Privacy Policy

Privacy Policy

FOR WOMEN IN SCIENCE

PROGRAM OF THE “L’OREAL FONDATION”



L’Oréal ambition is to help make the world a more beautiful place. We place great value on honesty and clarity and we are committed to building a strong and lasting relationship with you based on trust and mutual benefit. Part of this commitment means safeguarding and respecting your privacy and your choices. Respecting your privacy is essential to us. This is why we set out “Our Privacy Promise” and our full Privacy Policy below.



OUR PRIVACY PROMISE

  1. We respect your privacy and your choices.
  2. We make sure that privacy and security are embedded in everything we do.
  3. We do not send you marketing communications unless you have asked us to. You can change your mind at any time.
  4. We never offer or sell your data.
  5. We are committed to keeping your data safe and secure. This includes only working with trusted partners.
  6. We are committed to being open and transparent about how we use your data.
  7. We do not use your data in ways that we have not told you about.
  8. We respect your rights and always try to accommodate your requests as far as is possible, in line with our own legal and operational responsibilities.

For more information about our privacy practices, below we set out what types of personal data we may receive from you directly or from your interaction with us, how we may use it, who we may share it with, how we protect it and keep it secure, and your rights around your personal data. Of course, all situations may not apply to you. This Privacy Policy gives you an overview of all possible situations in which we could interact together.

When you share personal data with us or when we collect personal data about you, we use it in line with this Policy. Please read this information. If you have any questions or concerns about your personal data, please contact us at: [email protected]



WHAT WILL YOU FIND IN THIS PRIVACY POLICY?

WHO WE ARE



FONDATION L’ORÉAL, governed by law n°87-571 of July 23, 1987, is responsible for the personal data that you share with us. When we say “us”, “our” or “we”, this is who we are referring to Fondation L’Oréal.

L’Oréal S.A. is the “data controller” for Fondation L’Oréal, as defined by applicable data protection laws.

L’OREAL S.A.

14 Rue Royale, Paris, 75008, France

FONDATION L'OREAL

14 rue Royale, 75008 Paris, France

https://www.fondationloreal.com



WHAT IS PERSONAL DATA?



“Personal data” means any information or pieces of information that could identify you either directly (e.g. your name) or indirectly (e.g. through pseudonymized data such as a unique ID number). This means that personal data includes information like email/home addresses, mobile phone, usernames, curriculum vitae, diplomas, scientific publications and financial information. It could also include unique numerical identifiers like your computer’s IP address or your mobile device’s MAC address, as well as cookies.



WHAT DATA DO WE COLLECT FROM YOU AND HOW DO WE USE IT?



How do we collect or receive your data?

We might collect or receive data from you via our websites and all related platforms. Sometimes you give this to us directly (e.g. when you create an account, when you contact us or when you apply for an endowment or an award or when you launch a fundraising appeal), sometimes we collect it (e.g. using cookies to understand how you use our websites/apps) or sometimes we receive your data from other third parties, including other L’Oréal Group entities.

When we collect data, we indicate the mandatory fields via asterisks where such data is necessary for us to:

If you do not provide the data marked with an asterisk, this may affect our ability to provide the services.

We set out further details in the table below, explaining:

  1. During what interaction your data may be provided or collected? This column explains what activity or situation you are involved in when we use or collect your data.
  2. What personal data may we receive from you directly or resulting from your interaction with us? This column explains what types of data we may collect about you depending on the situation.
  3. How and why we may use it? This column explains what we may do with your data and the purposes for collecting it.
  4. What is the legal basis for using your personal data? This column explains the reason we may use your data.

Depending on the purpose for which the data is used, the legal basis for the processing of your data can be:

Information overview on your interactions with us and their consequences on your data

During which interactions may you provide and we may collect your data?

What personal data may we receive from you directly or resulting from your interaction with us?

How and why we may use your data ?

What is the legal basis for using your personal data?

Account Creation and management

Information collected during the creation of an account on the following L’Oréal websites:

https://forwomeninscience.com including For Girls in Science

https://community.forwomeninscience.com/

Depending on how much you are interacting with us, those data may include:

· Name and surname;

· Gender;

· Email address;

· Address;

· Phone number;

· Photo;

· Birthday or age range;

· ID, username, and password;

· Job position;

· Diplomas.

· Manage and evaluate your applications;

· Respond to your questions and otherwise interact with you;

· Allow you to manage your preferences;

· Ensure the follow-up of our partnership mainly by drafting bi-annual reports.

· Give you access to the alumni network enabling you to keep in contact with other alumni, keep you updated on latest news, build your own professional network between known scientific women and benefit from all services provided within the platform etc.

Performance of a contract

To provide you with the service you requested (e.g. create an account) and evaluate your applications in order to offer an endowment, donation or award.

Newsletters and communication

Unless you have objected to, we send you non-commercial communication related to our programs when you have registered to our program, apply for an endowment, an award or a donation, or when you have been selected.

Depending on how much you are interacting with us, those data may include:

· Email address/Home address/Phone number (depending on the channel where the communication is sent);

· Name and surname;

· Personal description or preference.

· Send you non-commercial communications (e.g., invitation to an event, confirmation of attendance etc.)

· Run statistics

Legitimate interest

Online browsing

Information collected by cookies or similar technologies (“Cookies” *) as part of your browsing on the following websites:

https://forwomeninscience.com

https://fondationloreal.com

https://community.forwomeninscience.com

For information on specific Cookies placed through a given website/app, please consult the relevant cookie table made available within the relevant website.

* Cookies are small text files stored on your device (computer, tablet or mobile) when you are on the Internet, including on L’Oréal Group’s websites.

Depending on how much you are interacting with us, those data may include:

· Data related to your use of our website;

· Where you came from;

· Login details;

· Pages you looked at;

· Videos you watched;

· Ads you click or tap;

· Your location;

· Duration of your visit;

· Technical information: IP address; browser information; device information.

A unique identifier granted to each visitor and the expiration date of such identifier.

· Allow proper functioning of our website/platform;

· Proper display of the content;

· Creation and remembering of your login;

· Interface personalization such as language;

· Improvement of our websites/platforms, for example, by testing new ideas; proper display and use of the chat;

· Ensure the website/platform is secure and safe and protect you against fraud or misuse of our websites or services, for example through performing troubleshooting;

· Run statistics;

· Avoid you to be recorded twice;

· Know how you discovered our website;

· Evaluate the components of our For Women in Science programs for statistical purposes (number of applicants, field of science, number of partners etc.);

· Social networks buttons to enable you to share information within your social accounts.

Legitimate interest: for cookies that are essential for the functioning of our websites

Consent: for all other cookies.

Management of applications in order to offer an endowment or an award

Information collected when you apply for one of our For Women in Science programs or via the platform dedicated to call for projects on the following websites:

https://forwomeninscience.com including For Girls in Science.

https://projets-fondation-loreal.com

Depending on the frequency of your interactions with us, this information may include:

· Name and surname or alias;

· Birth date ;

· Family situation ;

· E-mail ;

· Presentation or personal preferences;

· CV;

· Diplomas.

· Management of applications for endowments, awards and more specifically, receive applications submitted by candidates

· In accordance with the specific conditions you have accepted, instruct and get your application evaluated by the members of the jury of calls for projects.

· Run statistics

Performance of a contract: to provide you with the service you requested (e.g., evaluate your applications in order to offer an endowment, donation or award).

Legitimate interest: to study applications worldwide; to make statistical studies to obtain an annual global report related to our programs (international scale)

You have been selected to receive a donation (i.e., Laureate, Jeune Talent etc.)

Depending on the frequency of your interactions with us, this information may include:

· Name & Surname;

· Date and place of birth;

· Home address;

· Phone Number;

· Bank information;

· Passport ID.

· Enable the bank transfer of the amount of the donation;

· Send you invitations to take part in events related to its participation in the program

Performance of the contract

Selection and management of experts in the context of the “For Women in Science” program on the following website:

https://forwomeninscience.com including For Girls in Science.

Depending on how much you are interacting with us, those data may include:

· Name & Surname;

· Birth date;

· Email address;

· Job position;

· Organization;

· Phone number.

· Build and manage our team of experts;

· Give them access to the applications for an endowment, an award, or a call for projects

Performance of a contract

User Generated Content

http://reporting.fondationloreal.com

https://community.forwomeninscience.com/

Information collected when you publish content on our websites, or you accept that we reuse the content you have posted on social medias.

Depending on how much you are interacting with us, those data may include:

· Name & surname or alias;

· Email address;

· Photo;

· Personal description or preferences.

In accordance with the specific terms and conditions accepted by you:

· Enable you to benefit from services offered by the professional network between alumni of our programs (comments, messages, publications etc.);

· Promote our program;

· Run statistics.

Performance of a contract

Legitimate interest

Enquiries

Information collected when you ask questions relating to our programs or activities on the following websites:

https://forwomeninscience.com including For Girls in Science

https://projets-fondation-loreal.com

https://www.sharedfoundation.com

https://fondationloreal.com

http://reporting.fondationloreal.com

https://community.forwomeninscience.com/

Depending on how much you are interacting with us, those data may include:

· Name and surname;

· Phone number;

· Email address;

· Other information you have shared with us about yourself in relation to your enquiry

Answer your enquiries;

Where needed, to connect you with the relevant services;

Run statistics

Consent

To process your enquiry.

Legitimate interest

To help us better understand our candidates’ and stakeholders’ needs and expectations and therefore improve our services.



Who may access your Personal data?

The recipients of your personal data may be the following:

We may share your personal data with other entities of the L’Oréal Group to comply with our legal obligations, to prevent fraud and/or to secure our tools, to improve services, or after having obtained your consent to do so.

Depending on the purposes for which your data were collected, and only if necessary, some of your personal data may be accessible to L'Oréal Group entities worldwide in pseudonymized form (not allowing direct identification) and if this is necessary for statistics purposes.



Your personal data may also be processed on our behalf by our trusted third party providers.

We rely on trusted third parties to perform a range of business operations on our behalf. We only provide them with the information they need to perform the service, and we require that they do not use your personal data for any other purpose. We always use our best efforts to ensure that all third parties we work with keep your personal data secure. For instance, we may entrust services that require the processing of your personal data to:

We do not offer or sell your personal data.



Where we Store your Personal data

The data that we collect from you may be transferred to, accessed from, and stored at a destination outside the European Economic Area ("EEA"). It may also be processed by staff members operating outside the EEA who work for us or for one of our service providers.

Foundation L’Oréal transfers personal data outside of the EEA only in a secure and lawful way. As some countries may not have laws governing the use and transfer of personal data, we take steps to make sure that third parties adhere to the commitments set out in this Policy.

These steps may include reviewing third parties’ privacy and security standards and/or entering into appropriate contracts (based on the template adopted by the EU Commission).

For further information, please contact us as per the “Contact” section below.



How Long Do We Keep Your Personal data

We only keep your personal data for as long as we need it for the purpose for which we hold your personal data, to meet your needs, or to comply with our legal obligations.

To determine the data retention period of your data, we use the following criteria:



We may retain some personal data to comply with our legal or regulatory obligations, as well as to allow us to manage our rights (for example to assert our claims in Courts) or for statistical or historical purposes.

When we no longer need to use your personal data, it is removed from our systems and records or anonymized so that you can no longer be identified from it.



Is Your Personal data Secure?

We are committed to keeping your personal data secure, and taking all reasonable precautions to do so. We contractually require that trusted third parties who handle your personal data for us do the same.

We always do our best to protect your personal data and once we have received your personal data, we use strict procedures and security features to try to prevent unauthorized access. As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our sites. As such, any transmission is at your own risk.



Links to Third Party Sites and Social Login

Our websites and platforms may from time to time contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we are not responsible or liable for these policies. Please check these policies before you submit any personal data to these websites.

We may also offer you the opportunity to use your social media login. If you do so, please be aware that you share your profile information with us depending on your social media platform settings. Please visit the relevant social media platform and review its privacy policy to understand how your personal data is shared and used in this context.



Social Media and User Generated Content

Some of our websites and platforms allow users to submit their own content. Please remember that any content submitted to one of our social media platforms can be viewed by the public, so you should be cautious about providing certain personal data e.g. financial information or address details. We are not responsible for any actions taken by other individuals if you post personal data on one of our social media platforms and we recommend that you do not share such information.



YOUR RIGHTS AND CHOICES



Foundation L’Oreal respects your right to privacy: it is important that you are able to control your personal data.

You have the following rights:



Your rights

What does this mean?

The right to be informed

You have the right to obtain clear, transparent and easily understandable information about how we use your personal data, and your rights.

This is why we are providing you with the information in this Policy.

The right of access

You have the right to access to the personal data we hold about you (subject to certain restrictions). To do this, please contact us at the details below.

We may charge a reasonable fee taking into account the administrative costs of providing the information.

Requests manifestly unfounded, excessive or repetitive may not be answered to.

To do so, please contact us at the details below.

The right to rectification

You have the right to have your personal data rectified if it is incorrect or outdated and/or completed if it is incomplete.

To do so, please contact us at the details below.

The right to erasure/right to be forgotten

In some cases, you have the right to have your personal data erased or deleted. Note this is not an absolute right, as we may have legal or legitimate grounds for retaining your personal data.

To do so, please contact us at the details below.

The right to object to non-commercial communications

You can unsubscribe or opt out of our various communications at any time.

It is easiest to do this by clicking on the “unsubscribe” link in any email or communication we send you. Otherwise, you can contact us using contact detail below.

The right to withdraw consent at any time for data processing based on consent

You can withdraw your consent to our processing of your data when such processing is based on consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. We refer to the table inserted in section “what data do we collect from you and how do we use it” especially the column “What is our legal basis for processing your data?” to identify where our processing is based on consent.

To do so, please contact us at the details below.

The right to object to processing based on legitimate interests

You can oppose at any time to our processing of your data when such processing is based on the legitimate interest. We refer to the tables inserted in section “what data do we collect from you and how do we use it” especially the column “What is our legal basis for processing your data?” to identify where our processing is based on legitimate interests.

To do so, please contact us at the details below.

The right to lodge a complaint with a supervisory authority

You have the right to contact the data protection authority of your country in order to lodge a complaint against the data protection and privacy practices of L’Oréal.

Do not hesitate to contact us at the details below before lodging any complaint with the competent data protection authority.

The right to data portability

You have rights to move, copy or transfer data from our database to another. This only applies to data that you have provided, where processing is based on a contract or your consent, and the processing is carried out by automated means. We refer to the tables inserted in section “what data do we collect from you and how do we use it” especially the column “What is our legal basis for processing your data?” to identify where our processing is based on the performance of a contract or on consent.

For further details, please contact us at the details below.

The right to restriction

You have the right to request restriction of our processing of your data. This right means that our processing of your data is restricted, so we can store it, but not use nor process it further.

It applies in limited circumstances listed by the General Data Protection Regulation which are as follow:

· the accuracy of the personal data is contested by the data subject (i.e. You), for a period enabling the controller to verify the accuracy of the personal data;

· the processing is unlawful and the data subject (i.e. You) opposes the erasure of the personal data and requests the restriction of their use instead;

· the controller (i.e. L’Oréal) no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;

· the data subject (i.e. You) has objected to processing based on the legitimate interests of the data controller pending the verification whether the legitimate grounds of the controller override those of the data subject.

If you would like to request restriction, please contact us at the details below.

The right to deactivate Cookies

You have the right to deactivate Cookies. The settings from the Internet browsers are usually programmed by default to accept Cookies, but you can easily adjust it by changing the settings of your browser.

Many cookies are used to enhance the usability or functionality of websites/apps; therefore disabling cookies may prevent you from using certain parts of our websites/apps as detailed in the relevant Cookie Table.

If you wish to restrict or block all the cookies which are set by our websites/apps (which may prevent you from using certain parts of the site), or any other websites/apps, you can do this through your browser settings. The Help function within your browser should tell you how.

For more information please consult the following links:

http://www.aboutcookies.org/;

To deal with your request, we may require proof of your identity.



CONTACT



If you have any questions or concerns about how we treat and use your personal data, or would like to exercise any of your rights above, please contact us at: [email protected]