Privacy policy

If you create an account on/in our website or app, you may be asked to provide personal data about you, for example: Name, postal address, email address, selected password, telephone number, bank account details, credit card details, invoicing and delivery address, interests in certain products/services (voluntary), request to receive marketing emails (voluntary). Essity processes such personal data for purposes of providing our services to you, to provide you with marketing materials to the extent permitted by applicable law, and to analyze your interests for marketing purposes.  

If you order a product via our website or app, Essity collects and processes the following personal data about you: Your account data, type and amount of product, purchase price, order date, order status, product returns, customer care requests. Essity processes such personal data for purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing, and exercising legal claims, and tailored marketing. 

If you participate in a sweepstake, Essity collects and processes the following personal data about you: Name, postal address, email address, date of entry, selection as winner, prize, answer to quiz. Essity processes such personal data for purposes of carrying out the sweepstake, informing the winner, delivering the price to the winner, carrying out the event, and marketing.  

By ordering some products, Essity may collect and process also information about health conditions as implied by product order. Health data are sensitive data and Essity is taking all necessary steps to protect such sensitive data as legally required. In addition to consent, and when applicable in accordance with local legislation, Essity may collect and process health data for the purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing, and exercising legal claims, and tailored marketing.

Essity may engage external service providers, who act as a data processor of Essity, to provide certain services to Essity, such as website service providers, marketing service providers or IT support service providers. When providing such services, the external service providers may have access to and/or may process your personal data. 

 

We request those external service providers to implement and apply security safeguards to ensure the privacy and security of your personal data.  

Essity may transfer - in compliance with applicable data protection law - personal data to law enforcement agencies, governmental authorities, legal counsel, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to the third parties being involve in the merger or acquisition. 

The Personal Data that we collect or receive about you may be transferred to and processed by recipients, including agents in the same company group, which are located abroad, including inside or outside the European Economic Area ("EEA"). The countries include those which provide an adequate level of data protection from a European data protection law perspective or the applicable local law perspective. Essity will take all necessary measures to ensure that transfers out of the EEA, or out of other original territories, are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority, approved code of conducts together with binding and enforceable commitments of the recipient, other local legislation transfer mechanisms such as specific contractual clauses and binding corporate rules, or approved certification mechanisms together with binding and enforceable commitments of the recipient. You can ask for a copy of such appropriate safeguards by contacting us as set out in Sec. 9 (Contact us) below. 

We may carry out the processing of your personal data on the following legal basis, when applicable according to the local legislation: 

 

 

We may carry out the processing of your sensitive personal data on the following legal basis, when applicable according to the local legislation: 

 

 

The provision of your personal data is required by a statutory or contractual obligation, or necessary to enter into a contract with us or to receive our services/products as requested by you, or simply voluntary for you.  

 

Not providing your personal data may result in disadvantages for you, e.g., you may not be able to receive certain products and services. However, unless otherwise specified, not providing your personal data will not result in legal consequences for you. 

If you have declared your consent regarding certain collecting, processing, and use of your personal data, you can revoke this consent at any time with future effect. Further, you can object to the use of your personal data for the purposes of marketing without incurring any costs other than the transmission costs in accordance with the basic tariffs. 

 

Pursuant to the applicable data protection law you have the right (i) to request access to your personal data, (ii) to request rectification of your personal data, (iii) to request erasure of your personal data, (iv) to request restriction of processing of your personal data, (v) to request data portability, (vi) to object to the processing of your personal Data (including objection to profiling), and (vii) to object to automated decision making (including profiling).  

 

To exercise your rights please contact us as stated under Sec. 9 (Contact us) below. 

 

In case of complaints, you also have the right to lodge a complaint with the competent data protection supervisory authority.