Privacy Policy

1. General

Henkel AG & Co. KGaA, hereinafter referred to as Henkel, respects the privacy of each person who visits our website. Now we would like to inform you of the type of data collected by Henkel and how they are used. You will also learn how you can exercise your data subjects’ rights.

Any changes to this Data Protection Statement will be published on this page. This enables you to inform yourself at any time about which data we are collecting and how we use such data.

This Data Protection Statement does not apply to websites accessible via hyperlinks on Henkel websites.

2. Collection, use and processing of personal data

Name of the responsible entity: Henkel AG & Co. KGaA

Address of the responsible entity: Henkelstrasse 67, 40589 Duesseldorf, Germany

Henkel uses personal data primarily to provide this website to the users. Any further processing of the data only occurs on the basis of other statutory duties or permissions or if the respective user has consented towards Henkel. Henkel stores and processes data specifically for the following purposes:
When users visit the website, Henkel automatically collects and stores certain data.  This includes: the IP address or device ID allocated to the respective end-device which we need for transmitting requested content (e.g. especially content, texts, images, and product information as well as data files provided for downloading, etc.), the activity of users in the context of the website, the type of respective end-device, the used type of browser as well as the date and time of use.
Henkel stores this information for a maximum of 7 days for the purpose of recognizing and pursuing misuse.
Henkel uses this information also for improvements to the service’s presentation, features and functionalities as well as general administration tasks.
Aside from this, Henkel deletes or anonymizes the data on use, including the IP addresses, without undue delay as soon as they are no longer needed for the above mentioned purposes.
The processing and use of the data is based on statutory provisions which justify those operations on the grounds that (1) the processing is necessary for the provision of the website; or (2) Henkel has an overriding legitimate interest in ensuring and enhancing the functionality and error-free operation of the website and that it is tailored to the users’ needs.

3. Further Personal Data processing

a)    Consumer request table
You may have provided your contact data via our contact form. We will use your data for the purpose of replying to your request.

The processing and use of your data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for processing your request.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies.

b)    Raffles
You may have provided your contact data and your address while participating in a raffle which we offer from time to time on our website. We will use your data for the purpose of conducting the raffle.

We will not forward your data to any third party unless for the distribution of prizes or for conducting the raffle.

The processing and use of your data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for conducting the raffle.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies.

c)    Product test
You may have provided your contact data and your address while participating in product tests. We will use your data for the purpose of conducting the product test.

We will not forward your data to any third party unless for the purpose of conducting the product test.
The processing and use of your data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for carrying out the product test.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies.

d)    Webinar
You may have provided your contact data, e.g your email address while participating in webinars. We will use your data for the purpose of providing the webinar.

We will not forward your data to any third party unless for the purpose of conducting the webinar.
The processing and use of your data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for providing the webinar to you.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies.

e)    Surveys
You may have provided your contact data, e.g your email address while participating in a survey. We will use your data for the purpose of conducting the survey.

We will not forward your data to any third party unless for the purpose of conducting the survey.
The processing and use of your data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for conducting the survey.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies.

4. Consent / Withdrawal of Consent

a)    Consumer/ Customer Relationship Management/ Onlince Commuities

You may have given consent  that Henkel processes

•    your contact data which you may have provided to Henkel,
•    the content and circumstances of your electronic communication with Henkel such as contact forms or e-mail,
•    your usage of Henkel websites,
•    data on your participation in Henkel’s online trainings,
•    activities on Henkel’s Social Media sites (in Blogs, Facebook Fanpages etc.)
•    …

 in the framework of Henkel’s customer/ consumer relationship management/ online community  

for the purposes of

•    advertising (by post, in browser, in app and as specified below if you provide an additional consent),
•    rendering technical advice such as usage of products or technologies,
•    market research, and
•    providing online services such as eLearning, webinars
•    communication in relation to events
•    conducting surveys
•    …

To achieve the selected purposes Henkel may
-    combine the above listed data with other data Henkel may have legally collected about you for instance from raffles or other website activities, and
-    analyze the data in order to determine relevant advertising measures.

In the course of this analysis Henkel applies an automated methodology that helps prioritize leads for sales. Contacts are categorized according to their online and off-line activities. Based on the category they are assigned to and the location they are the contacts are assigned to sales persons and receive different information on our products and services as well as advertising material.  

You may have given consent that Henkel may forward your personal data to the GFK for the following purpose:
-    matching and updating the contact addresses. 

We will store the data only as long as the consent is valid or as long as required in case of any statutory retention obligations.

You may withdraw your consent with effect for the future at any time, for example by clicking the respective hyperlink provided either in the confirmation e-mail or by clicking [HERE].  The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

b)    Electronic Mail Advertising

You may further have declared your consent  that Henkel may contact you regarding offers, products and services regarding products from Henkel’s Adhesive Technologies range via electronic mail (e-mail, sms, mms, instant message) and/or telephone.

We will use your data as set forth above under section 4a. of this Data Protection Statement to provide you with respective advertising measures.   

You may withdraw your consent with effect for the future at any time, for example by clicking the respective hyperlink provided either in the confirmation e-mail or by clicking [HERE].  The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Cookies, Pixel, Fingerprints

This website uses cookies and similar technologies. Technically necessary cookies will be used automatically. Other cookies (or similar technologies) will only be applied based on your prior consent. You can find more information on the Cookies used by our website and their purposes in our Cookie Policy. There, you will also find information on how to withdraw your consent for the future.
Your preference is set for the named domain, per browser and computer. Therefore, if you visit our website at home and work or with different browsers, you need to refuse data storage with every device or browser.

6. Web Tracking

a)    Google Analytics

Provided you have consented, this website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”).
 For this purpose, a cookie is installed on your computer. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. 


We have activated the IP anonymization, this means Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA.  

On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. 
Google will not associate your IP address with any other data held by Google. 


Objection to data collection:
You can also prevent Google’s collection and use of data (cookies and IP address) by changing your browser settings or by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en

b)    Adobe Analytics

 Provided you have consented, this website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) (“Adobe”). For this purpose, a cookie is installed on your device. This cookie will collect data such as browser and device information, your IP address, visited websites, and date and time of server request for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider.

Adobe (as a controller) may use your data for any own purposes as for profiling and linking your data to other data collected about you (e.g. through your Adobe Account).

The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and processed by Adobe on servers in the United Kingdom. For this third country data transfer, an adequate level of data protection is ensured by standard contractual clauses, Art. 46 GDPR, pending an adequacy decision by the European Commission (Art. 45 GDPR).

We have activated the IP anonymization, which means that the last octet (the last portion) of the IP address is immediately hidden when the IP address is collected by Adobe. This anonymization is performed prior to any processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis. After the geo-lookup, everywhere in Analytics the IP addresses are obfuscated – replaced with :: X.X.X.X.

By allowing cookies on the Henkel-website you agree to the use of the above-mentioned data and the previously described processing by Adobe.

You find more information about privacy in Adobe services here: https://www.adobe.com/privacy/policy.html

Objection to data collection:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookies" at "Cookie settings". If you agree to the use of cookies in general, but however, you are uncomfortable with the use of Adobe Analytics cookies, you can follow this link (https://www.adobe.com/privacy/opt-out.html) and deactivate the Adobe Analytics collection and use of data (cookies and IP address).

c)    Google DoubleClick

Provided you have consented, we use the Google DoubleClick function on our website in order to evaluate the use of the website and make it possible for us, Google and other advertisers who co-operate with DoubleClick to be able to provide you with user-relevant advertising. For this purpose, a cookie is installed on your computer. This cookie collects information on the advertising shown in your browser and which advertisements you click. The information generated by the cookie on your use of website will be transferred to a Google server in the US and stored there. Based on the information collected, interest-related advertisements are being displayed in your browser.

Objection to data collection:
You can also permanently deactivate the DoubleClick cookie by changing your browser settings or with the aid of a browser plug-in. With the plug-in, your deactivation settings for this browser are retained, even if you delete all cookies. You can obtain the browser plug-in for permanent deactivation https://support.google.com/ads/answer/7395996.

d)    Facebook Custom Audience Pixel
We participate in Facebook's Custom Audience program which - provided you have consented - enables us to display personalized ads to you when you also have subscribed to Facebook and log in into your Facebook account. This tool allows us to personalize our ads based on your usage of our website in order to provide ads specifically tailored for you. To this end we share your email address or phone number in a hashed format which permits Facebook to identify you in case you have also subscribed to Facebook.

Objection to data collection:
You can adjust your ad preferences by changing your browser settings or through your Facebook settings if you do not want to receive interest-based ads on Facebook.

7. Commerce Connector

On our website we are using the Buy Now Button. The Buy-Now-Button is provided and controlled by Commerce Connector. Detailed information on the functionality and data processing can be found under the following link:

https://www.commerce-connector.com/web/en/privacy-policy

8. Your Data Subject Rights / Data Protection Officer

At any time, you may assert the right to access your data. Additionally, provided that the respective requirements are met, you may assert the following rights:
•    Right to rectification
•    Right to erasure
•    Right to restriction of processing
•    Right to lodge a complaint with the respectively competent data protection supervisory authority
•    Right to data portability (as of May 25th 2018)

Right to object
In case of processing activities involving your personal data that are carried out on basis of a legitimate interest of Henkel, you have the right to object against such processing of your personal data at any time for reasons resulting from your specific situation. Henkel will stop that processing unless Henkel can prove important reasons for the processing which deserve protection which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend against legal claims.

In these cases, or if you have any other questions or wishes in connection with regard to your personal data, please send an e-mail or a letter to our data protection officer, Mr. Frank Liebich, Henkel AG & Co. KGaA, Henkelstrasse 67, D 40191 Düsseldorf, Germany (E-Mail: Datenschutz@henkel.com).

9. Use of Social Media Plug-ins

Plug-ins (“plug-ins”) of different social media networks are embedded in our web pages. The associated services are provided by the respective companies (“providers”). These providers are:
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). For an overview of the Facebook plug-ins and their appearance, go to: https://developers.facebook.com/docs/plugins
Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). For an overview of the Twitter buttons and their appearance, go to: https://twitter.com/about/resources/buttons
Google+ and YouTube are provided by     Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA (“Google”). For an overview of the Google+ plug-ins and their appearance, go to: https://developers.google.com/+/web/; for the YouTube plugins, go to: https://developers.google.com/youtube/subscribe/
Instagram is provided by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA („Instagram“). For an overview of the Instagram plug-ins and their appearance, go to: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
LinkedIn is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). For an overview of the LinkedIn plug-ins and their appearance, go to: https://developer.linkedin.com/plugins#
To increase the protection afforded to your data when you visit our web pages, these plug-ins are implemented as “2-click buttons.” This form of integration ensures that, when accessing a page from within our website containing such plug-ins, you are not automatically connected to the providers’ servers. Only if you activate the plug-ins and thereby permit for data transmission, the browser will create a direct link to the providers’ servers. The content of the various plug-ins is then transmitted by the provider concerned directly to your browser and then displayed on your screen.
The plug-in tells the provider which of our website pages you have accessed. If, while viewing our website, you are logged into your user account with the respective provider, he is able to collate your interest, i.e. the information you are accessing, with your user account. On making use of any of the plug-in functions (e.g. clicking the “Like” button, leaving a comment), this information too will be transmitted by the browser directly to the provider for retention.
Further information on the collection and use of data by the providers and on the rights and possibilities available to you for protecting your privacy in these circumstances can be found in the providers’ data protection/privacy policies:
Data protection/privacy policy issued by Facebook: http://www.facebook.com/policy.php
Data protection/privacy policy issued by Twitter: https://twitter.com/Data Protection
Data protection/privacy policy issued by Google: https://www.google.com/intl/de/policies/Data Protection/
Data protection/privacy policy issued by Instagram: https://help.instagram.com/155833707900388/


Data Protection Statement for Facebook Fanpages
Date: October 20, 2020 

10. Introduction

Thank you for your interest in our Facebook Fanpage („Fanpage“) and our company. The protection of your personal data is of great importance to us. We respect the statutory provisions on data protection and data security. 

Accordingly, we must comply with applicable data protection legislation, including the General Data Protection Regulation (GDPR).  

Below you will find information concerning which personal data we collect when providing this service and how we handle such data.  

11. Responsible party / Contact details

Henkel Limited, of Wood Lane End, Hemel Hempstead, Hertfordshire, HP2 4RQ („we“, „us“ or „Henkel“) is the responsible party for the data processing required to provide the service, and as described in this data protection statement. This excludes the data processing concerning the so called “Site-Insights”, for which we share the responsibility with Facebook Ireland Limited (“Facebook”). 

Please keep in mind that the use of our Fanpage leads to further processing of your personal data by Facebook, not limited to the “Site-Insights”-option. In this regard (in particular with regard to the technical possibility to use this Fanpage) we refer to the data protection statement of Facebook, which can be accessed at https://www.facebook.com/privacy/explanation. 

Should our Fanpage be linked to other websites or online-content, the data protection statements of those services shall respectively apply.  

If you have any queries or requests in connection with your personal data, please send an email to dataprivacy.ukirl@henkel.com. 

12. General processing of data

12.1 Communication with us / Community Management 

We regularly receive private messages with content directly addressing us. If you contact us, for instance to ask a question about a product that we have featured on our Fanpage by private message, we will use your name, eventually your user name and further data provided by you to answer your query. 

The processing is based on statutory provisions, which allow us to process personal data as far as it is necessary to answer your query (e.g. Art. 6 para. 1 b) GDPR) or because of our legitimate interest in providing you with the desired information (Art. 6 para. 1 f) GDPR). 

After answering your query, we delete your query and all information within one year from the end of the calendar year in which your query was answered. 

Additionally, comments and other content that are publicized on Henkel’s Fanpage and in other public spaces of Facebook, which directly address us or relate to us in another way (e.g. by content naming a product of Henkel’s), are collected by us in order to be able to react to the respective content. We may react accordingly, depending on the kind of content. For instance, we may approach the author in order to help with the usage of our products or consider feedback and reviews when improving on our products. We also create reports regarding the performance of a certain content, including its likes and engagement actions with it, in order to learn and improve our public relations work.  

The processing of this data is based on statutory provisions which allow us to process personal data because it constitutes a legitimate interest of ours to react appropriately to public communication which relates to us (Art. 6 para 1 f) GDPR). 

Content you have posted on our Fanpage or in other public spaces of Facebook can be deleted by you in the same way as any of your contributions on the platform. We also reserve the right to delete older comments from our Fanpage from time to time. If you wish to delete content from our Fanpage at any time, please send us an e-mail to the address noted above. 

 

12.2 Communication with us / Community Management 

We regularly receive private messages with content directly addressing us. If you contact us, for instance to ask a question about a product that we have featured on our Fanpage by private message, we will use your name, eventually your user name and further data provided by you to answer your query. 

The processing is based on statutory provisions, which allow us to process personal data as far as it is necessary to answer your query (e.g. Art. 6 para. 1 b) GDPR) or because of our legitimate interest in providing you with the desired information (Art. 6 para. 1 f) GDPR). 

After answering your query, we delete your query and all information within one year from the end of the calendar year in which your query was answered. 

Additionally, comments and other content that are publicized on Henkel’s Fanpage and in other public spaces of Facebook, which directly address us or relate to us in another way (e.g. by content naming a product of Henkel’s), are collected by us in order to be able to react to the respective content. We may react accordingly, depending on the kind of content. For instance, we may approach the author in order to help with the usage of our products or consider feedback and reviews when improving on our products. We also create reports regarding the performance of a certain content, including its likes and engagement actions with it, in order to learn and improve our public relations work.  

The processing of this data is based on statutory provisions which allow us to process personal data because it constitutes a legitimate interest of ours to react appropriately to public communication which relates to us (Art. 6 para 1 f) GDPR). 

Content you have posted on our Fanpage or in other public spaces of Facebook can be deleted by you in the same way as any of your contributions on the platform. We also reserve the right to delete older comments from our Fanpage from time to time. If you wish to delete content from our Fanpage at any time, please send us an e-mail to the address noted above. 

 

12.3 Sector Observation

We observe publications related to the business sectors we are active in (namely Beauty Care, Adhesive Technologies, and Laundry and Home Care). To do so, we collect content published in the public spaces of Social Media platforms that is related to these business sectors (e.g. content in which a cosmetic product or washing agent is being discussed or showcased). 

Content with a connection to the business sectors will be stored and assessed in order to gain insight on the public discussion relating to these business sectors. We will utilize the gained insights in order to improve our own public communication and bring it into alignment with the public discussion. The processing of this data is based on statutory provisions which allow us to process personal data because it constitutes a legitimate interest of ours to improve our public communication by aligning it with the public discussion (Art. 6 para 1 f) GDPR). 

We will delete content collected in the public spaces of Social Media platforms from our systems one year after its collection. If you wish to delete content from our Fanpage at any time, please send us an e-mail to the address noted above.

 

12.4 Sweepstakes and other competitions 

From time to time we offer prize draws and other competitions on our Fanpage. If you would like to participate we will ask you to provide identification and contact details (e.g. name, date of birth, address, e-mail-address etc.; further information may be necessary for the competition, such as the answer to a quiz, photos or the result of an online-game). We use this information to properly carry out the prize draw or competition, and if necessary for legal defence or to detect misuse.   

You will find further details in the participation terms for each prize draw/competition. If you gave us your consent when participating in a prize draw/competition, we use your information for the purposes listed in the declaration of consent. 

The processing of data is based on statutory provisions which allow us to process personal data if it is necessary to properly carry out the prize draw/competition (e.g. Art. 6 para. 1 b) GDPR), because you gave us your consent (Art. 6 para. 1 a) GDPR) or to follow our legitimate interest in preventing fraud or safeguarding an effective legal defence (Art. 6 para. 1 f) GDPR). 

The duration of data storage will be included in the respective data protection statement for each prize draw/competition. 

 

12.5 Invitation to events 

From time to time we announce events on our Fanpage, which may require registration. If you register for one of our events, we process the personal data supplied by you during the registration process, such as your name, address, details of contact and communication (phone number and e-mail-address), as well as further information necessary for the event (e.g. to create the guest list, accreditation, entrance control, room planning and catering) and/or information necessary to send you your invitation and information for the specific event. Furthermore, we might use your information to detect misuse and for our legal defence. 

The processing of data is based on statutory provisions which allow us to process personal data if it is necessary for the registration and participation in an event (Art. 6 para. 1 b) GDPR) or because we have a legitimate interest in preventing fraud or safeguarding an effective legal defence (Art. 6 para. 1 f) GDPR). 

If you register for an event, we delete your registration data within three years from the end of the calendar year in which the event took place. 

 

12.6 Chatbot 

We supply a chatbot on our Fanpage. It is possible to use the chatbot without sharing personal data. If you enter personal information in the text box while using the chatbot, we will use your data only to answer your question. If we save your question for an internal review process we will delete your personal data beforehand. 

The processing of data is based on statutory provisions which justify the processing of personal data that is necessary to answer your question (Art. 6 para. 1 b) GDPR) or because we have a legitimate interest in preventing fraud or safeguarding an effective legal defence (Art. 6 para. 1 f) GDPR). 

If you did not agree to a longer storing period, e.g. within our customer relations management, we will store your data for as long as is required to fulfil the above mentioned purposes, or as long as necessary to comply with a legal obligation to retain the data. 

 

12.7 Product test 

You may have provided your contact data and your address while participating in product tests, which we conducted via our Fanpage. We will use your data for the purpose of conducting the product test. 

We will not forward your data to any third party unless for the purpose of conducting the product test.  

The processing and use of your data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for carrying out the product test you are participating in (Art. 6 para 1 b) GDPR). 

If you have not given consent to a longer storage duration, e.g. in the course of our customer relationship management, we will store the data for no longer than is required in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies. 

 

12.8 Surveys 

You may have provided your contact data, e.g. your email address, while participating in a survey. We will use your data for the purpose of conducting the survey. 

We will not forward your data to any third party unless for the purpose of conducting the survey.  

The processing and use of your data is based on statutory provisions which justify those operations on the grounds that we have an overriding legitimate interest in using your answers in the survey you participated in (Art. 6 para 1 f) GDPR). 

If you have not given consent to a longer storage duration, e.g. in the course of our customer relationship management, we will store the data for no longer than is required in order to fulfill the aforementioned purpose or as long as required in case any statutory retention obligation applies. 

 

12.9 Analysis of use / Site-Insights 

In shared responsibility with Facebook, we analyse how you use our Fanpage (Site-Insights). 

The information required by the GDPR pertaining to the processing of data for Site-Insight can be found on the Facebook website; please see Facebook´s current data protection statement under https://www.facebook.com/privacy/explanation

Facebook will supply you with the relevant details about the contract between Facebook and Henkel Limited regarding the processing of data as joint controllers as per Art. 26 GDPR; at present you can access this information by clicking this Link: https://www.facebook.com/legal/terms/page_controller_addendum.  

In the context of Site-Insight we will only receive anonymized statistics – therefore we have no access to personal data which is being processed by Facebook. 

13. Transfer of personal data

A disclosure of your personal data occurs in the following cases: 

  • Personal data will be disclosed to criminal prosecution authorities as well as, if necessary, harmed third parties if necessary to investigate illegal or abusive use of our services. However, this only occurs if there are specific indications of illegal use or misuse. A disclosure can also take place if this serves to enforce the terms and conditions for the use of our services or other agreements or, if necessary, to assert, exercise or defend legal claims. Our legitimate interest for the processing is safeguarding the proper functioning of our website and to assert, exercise or defend legal claims, as the case may be. We are also required by law to provide information to certain governmental agencies.  These are the criminal prosecution authorities, public authorities that prosecute administrative misdemeanors sanctioned with fines, and the tax authorities. Our legitimate interest for the processing is to prevent misuse, prosecute criminal offenses and to assert, exercise or defend legal claims, as the case may be (e.g. Art. 6 para. 1 f) GDPR).  
  • For the fulfilment of our services we must rely on third party companies and external service providers under contractual relationships (“processor”). Categories of such processors can be agencies, fulfilment-service provides, IT-Service providers, etc. 
    In such situations, information will be disclosed to these companies or individuals in order to enable further processing.  We carefully select these external service providers and regularly examine them in order to make sure that your privacy is safeguarded. Processors are only allowed to use the data for the purposes determined by us. They are also obligated under contracts with us to treat your data exclusively in accordance with this data protection statement as well as the European and United Kingdom laws on data protection. 
    Within the framework of potential transfers described above, it might occur that the third party bound by instructions might process the data in states outside the EU (“third countries”).  
  • Every disclosure of data to a party outside the EU is carried out in compliance with applicable data protection laws. To the extent the EU-Commission has not declared that a third country provides an adequate level of data protection, we will provide sufficient guarantees to establish an adequate protection of your data. For this purpose a contract with the processor might be concluded that incorporates the EU Standard Contract Clauses (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm). 
  • During the course of the further development of our business, it is possible that the structure of Henkel Limited will change by changing the legal form, establishing, purchasing or selling subsidiaries, company divisions or parts of the company. In case of such transactions, the customer information is passed on together with the part of the business which is transferred. To this extent, we make sure that each disclosure of personal data to third parties is carried out in accordance with this data protection statement and applicable data protection laws. Such a transfer of personal data can be justified by a legitimate interest in adapting the structure of our company to economic and legal circumstances if required (Art. 6 para. 1 f) GDPR).
14. Your rights as a data subject

As a data subject, you have the right to obtain information at any time about the data stored about you. Furthermore, you have the right to rectify, right to erasure, a right to restriction of processing as well as potentially the right to data portability. Additionally, you have the right to complain to a data protection supervisory authority. 

IN ADDITION, YOU MAY OBJECT TO DATA PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; IF THE PROCESSING OF YOUR PERSONAL DATA IS BASED ON ART. 6 PARA. 1 LIT. E OR LIT. F GDPR. 

Should you have given your consent to the processing of your personal data, you can withdraw it at any time with effect for the future.  

As far as the processing of personal data by Site-Insights is concerned, Facebook acts as the joint contact point and handles all applications concerning the exercise of the above-mentioned rights.

15. Changes to this data protection statement

The date of this data protection statement is [October 20, 2020].  

The development of our Fanpage can have effects on the way we handle personal data. We retain the right to adapt this data protection statement in line with applicable data protection laws. Therefore, we recommend visiting our Fanpage from time to time, to stay informed about possible updates of our data protection statement.