Revised: July 6, 2022.
1. Categories of personal data and processing purposes
You may use our website or app without providing any personal data about you. In this case, Essity will collect only the following metadata that result from your usage:
Referral page, data and time of access, data volume transmitted, status of transmission, type of web browser, IP-address, operating system and interface, language and version of browser software.
Your IP-address will be used to enable your access to our website or app. Once the IP-address is no longer necessary for this purpose, we will shorten your IP-address by removing the last octet of your IP-address. The metadata, including the shortened IP-address will be used to improve the quality and services of our website or app by analyzing the usage behavior of our users.
If you create an account on/in our website or app, you may be asked to provide personal data about you, for example: Name, postal address, email address, selected password, telephone number, bank account details, credit card details, invoicing and delivery address, interests in certain products/services (voluntary), request to receive marketing emails (voluntary). Essity processes such personal data for purposes of providing our services to you, to provide you with marketing materials to the extent permitted by applicable law, and to analyze your interests for marketing purposes.
If you order a product via our website or app, Essity collects and processes the following personal data about you: Your account data, type and amount of product, purchase price, order date, order status, product returns, customer care requests. Essity processes such personal data for purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing, and exercising legal claims, and tailored marketing.
If you participate in a sweepstake, Essity collects and processes the following personal data about you: Name, postal address, email address, date of entry, selection as winner, prize, answer to quiz. Essity processes such personal data for purposes of carrying out the sweepstake, informing the winner, delivering the price to the winner, carrying out the event, and marketing.
Health Data: By ordering some products, Essity may collect and process also information about health conditions as implied by product order. Health data are sensitive data within the meaning of the GDPR and Essity is taking all necessary steps to protect such sensitive data as legally required. Subject to consent, Essity collects and processes health data solely for the purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing, and exercising legal claims, and tailored marketing.
2. Third Parties
3. Legal basis for the processing
We may carry out the processing of your personal data on the following legal basis:
We may carry out the processing of your sensitive personal data on the following legal basis:
The provision of your personal data is required by a statutory or contractual obligation, or necessary to enter into a contract with us or to receive our services/products as requested by you, or simply voluntary for you.
Not providing your personal data may result in disadvantages for you, e.g. you may not be able to receive certain products and services. However, unless otherwise specified, not providing your personal data will not result in legal consequences for you.
4. What rights do you have and how can you assert your rights?
If you have declared your consent regarding certain collecting, processing and use of your personal data, you can revoke this consent at any time with future effect. Further, you can object to the use of your personal data for the purposes of marketing without incurring any costs other than the transmission costs in accordance with the basic tariffs.
Pursuant to the applicable data protection law you have the right (i) to request access to your personal data, (ii) to request rectification of your personal data, (iii) to request erasure of your personal data, (iv) to request restriction of processing of your personal data, (v) to request data portability, (vi) to object to the processing of your personal Data (including objection to profiling), and (vii) to object to automated decision making (including profiling).
To exercise your rights please contact us as stated under Sec. 7 (Contact us) below.
In case of complaints you also have the right to lodge a complaint with the competent data protection supervisory authority.
5. Cookies and other tracking technologies
6. How long do we keep your Personal Data?
Your personal data will be retained as long as necessary to provide you with the services and products requested. Once our relationship has come to an end, we will either delete your personal data or anonymize your personal data, unless statutory retention requirements apply (such as for taxation purposes). We may retain your contact details and interests in our products or services for a long period of time if Essity is allowed to send you marketing materials. Also, we may be required by applicable law to retain certain of your personal data for a period of 10 years after the relevant taxation year. We may also retain your personal data after the termination of the contractual relationship if your personal data are necessary to comply with other applicable laws or if we need your personal data to establish, exercise or defend a legal claim, on a need to know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
7. Contact us
Essity Aktiebolag (publ), Compliance & Ethics Team, P.O. Box 200, SE-101 23 Stockholm, Sweden
The Service may contain links to other websites not owned by us and other websites not owned by us may reference or link to our Service. We encourage our users to read the privacy policies of each website they interact with. We do not endorse, screen or approve, and are not responsible for the privacy practices or content of other websites that we do not own. Visiting these other websites is at your own risk.
The Service may also contain links and interactive features with various social media platforms. If you already use these platforms, their cookies may be set on your device when using our Service. You should be aware that personal information you voluntarily include and transmit online in a publicly accessible blog, chat room, social media platform or otherwise online, or that you share in an open forum may be viewed and used by others without any restrictions. We are unable to control such uses of your information when interacting with a social media platform, and by using such services you assume the risk that the personal information provided by you may be viewed and used by third parties for any number of purposes.
We implement reasonable physical, administrative, and technical security measures to protect your personal information. While we take reasonable measures to protect the information we collect via the Services against loss, theft and unauthorized access, use, disclosure, or modification, we cannot guarantee its absolute security. No Internet, email, or mobile application transmission or database is ever fully secure or error free. You should use caution whenever submitting or sharing information through the Service. Please keep your account password confidential to help ensure the security of your personal information.
If you are a California resident, the California Consumer Privacy Act of 2018 (“CCPA”) provides you with certain rights with regard to your personal information. This Privacy Notice describes how we collect, use, sell or disclose personal information of residents of the State of California, either online or offline.
The term “personal information” is defined in the CCPA as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information obtained from government records or deidentified or aggregated consumer information that cannot be reconstructed to identify you.
Personal Information We Collect
During the preceding 12 months, we have collected the following categories of personal information:
Category of Personal Information and Examples Where They Apply
Identifiers (e.g. IP address)
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (Not applicable)
Characteristics of protected classifications under federal and California law (Not applicable)
Commercial information (e.g. Records of products or services purchased, obtained, or considered)
Biometric information (Not applicable)
Internet or other electronic network activity information (e.g. Device information, browser type, operating system, browsing history, search history, and information regarding a user’s interaction with our website or an advertisement)
Sensory data (Not applicable)
Professional or employment-related information (e.g. Household or lifestyle information, interests, tastes, and preferences)
Other information you choose to provide (e.g. Photos, videos, and other content and information you provide through the services or in communications with us)
Sources of Personal Information
We collect personal information about you (1) directly from you when you provide it to us, (2) automatically using cookies and other tracking technologies when you use our website and mobile applications, and (3) from third parties.
Business or Commercial Purposes for Collecting Personal Information
We use and process the personal information we collect to:
Disclosure and Sale of Personal Information
Your California Privacy Rights and How to Exercise Them
If you are a California resident, the CCPA provides you with the following rights with respect to your personal information:
We will provide this information upon receipt of a verifiable consumer request. How we will verify your identity depends on how you have interacted with us in the past. To exercise this right, you can contact us by phone at 1-866-722-6659 or by email at email@example.com.
Only you, or someone legally authorized to act on your behalf, may make a request under the CCPA related to your personal information. Any request must provide sufficient details so we can evaluate and respond to the request. We may request an individual’s first and last name, email address, mailing address, and/or other information to verify an individual’s identity. If you designate an authorized agent, the agent will be required to submit proof of authorization and you will be required to verify your identity. We will not discriminate against you for exercising your rights under the CCPA. We reserve the right to refuse any requests, in whole or in part, to the extent permitted by law.
Under California Civil Code Section 1798.83, California residents have a right to request, once per year and free of charge, information about the categories of personal information (if any) we have disclosed to third parties for their direct marketing purposes during the previous calendar year. If you are a California resident and would like to make such a request, please send an email to firstname.lastname@example.org with the subject line “California Shine the Light Request.”
Nevada residents have a right to submit a verified request directing a website operator to not make any “sale” of covered information collected about a consumer for monetary consideration to a person for such person to license or sell the information to additional persons, subject to certain exceptions. We do not engage in the “sale” of covered information, as that term is defined.