchased and details of purchases. We use this information for analysis and statis-tical purposes in connection with our marketing measures.

Withdrawal of consent:

You can withdraw your consent at any time with effect for the future by deactivating cookies on our website under "Cookies" under "Cookie settings". For apps, see also section 4.1.

5. Use of Social Media Plug-ins

Social media content management services are embedded on our website, in particular by means of plug-ins from various social media networks. The associated services are provided by the respective companies (“providers”). Purpose of these services are to enable you to view and share our content with your friends and professional networks. These providers are:

Facebook is within the EU operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Facebook"). For an overview of the Facebook plug-ins and their appearance, go to: https://developers.facebook.com/docs/plugins
X is within the EU operated by X Internet Unlimited Company, One Cumberland Place, Fe-nian Street, Dublin 2, D02 AX 07, Ireland(“X”). For an overview of the X-buttons and their appearance, go to: https://developer.x.com/en/docs/twitter-for-websites
YouTube is within the EU provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland (“Google”). For an overview of the YouTube plugins, go to: https://developers.google.com/youtube/documentation
Instagram is within the EU provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland („Instagram“). For an overview of the Instagram plug-ins and their appearance, go to: https://developers.facebook.com/docs/instagram
LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, D02 AD98, Ireland (“LinkedIn”). For an overview of the LinkedIn plug-ins and their ap-pearance, go to: https://developer.linkedin.com/product-catalog/plugins

To increase the protection afforded to your data when you visit our website, these plug-ins are implemented as “2-click buttons.” This form of integration ensures that, when accessing a page from within our website containing such plug-ins, you are not automatically connected to the providers’ servers. Only if you activate the plug-ins the browser will initiate a data trans-mission to the providers’ servers. The content of the various plug-ins is then transmitted by the provider concerned directly to your browser and then displayed on your screen.

The social media tool tells the provider your previously visited websites, your IP address, browser information, and the date and time of the server request. On making use of any of the social media functions (e.g. clicking the “Share” button, leaving a comment), also this infor-mation will be transmitted by the browser directly to the provider for retention. Those providers may use your data for any own purposes as for analytics, marketing, profiling and linking your data to other data collected about you (such as through your user account with the respective provider) even if you are not logged in to your social media account.

Please note: The providers may process the data partly also in countries outside of the EU/EEA not providing for an adequate level of data protection including the US if the provider is not a participant of the EU-U.S. Data Privacy Framework.

We base such processing and use of your data (if applicable, also including any direct transfer from Henkel to providers located outside of the EU/EEA) on Art. 6 para. 1 lit. b or f GDPR as it is required to provide this functionality to you once you decide to interact with a social media plugin implemented on this website.

Further information on the collection and use of data by the providers, in particular also with regard to measures implemented by the providers regarding the transfer of personal data out-side of the EU/EEA, and on the rights and possibilities available to you for protecting your pri-vacy in these circumstances can be found in the providers’ data protection/privacy policies:

Data protection/privacy policy issued by Facebook: http://www.facebook.com/policy.php
Data protection/privacy policy issued by X: https://x.com/en/privacy
Data protection/privacy policy issued by Google: https://policies.google.com/privacy
Data protection/privacy policy issued by Instagram: https://help.instagram.com/155833707900388/
Data protection/privacy policy issued by LinkedIn: https://www.linkedin.com/legal/privacy-policy

6. Processing for the establishment, exercise or defence of legal claims and in the case of mergers and acquisitions

Insofar as this is necessary in individual cases, we will also process the data about you stated in this data protection statement in order to etablish and exercise legal claims, to defend our-selves against legal claims and insofar as this is necessary in connection with corporate transactions, e.g. if parts of the company are to be sold. Processing for these purposes / legit-imate interests is carried out on the basis of Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f GDPR.

Unless you have consented to a longer storage period, we will not store the data for longer than is necessary to fulfil the aforementioned purpose or for as long as is necessary to fulfil any existing legal obligation to retain data.

7. Your Data Subject Rights

At any time, you may assert the right to access your data. Additionally, provided that the re-spective requirements are met, you may assert the following rights:

Right to rectification: You have the right to have false personal data concerning you corrected.
Right to erasure: You may also request the deletion of your personal data, for example if your data are no longer required for the purposes for which they were collected or otherwise processed.
Right to restriction of processing: You also have the right to request that the processing of your personal data be restricted; in such a case, the data will be blocked for any processing. This right exists in particular if the accuracy of the personal data between you and us is debated.
Right to lodge a complaint with a data protection supervisory authority: You also have the right to file a complaint at any time with a supervisory authority, in particular a su-pervisory authority in the Member State where you are staying, working or the place of alleged infringement, if you believe that the processing of personal data concerning you is in violation of applicable data protection laws.
Right to data portability: If we process your personal data to fulfil a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, provided and to the ex-tent that you have made the data available to us.
Right to withdraw consent: if you have provided consent to us to process your personal data, you have the right to withdraw any such consent with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

In case of processing activities involving your personal data that are carried out on ba-sis of a legitimate interest of Henkel or a third party, you have the right to object against such processing of your personal data at any time for reasons resulting from your spe-cific situation. Henkel will stop that processing unless Henkel can prove important rea-sons for the processing which deserve protection which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend against legal claims.

In addition, you have the right to object at any time to the processing of personal data concerning you for the purpose of direct marketing in accordance with Art. 21 para. 2 GDPR.

In these cases, or if you have any other questions (e.g. on agreements on data processing under joint controllership with other companies) or wishes in connection with regard to your personal data, please send an email or a letter using the contact details provided above.

After answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.

8. Contact details of the data protection officer

You can contact our Data Protection Delegate by post at Henkel Nederland B.V. „Data Pro-tection“, Jaarbeursboulevard 284, 3521 BC Utrecht, The Netherlands or by email at: compliance.benelux@henkel.com