Data protection statement

A: Data Protection Statement

1. GENERAL PROVISION

HENKEL ADHESIVE TECHNOLOGIES VIETNAM CO., LTD (hereinafter referred to as “Henkel” or “we”) understands the importance and always respects the privacy of Henkel’s customers (“Customers”). Henkel is committed to protecting Customer's personal data in accordance with Vietnamese laws as well as the strict requirements of Henkel.

In compliance with Decree No. 13/2023/ND-CP of the Government on the Protection of Personal Data, effective from 01 July 2023, Henkel would like to inform Customers of Customer's Privacy Policy (“Privacy Policy”). The purpose of this Privacy Policy is to outline how the Company protects the Customer's data in accordance with the Company's policies, the provisions of Vietnamese laws on the protection of personal data, and all applicable laws relating to privacy and personal data protection of Vietnam (“Privacy Laws”).

2. DEFINITION OF TERMS

2.1. “Personal Data” refers to electronic information in the form of symbols, letters, numbers, images, sounds, or in a similar form in the electronic environment which is associated with an individual or used to identify an individual. Personal Data includes Basic Personal Data and Sensitive Personal Data.

2.2. “Basic Personal Data” includes: a) Last name, middle name and first name as stated in the birth certificate, other names (if any); b) Date of birth; date of death or missing; c) Gender; d) Place of birth, place of birth registration; place of permanent residence; place of temporary residence; current place of residence; hometown; contact address; dd) Nationality; e) Personal image; g) Phone number; ID Card number, personal identification number, passport number, driver’s license number, license plate number, taxpayer identification number, social insurance number and health insurance card number; h) Marital status; i) Information about the individual’s family relationship (parents, children); k) Digital account information; personal data that reflects activities and activity history in cyberspace; l) Information associated with a specific individual or helping identify a specific individual other than Sensitive Personal Data.

2.3. “Sensitive Personal Data” refers to personal data in association with an individual’s privacy which, when being infringed, shall cause a direct effect on the legitimate rights and interests of such individual, including: a) Political and religious views; b) Health status and privacy stated in medical records, excluding information on blood type; c) Information about racial or ethnic origin; d) Information related to an individual's inherited or acquired genetic characteristics; dd) Information about an individual’s physical attributes and biological characteristics; e) Information about an individual’s sex life or sexual orientation; g) Data on crimes and criminal acts collected and stored by law enforcement agencies; h) Information on clients of credit institutions, foreign bank branches, intermediary payment service providers and other licensed institutions, including: information on client identification as prescribed by law, information on accounts, information on deposits, information on deposited assets, information on transactions, information on organizations and individuals that are securing parties at credit institutions, bank branches, and intermediary payment service providers; i) Personal position identified via positioning services; k) Other personal data defined as specific by law that requires necessary protection measures.

2.4. “Data Subject” refers to an individual identified by Personal Data.

2.5. “Personal Data Processing” or “Data Processing” refers to one or multiple activities that impact on personal data, including collection, recording, analysis, certification, storage, rectification, publicizing, combination, access, retrieval, withdrawal, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction of Personal Data or other relevant activities.

2.6. “Company” or “Henkel” refers to Henkel Adhesive Technologies Vietnam Co., Ltd. incorporated under Enterprise Registration Certificate No. 3600450091, issued for the first time on 16 December 1999 by Department of Planning and Investment of Dong Nai Province, having its head office address at No. 7, Road 9A, Bien Hoa 2 Industrial Park, An Binh Ward, Bien Hoa City, Dong Nai Province, Vietnam.

2.7. “Customer” means an individual who approaches, learns, registers, transacts, uses products and services of Henkel, or is involved in the operation and provision of products and services of Henkel.

2.8. “Data Protection Officer (DPO)” means one or more individuals designated by the Company to ensure that the Company complies with Privacy Laws.

3. TYPES OF PERSONAL DATA COLLECTED AND METHOD OF COLLECTING PERSONAL DATA

3.1. In order for Henkel and/or a data processor authorized by Henkel to provide products and services to Customers, and/or handle Customer's requests, Henkel and/or the data processor may need to and/or be required to collect Personal Data, including: (i) Basic Personal Data and (ii) Sensitive Personal Data relating to Customers and individuals related to Customers.

Personal Data that may be collected and processed are the types of information listed below and are subject to change from time to time depending on the Data Subject's relationship with Henkel:

(a) Last name, middle name and first name as stated in the birth certificate, other name (if any); Date of birth; Gender;

(b) Place of permanent residence, contact address; Nationality;

(d) Information of bank account;

(e) The information shown on ID card/Citizen identity card, passport;

(f) Photos and other visuals, security camera footage and other information obtained through electronic means such as card swipe data;

(g) Other additional information related to Henkel's provision of products and services, such as information provided by Customers when Customers participate in surveys, activities on Social Network of Henkel (in Blog, Facebook Fanpage, etc.).

(h) Information about usernames or any settings the user may have chosen, personal data reflecting activity, activity history when Customers use Henkel’s website.

3.2. Henkel and/or a data processor authorized by Henkel, may collect Data Subject's Personal Data from the following sources:

(a) through the transaction between the Customer and Henkel, when the Customer provides information in the transaction records and documents, creates an account to use the service, when participating in surveys, promotions for customers;

(b) information obtained from any publicly available source, or regulatory authority;

(c) through video archives from security cameras at Henkel 's offices/customer service centers or video footage of events organized by Henkel or a unit authorized by Henkel;

(d) from third party sources with whom the Customer has consented that such third party may share/provide Customer's Personal Data, or sources where collection is required or permitted by law;

(e) information provided by the Customer via phone, email, correspondence between the Customer and Henkel;

(f) when the Customer uses Henkel 's websites, applications or social media platforms, Henkel can collect Personal Data declared or made public by the Customer. Henkel may also automatically collect Personal Data through the use of cookies, and other similar technologies whenever a Customer's web browser views our websites or materials provided by or on behalf of Henkel on another website.

4. DATA PROCESSING

4.1. Data Processing Purposes

Henkel collects, processes and discloses Customer's Personal Data to the extent necessary for Henkel 's business activities. In particular, the Customer agrees that Customer's Personal Data may be processed for one or more of the following purposes:

(a) To fulfill our contractual obligations and to provide an appropriate level of service to our customers

(i) to serve the conclusion and performance of contracts and agreements/commitments (if any), including providing Customer with order status; to provide products or services that the Customer has purchased; to provide technical advice such as how to use the product or technology; to process Customer’s payments, communicating and sending notices to the Customer, to answer Customer's questions or handle claims, and other activities related to conclusion and performance of contracts;

(ii) To manage our daily business needs and events related to Customer’s participation in our promotional and product testing programs; to enable Customer to participate in one of our activities or events or to send Customer samples that Customer requests;

(iii) To learn and assess consumer preferences, needs and demand changes, to improve our current products and services and/or develop new products and services;

(iv) To facilitate/perform other activities per request to fulfill our contractual obligations and deliver appropriate levels of service to the Customer.

(b) To communicate with Customers:

(i) to verify the identity of individuals who contact us by telephone, electronic means or otherwise;

(ii) to contact the Customer or communicate with the Customer by phone/voice call, text message and/or fax message, email and/or postal mail. The Customer acknowledges and agrees that such communications by us could be by way of the mailing of correspondence, documents or notices to the Customer, which may involve the disclosure of certain personal data about the Customer to bring about delivery of the same as well as on the external cover of the envelopes/mail packages;

(i) to serve accounting and financial requirements. Accordingly, Henkel collects, stores and uses Customer's data for internal business purposes, such as record filing and compliance with our legal and financial obligations. These data will be stored in accordance with applicable laws;

(ii) To comply with Henkel's operational, audit, administrative, security, and risk management policies, procedures, and processes including, but not limited to, CCTV monitoring, daily activity logs, authentication of individuals, storage and backup of email communications;

(iii) To facilitate business asset transactions (which can extend to any acquisition, merger or sale of assets) involving the Company and any Henkel’s affiliates;

(iv) Data archiving; storing, hosting, backing up (whether for disaster recovery (DR) or otherwise) of Customer's Personal Data;

(v) Internal and external publications;

(vi) To protect and enforce the Company’s contractual and legal rights and obligations;

(d) To comply with legal and regulatory requirements:

(i) To comply with or as required by any applicable law, governmental or regulatory requirements of any jurisdiction applicable to Henkel, including meeting the requirements to make disclosure under any law binding on Henkel and/or for the purposes of any guidelines issued by a regulatory or other competent authorities (whether of Vietnam or a country other than Vietnam), with which we or Henkel's affiliates must comply;

(ii) To comply with or as required by any request or direction of any governmental authority (whether of Vietnam or a country other than Vietnam) which we are expected to comply with; or to respond to requests for information from public agencies, ministries, statutory boards or other similar authorities. For the avoidance of doubt, this means that we may/will disclose the Customer's personal data to the aforementioned parties upon their request or direction.

(e) For direct marketing purposes:

Where the Customer agrees to allow Henkel to process Personal Data for the purpose of implementing marketing programs, announcements and introduction of products and services of Henkel and its partners, the Customer agrees that Henkel and/or partners of Henkel have the right to market, advertise and introduce products according to the content, form and frequency as follows:

(i) Content: Marketing and introducing advertising products of Henkel and partners of Henkel.

(ii) Method: Via advertising messages, announcements on Henkel's website and applications or other methods as prescribed by law.

(iii) Form: The Company may/will send the Customer via email, postal mail or other means of communication the marketing and promotional information and materials related to the products and/or services of Henkel or a partner of Henkel, whether such products or services are currently available or to be created in the future.

(iv) Frequency: According to the law on advertising.

In addition to the above provisions, Henkel is responsible for complying with the provisions of the law on advertising.

(the purposes set forth above shall be collectively referred to as the “Purposes”).

4.2. Methods of Processing Personal Data

From time to time and depending on each of the above Purposes, Henkel and/or the data processor authorized by Henkel may perform one or more activities that impact on personal data, including collection, recording, analysis, certification, storage, rectification, publicizing, combination, access, retrieval, withdrawal, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction of Personal Data or other relevant activities.

The Personal Data Processing activities may be performed by Henkel in an automatic or non-automatic manner, by electronic means or by manual means or by any other means that Henkel and/or the data processor authorized by Henkel deem appropriate.

5. PARTIES INVOLVED IN THE PROCESSING OF PERSONAL DATA

5.1. In order to carry out the purposes and personal data processing activities in accordance with this Privacy Policy, Henkel may transfer and disclose Customer's personal data to the following parties:

(a) staff and employees of Henkel;

(b) Henkel’s affiliated companies;

(d) individuals, authorities or regulatory bodies or third parties to whom Henkel is permitted or required by law to disclose;

(e) service providers to Henkel (such as telecommunications service provider, information technology service provider, data storage, receiving, and processing unit, order processing unit, shipping unit, postal and delivery service provider, website functionality unit, email and text message delivery and monitoring service provider, advertising, linking and related analytics service provider, customer support and call center service provider, distribution service provider of the Company or any of Henkel's affiliated companies) to which data sharing/disclosure is necessary for Henkel to perform its obligations to the Customer;

(f) credit institutions, intermediary payment service providers;

(g) any business partner, investor, assignee or transferee (actual or potential) to facilitate business asset transactions (which may extend to any acquisition, merger, or sale of assets) involving the Company or any of its affiliates;

(h) any assignee or possible assignee of the rights and obligations of the Company or any of its affiliates;

(i) other parties agreed by the Customer or with whom Henkel has a legal basis to share the Customer's personal data.

5.2. When disclosing the Customer's personal data to third parties, the Company ensures that the third parties will secure the Customer's personal data from unauthorized access, collection, use, disclosure, processing of data information or similar risks and retain the Customer's personal data only for the period necessary to achieve the purposes mentioned above.

6. START TIME AND END TIME OF PERSONAL DATA PROCESSING

6.1. Data processing’s start time:

Henkel will start processing personal data from the time of receiving personal data.

6.2. Data processing’s end time:

Until the completion of the Purposes for which the data was collected or until necessary to comply with statutory obligations and to resolve any dispute or until the information provided is requested to be deleted by the Data Subject.

7. DATA SUBJECT’S RIGHTS AND OBLIGATIONS

7.1. Data Subject’s Rights

Under Privacy Laws, as a Data Subject, the Customer has the following rights:

(a) Right to be informed

The Customer has the right to be informed of the processing of the Customer’s Personal Data, unless otherwise provided by law. The Customer has the right to be informed about how we use the Customer's personal data and rights of the Customer in a manner that is clear, transparent and simple to understand. Therefore, we provide the Customer with the information contained in this Privacy Policy.

(b) Right to give consent

The Customer has the right to consent or not to consent to the processing of the Customer’s personal data, except as provided in Article 8 of this Privacy Policy.

The Customer has the right to access his/her personal data in order to view, modify, or request the modification of his/her personal data, unless otherwise provided by law.

(d) Right to withdraw consent

The data subject has the right to withdraw his/her consent, unless otherwise provided by law.

(e) Right to delete personal data

The Customer has the right to delete or request the deletion of his/her personal data, unless otherwise provided by law.

(f) Right to restrict the data processing

The Customer has the right to request the restriction of the processing of his/her personal data, unless otherwise provided by law;

We will implement data processing restriction within 72 hours upon receiving the Customer’s request, for all Personal Data that the Customer requests to restrict, unless otherwise provided by law.

(g) Right to obtain personal data

The Customer has the right to request us to provide him/her with his/her Personal Data, unless otherwise provided by law.

(h) Right to object to data processing

The Customer has the right to object to our processing of his/her Personal Data for the purpose of preventing or restricting the disclosure or use of personal data for advertising or marketing purposes, unless otherwise provided by law.

We will process Customer's request within 72 hours upon receiving the request, unless otherwise provided by law.

(i) Right to file complaints, denunciations and lawsuits

The Customer has the right to file complaints, denunciations and lawsuits as prescribed by law.

(j) Right to request compensation for damages

The Customer has the right to request compensation for damages as prescribed by law when there are violations of regulations on protection of his/her Personal Data, unless otherwise agreed by parties or otherwise prescribed by law.

(k) Right to self-protection

The Customer has the right to self-protection according to regulations of the Civil Code, other relevant laws, Decree 13/2023/ND-CP, and other provisions of laws, or to request competent agencies and organizations to implement civil right protection methods.

To exercise these rights, the Customer should contact us at the details provided below. The Customer needs to provide proof of his/her identity and state the rights to be exercised for our support.

In the event that the Customer withdraws his/her consent, requests data deletion and/or exercises other relevant rights with respect to any or all of the Customer's personal data. The acts performed by the Customer in accordance with these regulations may affect Henkel's ability to continue to provide its products and services to the Customer, and Henkel reserves all legal rights and remedies of Henkel in such cases. Accordingly, Henkel will not be held liable to Customer for any loss incurred and Henkel 's legal rights will be expressly reserved with respect to limitation, restriction, suspension, cancelation, prevention of the processing of Customer's data.

7.2. Data Subject’s Obligations

According to the Privacy Laws, as a Data Subject, the Customer has the following obligations:

(a) Protect his/her own personal data; request relevant organizations and individuals to protect his/her personal data;

(b) Respect and protect others’ personal data;

(d) Participate in dissemination of personal data protection skills; and

(e) Comply with legal regulations on protection of personal data and participate in prevention of the violations against regulations on protection of personal data.

8. PERSONAL DATA PROCESSING WITHOUT THE CONSENT OF DATA SUBJECT

Personal Data may be processed without the consent of the Customer – as a Data Subject – as required by law in the following cases:

(a) In urgent cases requiring immediate processing of relevant Personal Data to protect life and heath of the Customer or others.

(b) When Personal Data is required to be publicly disclosed in accordance with the law.

(c) When Personal Data is processed by competent state agencies in cases of urgent situations related to national defense, national security, social order and safety, major disasters, dangerous epidemics, or when there is a risk threatening security and national defense, but the situation has not reached the level of declaring a state of emergency; to prevent and combat riots and terrorism, to prevent and combat crimes and law violations as prescribed by the law .

(d) To perform the Customer's contractual obligations with relevant agencies, organizations and individuals in accordance with the law.

(e) To serve the activities of state agencies as prescribed by specialized laws.

9. PROTECTION OF PERSONAL DATA

9.1. Understanding the importance of personal data protection, Henkel will regularly review and update management and technical measures when processing Customer's personal data.

9.2. To the best of our ability, access to Customer’s Personal Data is limited to those who need to know. Individuals with access to data are required to maintain the confidentiality of such information.

10. UNDESIRABLE CONSEQUENCES AND DAMAGE THAT MAY OCCUR

10.1. Although Henkel will do its best to protect Customer's Personal Data, the transmission and storage of information is, however, vulnerable to unauthorized third-party activity. Some undesirable consequences and damages may include, but are not limited to:

(a) Hardware and software failures in the data processing that cause data loss of service providers;

(b) Security hole beyond our control, system attacked by a third party causing data leakage;

(c) The service provider arbitrarily discloses personal data due to: carelessness or fraud; access to websites/download apps that contain malware…

10.2. In the limited undesirable events, if an incident or violation is detected with respect to personal data, Henkel will proceed to notify relevant parties of the incident/breach within a period as prescribed by law, and at the same time will make efforts to overcome and minimize the consequences and damage within Henkel's ability and in accordance with applicable laws.

11. HOW TO CONTACT US

If the Customer wishes to exercise his/her rights, has any questions, complaints or grievances, or comments regarding this Privacy Policy and/or our processing of Customer’s personal data, please contact our Data Protection Officer at:

Address: Henkel Adhesive Technologies Vietnam Co., Ltd, No. 7, Road 9A, Bien Hoa 2 Industrial Park, An Binh Ward, Bien Hoa City, Dong Nai Province, Vietnam.

Attention: Data Protection Officer

Email: truc-phuong.tran@henkel.com

12. AMENDMENTS AND SUPPLEMENTS TO POLICY

Henkel reserves the right to modify this Privacy Policy from time to time if necessary. Notice of any amendment, update or adjustment will be updated, posted on the website of Henkel: https://www.henkel.com/ and/or sent to the Data Subject through other means of communication that Henkel considers appropriate.

B: Henkel Adhesives - Data Protection Statement

1 General

This Data Protection Statement is designed to inform you of the type of data collected and how it is used. You will also learn how you can exercise your data subjects’ rights.

Any changes to this Data Protection Statement will be published on this page. This enables you to inform yourself at any time about which data we are collecting and how we use such data.

This Data Protection Statement does not apply to websites accessible via hyperlinks on this website.

2 Collection, use and processing of personal data

2.1 Responsible for data processing / Contact Details

Henkel Adhesive Technologies Vietnam Co., Ltd, No. 7, Road 9A, Bien Hoa 2 Industrial Park, An Binh Ward, Bien Hoa City, Dong Nai Province, Vietnam

together with

Henkel AG & Co. KGaA, Henkelstrasse 67, 40589 Duesseldorf, Germany

as joint controllers as per Art. 26 GDPR, hereinafter together referred to as “Henkel” or “we”

You may exercise your data subject rights against us as well as against all other joint controllers. We and the controllers jointly responsible with us will immediately inform each other about any rights exercised by data subjects. We will provide each other with all the information necessary to respond to requests for information.

Henkel AG & Co. KGaA will provide data subjects with the necessary information as required under Articles 13 and 14 of the GDPR. In this process, the other joint controllers provide us with all the necessary information from their scope of operations.

To assert any data subjects’ rights, consent withdrawals or general data protection queries, you can contact us at Henkel Adhesive Technologies Vietnam Co., Ltd, “Data Protection” Henkel Adhesive Technologies Vietnam Co., Ltd, No. 7, Road 9A, Bien Hoa 2 Industrial Park, An Binh Ward, Bien Hoa City, Dong Nai Province, Vietnam. (E-Mail: truc-phuong.tran@henkel.com)

2.2 General Usage of Website

Henkel uses personal data to provide this website to the users. Any further processing of the data only occurs on the basis of other statutory duties or permissions or if the respective user has consented towards Henkel.

When users visit the website, Henkel automatically collects and stores certain data. This includes: the IP address or device ID allocated to the respective end-device which we need for transmitting requested content (e.g. especially texts, images, and product information as well as electronic files provided for downloading, etc.), the activity of users in the context of the website, the type of the respective end-device, the browser in use as well as the date and time of use.

Henkel stores this information for a maximum of 7 days for the purpose of recognizing and pursuing misuse.

Henkel uses this information also for improvements to the service’s presentation, features and functionalities as well as general administration tasks.

Aside from this, Henkel deletes or anonymizes the data on use, including the IP addresses, without undue delay as soon as they are no longer needed for the above mentioned purposes.

Such processing and use of your data is lawful because (1) the processing is necessary for the provision of the website as per Art. 6 para. 1 lit. b GDPR; or (2) Henkel has an overriding legitimate interest in ensuring and enhancing the functionality and error-free operation of the website and that it is tailored to the users’ needs pursuant to Art. 6 para. 1 lit. f GDPR.

2.3 Service-Providers / International Data Transfers

In order to provide the website and the services contained therein, Henkel may engage service-providers (e.g. for the hosting of Henkel’s websites, computing and database management, tracking etc.) which therefore generally may also process your personal data when you use our websites.

Most of these service providers are contractually bound to only process such personal data on behalf of Henkel and are located (i) within the EU/EEA, (ii) countries officially recognised by the EU Commission as providing an adequate level of data protection or (iii) in the US and participate in the EU-U.S. Data Privacy Framework.

Where this is not the case or if service-providers themselves engage sub-contractors your personal data may potentially be transferred to third countries (i.e. outside of the EU/EEA and countries officially recognised by the EU Commission as providing an adequate level of data protection (including the US with respect to participants of the EU-U.S. Data Privacy Framework)) not providing for a level of data protection essentially equivalent to that of the EU/EEA.

All of our service-providers are, however, obligated to solely process in or transfer any of your personal data to third countries in case the additional requirements for international data transfers enshrined in Art. 44 et seq of the GDPR are complied with, predominantly by concluding EU Standard Contractual Clauses and, if required, implement additional measures in order to establish an adequate level of data protection. The EU Standard Contractual Clauses are model contracts provided by the EU Commission which – if required – together with additional measures are intended to ensure that your personal data are processed in accordance with European data protection standards even if the processing takes place outside the EU/EEA.

3 Further Personal Data Processing

3.1 Account

You may have provided your e-mail address and selected a password in order to create an account for our website, e.g., in the course of using the contact form (as an optional feature) or via an account creation page.

Creating a user account and the associated processing of personal data is required in order to use several functionalities offered on our website. Mere visiting or browsing the website does, however, not require an account.

In case you provide us with further information during the use of our website and the functionalities contained therein (while logged in), such information is attributed to and stored in your account following an interaction (e.g. a purchase). Alternatively, you may enter such additional information to your account by yourself. Such information may include your name, job title and mobile number, information about your company (sector/industry, size, your role in the company etc.), payment information as well as billing and shipping addresses. We will also store information about your purchases and provide you with an overview of current orders and order history in your account (hereinafter jointly referred to as “Account Data”).

We process your Account Data to simplify and secure your use of our website and to provide you with a consolidated overview relating to your Account Data. After the initial registration of your account, we will further use your provided e-mail address to send you a respective confirmation e-mail. You may reset and/or change your password at any time.

We process and use your Account Data for the purpose / legitimate interest of providing this functionality at your request based on Art. 6 para. 1 lit. b or lit. f GDPR or in accordance with your respective consent (Art. 6 para. 1 lit. a GDPR).

Across all user accounts, we further process the information contained therein for market research and other statistical analysis, e.g. in order to gain more insight about our client demographic, however, without analysing user accounts on an individual level or attributing any gained insights to individual users if they have not individually consented to any such processing of their Account Data (see below).

Such processing and use of your Account Data is lawful pursuant to Art. 6 para. 1 lit. f GDPR because we have an overriding legitimate interest in optimizing our marketing and sales efforts based on such analyses and insights.

We store your Account Data until you delete the account via the respective functionality in your account profile page or as long as required in case any statutory retention obligation applies. Most of Account Data may further be removed from your account and/or modified by yourself individually at any time.

Your account will also allow you to set your preferences regarding if and which marketing communication you want to receive from us and by doing so provide your consent as per Art. 6 para. 1 lit. a GDPR to any such marketing communication and associated processing of your personal data. Purpose and scope of any such data processing are identified in the respective consent forms as well as the applicable sections in this data protection statement.

In case you provide us with any such consent, we will process your Account Data for the purpose(s) and to the extent identified in the consent forms as well as the applicable sections in this data protection statement. Such processing of your Account Data is based on your consent to the processing.

You may withdraw your consent at any time by unticking the relevant checkboxes in your account’s communication preferences. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

3.2 Customer enquiry

You may have provided your contact data via our contact form, email, telephone call or otherwise. We will use your data for the purpose of replying to your enquiry.

Your personal data is processed for the purpose / legitimate interest of processing your request based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.3 Raffles

You may have provided your contact data and your address while participating in a raffle which we offer from time to time on our website. We will use your data for the purpose of conducting the raffle.

We will not forward your data to any third party unless for the distribution of prizes or for conducting the raffle.

Your personal data is processed for the purpose / legitimate interest of conducting the raffle based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.4 Product test

You may have provided your contact data and your address while participating in product tests. We will use your data for the purpose of conducting the product test.

We will not forward your data to any third party unless for the purpose of conducting the product test.

Your personal data is processed for the purpose / legitimate interest of conducting the product test based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.5 Counterfeit Check

You may have provided your name, your address and your contact data, e.g. your email address, as well as product information, e.g. product name, batch number and the photo of the product, for a counterfeit product check. We will use your data for the purpose of performing the counterfeit product check and informing you about its outcome. Furthermore, we may contact you again in case the check showed that the product you submitted is indeed a counterfeit product to further investigate the incident.

We will not forward your data to any third party other than for the purpose of performing the counterfeit check or further investigating the incident.

The processing and use of your data is lawful because we have an overriding legitimate interest as per Art. 6 para. 1 lit. f GDPR in conducting the counterfeit check including further investigation.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.6 Where to Buy

If you click on the “Find a distributor” functionality on the website, a list of e-retailers is presented to you where you can buy the respective product that is shown on our website. In order to provide you with that service, your data, such as your IP address and the product you are interested in, will be transferred to the provider of this service, NeuIntel, LLC, 20 Pacifica, Suite 1000, Irvine, CA 92618. If you decide to follow an indicated offer by clicking “Buy Now”, you will be forwarded to the website of the respective e-retailer. This forwarding as well as re-routing in the process is facilitated in the control of NeuIntel, LLC. Further information on data protection and the applied storage period can be found at: https://www.pricespider.com/privacy-policy-2021/ (under section 4.B.i.)

Your personal data is processed for the purpose / legitimate interest of providing this service based on Art. 6 para. 1 lit. b or lit. f GDPR.

3.7 Webinar

You may have provided your contact data, e.g. your email address prior to or during webinars. We will use your data for the purpose of providing the webinar. Webinars will be conducted via MS Teams or similar service and require further processing of your personal data.

Your data may be passed on to affiliated companies of Henkel or to distributors responsible for the region and product category in question, either because these affiliated companies or distributors carry out the webinar or in order to facilitate a sales contact stemming from a webinar.

Your personal data is processed for the purpose / legitimate interest of providing the webinar to you based on Art. 6 para. 1 lit. b or lit. f GDPR.

If you have not given consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.8 Surveys

In case you participate in a survey on our website or on our service hotline or elsewhere, we will process your contact data, e.g your email address as well as your answers and any other information you decide to share with us in response to the survey. We will use the results of the survey for market and opinion research, quality assurance and training purposes as well as to generate further business insights.

We will not forward your data to any third party unless for the purpose of conducting the survey.

The processing and use of your data is lawful because (i) the processing is necessary for conducting the survey as per Art. 6 para. 1 lit. b GDPR, and (ii) we have an overriding legitimate interest as per Art. 6 para. 1 lit. f GDPR in optimizing our marketing, services and sales efforts based on such analyses and insights. Alternatively, you may have provided consent to partake in the survey. In such case, we will process your provided information on basis of your consent and for the purposes and to the extent described therein.

If you have not given (additional) consent to a longer storage duration e.g. in the course of our customer relationship management we will store the data no longer than needed in order to fulfil the aforementioned purpose or as long as required in case any statutory retention obligation applies.

3.9 Personalised Marketing Communication and Digital Content

You may have provided consent that – based on the analysis of your personal data as described below – Henkel may contact you for personalised marketing purposes including product offers and other communications about Henkel Adhesive Technologies via one, more or all of the following channels:

via e-mail (i.e. newsletters and other e-mail advertisements providing information on all products and proposals in the field of Henkel Adhesive Technologies)
via online advertisements on Facebook or LinkedIn (i.e. advertisements for Henkel products and events regarding Adhesive Technologies shown on Facebook and LinkedIn)

Your e-mail address and/or your user ID will be transferred to Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and LinkedIn Ireland Unlimited Company, Gardner House, Wilton Plaza, Wilton Place, Dublin 2, Irland for this purpose.

Depending on the scope of your consent, we will personalise our marketing communication, digital services, retail activities and online advertising via the selected channels based on an analysis of your interactions with us, our websites and services (as stated below in more detail), including by means of cookies and similar technologies, to provide you and the company you are representing, with the most relevant and interesting content.

In such case, we will in particular analyse your use of (1) our newsletter and other e-mail advertisements, (2) our websites, as well as (3) your previous interactions with us, including inquiries and complaints you have raised and purchases you have made for your company, (4) your participation in online and offline events (either hosted by us or a third party), (5) your engagement with our online advertisements on our website as well as third party websites and apps, and (6) the publicly accessible information contained in your professional Social Media Profiles, as well as anonymize any such information in order to enable further analysis of your interactions with us without being able to attribute any such information to you.

We base the processing of your personal data in this context on your consent as per Art. 6 para. 1 lit. a GDPR.

You may withdraw your consent with effect for the future at any time by clicking the respective consent withdrawal hyperlink or by sending a letter or an e-mail to the abovementioned contact details. If you have declared your consent via your personal account settings, you may withdraw consent by unticking the relevant checkbox in your communication preferences. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. We will process your personal data for the abovementioned purposes only as long as the consent is valid or as long as required in case of any statutory retention obligations.

3.10 Marketing Communication within Existing Customer Relationships

In case we have obtained your e-mail-address in connection with the sale of a good or service, we will use your e-mail-address to send you communication in relation to our own similar goods and services provided that you have not objected to such use of your personal data.

You may object to receive such communication at any time with effect for the future by sending an e-mail to [raj.mohan@henkel.com]. Objecting does not lead to costs other than transmission costs in accordance with the basic rates.

The legal basis for such processing is the respective provision transposing Art. 13 (2) of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 7 para. 3 of the Law Against Unfair Competition (Gesetz gegen unlauteren Wettbewerb, UWG).

4 Cookies, Pixel, Fingerprints and similar technologies

4.1 General information and information about your right to withdraw your consent

This website uses cookies and similar technologies (altogether “cookies”) that are stored on your device for the following purposes: Strictly necessary, Functional, Performance and Personalized marketing. These are explained in more detail below.

You can also find more information on the cookies used by our website, especially on their storage period, or exercise your right to withdraw your consent at any time with effect for the future under “Cookie Settings”. There, please move the respective slider to the left and click on “Accept selected purposes” if you want to withdraw your consent for single purposes or click on “Reject” if you want to withdraw your consent for all those purposes. In this case, only cookies that are technically necessary to provide you with this website will be used.

Your consent is set per browser and computer. Therefore, if you visit our website at home and work or with different browsers, you need to withdraw consent with every device or browser.

Henkel involves specialized service providers in processing personal data relating to you for the purposes described below that act as data processors for Henkel in accordance with Art. 28 GDPR or as separate data controllers. The companies that process personal data together with Henkel as joint controllers as per Art. 26 GDPR are listed below.

4.2 Strictly necessary cookies

Strictly necessary cookies are technically required to enable the use of our website (e.g., for displaying content, load balancing and IT security) and will be used automatically. The legal basis for this is the respective provision transposing Art. 5 (3) sentence 2 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 25 para. 2 no. 2 of the Telecommunications-Telemedia Data Protection Act (Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei Telemedien, TTDSG) and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. b GDPR.

4.3 Functional cookies

Functional cookies are used to provide you with functionalities which are not strictly necessary, but enable you to use our website in a more comfortable and personalized manner, e.g. by saving and analysing your preferences, entries and settings such as language choices. If you do not allow functional cookies, these functionalities may not be provided or may not function properly.

The legal basis for this is your consent (to the extent given) in accordance with the respective provision transposing Art. 5 (3) sentence 1 of the EU Directive on privacy and electronic communications 2002/58/EC into national law in the jurisdiction where Henkel is established, for example in Germany Sec. 25 para. 1 TTDSG and for the processing of personal data relating to you for this purpose Art. 6 (1) lit. a GDPR.

4.4 Performance cookies

Performance cookies are used to analyse your use of our website in order to measure and improve the performance of our website as well as the usage experience for the users. For this, especially your visits, activities and interactions on our and other websites as well as information about your browser and device are analysed and used to generate pseudonymous statistics. This helps us, for example, to know which pages of our website are the most and least popular and to see how users move around the site as well as to conduct tests and on such basis generate business insights in order to optimize our sales efforts.

On our websites aimed at business customers, your data may also be used to analyse which company you are working for in order to maintain our information about business entities we may already have a business relationship or that are interested in our products and services. For this, your data may also be matched and combined with data from our partner Dun & Bradstreet as described below.

Furthermore, your data may also be used and analysed to track your purchases of our products in webshops, especially in order to understand which (groups of) website visitors (1) buy which kind of products and (2) where they are buying them from (i.e. from which e-retailer), as well as to analyse which other retailers and stores were visited.

Performance cookies are used in context of the following tools. In the respective description, we also inform you about how you can withdraw your consent for the respective tool specifically. Your general right to withdraw consent for one or all purposes in this section described above remains unaffected.

Dun & Bradstreet Direct+

Provided you have consented, this website uses Dun & Bradstreet Direct+, a service provided by Dun & Bradstreet Deutschland GmbH, Robert Bosch Straße 11, 64293 Darmstadt, Germany (“D&B”). This tool allows us to identify and analyze website visitors, in particular by providing us with information on visitors acting on behalf of other companies with whom we already do business or might want to enter into a business relationship.

To this end, D&B creates a cookie on your web browser when you visit our website. The cookie collects information relating to your visit of our website and D&B evaluates the provided details against those in its database and uses the proprietary algorithm to identify entities behind and details regarding each website visitor. In this respect, we – through D&B – may process personal information about you such as: your name, email addresses, name of employers, contact details, job titles, business address, academic title and qualifications, so-called D-U-N-S Number (a unique nine-digit numeric identifier referred to a single business entity); type of business; IP address and cookie data.

We will use this information for the purpose of identifying business entities with whom we already do business or might want to enter into a business relationship, enriching our existing information about business entities and monitoring changes to business entities in order to keep relevant business information up-to-date.

Further information on privacy in D&B services can be found at: https://www.dnb.com/de-de/datenschutz/downloadbereich/

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings".

4.5 Personalized marketing cookies

Personalized marketing cookies may be used by us and our advertising partners stated below, some of whom act as separate controllers or together with us as joint controllers. These cookies may be used by us and our partners to build a profile of your interests, behaviour and characteristics to show you relevant advertisements on our website and other media, such as websites, on social media platforms and in (mobile) applications that all might also be provided by third parties. For this, especially your usage behaviour (also on other websites, social media platforms and apps), including your interactions with content and advertisements, information that you have entered (e.g., in forms and surveys), occupational information about you (that is collected inter alia from LinkedIn) as well as information about your device and your location is analysed. This data may also be used to optimize and measure the success of advertisement campaigns.

Furthermore, this data may be used to determine whether you use different devices and link them with each other, especially to combine the data collected about you via these different devices as well as to display (personalised) advertisement campaigns and measure the success of advertisements across devices.

Your data may also be processed to determine whether other devices may be assigned to your household and in this case be combined with data of members of your household for the purposes described in this section regarding personalized marketing, especially in order to display (personalized) advertising across devices assigned to your household.

If you do not allow cookies for personalized marketing, you might in particular experience advertising that might be less relevant for you.

Personalized marketing cookies are used in context of the following tools. In the respective description, we also inform you about how you can withdraw your consent for the respective tool specifically. Your general right to withdraw consent for one or all purposes in this section described above remains unaffected.

Adobe Analytics

Provided you have consented, this website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) (“Adobe”) for the purpose of analyzing the usage of this website.

To this end, cookies are installed on your device. These cookies will collect data such as browser and device information, your IP address, visited websites, and date and time of server request for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider as well as information about the interactions that users had with ads (clicking a text ad or viewing a video ad).

We have implemented Adobe Analytics in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP address is collected and This in any case performed prior to any further processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis.

Henkel will use the data collected to optimize this website and campaigns, retarget and personalize ads. For this purpose, the cookies stored on your device allow you to be retargeted on our as well as third party websites. For this purpose, your browser is identified during advertising delivery and assigned to a target group. This information is used to display relevant and interesting ads to you.

You find more information about privacy in Adobe services here: https://www.adobe.com/privacy/policy.html

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings".

Google Analytics

Provided you have consented, this website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) (“Google”) for the purpose of analyzing the use of this website.

For this purpose, a cookie is installed on your device. This cookie will collect data such as browser and device information, your IP address, visited websites, and date and time of server request for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. The cookie also collects information about the interactions that users had with ads (clicking a text ad or viewing a video ad).

Henkel will use the data collected to optimize this website and campaigns, retarget and personalize ads. For this purpose, the cookies stored on your device by Google allow you to be retargeted on the one hand (e.g. within the scope of “Google Ads”) on Google's websites and on the other hand (e.g. within the scope of “Google Campaign Manager 360”) on our websites and – depending on your interests – when you visit websites of other partners. For this purpose, your browser is identified during advertising delivery and assigned to a target group. This information is used to display relevant and interesting ads to you.

We have implemented Google Analytics in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP address is collected within the EU or EEA. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the US.

You find more information about privacy in Google services here: http://www.google.de/intl/de/policies/privacy

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but however, you are uncomfortable with the use of Google Analytics cookies, you can follow this link (https://tools.google.com/dlpage/gaoptout?hl=en) and download and install a browser-plugin to deactivate the Google Analytics collection and use of data (cookies and IP address).

Adobe Target

Provided you have consented, this website uses Adobe Target, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) (“Adobe”) for the purpose of user analysis and A/B testing.

For this purpose, a cookie is installed on your device. This cookie will collect data – such as browser and device information, your interaction with the website (e.g. clicked advertisements and products), your IP address, visited websites, and date and time of server request – for the purpose of evaluating your use of the website, conducting tests of our sites (in particular A/B-testing) and dynamically delivering personalized content when you visit our website.

The information collected by the cookie about your use of our website will be transmitted to and stored by Adobe on our behalf. We have implemented Adobe Target in a manner so that the last octet (the last portion) of your IP address is immediately obfuscated when the IP address is collected and This in any case performed prior to any further processing of the IP address. Only an approximate location will be available for the purpose of statistical analysis.

You find more information about privacy in Adobe services here: https://www.adobe.com/privacy/policy.html

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but however, you are uncomfortable with the use of Adobe Target cookies, you can follow this link (https://www.adobe.com/privacy/opt-out.html) and deactivate the Adobe collection and use of data.

Adobe Marketo Munchkin

Provided you have consented, this website uses Adobe Marketo Munchkin, a JavaScript tracking code provided by Marketo EMEA Ltd., Cairn House, South County Business Park, Leopardstown Road, Dublin 18, Ireland (“Marketo”) for the purpose of optimizing marketing campaigns.

For this purpose, a cookie is installed on your device. This cookie will collect data such as browser and device information, your interaction with the website (e.g. advertisements and products), your IP-Address, visited websites, geolocation data inferred from IP lookups, date and time of server request and data collected through form fill outs. The data provided is stored and processed in Marketo directly, allowing us to use this information for target group creation, interest segmentation, lead generation, experience optimization, and to deliver optimized and personalized marketing campaigns.

The information collected by the cookie about your use of our website will be transmitted to and stored by Marketo on our behalf.

You find more information about privacy in Marketo services here: https://www.adobe.com/privacy/policy.html

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings".

Microsoft Advertising (formerly BingAds)

Provided you have consented, this website uses "Microsoft Advertising", a service provided by Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 (“Microsoft”) for the purpose of delivering personalized and optimized ads to you within the Microsoft advertising network. More on Microsoft’s data processing in this regard can be found here: https://help.ads.microsoft.com/apex/index/3/en-us/53056#!.

For the purpose of Microsoft Advertising, a cookie is installed on your device. The prerequisite for this is that you have reached our website via an advertisement from “Microsoft Advertising”. With that cookie, Microsoft processes the information collected by your device about the use of our website, interactions with our website and advertising measures as well as your IP address, cookie identifier, browser information, your previously visited websites and the date and time of access for the purposes of analysing and visualizing the reach measurement of our advertisements and to display personalized advertisements (“Microsoft Advertising User Data”; more on the processed data is described here: https://about.ads.microsoft.com/en-gb/resources/policies/microsoft-advertising-agreement, section 8). For this purpose, it can also be determined whether different end devices belong to you or your household. With “Conversion tracking”, conversion goals such as purchases, sign ups and downloads can be tracked. With “Remarketing”, users of our website can be re-identified and recognized on other websites within the Microsoft advertising network (e.g. in Bing or Yahoo Search) and advertisements tailored to their interests can be displayed to them.

You find more information about privacy in Microsoft services here: https://privacy.microsoft.com/de-de/privacystatement

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but however, you do not wish to receive personalized Microsoft advertising, you can find information on how to individually adjust your advertising settings with Microsoft under this link: https://about.ads.microsoft.com/en-gb/resources/policies/personalized-ads.

Google Campaign Manager 360 (formerly DoubleClick)

Provided you have consented, with Google Campaign Manager 360 (“Campaign Manager”) we use a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”), to display relevant ads to you.

For this purpose, Google installs a cookie on your device by using your IP address. In addition to IP address, browser and device information, visited websites and time of access, this cookie also collects information about the advertising shown in your browser and which advertisements you click. This allows Google and its partner sites to display interest-related ads based on the previous visits of Henkel-pages or other websites. The Campaign Manager cookies utilize a pseudonymous identification number assigned to your browser to check the on-screen and appealing ads. For this purpose, your browser is identified when ads are served, and assigned to a target group. The cookies stored on your device by Google thus allow you to be retargeted on the one hand (e.g. within the scope of “Google Ads”) on Google's websites and on the other hand (e.g. within the scope of “Google Campaign Manager 360”) on our websites and – depending on your interests – when you visit websites of other partners.

This information will also be used for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Within Campaign Manager, we use the conversion tracking system “Floodlight” in order to monitor and report on conversions after users interact with one of our Google display or search ads. To do this, Google installs a cookie on your device. Floodlight tracks user activity on our or a third-party website after the user has clicked a Google ad and recognizes or re-identifies users by means of their User ID. This information can be used by Floodlight for conversion attribution. Floodlight also counts cross-environment conversions (e.g. user clicks a paid search ad on a mobile device but converts from a desktop computer) using – according to Google – various sources of aggregated and anonymized data.

You find more information about privacy in Google services here: http://www.google.de/intl/de/policies/privacy

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings”. If you agree to the use of cookies in general, but however, you are uncomfortable with the use of Google Campaign cookies, you can follow this link (www.google.com/settings/ads/onweb) to deactivate the Campaign Manager service by Google.

Google Ads

Provided you have consented, this website uses "Google Ads", a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), for the purposes of evaluating the effectiveness of advertising measures and to address you again.

When you visit our website, “Google Ads” installs a cookie on your device. With that cookie, Google processes the information generated by your device about the use of our website, interactions with our website and advertising measures as well as your IP address, browser information, your previously visited websites and the date and time of access for the purposes of analyzing and visualizing the reach measurement of our advertisements and to display personalized advertisements. For this purpose, it can also be determined whether different end devices belong to you or your household. With “Remarketing”, users of our website can be re-identified and recognized on other websites within the Google advertising network (e.g. in Google Search or on YouTube) and advertisements tailored to their interests can be displayed to them.

You find more information about privacy in Google services here: http://www.google.de/intl/de/policies/privacy

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". If you agree to the use of cookies in general, but however, you do not wish to receive personalized Google advertising, you can find information on how to individually adjust your advertising settings with Google under this link (https://support.google.com/ads/answer/2662922?hl=en). You can also install an opt-out plug-in (https://support.google.com/ads/answer/7395996).

Meta Pixel

Provided you have consented, we use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (“Meta”). This tool allows us to analyze and personalize our ads based on your usage of our website in order to provide ads specifically tailored for you. To this end, the Meta Pixel collects your IP address, browser information, the visits and actions you take on our websites, “Facebook-ID” and date and time of the server request. See section 1 a. of the Facebook Business Tools Terms (https://www.facebook.com/legal/technology_terms), for further information about the data you share with us via Facebook/Meta Business Tools such as the Pixel.

The data collected is used to optimize campaigns and create custom audiences, which are groups of Facebook and Instagram users based on that data collected, to target ad campaigns on Facebook and Instagram (Facebook and Instagram Ads). For this purpose, it can also be determined whether different end devices belong to you or your household.

Insofar as data on your usage of our website is collected, personalized ad campaigns are optimized and custom audiences are created, we act as joint controller in accordance with Art. 26 GDPR together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In this respect, we have entered into an agreement with Meta which can be found here: https://www.facebook.com/legal/controller_addendum (“Controller Addendum”). The agreement determines the respective roles and responsibilities for fulfilling the obligation under the GDPR with regard to joint controllership.

The required information as per Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Meta’s privacy policy here: https://www.facebook.com/privacy/policy.

We have agreed with Meta that Meta is the contact point for the exercise of data subject rights pursuant to Articles 15-20 of the GDPR with regard to the processing activities in joint controllership.

Further information on how Meta processes personal data, including its legal basis and further information on the rights of data subjects can be found here: https://www.facebook.com/about/privacy.

Further information on data protection and the storage period with respect to Meta Pixel can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". You can adjust your ad preferences by changing your browser settings or your Facebook settings if you do not want to receive interest-based ads on Facebook (https://www.facebook.com/help/568137493302217).

Pinterest Pixel

Provided you have consented, the website uses the conversion tracking technology of the social network “Pinterest” (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) in order to display relevant advertisements and offers on Pinterest to visitors to this website who have already taken an interest in our website and content/offers or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) and are Pinterest members.

For this purpose, a so-called conversion tracking pixel from Pinterest is integrated on our websites. The pixel generates a cookie that stores your IP address, browser and device information, the visits and actions you perform on our websites, as well as the date and time of the server request. You can find more information under "Pinterest Advertising Services Agreement, Exhibit A: Pinterest Data Sharing Addendum" (https://business.pinterest.com/pinterest-advertising-services-agreement/).

With the Pinterest cookie, Pinterest can determine the visitors to our website as a target group for the display of advertisements (so-called "Pinterest ads"). If, for example, you have shown interest in our products on our website, you can be shown an ad for our products on Pinterest. With the Pinterest cookie, we can also track the effectiveness of the Pinterest ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Pinterest ad (so-called "conversion").

Insofar as we and Pinterest collect and share so-called “Activity Data” (such as offline sales measurement or a mobile measurement partner integration), we and Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) act as joint controllers in accordance with Art. 26 GDPR. In this respect, we have entered into an agreement with Pinterest which can be found here under “Exhibit B”: https://business.pinterest.com/en-gb/pinterest-advertising-services-agreement/germany/ (“JCA”). The agreement determines the respective roles and responsibilities for fulfilling the obligation under the GDPR with regard to joint controllership.

The required information as per Art. 13 para. 1 lit. a, b GDPR with regard to data processing as joint controllers can be found in Pinterest’s privacy policy here: https://policy.pinterest.com/en/section-residents-of-the-eea.

We have agreed with Pinterest that Pinterest is acting as contact point for the exercise of data subject rights pursuant to Articles 15-20 of the GDPR with regard to the processing activities in joint controllership.

Further information on how Pinterest processes personal data, including its legal basis and further information on the rights of data subjects can be found here: https://policy.pinterest.com/en/section-residents-of-the-eea.

Further information on data protection and the storage period on Pinterest can be found at:

https://policy.pinterest.com/en/privacy-policy

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". You can adjust your ad preferences by changing your browser settings or your Pinterest settings if you do not want to receive interest-based ads on Pinterest (https://help.pinterest.com/en/article/personalized-ads-on-pinterest).

LinkedIn Insight Tag

Provided you have consented, this website uses the LinkedIn Insight Tag, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). This tool allows us to analyze and personalize our ads based on your usage of our website and ads in order to provide ads specifically tailored to you.

To this end, LinkedIn Insight Tag creates a cookie on your web browser when you visit our website. The cookie collects information relating to your LinkedIn profile and your visit of our website, such as: URL, referrer URL, IP address, LinkedIn member identifiers, device and browser characteristics, timestamps, page views, aggregated demographic information (e.g. job title, career level, industry, location, country), previously visited websites and your interaction with our ads and our website for the purpose of tracking and analyzing the reach of our advertisements, actions taken on our site after an ad has been viewed or clicked (conversion tracking), displaying personalized advertisements and optimizing our LinkedIn marketing campaigns. Conversion tracking can also be done across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to retarget LinkedIn members who visit our website and to display targeted advertising to visitors outside of our website.

Further information on data protection and the storage period with respect to LinkedIn can be found at: https://de.linkedin.com/legal/privacy-policy? and https://de.linkedin.com/legal/cookie-policy?.

Withdraw consent:

You can withdraw your consent at any time with effect for the future by disabling cookies on our website under "Cookie settings". You can adjust your ad preferences by changing your browser settings or your LinkedIn settings if you do not want to receive interest-based ads on LinkedIn (https://www.linkedin.com/help/linkedin/answer/a427426/manage-your-linkedin-ads-settings?lang=en).

5 Use of Social Media Plug-ins

Social Media content management services such as cookies and plug-ins of different social media networks are embedded in our web pages. The associated services are provided by the respective companies (“providers”). Purpose of these services are to enable you to view and share our content with your friends and professional networks. These providers are:

Facebook is within the EU operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). For an overview of the Facebook plug-ins and their appearance, go to: https://developers.facebook.com/docs/plugins

X is operated by X Corp., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“X”). For an overview of the X-buttons and their appearance, go to: https://developer.twitter.com/en/docs/twitter-for-websites

YouTube is within the EU provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For an overview of the YouTube plugins, go to: https://developers.google.com/youtube/documentation
Instagram is within the EU provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland („Instagram“). For an overview of the Instagram plug-ins and their appearance, go to: https://developers.facebook.com/docs/instagram

LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For an overview of the LinkedIn plug-ins and their appearance, go to: https://developer.linkedin.com/plugins#

To increase the protection afforded to your data when you visit our web pages, these plug-ins are implemented as “2-click buttons.” This form of integration ensures that, when accessing a page from within our website containing such plug-ins, you are not automatically connected to the providers’ servers. Only if you activate the plug-ins the browser will initiate a data transmission to the providers’ servers. The content of the various plug-ins is then transmitted by the provider concerned directly to your browser and then displayed on your screen.

The social media tool tells the provider your previously visited websites, your IP address, browser information, and the date and time of the server request. On making use of any of the social media functions (e.g. clicking the “Share” button, leaving a comment), also this information will be transmitted by the browser directly to the provider for retention. Those providers may use your data for any own purposes as for analytics, marketing, profiling and linking your data to other data collected about you (such as through your user account with the respective provider) even if you are not logged in to your social media account.

Please note: The providers may process the data partly also in countries outside of the EU/EEA not providing for an adequate level of data protection including the US if the provider is not a participant of the EU-U.S. Data Privacy Framework.

We base such processing and use of your data (if applicable, also including any direct transfer from Henkel to providers located outside of the EU/EEA) on Art. 6 para. 1 lit. b or f GDPR as it is required to provide this functionality to you once you decide to interact with a social media plugin implemented on this website.

Further information on the collection and use of data by the providers, in particular also with regard to measures implemented by the providers regarding the transfer of personal data outside of the EU/EEA, and on the rights and possibilities available to you for protecting your privacy in these circumstances can be found in the providers’ data protection/privacy policies:

Data protection/privacy policy issued by Facebook: http://www.facebook.com/policy.php
Data protection/privacy policy issued by X: https://twitter.com/en/privacy
Data protection/privacy policy issued by Google: https://policies.google.com/privacy
Data protection/privacy policy issued by Instagram: https://help.instagram.com/155833707900388/
Data protection/privacy policy issued by LinkedIn: https://www.linkedin.com/legal/privacy-policy

6 Your Data Subject Rights / Data Protection Officer

At any time, you may assert the right to access your data. Additionally, provided that the respective requirements are met, you may assert the following rights:

Right to rectification: You have the right to have false personal data concerning you corrected.
Right to erasure: You may also request the deletion of your personal data, for example if your data are no longer required for the purposes for which they were collected or otherwise processed.
Right to restriction of processing: You also have the right to request that the processing of your personal data be restricted; in such a case, the data will be blocked for any processing. This right exists in particular if the accuracy of the personal data between you and us is debated.
Right to lodge a complaint with the respectively competent data protection supervisory authority: You also have the right to file a complaint at any time with a supervisory authority, in particular a supervisory authority in the Member State where you are staying, working or the place of alleged infringement, if you believe that the processing of personal data concerning you is in violation of applicable data protection laws.
Right to data portability: If we process your personal data to fulfil a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, provided and to the ex-tent that you have made the data available to us.
Right to withdraw consent: if you have provided consent to us to process your personal data, you have the right to withdraw any such consent with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

In case of processing activities involving your personal data that are carried out on basis of a legitimate interest of Henkel or a third party, you have the right to object against such processing of your personal data at any time for reasons resulting from your specific situation. Henkel will stop that processing unless Henkel can prove important reasons for the processing which deserve protection which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend against legal claims.

In these cases, or if you have any other questions or wishes in connection with regard to your personal data, please send an e-mail or a letter using the contact details provided above.

After answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.