Personal Data

CHRISTIAN DIOR PRIVACY POLICY (20)

PRIVACY STATEMENT - CHRISTIAN DIOR COUTURE

Last Updated: 05-2024 

Confidentiality and security of your personal data are important to us. We would like to offer you personalized services while respecting your privacy and choices.

 

This Privacy Statement (“Statement”) is provided by The Maison Christian Dior Couture (“Maison,” “we” or “us”), a luxury retail and wholesale brand with its global headquarters in Paris, France.

 

The purpose of this Statement is to inform you in a transparent and simple manner about the processing of the personal data that you provide or that we collect through the different touchpoints you use to interact with us (e.g. in store, client services, dior.com, social media, digital apps, events), about possible transfers to third parties, as well as your rights and options to control your personal data and protect your privacy.

 

An easy to read and dedicated micro Privacy Statement is available via this link. It summarizes at high level the processing of your personal data By Christian Dior Couture.

DATA PROTECTION DECLARATION - PARFUMS CHRISTIAN DIOR

Data protection and data security are important to Parfums Christian Dior AG ("Parfums Christian Dior AG," "we"). We process your personal data responsibly, in accordance with applicable legal regulations and according to this Data Protection Declaration.

Content of this Data Protection Declaration

In this Data Protection Declaration, we inform you about how we collect and process personal data when you visit our website at https://www.dior.com ("Website") or our social media pages, contact us, or use our services.

Responsible for Data Processing

Parfums Christian Dior AG is responsible for the data processing described in this Data Protection Declaration.

If you have questions or would like to exercise your data protection rights, please contact us via dataprotection@diormail.com or write to us at: +41435479917.

Personal Data Processed During Communication and Service Provision

We collect the information you provide to us as follows:

 

  • When you contact us;
  • When you register on the website or online platform as a user;
  • When you order goods or services;
  • When you apply for a job with us;

 

This includes general personal data, such as name and contact details, as well as possibly information about your position or role within the organization on whose behalf you are contacting us.

If you order paid goods or services, we also request your financial information, such as your preferred payment method and billing address.

We also process personal data that we receive from third parties. This regularly includes personal data that we receive in correspondence or in meetings with customers, members, or business partners, such as your name and details about your role as a team member of the customer or business partner.

To the extent necessary to achieve the purposes described in this Data Protection Declaration, we also collect general personal data from publicly accessible registers, websites, or platforms (e.g., to verify your signing authority) or by obtaining information from third parties (e.g., for reference purposes in the application process, if you agree to it).

Provision and Use of Our Website and Online Platform

Use for Information

You can visit the website to learn about Parfums Christian Dior AG and our range of services without telling us who you are. As with any connection to a web server, the server on which we host the website and online platform automatically logs and stores certain technical data for a short period. This includes the IP address and operating system of your device, the date and time of use, and the type of browser you use to access the website or online platform.

Use of Our Online Platform

We operate https://www.dior.com ("Online Platform"). When you register on the Online Platform as a user, we collect the information you provide to us. This includes general personal data such as name and contact details, as well as personal information that you or other users enter, upload, generate, store, and process while using the Online Platform.

Web Analysis

We use web analytics services (currently Google Analytics, SalesForce) to evaluate the use of the website and to obtain information for its optimization. The web analytics services we use collect and store usage data using cookies. Before being transmitted to a server outside of Switzerland/EU/EEA, the requesting IP addresses are shortened. Therefore, we do not transmit any personal data to the providers of web analytics services abroad.

Advertising Technologies

We use advertising technologies from Google, Meta on the website. This allows us to target people who visit our website with relevant advertising when they visit other websites. The advertisements are displayed on the websites you visit based on an analysis of your prior use of our website. For this purpose, the providers of advertising technologies set cookies when you visit our website.

Note on the Use of Cookies

We use cookies, tags, and similar technologies on the website to provide you with the best possible user experience and to help us improve the website. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Some of the cookies we use are necessary to provide certain functions of the website. In addition, we use cookies to analyze the use of the website and to obtain information for the optimization of the website.

You can instruct your browser not to accept cookies or to ask you each time before a cookie is set. You can also delete cookies on your device by using the corresponding function of your browser.

Use of Our Social Media Pages

On our social media pages, you will find posts about current developments at Parfums Christian Dior AG as well as our range of services. The providers of social media collect and analyze usage data such as the number of visits and demographic information about the visitors to our corporate pages. We receive evaluations based on this data from the social media providers. These evaluations contain only aggregated or otherwise sufficiently anonymized data. Only the respective provider can identify you based on the collected usage data. Therefore, please note the privacy notices of the respective provider.

 

Use and Optimization of Our Newsletter

When you sign up for our newsletter, we collect the information you provide to us. This includes general personal data such as first name, last name, and email address. We use analytics services to measure and analyze the use of our newsletter. The analytics services collect and analyze usage data such as the number of people who have opened a newsletter or clicked on specific articles. We receive evaluations based on this data, which allow us to optimize our newsletter and provide you with content that interests you.

You can also inform us at any time that you wish to opt out of receiving our newsletter in the future. Please use the unsubscribe link at the end of the newsletter. If you click on this, we will no longer measure and analyze your use of the newsletter.

Purposes and Legal Basis for Processing Your Personal Data

We primarily process your personal data to inform you about our range of services and to provide, document, and bill our services in accordance with our contractual and legal obligations.

In addition, we process your personal data for the following purposes:

 

  • Responding to your inquiries and communicating with you;
  • Processing your registration or orders;
  • Responding to applications;
  • Providing the website and online platform;
  • Analyzing and optimizing the use of the website and online platform;
  • Developing and improving products and services;
  • Marketing and advertising;
  • Optimizing our posts on our social media corporate pages;
  • Informing about new developments at Parfums Christian Dior AG and new services (e.g., via our newsletter, although you can inform us at any time that you wish to opt out of receiving such information in the future);
  • Fulfilling legal obligations; and
  • Enforcing legal claims.

 

We have a legitimate interest in processing your personal data for the purposes mentioned. Some processing activities are also necessary for us to fulfill our contractual obligations to you or our legal obligations (e.g., retention obligations). On this basis, we process your personal data when and to the extent that applicable data protection law requires a legal basis or justification for the lawfulness of data processing in general or for specific processing activities.

How We Store and Protect Your Personal Data

We store your personal data only to the extent and for as long as is necessary to fulfill the purposes described in this Data Protection Declaration or to comply with legal obligations.

 

In the interest of the integrity and confidentiality of personal data, we take appropriate technical and organizational measures. Based on our risk assessment, we implement, in particular, access controls, authorization controls, and procedures for regular review, assessment, and evaluation of the effectiveness of these measures.

To Whom We Disclose Your Personal Data

To achieve the purposes described in this Data Protection Declaration, it may be necessary for us to disclose your personal data to other companies. The categories of recipients are other Parfums Christian Dior SA companies.

Location of Processing

We store and process your personal data only in Switzerland and the EU.

Your Rights Regarding Your Personal Data

You have the following rights concerning personal data that relates to you:

 

  • The right to obtain information about which personal data we store and how we process it;
  • The right to receive or transfer a copy of your personal data in a common format;
  • The right to correct your personal data;
  • The right to delete your personal data; and
  • The right to object to the processing of your personal data.

 

Please note that legal requirements and exceptions apply to these rights. To the extent permitted by law, we may refuse your request to exercise these rights. You also have the right to file a complaint with the competent data protection supervisory authority.

How We Can Change This Data Protection Declaration

We can change this Data Protection Declaration at any time, especially if we change our data processing or if new legal regulations become applicable. The version provided by Parfums Christian Dior AG at any given time is the one that applies.

WHO ARE WE?

The Maison Christian Dior Couture

Christian Dior Couture SA (head office), a public limited company under French law with its head office located at 30 avenue Montaigne, 75008 Paris, France, and all of the Christian Dior Couture affiliates with whom you share your information.

Christian Dior Couture is a story of dreams and elegance, passion and excellence; it is also a story of know-how. The creations of Christian Dior Couture express the passion for beautiful gestures and exceptional objects. From haute couture to ready-to-wear, including leather goods, watchmaking and jewelry, know-how is transformed into the art of making.

 

WHAT DATA MAY WE COLLECT OR RECEIVE ABOUT YOU?

"Personal data" means any information that could reasonably identify you either directly (e.g. your name) or indirectly (e.g. through a unique client ID number).

 

The personal data we collect depends upon the touchpoint of our interaction and is also limited to that which is relevant and appropriate for the interaction.  Unless you choose to interact with us via other touchpoints, such as (but not limited to) by making a purchase on our site, signing up for one of our programs or services, using our apps, communicating with us via email, phone or submitting online forms, or posting a comment or a like online, our data collection is limited to the use of ‘cookies’ for website visitors.

 

For customers and other individuals who sign up for programs or services or otherwise interact with us beyond browsing our site via the touchpoints described above, for example, we collect certain relevant information from you. The information we collect is related to the particular transaction as well as our overall relationship with you.  For example, if you make purchases from Dior.com or in our stores, we must collect information to process (and, if relevant, fulfill and ship) your order. We generally collect your contact details, contact preferences, and information that will allow us to make recommendations to you about our products or services that may be of interest.  We may centralize the information pertaining to our customers so that we have it organized in one place, as this helps us manage our relationship with you as well as your choices and preferences. Or, if you subscribe to our personalised newsletter, we collect your email address.

 

Should you wish to know more about the types of information we collect, please refer to the dedicated table provided via this link.

 

We invite you to keep us regularly informed in writing of any change in your contact details.

 

We Collect and Use Limited Sensitive Information.

 

As described above, we collect personal data that is described under some laws as sensitive personal data,” special categories of personal data, sensitive personal information, or similar terms (collectively referred to here as “Sensitive Personal Data”).  Here, we provide more information about which categories of the personal data described above may be designated as Sensitive Personal Data, and how we use these categories of Sensitive Personal Data.  We only use Sensitive Personal Data to provide you goods and services, and do not use such information to infer characteristics about you. Depending on what you choose to provide and how we interact with you, we may collect:

 

 

  • Account log-ins to provide Dior products and services. Account login information is used to identify an active user on any site that requires login. Login information includes first and last name and corresponding email for such account, as well as the associated account password.
  • Financial information to process your orders.  We collect and use credit or debit card information and required security or access codes in order to process payments and fulfill any order you make.
  • Passport-related information to process your orders.  We may collect passport or other government-issued ID information in connection with an order, including when you are purchasing a product in a country other than that in which you live, in order for you to make purchases free of value added tax (VAT).

HOW DO WE COLLECT OR RECEIVE YOUR DATA?

We may collect or receive data via the following touchpoints:

 

  • Use of Dior.com;
  • In-store, including in communication with our salesperson;
  • Dior events you attend;
  • Public Relations relationship and communication;
  • Contact with the Client Services;
  • Forms you complete (in store or online);
  • During your purchase journey, you will be able to choose between i) logging into your existing Dior account, ii) creating a new account, or iii) paying as a Guest;
  • Digital apps you use;
  • Digital experiences such as virtual beauty technology in store (if you choose to use that technology where offered via a retailer), or our third-party vendors may receive data via virtual try-on online;
  • Dior social media pages you visit or interact with, or other social media pages on which you post Dior content or comments;
  • Digital media advertising you click on;
  • Search engines’ paid advertising you click on;
  • Retailers (such as Department Stores) in which you have purchased a Dior product and in which you consented (e.g. via an iPad) to have your details shared with our Maison to receive its communications; or
  • Surveys or satisfaction questionnaires you answer.

FOR WHAT PURPOSES ARE YOUR DATA USED BY DIOR?

Depending on the context in which your data is collected, we use your data for:

 

  • the provision of Dior products and services, including the management of your orders, the management of personalized content, communications and interactions with Dior (digital or otherwise), and providing customer support;
  • the facilitation of showing you what your selected product would look like on you (in relation to using our try-on technology, though when online, all processing for providing the feature is done by our third-party vendors’ proprietary technology), and for certain in-store virtual try-ons, offering you the option of receiving your photo via email;
  • the management of your account and profile (for example, in order to simplify your navigation through our different country-specific websites, if you navigate to another country your customer account will automatically be duplicated in that market. This means that it will not be necessary to create a new customer account);
  • analyse the performance of our Maison on social networks in order to produce statistical analyses (studies of results by country, influence of the Maison and analysis of the campaigns implemented).
  • analyse your preferences and habits, anticipate your needs from your consumer profile and your publications/mentions on social networks.
  • personalised customer experience: we may provide you with personalised communications by means of email, postal mail, SMS or calls based on the communication preferences you have indicated and your consumer profile (where permitted) (if you have an account, please connect to either your Parfums Christian Dior account or your Christian Dior Couture account to modify your channel preferences.  Otherwise you can contact our customer service (see "Contact Us" section below)). With your free, specific, informed and unambiguous consent (where required), we use your personal data to send you personalised communications based on your interests (newsletters, offers, invitations and surveys).

 

 

In the latter two interactions (“analysing your preferences and habits” & “providing you with a personalised customer experience”), when we send personalised communications or content, we may use so-called profiling techniques. For the sake of transparency within this Statement, profiling is currently defined as any kind of automated processing of personal data which consists of using that personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict elements relating to the preferences, interests, behaviour or location of that natural person. In these circumstances, you have the right to opt-out, meaning the right to withdraw your consent by unsubscribing or see the “Contact Us” section below.

 

Should you wish to know more about the categories of processing activities for which we collect and use your information alongside indicative Legal basis for which we base such processing, please refer to the dedicated table provided via this link 

FOR HOW LONG MAY WE KEEP IT?

Please note that each Maison has its own retention periods that include the requirements regarding the products each Maison offers.

 

Unless otherwise stated, we only keep your personal data for as long as we need it to fulfill the purpose of collection, to meet your needs, or to comply with our legal or business obligations, and to fulfill the purposes described above in this Privacy Statement. By way of example, we keep your data for up to 10 years from the date of your last purchase if you are a client and up to 3 years if you are a prospect from the date of your last interaction with us.

  

When you choose to use our virtual try-on technology:

 

  • in store (where offered via a retailer) the photos or images connected with that use are stored for a maximum period of 7 days, and then irreversibly erased;
  • Online, the photos, images, and information processed to apply the selected beauty or try-on feature is never possessed by Dior (rather it is only possessed by our third-party vendor) and is not retained or stored.

 

 

When we no longer need to use your personal data, it is removed from our systems and records or anonymized so that you can no longer be identified from it.

 

We use the following criteria to determine how long to retain personal data:

 

  • Our relationship with you, and the products and services we provide to you;
  • Your requests to us regarding your information, or our products or services;
  • Any legal obligations to retain the data, or for our own legal purposes (such as enforcing our agreements or litigation);
  • Recommendations and legal requirements, including applicable international, national, federal and state statutes; and
  • Technical considerations and feasibility, and level of protections in place for your personal data.

WHO may access your data?

We communicate your information, including if possible in a form that does not allow a direct identification, to:

 

 

  • Other Dior entities as well as department stores where you buy our products in order to provide you with identical personalized service worldwide

 

 

 

  • Our trusted third-party providers, including other entities of the LVMH group, acting as subcontractors according to our instructions and on our behalf only

 

 

 

  • For example, we entrust certain services to third parties responsible for delivering a product to you, payment service providers and transaction security against fraud, third parties who assist us in the organization of our events, third parties providing services IT, digital communication and public relations agencies, third parties who assist us in customer care, third parties who assist us in qualitative surveys of our products, programs or services.

 

 

 

  • Third parties including the LVMH group wishing to know your preferences and consumption trends for our programs and services in order to improve visibility, accessibility and performance

 

 

 

  • Our trusted third-party partners assist us in the management of your orders. In particular, we entrust certain services to third parties responsible for delivering a product to you, to payment service providers and to providers ensuring the security of anti-fraud transactions.

 

 

 

  • Third-party partners, who provide advertising, marketing, website performance, analytics, and similar services for Dior, including cookies or other trackers, including for the purposes of behavior-based targeted advertising. 

 

  

Please note that these third-party partners may act as data controllers; in such cases, they have their own privacy policies. These third parties include:

 

 

  • Third parties in the event of a change of control, for legal reasons, or with your prior consent
  • Third parties wishing to know your main interests to constitute similar audiences and target prospects that match your profile. In the context of this specific data processing, Dior is not the Data Controller relating to prospecting and you will not be subject to prospecting, your data is only used to constitute profiles similar to yours
  • We may also offer you the possibility of using your social media connection data. Please note that in this case, you are sharing your profile information with us. The personal data shared depends on the configuration of the social network platform. Please note that these social networks apply their own privacy policy.

 

 

We illustrate some examples below:

- Facebook (Privacy policy accessible here)

- Google (Privacy policy here)

- Instagram (Privacy policy accessible here)

 

  • Third parties conducting statistics on our performance on social networks on our behalf
  • Third parties such as IAS (International Accreditation Service), which assists us, for example, in finding out the exposure rate of our created formats. For more information, their privacy policy is available here.

 

 

Should you wish to know more about Third Parties our Maison may use to process your personal information, please refer to the dedicated and illustrative table provided via this link.

HOW DO WE PROTECT IT AND KEEP IT CONFIDENTIAL?

We have adopted reasonable and appropriate physical, technical and organizational security safeguards to protect your data from loss, misuse, alteration, destruction or access by unauthorized third parties. The Internet, wireless networks and information storage are not 100% secure. We cannot guarantee the security of your personal data stored or sent to us. We encourage you to take precautions to protect your personal data. For example, in creating your account on dior.com, entering a personal password complying with our security requirements is compulsory and part of this Privacy Statement.

The security safeguards that we have adopted are commensurate with the sensitivity of the particular data collected.  For example, credit, debit and other payment information is subject to stricter security measures.

 

Regarding your purchases, your bank details are encrypted through Dior servers. Payments are made via a secure payment platform which is PCI-DSS certified, supplemented by control measures, to ensure the security of purchases made and to fight against fraud.

 

We also require our partners and group companies to uphold a substantially similar level of protection for your data. The measures are evaluated and updated to address new threats and challenges, as well as new legal requirements in the countries where we operate. 

 

To the maximum extent allowed by applicable law, you agree and acknowledge that Dior will not be liable or responsible for use or disclosure of your information that is the result of unauthorized or illegal access to our systems or those of our vendors, agents, contractors, affiliates, or partners. If you have reason to believe that the security of your communications or personal data has been compromised, please notify us immediately using the contact information below.

HOW DO WE ADDRESS CROSS-BORDER PROTECTIONS?

Because Dior operates in many countries across the world, some of your data may be collected, accessible or stored outside of your country of residence.  You should know that the data protection and security requirements differ from place to place and may not offer the same level of protection as those in your home country.  Nevertheless, Dior and our group companies have taken steps to ensure an adequate level of protection of your data irrespective of where it is located, such as by using data transfer methods approved by the European Commission (where the data protection laws are considered to be the strongest worldwide).  We also require our third-party partners to fulfill applicable data transfer obligations in relation to the personal data that they receive on our behalf.

 

In this context:

- Christian Dior Couture and all of its affiliates have entered into a Personal Data Processing and Transfer Agreement

- In specific cases and roles, Christian Dior Couture and other Maisons legally independent from Christian Dior Couture, such as Parfums Christian Dior, have entered into a Data Processing and Transfer Agreement

WHAT ADDITIONAL RIGHTS ARE PROVIDED FOR RESIDENTS OF CERTAIN REGIONS?

Dior has adopted the data protection and security practices described in this Statement for all individuals within scope.  In addition, we also recognize and have addressed data protection and security measures that are required on a local or regional level.  This includes, for example, those required for residents of the European Union/European Economic Area under the EU General Data Protection Regulation (GDPR) 2016/679.

 

 In particular, the GDPR provides the following rights (with some exceptions):  

 

  • The right to be informed: you have the right to obtain clear, transparent and easily understandable information about how we use your personal data, and your rights. You will find all this information in this Statement;
  • The right of access: you have the right to access to the personal data Dior holds about you;
  • The right to restriction; you have the right to suspend the use of your personal data in certain cases;
  • The right of rectification: you have the right to have your personal data rectified if it is incorrect or outdated and / or completed if it is incomplete;
  • The right to erasure / right to be forgotten: you have the right to have your personal data erased or deleted. Please note this is not an absolute right, as we may have legal or legitimate grounds for retaining your personal data;
  • The right to object to direct marketing: you can unsubscribe or opt out of our direct marketing communication at any time. You are able to do so by clicking on the “unsubscribe” link in any email or communication we send you. You are also able to request to receive non-personalized communications about our products and services;
  • The right to withdraw consent at any time for data processing based on consent: You can withdraw your consent to our processing of your data when such processing is based on consent; and
  • The right to data portability: you have the right to move, copy or transfer data from our database to another. This only applies to data that you have provided, where processing is based on a contract or your consent, and the processing is carried out by automated means.

 

 

You are also entitled to determine your personal data protection guidelines and directives in the event of death or extern circumstances.

 

You also have the right to contact the data protection authority of your country in order to lodge a complaint against the data protection and privacy practices of Dior.

 

We also wish to inform you about the contacts of other authorities in Europe that you can find and contact on the website of the European Data Protection Board: https://edpb.europa.eu/about-edpb/board/members_fr.

 

We may require proof of your identity and full details of your request before we process it.

HOW DOES DIOR PROTECT CHILDREN'S PRIVACY?

Dior has adopted practices that are designed to ensure that we do not intentionally or knowingly collect or maintain any information from children under the age of 16, though we do not monitor the age of users of our services. If we learn that we mistakenly collected any information from anyone under the age of 16, we will purge it immediately, except for responding to a question or inquiry on a one-time basis from his/her parent or legal guardian. If you are under the age of 16, you should not submit personal data on this website or any other website without the consent of your parent or guardian. If a parent or guardian of a child under 16 believes that the child has provided us with personal data, the parent or guardian of that child should contact us, see “Contact Us” section below.

 

We do not knowingly sell or share the information of children of any age.

UPDATES TO THIS STATEMENT

Dior reserves the right to change this Statement at any time at its sole discretion and will post the date it was last updated at the top of this Statement. Such changes shall be effective immediately upon posting them to Dior’s website, or otherwise providing them to you. We will provide additional notice to you if we make any changes that materially affect your privacy rights.

CONTACT US

If you have any general questions or concerns about how we process and use your personal data or would like to exercise any of your privacy rights, you may contact us at the following details:

NOTICE ABOUT SOCIAL LOGIN

Privacy Notice – Register using social providers

 

  1.  For what activities personal data are processed

 

By creating a Dior account, logging on Dior.com via Google, Facebook, Line, Kakao or by binding your Dior account to your Google, Facebook, Line, Kakao accounts, in this case, you are sharing your profile information with us. The personal data shared depends on the configuration of the social network platform.

In order to facilitate the account creation process, we can pre-fill the account creation form with information retrieved from the social provider account.

 

  1. What data are exactly involved :

 

The types of information that Dior can collect depends on the settings selected for that provider and is subjected to the processing details under their own established privacy policies. Here are the types of information per

 

  • Google : first name and last name, e-mail, language preferences (not used), profile picture (not used)
  • Facebook : first name and last name, e-mail, profile picture (not used)
  • Kakao login : fullname (not used), e-mail, phone number
  • Line : first name and last name, e-mail, phone number, profile picture (not used)

 

 

3. Who is the Data controller: is Christian Dior Couture SA (registered office), a public limited company under French law whose registered office is located at 30 avenue Montaigne, Paris 8, France, and all the affiliates of Christian Dior Couture with whom you share your information.

Please note that as displayed in the section “Who may access your data” referred to in our global Privacy Statement   your social media connection data is administered and managed by the above listed social media platforms acting on your social media account and may act as Data Controller. Please note that these social networks apply their own privacy policy, settings and standards.

4. Where can I find further information? Please contact us as below if you wish to exercise your rights under applicable Data Protection Laws or if you have any questions or complaints regarding the processing of your personal data.

- By email at privacy@christiandior.com

- By postal mail: Christian Dior Couture, 30 avenue Montaigne, 75008 Paris, France

More details can be found in our global Privacy Statement at https://www.dior.com/en_gb/fashion/personal-data

NOTICE ON THE PROCESSING OF DATA SHARED WITH THE LVMH GROUP

What is the context of the processing?  

Christian Dior Couture belongs to the LVMH Group, which comprises many exceptional Maisons that offer high quality products and services in all sectors including  Fashion & Leather Goods, Perfumes & Cosmetics, Watches & Jewelry, Wines & Spirits, Selective Retailing and Hospitality, Culture & leisure. The list of all LVMH Maisons is available at https://www.lvmh.com. If you are customer of our Maison, you may also be a customer of other LVMH Maisons.

What is the purpose of the processing?
We endeavor to improve your experience across the LVMH Maisons you sent to by proposing personalized offers and services and customized marketing communications that correspond to your interests across LVMH Maisons. This relies on knowing your preferences and interests. We will be able to enrich your Dior profile with this information.

How is the processing conducted?
If you consent we will share the purchases you have made with us during the last 3 years with LVMH, our parent company, in a pseudonymous way (which means that your name and your contact details will not be sent to LVMH). Your purchases will be analyzed and matched with purchases made from other Maisons of the LVMH Group where you have given a similar consent. Each Maison that has your consent will receive back from LVMH generalized information concerning your purchasing habits and preferences with other Maisons, and Dior may reach out to you to offer Dior products based on this information. Should you wish further information on how we process or share your personal data, please visit the dedicated sections of the general Dior Privacy Statement: “FOR WHAT PURPOSES is your data used by Dior?” and “WHO can access your data?”

Who is the Data Controller?
Christian Dior Couture will remain the sole data controller which means that it is the company that is responsible for the information that you provide to it. LVMH acts as our data processor, or service provider, and will not use your data for any purpose other than the one described above. For example, LVMH will not use your data for its own purposes, will not contact you for marketing purposes based on the data we provide, and will not share information about you with Maisons of the LVMH Group to which you are not a customer and/or to whom you have not given consent.

NOTICE ABOUT 30 MONTAIGNE ACTIVITIES

PRIVACY STATEMENT - CHRISTIAN DIOR –  30 Montaigne Hotel, Restaurant and Gallery

The Maison Christian Dior Couture attaches particular importance to the processing, confidentiality and security of your personal data. We are committed to offering you personalized services while respecting your privacy and personal choices.

 

The purpose of this privacy policy is to inform you in a clear, simple and complete manner of the processing carried out on the personal data that you provide to us, or that each of our Affiliates can collect from the various outlets, contact you may have with us (e.g. shop, Customer Service, dior.com, social networks, digital applications, events), their possible transfer to third parties as well as your rights and the options you have to control your information protect your privacy, in accordance with current regulations.

 

In particular, this Privacy Statement is dedicated to the collection, handling and usage of your personal data during your various interaction with the a) Hotel, b) the Restaurant or c) the Gallery located at 30 Montaigne (also named herewith as “30 Montaigne”). Throughout this dedicated Privacy Statement, in relation to other processing activities, notably with regards to your purchases of Dior products, please refer to the generic Privacy Statement which can be reached at this link.

 

The Data Controller will be Maison Christian Dior Couture, within the meaning of the regulations applicable to personal data and in particular with regard to article 24 of the Regulations (EU) 2016/679 (hereinafter "GDPR").

 

In this Statement dedicated to the activities of the “30 Montaigne” and your interaction with it, you will find information about:

• Who are we?

• What data we may collect about you

• How we collect or receive your data

• For what purposes we use your data

• How long we keep them

• Who are the recipients of your data

• How we protect them and ensure their confidentiality

• How we treat your preferences and your rights stemming from European Regulation

• The additional protections we offer to residents of certain regions

• How to contact us if you have questions about our use of your personal data

•Modification of this privacy statement

 

WHO are we ?

The Maison Christian Dior Couture

 

Christian Dior Couture SA (head office), a public limited company under French law with its head office located at 30 avenue Montaigne, Paris 8, France, registered in the Paris Trade and Companies Register under number 612 035 832 and represented by Hien Tran Trung in his capacity as Administrative and Financial Director of Christian Dior Couture,

And all of the Christian Dior Couture affiliates with whom you share your information

Christian Dior Couture is a story of dreams and elegance, passion and excellence; it is also a story of know-how. The creations of Christian Dior Couture express the passion for beautiful gestures and exceptional objects. From haute couture to ready-to-wear, including leather goods, watchmaking and jewelry, know-how is transformed into the art of making.

 

WHAT data do we collect about you?

"Personal data" means any information that identifies you either directly (such as your name) or indirectly (for example, using a unique customer number).

 

The personal data we collect depends on the point of contact through which you interact with us, as well as the purposes of this interaction as described in this Policy and are also limited to those which are relevant and appropriate for this interaction. Visitors to the Dior.com website, or applicable websites for the “30 Montaigne”, who view our products, services information and offers can choose to do so without logging in, and the same is true for point-of-sale search and browsing on social media. Unless you choose to interact with us through these contact points, for example:

 

• by making a purchase on our dedicated sites,

• by subscribing to one of our programs or services,

• by writing to us via the consumer contact forms,

• or by writing us a comment in the free online order fields,

 

or else, our data collection is limited to the use of "cookies" (visitors) for website visitors whose conditions are specifically defined by our cookie policy and according to your preferences. For the sake of transparency and clarity, our cookie management policy is separate from this general policy. The cookie management policy is accessible from this link.

 

Depending on the data that you communicate to us or that you share with us, personal data may include information concerning:

• Your identity and contact details: surname, first name, postal address, email address, telephone number, and for the “30 Montaigne” Hotel only: Passport details

• Your interests

• A history of your purchases (in store or online, including your orders, tracking and invoices, amount and type of purchase)

• Your requests via our customer service or our public relations service

• The Dior events in which you participate

• Your food intolerance in relation to the “30 Montaigne” Restaurant

• Your satisfaction and comments on our programs, services and products

 

Regarding your purchases, payments are made via a secure payment platform, supplemented by control measures, including encryption of contact details, in order to guarantee the security of purchases made and to fight against fraud. Your bank details are therefore not accessible on Dior's servers.

 

We invite you to ensure that your data is regularly updated, either by modifying it directly on our sites or, by informing us in writing of any modification by referring to the dedicated section "How to contact us".

 

HOW do we collect or receive your data?

As part of our relationships, the data we collect may be collected through the following contact points:

• Course on dedicated websites such as galeriedior.com and billetterie.galeriedior.com

• Exchanges with our advisers at the “30 Montaigne”

• Dior events in which you participate

• Relationship with our public relations services

• Contact with Customer Service

• Forms that you fill out (at the “30 Montaigne” or online)

• Digital applications with which you interact

• Third party data providers with whom you share information

• Retailers for whom you agree to receive our communications

• Satisfaction surveys or questionnaires to which you answer

 

We make sure to identify the personal data essential for the purpose for which it is collected by indicating it with an asterisk like this ‘(*)’ on each personal data collection form. If you do not fill in these mandatory fields, we will not be able to respond to your requests and / or provide you with the services requested. The other information is optional and allows us to know you better and improve our communications and services to you. Although not mandatory, we recommend that you fill them in to allow you to benefit from the best possible experience during our interactions with you.

 

Further information on how Dior collects your data can be found at the generic Privacy Statement which can be reached at this link.

 

FOR WHAT PURPOSES is your data used by Dior?

We are required to use your data for purposes defined according to the nature of our relationships. Thus, depending on the context in which your data is collected, it may be used for one or more of the following purposes:

• Managing your orders in relation to Grand Montaigne goods or services

• Management of personalized content and Dior communications (digital or not)

• Managing your profile

• Managing your requests in connection with Dior

• The management of events in which you register / participate in relation for instance of the Grand Montaigne Gallery

• The management of our website and our digital applications in relation to Grand Montaigne goods or services

• Management and improvement of our products and services, image and reputation

• Transaction management (securing online payments, prevention of fraud, incidents related to payments and debts)

• Analysis and personalization purposes: with your explicit consent (when required), we use your personal data to send you personalized communications (newsletters, offers, invitations and surveys) and analyze your preferences and habits, anticipate your needs from of your consumer profile. We can make you benefit from our personalized communications by means of emails, postal letters, SMS or calls according to the communication preferences that you have indicated to us and your consumer profile (when authorized).

 

Further information on Dior processing activities can be found at the generic Privacy Statement which can be reached at this link.

 

We ensure the legal basis for the processing of your data according to the purpose (s) concerned, which may be, depending on the context in which it is collected:

• Your explicit consent: for example, for the purposes of managing our personalized commercial offers, managing your browsing via cookies under the conditions defined by our Cookies Policy, or establishing your consumer profile in applicable cases;

• The implementation of a contract, for example for your access to your customer account, the processing and follow-up of your orders;

• A legal obligation when processing is required by law, for example, keeping purchase invoices to prevent fraud;

• Our legitimate interest: for example, to improve our products and services, defend ourselves or secure our tools

 

HOW LONG can we keep them?

We keep your personal data only for the time necessary for the purpose pursued. In general, your personal data is stored in a dedicated “30 Montaigne” database:

 

 

  • For the guests staying at the “30 Montaigne” Hotel: 5 years starting at the date of the check in.

 

 

 

  • For the customers of “30 Montaigne” Restaurant: 3 years starting at the date of the meal payment

 

 

 

  • For the visitors of the “30 Montaigne” Gallery: 3 years starting at the date of the Gallery visiting ticket issuance.

 

 

When we no longer need to use your personal data, it is deleted from our systems and our registers or made anonymous so that it can no longer be identified, subject to retention for archival purposes. claims and litigation management as well as to meet our legal and / or regulatory obligations and / or to respond to requests from authorities authorized to make the request

 

WHO can access your data?

Your data is intended for the services of Maison Christian Dior concerned by your requests. We ensure that only duly authorized persons can access your personal data when this is necessary for the aforementioned purposes.

 

We do not pass your data on to third parties for commercial purposes.

 

At high level, we are only required to communicate your information if necessary, and if possible in a form that does not allow direct identification to:

 

• Other Dior entities as well as department stores where you buy our products in order to provide you with identical personalized service worldwide

 

• Our trusted third-party providers, including other entities of the LVMH group, acting as subcontractors according to our instructions and on our behalf only.

For example, we entrust certain services to third parties responsible for delivering a product to you, payment service providers and transaction security against fraud, third parties who assist us in the organization of our events, third parties providing services IT, digital communication and public relations agencies, third parties who assist us in customer service, third parties who assist us in qualitative surveys of our products, programs or services.

 

• Third parties including the LVMH group wishing to know your preferences and consumption trends for our programs and services in order to improve visibility, accessibility and performance.

 

• Our trusted third party partners assist us in the management of your orders. In particular, we entrust certain services to third parties responsible for delivering a product to you, to payment service providers and to providers ensuring the security of anti-fraud transactions. Please note that these partners may act as data controllers; in this case, they have their own privacy policies.

 

Further information on how Dior shares your data can be found at the generic Privacy Statement which can be reached at this link.

 

HOW do we protect and ensure the confidentiality of your data?

We take all the necessary precautions to guarantee the confidentiality and security of your data and to prevent it from being distorted, damaged, destroyed or from unauthorized third parties having access to it.

 

We ask our partners and group companies to maintain a level of protection similar to ours concerning your personal data. The security measures put in place are evaluated and updated to face new threats and new challenges, as well as new legal requirements in the countries where we operate.

 

HOW do we deal with cross-border protections?

Given the presence of Dior in many countries around the world and in order to provide you with personalized service worldwide, some of your data may be collected, accessible or stored outside your country of residence. You should be aware that data protection and security requirements differ from place to place and may not offer the same level of protection as those of your country of origin. However, Dior and our group companies have taken measures to guarantee an adequate level of protection of your data, regardless of their location.

 

Further information on how Dior processing handle data transfer can be found at the generic Privacy Statement which can be reached at this link.

 

WHAT additional protections are provided for residents of certain regions?

Dior has adopted the data protection and security practices described in this privacy policy for all individuals concerned. In addition, we have also identified and taken into account the data protection and security measures required at local or regional level. This includes, for example, those required for residents of the European Union / European Economic Area under the General EU Data Protection Regulation (GDPR) 2016/679.

 

In particular, the GDPR provides the following rights:

 

• Right to information: you have the right to obtain clear, transparent and understandable information about how we use your personal data and about your rights. You will find all of this information in this policy

 

• Right of access: you have the right to access the personal data that Dior holds about you

 

• Right of rectification: you have the right to have your personal data rectified if it is inaccurate or obsolete and / or to supplement it if it is incomplete

 

• Right to erasure / right to be forgotten: you have the right to have your data erased or deleted. However, this right may be limited by a legal reason or our legitimate interest in keeping your personal data

 

• Right of opposition: you can at any time request to no longer receive our communications relating to our offers, news and events. You can in particular use the hypertext link provided for this purpose in each email or communication that we send to you. You can also request to receive non-personalized communications about our products and services

 

• Right to withdraw consent at any time for data processing based on consent: you can withdraw your consent relating to our processing of your data when this processing is based on consent

 

• Right to data portability: you have the right to move, copy or transfer data from our database to another. This right only applies to the data you have provided, and provided that the processing is based on a contract or your consent and carried out using automated processes

 

You, or one of your legally designated representatives, also have the right to formulate specific or general directives concerning the conservation, erasure and communication of your post-mortem data and this in application of the Law for a Digital Republic.

 

HOW to contact us ?

1 / Please contact us in the manner below if you wish to exercise these rights or if you have questions or complaints regarding the processing of your personal data.

Christian Dior Couture

-             By email at privacy@christiandior.com

-             By postal mail: Christian Dior Couture, 30 avenue Montaigne, 75008 Paris, France

2 / You also have the right to contact the Dior lead data protection authority, the CNIL, at any time, in order to lodge a complaint against Dior's data protection and privacy practices. The CNIL can be contacted using the following information:
Commission Nationale de l’Informatique et les Libertés (CNIL)

3 Place de Fontenoy
TSA 80715 - 75334 Paris, Cedex 07
Phone. +33 1 53 73 22 22
Fax +33 1 53 73 22 00
Website: http://www.cnil.fr/

CHRISTIAN DIOR COUTURE - CANDIDATE PRIVACY STATEMENT

Statement relating to the protection of your personal data collected in the context of recruitment

This Privacy Statement for Candidates (hereinafter the “Privacy Statement”) is intended to provide visitors and users (“You”) of the www.dior.com website, as well as of all the Dior’s websites with .com, .it, .ru, .co, .jp, .cn domain names suffixes (hereinafter collectively the “Website”) with information relating to how the Maison Christian Dior Couture (hereinafter “Christian Dior Couture” or “We/Us”) processes your personal data (hereinafter the “Personal Data” or “Data”) and about your rights in this respect.

Christian Dior Couture places the highest priority and takes the utmost care to protect your Personal Data.

1. Who are we? Who is the Data Controller of your Personal data?

During your recruitment experience, and in order to inform you in advance, the Data Controller will be Christian Dior Couture within the meaning of the regulations applicable to personal data and in particular with regard to article 24 of the Regulations (EU) 2016/679 (hereinafter "GDPR").

As an example, referring to some of the Maison iconic products:

• Lady Dior bag

• 30 Montaigne bag

• Bar jacket

Christian Dior Couture SA (head office), a public limited company under French law with its head office located at 30 avenue Montaigne, Paris 8, France, registered with the Paris Trade and Companies Register under number 612 035 832 and represented by Hien Tran Trung in his capacity as Administrative and Financial Director of Christian Dior Couture,

And all Christian Dior Couture affiliates

Christian Dior Couture is a story of dreams and elegance, passion and excellence; it is also a story of know-how. The creations of Christian Dior Couture express the passion for beautiful gestures and exceptional objects. From haute couture to ready-to-wear, including leather goods, watchmaking and jewelry, know-how is transformed into the art of making.

2. What is a “personal data”?

Personal Data refers to any information or pieces of information that could identify You either directly (e.g. your name, surname, email, home address, etc.) or indirectly (e.g. through pseudonymized data, such as a unique ID number, etc.). It may also include unique identifiers like your computer’s IP address.

3. Why and how do We use the Personal Data that We collect?

3.1 How do We collect your Personal Data?

 We collect your Personal Data as follows:

 

  • directly from You when You use our Website and our services (completion of various forms on the Website, direct communication with Us through our institutional departments, etc.);
  • automatically when You access or use the Website (technical details, IP address, browsing information, etc.).

 

3.2 What Data do We collect?

We collect several types of Personal Data about You:

 Personal Data that We collect directly from You

We collect Personal Data that You provide directly when You use our Website.

This is specifically the case when You:

 

  • interact with Us through the contact forms,
  • register to receive our newsletters or institutional documentation,
  • apply to job offers.

 

The categories of Personal Data that We collect include:

 

  • Identification and contact information: e.g., last name, first name, mailing address, contact details needed to identify You when You interact with Us,
  • Application information: e.g., last name, first name, email address, telephone number, professional experience and all the information You provide by sending your application and/or your curriculum vitae: photo, skills, education level, spoken languages, salary expectations, home address, hobbies, family status, etc.  We only collect and store this Data in connection with the management of our own job offers and do not use them for any other purposes, including for commercial purposes.

 

Personal Data that We collect automatically

We automatically collect certain Data about You when You access or use the Website, specifically:

 

  • Technical information: We collect information about the device that You use to login, as well as your use of the Website (g., operating system, type of browser used, whether a proxy is used, location of the device inferred from your IP address that identifies your computer, access time, accessed pages and the link that enabled You to access our Website),
  • Browsing information: We use tracking technologies to collect Data about You when You use our Website.

 

3.3 On what legal grounds and for which purposes do We use the Data that We collect?

 In accordance with current personal data protection regulations, We only collect Personal Data when We have a legal basis to do so.

Personal Data is collected either:

        i.          based on pre-contractual measures

       ii.          based on your consent,

      iii.          in our legitimate interest, or

     iv.          to meet our legal obligations.

(i) We collect your Personal Data on the basis of pre-contractual measures, in particular in the context of the processing of applications (CV and motivation letter) and management of interviews.

(ii) We collect Personal Data based on your consent, for the following purposes

 

  • Share opportunities that can match your profile and keep you up to date on the life of Maison Dior,

 

 (iii) We collect Personal Data based on our legitimate interest, for the following purposes:

 

  • ·        to manage your requests and queries: We use your Data to send You the information You request,
  • to defend our interests in the event of a dispute or court action,
  • to manage cybersecurity of the Website,
  • to prevent fraudulent acts in order to ensure the security of our assets and contents.

 

(iv) We may also store your Personal Data when the law requires Us to do so or to defend our legal rights.

3.4 Who has access to your Data? 

3.4.1 Accessibility within Christian Dior Couture

Your Data is processed by the Christian Dior Couture for the purposes described above and are only accessible to Christian Dior Couture personnel who need to know it to perform their duties.

In this respect, your Personal Data is processed by the following departments of Christian Dior Couture and/or other Maisons of the LVMH Group:

 

  • Christian Dior Couture Institutional Communication Department and Financial Communication Department for the management of your requests and queries, as well as to send You newsletters;
  • Christian Dior Couture Human Resources department to manage your applications to job offers;
  • Christian Dior Couture Security Department to manage cybersecurity of the Website;
  • Christian Dior Couture Fraud and Legal Departments to manage fraudulent acts or legal claims if any.

 

3.4.2 Accessibility by third parties

Certain third parties may have access to your Data, specifically:

(i) our subcontractors and service providers acting for technical and logistical reasons (carriers, Website hosting, security and maintenance providers, fraud management service providers, technical service providers responsible for sending e-mails and newsletters, anti-spam and anti-bot services, recruitment agencies which may provide Us with advice on the management of our candidates’ databases and help with the selection of profiles within such databases, etc.);

(ii) other LVMH Group affiliates for recruitment purposes: when you apply to an LVMH Group affiliate’s job offer, this affiliate collects and processes your Data as independent data controller. In such case, your Data will be processed according to this affiliate’s personal data protection policy, which You may obtain by contacting it directly. Likewise, the rights You enjoy pursuant to personal data protection laws must be directly enforced against it;

(iii) any authority, court or other third party when disclosure is required by law, regulations or a judicial decision, or if such disclosure is necessary to protect and defend our rights.

3.5 Is any Personal Data transferred outside of the European Economic Area?

Your Data is processed in France by the Maison Christian Dior Couture. However, We may rely on certain service providers, which are located abroad or which themselves rely on processors located abroad, including outside of the European Economic Area (EEA) in countries where personal data protection laws differ from those that apply in the EEA.

With reference to the data relating to applications, the LVMH Group has adopted binding corporate rules ("BCR") which the French Supervisory Authority (the CNIL) has declared to be compliant with current legislation and suitable for offering an adequate level. of protection in case of data transfer within the Group, also outside the European Economic Area.

3.6 How long do We store your Data?

Data is stored as long as required for the purpose for which it was collected and, in any case, will be destroyed at the end of such period.

Please see the list below for additional details about these periods.

Any transfer of your Data outside of the EEA will take place with appropriate safeguards in place that comply with applicable personal data protection regulations. Upon request, We will provide You with a copy of applicable safeguards.

 

  • Purpose: Management of your requests and queries
  • Data categories: Identification Data (last name, first name, mailing address, contact details needed to identify You when You interact with Us).
  • Period of storage before erasure: Duration required to manage your requests and queries. Your Data will then be either deleted or anonymized, unless we need to keep it to meet our legal obligations for the applicable statutory retention period.         

 

 

 

  • Purpose: Sending You our newsletters
  • Data categories: Your email address
  • Period of storage before erasure: Duration of your subscription. Then, the Data will be destroyed or anonymized.

 

 

 

  • Purpose: Management of your applications to job offers
  • Data categories: Application information
  • Period of storage before erasure: Duration of two (2) years from when the Data has been provided or from the last contact with You. At the end of this 2-year period, Christian Dior Couture may contact You to know whether You want Christian Dior Couture to keep retaining your Personal Data, for the purpose of informing You of an opportunity that may arise and match your career aspirations and skills. In any event, your Data will be erased at your request, within a maximum period of 1 month from your request.

 

 

 

  • Purpose: Security of the Website
  • Data categories: Technical information of your device (IP address, device type, browser ID, etc.)
  • Period of storage before erasure: 6 months, then the Data is either deleted or anonymized.

 

 

 

  • Purpose: Disputes/complaints
  • Data categories: Data concerning the dispute/complaint
  • Period of storage before erasure: Duration of the complaint + 5 years from the complaint.
  • In the event of a court action: duration of proceedings through full enforcement of the legal decision or settlement agreement

 

4. What are your rights in relation to your Data?

 4.1 Access, rectification and portability

 In accordance with current regulations, You have the right to access your Data. You may also request correction of Your Personal Data should they be inaccurate. Depending on the purpose of processing, You also have the right to have incomplete Personal Data completed.

To respond to your request, We may ask You to provide Us with a proof of your identity. We may also need to ask You for additional information or supporting documents. We will make every effort to respond to your request as soon as possible.

You may, to the extent provided for by law, exercise your right to Data portability which allows You to retrieve, in an interoperable format, the Personal Data that You provided to Us.

4.2 Right to erasure of your Data and to limitation of the processing of your Data

 You may request erasure of your Personal Data if:

 

  • You believe that our processing of your Personal Data is no longer needed for the purposes described in this Privacy Policy,
  • You believe that the processing is unlawful or You contest the accuracy of the Data We process about You,
  • You withdrew your consent to the processing of your Data.

 

Alternatively, to the extent provided for by law, You may request limitation of the processing of your Data.

Please note that despite the exercise of your right to erasure or processing limitation, We will store some of Your Personal Data when the law requires Us to do so, or to exercise or defend our rights.

4.3 Right to establish instructions for the management of your Personal Data after your death

For France and when mandatory local provisions so provide, You may determine how You want Us to handle your Personal Data upon your death.

4.4 Procedure to exercise your Data protection rights

You can exercise your data protection rights in the following ways or if you have any questions or complaints about the processing of your personal data.

 

 

You also have the right to contact Dior’s lead Supervisory Authority, the CNIL, at any time in order to file a complaint against Dior’s data protection and privacy practices. The CNIL can be contacted by using the following information:

 

Commission Nationale de l'Informatique et des Libertés – CNIL

3 Place de Fontenoy
TSA 80715 - 75334 Paris, Cedex 07
Phone. +33 1 53 73 22 22
Fax +33 1 53 73 22 00
Website: http://www.cnil.fr/

We also wish to inform you about the contacts of other authorities in Europe that you can find and contact on the website of the European Data Protection Board: https://edpb.europa.eu/about-edpb/board/members_en

When the processing of your Data is based on your consent (e.g., subscription to the newsletter), You may withdraw your consent at any time without justification. This right can be exercised by changing your options regarding subscriptions to our newsletters by clicking on the hyperlink provided for this purpose in each email We send You.

5. How is your Personal Data secured?

Christian Dior Couture uses technical and organizational measures that comply with French and EU legal and regulatory requirements, to keep your Data secure and confidential. Under written agreements, Christian Dior Couture requires its service providers and processors to provide safeguards and implement sufficient security measures to protect the Personal Data they have agreed to process, in accordance with applicable requirements under personal data protection laws. However, Christian Dior Couture does not control all risks related to the operation of the Internet and draws your attention to the inherent risks of using any website.

6. Third party websites

There may be links to third-party websites (such as LVMH Group affiliates’ websites) that We do not control, and which are governed by their own confidentiality and personal data protection policies. This Privacy Statement does not apply to third-party websites. Please review the confidentiality and personal data protection policies of the third-party websites that You visit to understand how they process your Data. Christian Dior Couture shall not be liable for any use of your Data by any third parties.

PARFUMS CHRISTIAN DIOR - CANDIDATE PRIVACY STATEMENT

Statement relating to the protection of your personal data collected in the context of recruitment

This Privacy Statement for Candidates (hereinafter the “Privacy Statement”) is intended to provide visitors and users (“You”) of the www.dior.com website, as well as of all the Dior’s websites with .com, .it, .ru, .co, .jp, .cn domain names suffixes (hereinafter collectively the “Website”) with information relating to how the Maison Parfums Christian Dior (hereinafter “Parfums Christian Dior” or “We/Us”) processes your personal data (hereinafter the “Personal Data” or “Data”) and about your rights in this respect.

Parfums Christian Dior places the highest priority and takes the utmost care to protect your Personal Data.

 

 

  1. Who are we? Who is the Data Controller of your Personal data?

 

During your recruitment experience, and in order to inform you in advance, the Data Controller will be Parfums Christian Dior within the meaning of the regulations applicable to personal data and in particular with regard to article 24 of the Regulations (EU) 2016/679 (hereinafter "GDPR").

As an example, referring to some of the Maison iconic products:

 

  • J’adore
  • Miss Dior
  • Capture Total

 

Parfums Christian Dior S.A. (head office), a public limited company under French law with its head office located at 33 avenue Hoche, Paris 8, France, registered with the Paris Trade and Companies Register under number 552 065 187 and represented by Laurent Kleitman in his capacity as President Director General Parfums Christian Dior,

And all Parfums Christian Dior affiliates

The Dior soul is expressed in each of the Maison's products and in the attention paid to each stage of their manufacture. From Grasse in Paris to the Jardins Dior, Parfums Christian Dior sublimates the finest materials so that each of its creations contributes to its aura around the world.

2. What is a “personal data”?

Personal Data refers to any information or pieces of information that could identify You either directly (e.g. your name, surname, email, home address, etc.) or indirectly (e.g. through pseudonymized data, such as a unique ID number, etc.). It may also include unique identifiers like your computer’s IP address.

3. Why and how do We use the Personal Data that We collect?

3.1 How do We collect your Personal Data?

 We collect your Personal Data as follows:

 

  • directly from You when You use our Website and our services (completion of various forms on the Website, direct communication with Us through our institutional departments, etc.);
  • automatically when You access or use the Website (technical details, IP address, browsing information, etc.).

 

3.2 What Data do We collect?

We collect several types of Personal Data about You:

 Personal Data that We collect directly from You

We collect Personal Data that You provide directly when You use our Website.

This is specifically the case when You:

 

  • interact with Us through the contact forms,
  • register to receive our newsletters or institutional documentation,
  • apply to job offers.

 

The categories of Personal Data that We collect include:

 

  • Identification and contact information: e.g., last name, first name, mailing address, contact details needed to identify You when You interact with Us,
  • Application information: e.g., last name, first name, email address, telephone number, professional experience and all the information You provide by sending your application and/or your curriculum vitae.  We only collect and store this Data in connection with the management of our own job offers and do not use them for any other purposes, including for commercial purposes.

 

Personal Data that We collect automatically

We automatically collect certain Data about You when You access or use the Website, specifically:

 

  • Technical information: We collect information about the device that You use to login, as well as your use of the Website (g., operating system, type of browser used, whether a proxy is used, location of the device inferred from your IP address that identifies your computer, access time, accessed pages and the link that enabled You to access our Website),
  • Browsing information: We use tracking technologies to collect Data about You when You use our Website.

 

3.3 On what legal grounds and for which purposes do We use the Data that We collect?

 In accordance with current personal data protection regulations, We only collect Personal Data when We have a legal basis to do so.

Personal Data is collected either:

        i.          based on pre-contractual measures

       ii.          based on your consent,

      iii.          in our legitimate interest, or

     iv.          to meet our legal obligations.

(i) We collect your Personal Data on the basis of pre-contractual measures, in particular in the context of the processing of applications (CV and motivation letter) and management of interviews.

(ii) We collect Personal Data based on your consent, for the following purposes

 

  • Share opportunities that can match your profile and keep you up to date on the life of Maison Dior,

 

 (iii) We collect Personal Data based on our legitimate interest, for the following purposes:

 

  • ·        to manage your requests and queries: We use your Data to send You the information You request,
  • to defend our interests in the event of a dispute or court action,
  • to manage cybersecurity of the Website,
  • to prevent fraudulent acts in order to ensure the security of our assets and contents.

 

(iv) We may also store your Personal Data when the law requires Us to do so or to defend our legal rights.

3.4 Who has access to your Data? 

3.4.1 Accessibility within Parfums Christian Dior

Your Data is processed by the Maison Parfums Christian Dior for the purposes described above and are only accessible to Parfums Christian Dior personnel who need to know it to perform their duties.

In this respect, your Personal Data is processed by the following departments of the Maison Parfums Christian Dior and/or other Maisons of the LVMH Group:

 

  • Parfums Christian Dior Institutional Communication Department and Financial Communication Department for the management of your requests and queries, as well as to send You newsletters;
  • Parfums Christian Dior Human Resources department to manage your applications to job offers;
  • Parfums Christian Dior Security Department to manage cybersecurity of the Website;
  • Parfums Christian Dior Fraud and Legal Departments to manage fraudulent acts or legal claims if any.

 

3.4.2 Accessibility by third parties

Certain third parties may have access to your Data, specifically:

(i) our subcontractors and service providers acting for technical and logistical reasons (carriers, Website hosting, security and maintenance providers, fraud management service providers, technical service providers responsible for sending e-mails and newsletters, anti-spam and anti-bot services, recruitment agencies which may provide Us with advice on the management of our candidates’ databases and help with the selection of profiles within such databases, etc.);

(ii) other LVMH Group affiliates for recruitment purposes: when you apply to an LVMH Group affiliate’s job offer, this affiliate collects and processes your Data as independent data controller. In such case, your Data will be processed according to this affiliate’s personal data protection policy, which You may obtain by contacting it directly. Likewise, the rights You enjoy pursuant to personal data protection laws must be directly enforced against it;

(iii) any authority, court or other third party when disclosure is required by law, regulations or a judicial decision, or if such disclosure is necessary to protect and defend our rights.

3.5 Is any Personal Data transferred outside of the European Economic Area?

Your Data is processed in France by the Maison Parfums Christian Dior. However, We may rely on certain service providers, which are located abroad or which themselves rely on processors located abroad, including outside of the European Economic Area (EEA) in countries where personal data protection laws differ from those that apply in the EEA.

With reference to the data relating to applications, the LVMH Group has adopted binding corporate rules ("BCR") which the French Supervisory Authority (the CNIL) has declared to be compliant with current legislation and suitable for offering an adequate level. of protection in case of data transfer within the Group, also outside the European Economic Area.

3.6 How long do We store your Data?

Data is stored as long as required for the purpose for which it was collected and, in any case, will be destroyed at the end of such period.

Please see the list below for additional details about these periods.

Any transfer of your Data outside of the EEA will take place with appropriate safeguards in place that comply with applicable personal data protection regulations. Upon request, We will provide You with a copy of applicable safeguards.

 

  • Purpose: Management of your requests and queries
  • Data categories: Identification Data (last name, first name, mailing address, contact details needed to identify You when You interact with Us).
  • Period of storage before erasure: Duration required to manage your requests and queries. Your Data will then be either deleted or anonymized, unless we need to keep it to meet our legal obligations for the applicable statutory retention period.         

 

 

 

  • Purpose: Sending You our newsletters
  • Data categories: Your email address
  • Period of storage before erasure: Duration of your subscription. Then, the Data will be destroyed or anonymized.

 

 

 

  • Purpose: Management of your applications to job offers
  • Data categories: Application information
  • Period of storage before erasure: Duration of two (2) years from when the Data has been provided or from the last contact with You. At the end of this 2-year period, Parfums Christian Dior may contact You to know whether You want Parfums Christian Dior to keep retaining your Personal Data, for the purpose of informing You of an opportunity that may arise and match your career aspirations and skills. In any event, your Data will be erased at your request, within a maximum period of 1 month from your request.

 

 

 

  • Purpose: Security of the Website
  • Data categories: Technical information of your device (IP address, device type, browser ID, etc.)
  • Period of storage before erasure: 6 months, then the Data is either deleted or anonymized.

 

 

 

  • Purpose: Disputes/complaints
  • Data categories: Data concerning the dispute/complaint
  • Period of storage before erasure: Duration of the complaint + 5 years from the complaint.
  • In the event of a court action: duration of proceedings through full enforcement of the legal decision or settlement agreement

 

4. What are your rights in relation to your Data?

 4.1 Access, rectification and portability

 In accordance with current regulations, You have the right to access your Data. You may also request correction of Your Personal Data should they be inaccurate. Depending on the purpose of processing, You also have the right to have incomplete Personal Data completed.

To respond to your request, We may ask You to provide Us with a proof of your identity. We may also need to ask You for additional information or supporting documents. We will make every effort to respond to your request as soon as possible.

You may, to the extent provided for by law, exercise your right to Data portability which allows You to retrieve, in an interoperable format, the Personal Data that You provided to Us.

4.2 Right to erasure of your Data and to limitation of the processing of your Data

 You may request erasure of your Personal Data if:

 

  • You believe that our processing of your Personal Data is no longer needed for the purposes described in this Privacy Policy,
  • You believe that the processing is unlawful or You contest the accuracy of the Data We process about You,
  • You withdrew your consent to the processing of your Data.

 

Alternatively, to the extent provided for by law, You may request limitation of the processing of your Data.

Please note that despite the exercise of your right to erasure or processing limitation, We will store some of Your Personal Data when the law requires Us to do so, or to exercise or defend our rights.

4.3 Right to establish instructions for the management of your Personal Data after your death

For France and when mandatory local provisions so provide, You may determine how You want Us to handle your Personal Data upon your death.

4.4 Procedure to exercise your Data protection rights

Vous pouvez exercer vos droits en matière de protection des Données selon les modalités suivantes ou si vous avez des questions ou réclamations concernant le traitement de vos données personnelles.

 

 

You also have the right to contact Dior’s lead Supervisory Authority, the CNIL, at any time in order to file a complaint against Dior’s data protection and privacy practices. The CNIL can be contacted by using

the following information:

Commission Nationale de l'Informatique et des Libertés – CNIL

3 Place de Fontenoy
TSA 80715 - 75334 Paris, Cedex 07
Phone. +33 1 53 73 22 22
Fax +33 1 53 73 22 00
Website: http://www.cnil.fr/

 

We also wish to inform you about the contacts of other authorities in Europe that you can find and contact on the website of the European Data Protection Board: https://edpb.europa.eu/about-edpb/board/members_en

When the processing of your Data is based on your consent (e.g., subscription to the newsletter), You may withdraw your consent at any time without justification. This right can be exercised by changing your options regarding subscriptions to our newsletters by clicking on the hyperlink provided for this purpose in each email We send You.

5. How is your Personal Data secured?

Parfums Christian Dior uses technical and organizational measures that comply with French and EU legal and regulatory requirements, to keep your Data secure and confidential. Under written agreements, Parfums Christian Dior requires its service providers and processors to provide safeguards and implement sufficient security measures to protect the Personal Data they have agreed to process, in accordance with applicable requirements under personal data protection laws. However, Parfums Christian Dior does not control all risks related to the operation of the Internet and draws your attention to the inherent risks of using any website.

6. Third party websites

There may be links to third-party websites (such as LVMH Group affiliates’ websites) that We do not control, and which are governed by their own confidentiality and personal data protection policies. This Privacy Statement does not apply to third-party websites. Please review the confidentiality and personal data protection policies of the third-party websites that You visit to understand how they process your Data. Parfums Christian Dior shall not be liable for any use of your Data by any third parties.