The following rules describe how Oriflame handles information relating to an identified or identifiable person (Personal Data) for services performed through all Oriflame information systems and websites (Systems).
Users consist of all individuals, who connect to and use Systems.
Controlling and Processing Parties
- As a general rule, Oriflame Software s.r.o., Na Pankráci 30/1618 140 00 Prague 4, Czech Republic, will act as data controller within Oriflame , be responsible for the Processing of Users’ Personal Data and may transfer Personal Data to any Oriflame entity in the world. Depending of the Personal Data at stake, though, another Oriflame entity may act as a data controller, in which case Oriflame Software s.r.o. will act as data processor.
If Users choose to provide Oriflame with Personal Data, they consent to the transfer and storage of that information on Oriflame servers located in Czech Republic (European Union) and elsewhere in the world where Oriflame has facilities in compliance with applicable data protection laws and regulations, even if the level of legal protection is lower than in the User’s country of residence.
Oriflame may collect and store the following personal information, including Personal Data:
- Email address, physical contact information, and (depending on the service used) sometimes financial information, such as credit card or bank account numbers;
- Shipping, billing and other information Users provide to purchase or ship an item;
- Correspondence through Systems, and correspondence sent to Oriflame;
- Other information from Users’ interaction with Systems, services, content and advertising, including computer/device and connection information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log information;
- Additional information Oriflame ask Users to submit to authenticate themselves (e.g. Oriflame may ask Users to send copies of ID, or passport to verify their identity and personal details):
- Additional information may be collected regarding employees as per applicable policy.
- Provide the services and customer support Users request;
- Resolve disputes, collect fees, and troubleshoot problems;
- Customise, measure and improve Oriflame services, content and advertising;
- Tell Users about Oriflame products, targeted marketing, service updates, and promotional offers based on their communication preferences
- Send marketing communications via email (which Users may choose not to receive at any time by changing their communications preferences in user settings or following the instructions provided with the communication); and
- Compare Personal Data for accuracy, and verify it with third parties.
Oriflame does not sell or rent Users’ Personal Data to third parties for their marketing purposes without Users’ explicit consent. Oriflame may combine Users’ Personal Data with information on other Users and information Oriflame collect from other companies and use it to improve and personalise services, content and advertising. If Users do not wish to receive marketing communications from Oriflame, they simply indicate their preference via the user settings or by following the directions provided with the communication or advertisement.
Disclosure of User Personal Data by Oriflame
Oriflame may also share Users’ Personal Data with:
- Service providers under contract who help with the business operations (such as for example fraud investigations, bill collection, customer support, support from sales consultants).
- Other third parties to whom Users explicitly ask Oriflame to send their Personal Data (or about whom Users are otherwise explicitly notified and consent to when using a specific service).
- Law enforcement agencies, other governmental agencies or third parties in response to a request for information relating to a criminal investigation, alleged illegal activity or any other activity that may expose Oriflame or Users to legal liability. The Personal Data Oriflame disclose may include User ID and User ID history, name, city, telephone number, email address, or anything else that Oriflame deems relevant.
Without limiting the above, in an effort to respect Users’ privacy, Oriflame will not otherwise disclose their Personal Data to law enforcement, other government officials, or other third parties without a legally valid request, except when Oriflame believes in good faith that the disclosure of Personal Data is necessary to prevent imminent physical harm or financial loss or to report suspected illegal activity.
If Users access Systems from a shared computer or a computer in an internet café, certain Personal Data about Users, such as their User ID or reminders from Oriflame, may also be visible to other individuals who use the computer after Users.
Oriflame uses “cookies” (small files placed on Users’ hard drive) on certain Systems to help analyse the flow of information; customize the services, content and advertising; measure promotional effectiveness, and promote trust and safety.
Certain cookies contain Personal Data – for example, by clicking to “remember me” when logging in, a cookie will store the username. Most cookies will not collect information that identifies the User, and will instead collect more general information such as how Users arrive at and use Oriflame Systems , or a User’s general location.
Generally, the cookies perform up to four different functions:
1. Essential Cookies
Some cookies are essential for the operation of the System. For example, some cookies allow Oriflame to identify registered Users and ensure they can access the whole System. If a registered User opts to disable these cookies, the User may not be able to access all of the content of the System.
2. Performance Cookies
Other cookies may be used to analyse how the Users use the Systems and to monitor System performance. This allows Oriflame to provide a high quality experience by customising the offering and quickly identifying and fixing any issues that arise. For example, performance cookies may be used to keep track of which pages are most popular and to determine why some pages are receiving error messages. These cookies may also be used to highlight products or site services that will be of interest to the Users based on their usage of the System.
3. Functionality Cookies
Functionality cookies are used to allow Oriflame to remember some Users’ preferences.
4. Behaviourally Targeted Advertising Cookies
Users are always free to decline cookies if their browser permits, although doing so may interfere with their use of some of Oriflame Systems.
Oriflame and Users do not tolerate spam. Users shall make sure to set their user settings so Oriflame communicate to them as they prefer. Oriflame automatically scan and may manually filter messages to check for spam, viruses, phishing attacks and other malicious activity or illegal or prohibited content, but Oriflame do not permanently store messages sent through these tools. Oriflame do not rent or sell these email addresses.
Users’ password is the key to their account. Users shall use unique numbers, letters and special characters, and do not disclose their Oriflame password to anyone. If Users do share their password or their Personal Data with others, they shall remember that they are responsible for all actions taken in the name of their account. If Users lose control of their password, they may lose substantial control over their Personal Data and may be subject to legally binding actions taken on their behalf. Therefore, if Users’ password has been compromised for any reason, they should immediately notify Oriflame and change their password. Oriflame will never ask for Users’ password except during the login process. Oriflame employees are subject to additional requirements in the area of information protection.
Accessing, Reviewing and Changing Users’ Personal Data
Users can see, review and change most of their Personal Data by signing on to Systems. Generally, Oriflame will not manually modify Users’ Personal Data because verifying their identity remotely may prove difficult. Thus, it is Users’ responsibility to update promptly their Personal Data if it changes or is inaccurate. Upon Users’ request to Oriflame Customer Service, Oriflame will close Users’ account as soon as reasonably possible, in accordance with applicable law. Oriflame do retain Personal Data from closed accounts to comply with law, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, and take other actions otherwise permitted by law.
Users’ Personal Data is stored on Oriflame servers. Oriflame treat Personal Data as a valuable asset and preserve it with various methods (encryption, passwords, physical security, etc.) to protect Users’ Personal Data against unauthorised access and disclosure. However, third parties may unlawfully intercept or access transmissions or private communications between Users and Systems. Therefore, although Oriflame deploy significant effort to protect Users’ privacy, Oriflame do not promise that Personal Data or private communications will always remain private.
8 Google Analytics
We use Google Analytics to understand how visitors engage with our sites and apps. This means that when you visit our website or use one of our mobile applications your browser automatically sends certain information to Google. This includes, for example, the web address of the page that you’re visiting and your IP address. You will find the details of how the Google technology collects and processes data following this link https://www.google.com/policies/privacy/partners/.