Data Privacy Policy

Based in Switzerland and with an international presence, BLONE specializes in the manufacture and distribution of luxury fragrances. We place great importance on the security and confidentiality of your personal data. We process your personal data in accordance with the data protection laws in effect in your country, specifically adhering to the principles of lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; limited retention; completeness; availability; and confidentiality, in accordance with the Swiss Federal Data Protection Act (LPD) and the European General Data Protection Regulation (GDPR).
This Privacy Policy applies to the personal data we collect in connection with our products and services when you visit our website and retail locations, contact our customer service, or attend our events.
This privacy policy describes the categories of personal data we collect about you, how we may use it, with whom we may share it, and how you can exercise your rights regarding the processing of this information, as well as your rights concerning our use of it. It also describes the measures we take to protect the security of personal data, how long we retain it, and how you can contact us.
We recommend that you read this privacy policy carefully, as it contains important information about your personal data. If you have any questions, you can contact us using the information below in the “Contact Us” section.

We may collect personal data directly from you (for example, when you purchase a product at a retail location) or indirectly (for example, from your electronic devices that interact with our website).

We process the personal data you provide to us when you register or create a customer account on our websites, during the ordering and purchasing process, when you use the contact form or other forms on our websites, when you visit one of our stores or spas, when you subscribe to our newsletter, or when you use our digital platforms:
• First and last name
• Email address
• Date of birth
• Gender
• Phone number
• Mailing address
• Credit card payment information when making a purchase on our website
• The email address associated with your PayPal account if you used this service when making a purchase on our website
• When required by law, a tax ID number or identification document number, in order to comply with legal invoicing requirements in the European Union.

We also collect information about your visits to our websites, traffic data, location data, web logs, and your IP address through cookies placed on your device. Some cookies are necessary for our digital platforms to function properly, while others are used for analytical purposes to provide you with more personalized services and a better digital experience.

We may use the personal data we collect to:
• Optimize certain features or displays on our websites;
• Improve your browsing experience on our media platforms;
• Facilitate the sale of products offered at retail locations;
• Communicate with you and manage our relationship with you;
• Offer contests and loyalty programs;
• Conduct audience analysis or statistics;
• Send you the BLONE newsletter, if you choose to receive it;
• Verify your identity and protect you against fraud and other illegal activities, unauthorized transactions, claims, and other liabilities, and manage your exposure to data-related risks;
• Maintain and improve the quality and security of our products and services;
• Comply with our legal and regulatory obligations;
• Provide you with information or products that are best suited to you and likely to interest you. This is only possible if you have previously consented to receive such information from us.
• To manage your skin diagnostic data and results in order to personalize our campaigns and improve your experience.
• To optimize your customer experience by monitoring the quality of our offers and services.

We collect and use your personal data based on one or more of the following legal grounds:
• Your consent;
• A contractual relationship we may have with you;
• Our legitimate business interests; or
• Compliance with our legal obligations.

• We may share personal data within BLONE, or with third parties, including our authorized processors, a list of which is kept up to date, in accordance with the terms of this Privacy Policy;
• We may disclose personal information about you
• if required or permitted by applicable law or legal proceedings (such as a court order or subpoena)
• or to judicial authorities or other government officials in order to respond to a legitimate legal request,
• or in connection with an investigation into allegations of fraud or illegal activity,
• if there is a justifiable reason, such as an overriding private or public interest, or
• or, in all other cases, with your consent.

Your personal data is stored in databases linked to our websites or our management tools, hosted by our service providers on servers. These servers are secure and are subject to our service providers’ privacy policies; they also comply with laws and regulations regarding the protection of personal data.
BLONE operates worldwide. In this context, we may need to transfer your personal data abroad, including to countries that do not offer a level of protection equivalent to that of your country of residence. Prior to such transfers, we will implement appropriate measures to protect your personal data. We may also transfer personal data with your explicit consent and, in certain cases, when permitted by applicable law.

• Authorized BLONE staff who process orders placed on our websites; members of the technical teams who maintain and ensure the proper functioning of the websites; and customer service staff who handle contact requests submitted through our contact forms.
• Any service providers who may be involved with our websites or at BLONE’s request.
• Our authorized subcontractors, solely in accordance with the purpose and objectives communicated at the time of collection or explained in this privacy policy.
We ensure that our staff and service providers act in accordance with applicable laws regarding the protection of personal data and that they pay particular attention to the confidentiality and security of such data.
All individuals and employees who may have access to your personal data have signed a confidentiality agreement.

To the extent permitted by applicable law, we will retain the personal data we collect about you for as long as
• is necessary for the purposes for which it was collected, in accordance with the provisions of this Privacy Policy, or
• we have another legal basis, as set forth in this Privacy Policy, to retain such data beyond the period necessary to fulfill the original purpose for which the personal data was collected.
You may exercise your right to have your personal data erased at any time; see the sections “What Are Your Rights” and “Contact Us.”

To the extent permitted by the laws of your country, you may
• access, modify, update, and correct the personal data we hold about you through your customer account or by contacting us using the contact information below.
• request that we delete or restrict your personal information through our online contact form or by contacting us using the contact information below; or
• exercise your right to data retention through the same channels. Where permitted by law, you may withdraw your consent to the processing of your personal data at any time for legitimate reasons related to your particular situation, and we will honor your preferences as appropriate. To request the exercise of these rights, please contact us at the address provided in the last section of this document.
• Regarding the newsletter, you can choose to stop receiving it by withdrawing your consent via the Dashboard in your customer account. If you do not have an account, an unsubscribe link is available in the newsletter. If you continue to receive the newsletter despite your request to stop receiving it, please contact us.
To protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. If you are not satisfied with our response, you may file a complaint with the Federal Data Protection and Information Commissioner in Switzerland.

Our website uses a variety of technical security measures, communication protocols, and appropriate organizational measures. Authentication tools are encrypted to ensure the security of your personal data.
We have implemented procedural, technical, and physical safeguards that comply with legal requirements and state-of-the-art standards at every stage of personal data processing. These measures are designed to protect against the destruction, loss, alteration, unauthorized access, use, or disclosure of the personal information you provide to us.
We regularly perform automated backups of our databases.
We would like to remind you of the importance of keeping the password you created when registering on one of our websites—which allows you to access certain parts of the site—confidential. The protection and confidentiality of your personal data depend on it.

This Privacy Policy may be updated without notice to bring our practices into compliance with legal data protection requirements or in the event of changes to our business operations. We will indicate the date of the last update at the top of this Privacy Policy.

If you have any questions or comments regarding this privacy policy, or if you wish to exercise your rights regarding your personal data, please contact us at the following address: …