privacy policy

Kao South Africa Pty. Ltd. Commitment to Data Privacy Protection 

Kao South Africa Pty. Ltd., Unit 3 K101 Capital Hill Estate, Cnr R101 & Le Roux Ave, Midrand, Gauteng (Kao Company" or "we" or "our") and each of its affiliates and subsidiaries in the EMEA region collectively, the "Kao Group") takes data privacy seriously. This Privacy Policy informs the users of www.johnfrieda.com/en-za[HU1]  and any other Kao Company-owned websites or mobile applications on which this Privacy Policy is displayed ("Website”) how we collect and process personal data and other information of such users in connection with their usage of the Website. 

Note that other Kao Group websites or mobile apps may be governed by other privacy policies.

Kao South Africa Pty. Ltd. Commitment to Data Privacy Protection 
Last revised June 2021 

1. Categories of Personal Data and Processing Purposes - What personal data do we process about you and why?

We collect the following information about you that we describe in this section. 

1.1 Metadata

You may use the Website without providing any personal data about you. In this case, we will collect only the following metadata that result from your usage of the Website browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Website date and time of accessing our Website, and internet protocol (IP) address.

Your IP address will be used to enable your access to our Website. Once the IP address is no longer necessary for this purpose, we will shorten your IP address by removing the last octet of your IP address. The metadata, including the shortened IP address, will be used to improve the quality and services of our and services by analyzing the usage behavior of our users.

1.2 Contact form 

On our website, we offer you the opportunity to contact us via a contact form. For this we need the following personal data from you: salutation, full name, email, phone number, and message. The personal data that you provide us in the context of this contact request will only be used to answer your inquiry / contact request and for the associated technical administration. The transfer to third parties does not take place. Your personal data will be deleted as soon as we have processed your request or you revoke your according consent.

1.4 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

In case IP-anonymization is activated on this website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-anonymization is active on this website.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage.

The IP-address, that your Browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. 

You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Addon for your current web browser: tools.google.com/dlpage/gaoptout.  

As an alternative to the browser plug-in and especially for mobile browsers, please click on the following link to set an opt-out cookie. This opt-out cookie prevents detection by Google Analytics within this website. http://www.johnfrieda.co.uk/data-protection-policy/?google-analytics-opt-out=true  

1.5 Competitions

If you participate in a competition, we collect and process the following personal data about you: name, email address and postal address (if you have been selected as a winner). We process such personal data for purposes of carrying out the competition, informing the winner, delivering the prize to the winner, carrying out the event, and providing you with marketing materials where you have provided us consent to do so, to the extent permitted by applicable law, and analysing your interests for marketing purposes.

1.6 Third Party Services

On our website we use the rating tool of the third party service provider Bazaarvoice.

This tool is used to allow our customers to provide feedback on our goods and services. For this tool, the privacy policy of this services provider applies, and is available at https://www.bazaarvoice.com/legal/privacy-policy/

 2. Processing Basis and Consequences - What is the legal justification for processing your personal data and what happens if you choose not to provide it?
We rely on your consent for the collection, processing, and use of your personal data in order to provide answers to any online inquiries or questions. 

The provision of your personal data is not required by a statutory or contractual obligation. The provision of your personal data is /with us or to receive our services/s as requested by you. The provision of your personal data is voluntary for you. Your IP address is saved via cookies in addition to any information you provide Kao with voluntarily over the Contact Us, and / or Registration form for the Stylist content.  In addition, if you sign up for the Newsletter, your name and email will be saved in order to provide you with the desired newsletter.

Not providing your personal data may result in disadvantages for you, for example, we may not be able to answer your request or you may not be able to fully experience the website (cookies). However, unless otherwise specified, not providing your personal data will not result in legal consequences for you.

 3.   Categories of Recipients and International Transfers - Who do we transfer your personal data to and where are they located?
We may transfer your personal data to third parties for the processing purposes described above as follows:   Within the Kao Company: Our parent entity, the Kao Corporation, in Japan and each of its affiliates and subsidiaries (each affiliate or subsidiary including us referred to as "Kao Company"; collectively, the "Kao Group") within the global Kao Group  may receive your personal data as necessary for the processing purposes described above. Depending on the categories of personal data and the purposes for which the personal data has been collected, different internal departments within the Kao Company may receive your personal data.  With data processors: Certain third parties, whether affiliated or unaffiliated, may receive your personal data to process such data under appropriate instructions ("Processors") as necessary for the processing purposes described above, such as Website service providers, order fulfilment providers, customer care providers, marketing service providers, IT support service providers, and other service providers who support us in maintaining our commercial relationship with you. The Processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process the personal data only as instructed. Other recipients: We may transfer - in compliance with applicable data protection law - personal data to law enforcement agencies, governmental authorities, judicial authorities, legal counsel, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to the third parties involved in the merger or acquisition. We will not disclose your personal data to third parties for advertising or marketing purposes or for any other purposes without permission.

Any access to your personal data is restricted to those individuals that have a need-to-know in order to fulfill their job responsibilities.

 4.   Retention Period - How long do we keep your personal data?
Your personal data will be retained as long as necessary to provide you with the services requested. Once you have deleted your newsletter subscription  or otherwise ended your relationship with us, we will remove your personal data from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which the Kao Company is subject, e.g., taxation purposes).

We may retain your contact details and interests in our products or services for a longer period of time if the Kao Company is allowed to send you marketing materials. Also, we may be required by applicable law to retain certain of your personal data for a period of 10 years after the relevant taxation year. We may also retain your personal data after the termination of the contractual relationship if your personal data are necessary to comply with other applicable laws or if we need your personal data to establish, exercise or defend a legal claim, on a need to know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.

 5.   Your Rights - What rights do you have and how can you assert your rights
Right to withdraw your consent: If you have declared your consent regarding certain collecting, processing and use of your personal data (in particular, regarding the receipt of direct marketing communication via email you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. Please contact us as stated in Section 7 below to withdraw your consent. [Further, you can object to the use of your personal data for the purposes of marketing without incurring any costs other than the transmission costs in accordance with the basic tariffs.]

Additional data privacy rights: Pursuant to applicable data protection law, you may have the right to:

1. request access to your personal data
2. request rectification of your personal data;
   
3. request erasure of your personal data;
   
4. request restriction of processing of your personal data;
   
5. request data portability; and/or
   
6. object to the processing of your personal data (including objection to profiling).
   

• Right to request access to your personal data: You may have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. This access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. You may have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
• Right to request rectification: You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  
• Right to request erasure (right to be forgotten): Under certain circumstances, you may have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
  
• Right to request restriction of processing: Under certain circumstances, you may have the right to obtain from us restriction of processing your personal data. In such case, the respective data will be marked and may only be processed by us for certain purposes.
  
• Right to object: