Privacy Policy
Privacy Policy (3)
Privacy Statement
1. WHO WE ARE
1.1 This is the Privacy Policy (“Policy” or “Privacy Policy”) of LVMH Perfumes and Cosmetics (Malaysia) Sdn. Bhd. (“the Company”, “Parfums Christian Dior” or “Dior”). We are a limited liability company governed by Malaysian law whose principal place of business is at No. 3A-3, Level 3A Menara Milenium, 8, Jalan Damanlela, Bukit Damansara - 50490 Kuala Lumpur / Malaysia, and registered with the Companies Commission Malaysia with the company registration number 199401013101 (298780-T). Without limiting any other provisions in this Policy, references to “we”, “us”, “our”, or words deriving therefrom refer to the Company and each of the Company’s related corporations, affiliates and associated companies.
1.2 We own and operate the website at https://www.dior.com/en_my/beauty (the “Site”) and we operate various physical stores, boutiques and point-of-sale locations in Malaysia.
1.3 Our Data Protection Officer can be contacted at the details set out in Section 14 of this Policy.
2. PURPOSE OF THIS POLICY
2.1 Confidentiality and security of your personal data are important to us. We are committed to offering you personalized services while respecting and protecting your privacy, rights and choices.
2.2 The purpose of this Policy is aimed at informing you in a transparent, simple and comprehensive manner about the ways we may collect, use, disclose, record, hold, retrieve, transmit, organise or adapt (“Process” or “Processing”) your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”). This Policy is applicable to personal data you provide or that we collect through your activities and interactions with us, whether in connection with our digital platforms (including the Site) (“Digital Platforms”), or in connection with the Processing of your personal data at physical stores, point-of-sale locations operated by us, customer service channels, marketing activities, and/or any other interactions you have with us. A reference to the “Site” in this Policy shall be deemed to include a reference to the Digital Platforms.
2.3 For the Bahasa Malaysia translation, please click here. In the event of any inconsistencies between the Bahasa Malaysia translation and the English version, the English version shall prevail.
2.4 The contents of this Privacy Policy may change over time, so please check back frequently. Any changes to this Privacy Policy will be posted on and can be viewed at the Site. Your continued use of our services and utilization of the Site shall be deemed, to the extent permitted by applicable laws, as your acknowledgement and acceptance of any such changes.
2.5 By providing us with your personal data or by accessing, using and/or viewing the Site or any of its services, functions or contents (including the transmitting, caching or storing of any such personal data), you shall be deemed to have agreed to each and all of the terms of and notices in this Policy, and any of its subsequent amendments. If you do not agree, please immediately cease using the Site and/or its service(s) and DO NOT provide any personal data to us. You have a right to withdraw any consent for us to collect, use, disclose or otherwise Process your personal data at any time by contacting our Data Protection Officer (see Section 14 below).
2.6 The Site (and any of its services, functions and contents) is not intended for use by any person below the age of 18. We do not, and do not intend to, transact through the Site with anyone we know to be under the age of 18. By using the Site and/or its services and providing any personal data to us, you declare and affirm that you are at least 18 years of age and above and agree to the terms set out in this Policy.
3. HOW DO WE COLLECT PERSONAL DATA
3.1 Personal data means any information that could identify you either directly or indirectly.
3.2 The personal data we collect depends upon the touchpoint of our interaction, and is also limited to that which is relevant and appropriate for the interaction. By way of example:
3.2.1 Site visitors who browse the Site and view our products, information and offerings can choose to do so without identifying themselves, and the same applies to in-store and social media browsing. Unless you choose to interact with us via those touchpoints, such as by making a purchase on our site, signing up for one of our programs or services, or posting a comment or a like online, our data collection is limited to the use of ‘cookies’ for Site visitors. Please refer to Section 18 below for further information on cookie management.
3.2.2 For customers and other individuals who sign up for programs or services, we must collect certain relevant information from you. The information we collect is related to the particular transaction as well as our overall relationship with you. For example, if you make purchases from the Site or in our stores, we must collect information to process (and, if relevant, fulfil and ship) your order.
3.2.3 For customers and other individuals who sign up for our programs or services, we generally collect your contact details, contact preferences, and information that will allow us to make recommendations to you about our products or services that may be of interest. We may centralize the information pertaining to our customers so that we have it organized in one place, as this helps us manage our relationship with you as well as your choices and preferences.
3.3 Depending on the nature of your interaction with us, we may collect your personal data:
3.3.1 Through our Site, over the phone, by email or in person through a variety of activities. These activities include, but are not limited to, instances where/when you:
(a) use our Site, register an account with us, purchase products through our Site and/or interact with us through our Site or our affiliate’s websites;
(b) visit us through our physical stores or counters (including our corners, pop-up stores and boutiques in department stores);
(c) fill in and/or complete our forms (in store or online);
(d) inquire about, register for, attend or participate in any events, surveys, promotions, contests, tournaments, competitions, programmes (including loyalty programmes) and other activities organised or sponsored by us or on our behalf;
(e) engage or contact with our Public Relations Department or Customer Department;
(f) participate and/or answer our surveys or satisfaction questionnaire through automated technologies or interactions. As you interact with the Site, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect technical data by using cookies, server logs, web beacons, and other similar technologies. We may also receive technical data about you if you visit the Site employing our cookies. Please refer to Section 18 below for further information on cookie management;
(g) consent to receiving our communications (through email, telecommunication means (such as SMS, MMS), mail or social media platforms);
(h) visit our social media pages (including your comments/likes) or post/share our content or comments;
(i) interact with any digital media advertising or search engine paid advertising that is relevant to Dior; and
(j) share information with third party data providers.
3.3.2 Through third parties or publicly available sources, including but not limited to:
(a) Technical data from analytics providers, advertising networks, search information providers, or third parties we contract with and/or their subsidiaries and affiliates to provide you a service;
(b) Contact data, financial data and transaction data from providers of technical, payment and delivery services; and
(c) Identity data and contact data from data brokers or aggregators; and/or
(d) Identity data and contact data from publicly availably sources.
3.4 Your personal data may also be collected by our trusted agents or third party providers acting as subcontractors according to our instructions and on our behalf only. Any such personal data that may be collected by such agents or third party providers on our behalf is collected for the purposes set out in this Policy, and subject to the same standards of protection and confidentiality as if collected directly by us.
3.5 The personal data which is essential or necessary to Dior for the purpose for which it is collected may be marked with an asterisk (*) on each such personal data collection form (be it on our Site, or in electronic or physical form). If you do not fill in these compulsory fields, this may affect our ability to provide you with the requested products and/or services and our ability to enter into the necessary agreement in relation to the provision of our products and/or services to you. The other information requested may optional and allows us to know you better and to improve our communications and services to you. Although not mandatory, we recommend that you fill them in to allow you to benefit from the best possible experience during our interactions with you.
3.6 To the extent that you disclose to us any personal data of another individual, we shall assume, without independent verification, that you have obtained such individual's consent for the disclosure of such personal data as well as the processing of the same in accordance with the terms of this Policy.
3.7 We will use our best commercial endeavours to obtain your consent (express or implied) whenever we have to collect, process, use or store your personal data. However, if due to business impracticalities or other reasons, we are unable to obtain your consent, we will rely, to the extent available, on the exceptions under applicable laws and regulations.
4. WHAT PERSONAL DATA WE COLLECT
4.1 Depending on the personal data you provide or share with us, the type of personal data that we collect and process may include but is not limited to:
(a) Your identity (e.g. name, age, gender, date of birth, citizenship, nationality, race, identification card, passport details);
(b) Your contact details (e.g. addresses, email address, phone number, social media accounts);
(c) Your interests and personal preferences (including information on the events or programs you attend with us and your preferences in receiving marketing messages from us and our third parties and your communication preferences);
(d) Your transaction information (e.g. purchases made in store or online, including your orders, tracking numbers and your purchase invoices, the amount and type of your purchase);
(e) Payment information such as information in relation to your credit card, debit card and/or other payment details. Regarding your purchases, your bank details are encrypted through our servers. Payments are made via a secure payment platform PCI-DSS certified, supplemented by control measures, to ensure the security of purchases made and to fight against fraud;
(f) Your online journeys with us (e.g. when you are using the Site, our official social media pages, our partner websites and databases), specifically information ascertained about you (e.g. your profile picture, photos, likes, location and friend list);
(g) Technical information (e.g. internet protocol (IP) address, your login data, browser type and version, make and model (mobile phones only), operating system, hardware version, platform, device settings and other technology identification on the devices used to access the Site, file and software names and types, device identifiers, time zone setting and location, device locations such as through GPS, Bluetooth or WiFi signals, browser plug-in types and versions, operating system and platform, connection information such as the name of your mobile operator or ISP, browser type, language and time zone and IP address);
(h) Your usage data (e.g. information about how you use the Site including redemption of our offers, how you use your devices to access the Site, including the screens you visit and searches you make through the Site). Some of this information may be collected using cookies placed in your web browser when you browse our Site. Please refer to Section 18 below for further information on cookie management;
(i) Your networks and connections made available to us, depending on the permissions you have granted, from your mobile and desktop devices' address book contacts, and other social media such as WeChat, Facebook, Instagram, Pinterest and Twitter;
(j) Your requests or information which you have communicated through our customer department or our public relations department (whether in written or verbal form) or provided by you in connection with your interaction with us;
(k) Your communications with us via social media platforms, email, electronic messages and other electronic and non-electronic communications;
(l) Publicly available or publicly accessible information about you;
(m) Third party partner information related to how you use our third party partners’ products/services, such as your reviews of our merchant partners or other service providers; and
(n) Any such information as we deem necessary or appropriate from time to time in connection with your dealings and/or relationships with us.
4.2 We may also collect personal data that is described as “sensitive personal data”, such as specific health data (e.g. skin and physical condition), biometric data or information about your religion. We generally do not intentionally collect sensitive personal data. However, in specific or limited circumstances, we may collect such data directly from you, and only with your explicit consent.
4.3 We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data under the PDPA as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific Site feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Policy.
4.4 We invite you to keep us regularly informed in writing of any change in your personal data by contacting us at the details set out in Section 14 of this Policy.
5. PURPOSE FOR WHICH WE COLLECT, USE OR DISCLOSE YOUR PERSONAL DATA
5.1 We may collect, use, disclose and/or otherwise Process your personal data for one or more of the following purposes (collectively, “Purposes”, and each, a “Purpose”):
5.1.1 Processing, facilitating and/or dealing with your interest in our products and/or services;
5.1.2 Administering, facilitating, processing, dealing with and/or managing your purchase of our products and services (each, a “Transaction”). This includes but is not limited to the following:
(a) Generating and storing documents concerning the Transaction(s) such as delivery and collection orders, quotations and invoices;
(b) Dealing with your delivery needs, processing orders and payment transactions (including any debt collection or activities), implementing transactions and the supply of products and/or services to you that you have requested;
(c) Dealing with your ad-hoc queries, requests or bookings; and/or
(d) Assessment of your creditworthiness (for which we may use third parties).
Without limiting the generality of the above, should you make a Transaction that includes third party individual(s), on behalf of third party individual(s), or for third party individual(s), you consent to us disclosing personal data that identifies you to the said third party individual(s);
5.1.3 Managing your participation in any of our events and promotions to which you have signed up;
5.1.4 Administering, facilitating, managing, processing and/or dealing in any matters involving your use or access of the Site, including identifying you for log-in to the Site, our portals and other online services provided by or on behalf of us;
5.1.5 Monitoring, processing and/or tracking your use of the Site in order to provide you with a seamless experience, facilitating or administering your use of the Site, and/or to assist us in improving your experience in using the Site;
5.1.6 To process, to facilitate and/or administer the online account that you may open with us, including to facilitate your transactions on the Site or for us;
5.1.7 To train, develop or implement artificial intelligence to support the user experience, functionality and operations of and in connection with the Site;
5.1.8 Facilitating and managing customer services in terms of responding to, handling and processing queries, requests, feedback or any complaints that you may send us via our website, our customer department, on our social media pages, or otherwise notified to us through other means;
5.1.9 Registering you as a customer of any of our products or services on our database to contact you or communicate with you via phone/voice call, text message (including SMS and other messaging applications such as WhatsApp, WeChat and Line) and/or fax message, email, postal mail or by other lawful methods consented by you for one or more of the Purposes stated herein. You acknowledge and agree that such communication by us could be by way of the mailing of correspondence, documents or notices to you, which could involve disclosure of certain personal data about you to bring about delivery of the same as well as on the external cover of envelopes/mail packages;
5.1.10 For marketing purposes, including but not limited to, the provision of marketing, advertising and promotional information, materials and documents relating to products, services, contests and events, by phone/voice call, text message (including SMS and other messaging applications such as WhatsApp, WeChat and Line), and/or fax message, email, postal mail or by other lawful methods consented by you;
5.1.11 For digital remarketing purposes, including but not limited to using your contact details such as your email or mobile number to retarget you on social media channels such as Facebook and Instagram;
5.1.12 Facilitating and offering adapted and personalised services particularly for the purposes of developing our products and services and to enhance any continued interaction between yourself and us in relation to your relationship with us, the Site or your Transaction(s);
5.1.13 Conducting research (including customer research), surveys, market surveys, analysis and development activities (including but not limited to data analytics, and/or profiling), obtaining your feedback to our products and services to improve our products and services and to enhance any continued interaction between yourself and us in relation to your relationship with us, the Site or your Transaction(s);
5.1.14 For purposes related to customer identity and access management, or its equivalent management system, platform, tools and database operated, managed or accessible by the Company or the LVMH Group (as defined in Section 6 below) (“CIAM”), which is primarily aimed at the Company’s overall enhancement of customer service and Dior product offerings. In connection with CIAM, personal data may be Processed for, among others, the following purposes:
(a) Security and prevention of misuse of services;
(b) Detecting or preventing illegal activities (e.g. fraud, money laundering) or threats to physical safety and security, IT and network security;
(c) Preventing of misuse of services;
(d) Carrying out other necessary corporate due diligence;
(e) Improving, enhancing or developing new goods or services;
(f) Improving, enhancing or developing new methods or processes for business operations in relation to the organisations’ goods and services;
(g) Learning or understanding behaviour and preferences of individuals (including groups of individuals segmented by profile);
(h) Identifying goods or services that may be suitable for individuals (including groups of individuals segmented by profile) or personalising or customising any such goods or services for individuals; and/or
(i) Improving, enhancing or developing new goods or services;
5.1.15 Carrying out due diligence and other activities as may be required by legal and/or regulatory obligations that are applicable to us (including but not limited to anti-money laundering checks and Know Your Client checks), the requirements or guidelines of government authorities which we determine is applicable to us, and our risk management procedures that may be required by law;
5.1.16 To prevent or investigate any fraud, unlawful activity, omission or misconduct, dealing with conflict of interests, or dealing with or investigating any complaints (including any alerts sent as part of our cosmetic vigilance obligations);
5.1.17 To facilitate and/or ensure the safety and security of our premises, as well as the customers, staff and/or visitors of our premises, and to deal with, handle and/or conduct disciplinary, security, crime prevention and/or quality assurance processes, matters and/or arrangements. Without prejudice to the generality of the foregoing, the installation of surveillance cameras at our premises and/or offices, whether now or in the future, are for security, crime prevention, safety and training reasons, and you acknowledge that your personal data may be collected by such cameras and Processed by us consequently, should you visit our premises or offices;
5.1.18 Complying with or as required by any request or direction of any governmental authority (whether Malaysia or other countries) which we are expected to comply with, or responding to requests for information from public agencies, ministries, statutory boards or other similar authorities;
5.1.19 Conducting of training to improve the quality of our products and services and our staff’s service quality;
5.1.20 Storing, hosting and/or backing up of your personal data to any third party service providers or agents, whether within or outside Malaysia;
5.1.21 Maintaining and/or developing our IT or business systems and infrastructure including testing and upgrading of these systems;
5.1.22 Facilitating, dealing with and/or administering external or internal audit(s) of our business, the Transaction(s) and/or any other transactions/interactions with our customers;
5.1.23 Facilitating, dealing with and/or as part of a potential business asset transaction (including the purchase, sale, lease, merger or amalgamation or any other acquisition, disposal or financing of an organisation or a portion of an organisation or of any of the business or assets of an organisation), where such transaction involves Dior;
5.1.24 To deal with the or as part of a bankruptcy, winding up, reorganisation, restructuring, insolvency, receivership or an assignment for the benefit of our creditors; and/or
5.1.25 any other incidental business purposes related to or in connection with the above.
5.2 For completeness, you will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you enrolled in any loyalty program, entered any competition or registered for any promotion and, in each case, you have not opted out of receiving that marketing.
6. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?
6.1 We may need to disclose your personal data to third parties, whether located within or outside Malaysia, for any of the Purposes. We use our reasonable endeavours to ensure that only duly authorised persons can access your personal data when necessary for the above-mentioned Purposes. In this connection, you hereby acknowledge, agree and consent to:
6.1.1 the disclosure of your personal data to such third parties for one or more of the Purposes;
6.1.2 the transfer of your personal data to such third parties overseas for one or more of the Purposes; and
6.1.3 for the said third parties to subsequently collect, use, disclose and/or otherwise Process your personal data for one or more of the Purposes.
6.2 We do not give your personal data to third parties unless you have consented for us to do so or it is legally permissible by laws. We may also disclose data pertaining to you to third parties in order to comply with legal, regulatory, or conventional obligations, or in response to requests from competent authorities.
6.3 Without limiting the generality of Paragraphs 6.1 and 6.2, such third parties include:
6.3.1 any of our related and associated companies, affiliates and subsidiaries, including any other Dior entity and any entities within the LVMH (LVMH Moët Hennessy – Louis Vuitton SE) group (including LVMH Recherche and Agache SE) (“LVMH Group”);
6.3.2 Our trusted agents, partners, vendors, service providers, agents, contractors, sub-contractors or third-party suppliers, including other entities of the LVMH Group, acting as processors according to our instructions and solely on our behalf. For example, we entrust certain services to third parties in charge of managing cosmetic vigilance alerts, third parties who assist us in the organisation of our events, third parties providing IT services, digital communication and public relations agencies, third parties who assist us with customer service and logistics services, logistics service provicers (including those who assisting us in the management of your orders), payment service providers, providers securing transactions against fraud, marketing solutions and commercial prospection management service providers, customer service providers and event organisation service providers;
6.3.3 Department stores in which you buy our products or receive our services;
6.3.4 our auditors, consultants, accountants, lawyers or other financial or professional advisers; and
6.3.5 third parties to whom disclosure by us is for one or more of the Purposes, who will in turn be collecting and processing your personal data for one or more of the Purposes. Without limiting the generality of this Paragraph 6.2.6, such third parties include debt collectors, credit agencies, finance companies or banks.
6.4 You may also choose to disclose your personal data to our partners, advertisers or affiliates by following a link to and from their websites. Please note that these websites have their own privacy policies and that we have no control over how they may use your personal data.
6.5 We may also offer you the opportunity to use your social media login. Please be aware that in this case you are sharing your profile information with us. The personal data shared depends on your social media platform settings. Please note that these social networks have their own privacy policies.
6.6 Where data is shared with third parties, we use our best endeavours to ensure those third parties are reputable and have a privacy policy in place to protect your personal data. Please note that these third-parties may act as data controllers; in such cases, they have their own privacy policies.
7. TRANSFERRING DATA ABROAD
7.1 Because we operate in many countries across the world and in order to provide you with a personalised service worldwide, some of your data may be collected, used, disclosed and/or otherwise Processed outside of Malaysia.
7.2 You should know that the data protection and security requirements differ from place to place, and may not offer the same level of protection as those in your home country. Nevertheless, where any personal data is transferred outside of Malaysia for any of the Purposes, we will take steps to ensure that such transfer will be in compliance with the requirements of the PDPA and your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.
8. PROTECTION OF PERSONAL DATA
8.1 To safeguard your personal data from unauthorised use, collection, disclosure, Processing or other similar risks, we have adopted precautions to protect your data from loss, misuse, alteration, destruction or access by unauthorised third parties, including the use of computer systems with limited access housed in facilities using physical security measures, storage of data in encrypted form, and the use of other strict procedures and security features.
8.2 You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect and take steps to protect the security of your personal data.
8.3 We may also be required by our partners and group companies to uphold a similar level of protection for your data. The measures are evaluated and updated to address new threats and challenges, as well as new legal requirements in the countries where we operate.
8.4 In creating your account on the Site, entering a personal password complying with our security requirements is compulsory and part of our Policy.
9. RETENTION OF PERSONAL DATA
9.1 We will not retain personal data longer than is necessary for it to comply with its legal obligations. We only keep your personal data for as long as we need it to reach the Purpose pursued, to meet your needs, or to comply with our legal or business obligations.
9.2 As a general principle (which is non-binding to us), your personal data will be retained in our client database:
9.2.1 If you are a “client” (i.e. you have already purchased a Dior product): for no more than 10 years after your first purchase for customer relationship management, but no more than 5 years for business development; this period will be renewed each time you interact with Dior (e.g. a purchase);
9.2.2 If you are a “prospective client” (i.e. you have never purchased a Dior product but you are interested in Dior brand): for no more than 3 years; this period will be renewed each time you interact with Dior (e.g. when participating in an event)
9.2.3 If you are in contact with the Public Relations department: for no more than 10 years after initial contact; this period will be renewed each time you interact with Dior (e.g. when requesting information from us)
9.2.4 Where cookies are placed on your computer or digital devices, we generally keep them for no more than 13 months.
9.3 When we no longer need to use your personal data, our objective is to have them removed from our systems and records or anonymised so that you can no longer be identified from it.
10. PROTECTING CHILDREN’S PRIVACY
10.1 We have adopted practices that are designed to ensure that we do not collect or maintain any information from minors under the age of 18 (“Children”). If we learn that we mistakenly collected any information from a Child, we will purge it immediately, unless consent of his/her parent or legal guardian has been obtained.
10.2 Without limiting any other provisions in this Policy, save as otherwise permitted by law:
10.2.1 in respect of the processing of personal data relating to a Child, please note that we require the consent from the Child’s parent or guardian or person who has parental responsibility over the Child; and
10.2.2 in respect of the processing of personal data relating an individual who is deemed incapable of managing his/her own affairs (“Special Person”), please note that we require consent from the person appointed by a court to manage the Special Person’s affairs or the person who has been legally or validly authorised to act on the Special Person’s behalf.
11. ACCURACY OF PERSONAL DATA
11.1 We generally rely on personal data provided by you (or on your behalf). We encourage individuals who have entrusted their data to us to keep it current (such as if you change your email address, address or phone number), so that we have your correct information on file. We also encourage consumers to update their preferences with us, such as in relation to products and the frequency of contacts, so that we can personalize our service to your expectations and needs.
11.2 Please inform us of any changes to your personal data or if there are any errors in the personal data we hold about you by contacting our Data Protection Officer at the contact details set out in Section 14 of this Policy.
11.3 We will not be responsible for relying on inaccurate or incomplete personal data arising from your not updating us of any changes in your personal data that you had initially provided us with. We also do not have any obligation to independently verify the accuracy or completeness of the personal data given by or on your behalf.
12. WITHDRAWING YOUR CONSENT
12.1 You have the right at any time to withdraw your consent for the collection, use, disclosure and/or Processing of your personal data. To do so, please contact us using the details provided in Section 14 of this Policy. However, please take note that depending on the nature or scope of your request, your withdrawal of consent could result in certain legal consequences arising, including us being unable to perform the transactions requested by you or the termination of your relationship with us, as the case may be. To this end, we may require proof of your identity and full details of your request before we process it.
12.2 Notwithstanding the generality of the above, if you no longer wish to receive details of our offers, news and events, you can unsubscribe at any time by using the hyperlink provided for this purpose in each email we send to you. You are also able to request non-personalized communications about our products and services.
13. YOUR RIGHTS REGARDING YOUR PERSONAL DATA
13.1 If you wish to exercise your rights regarding your personal data, such as:
13.1.1 Make an access request for a copy of the personal data we hold about you;
13.1.2 Make a correction request to correct, rectify or update any of your personal data which we hold about you;
13.1.3 Make a request to withdraw or limit the processing of your personal data;
13.1.4 Withdraw your consent and request for us to stop collecting, using, disclosing and/or otherwise Process your personal data; and/or
13.1.5 Make a request for the personal data that we hold about you to be transmitted to another organisation/entity of your choice,
you are welcome to contact us at the contact details set out in Section 14 of this Policy. We will respond to your request as soon as reasonably possible.
13.2 We may require and request for authentication to ensure that we are not providing personal data to an unauthorized person. We reserve the right to refuse your request, where appropriate or as permitted under applicable laws.
14. OUR CONTACT INFORMATION
14.1 You may direct your requests and enquiries to us regarding your personal data in the following ways:
14.1.1 By email – to our Customer Department at onlinecare.my@dior.com.my or to the Company’s Data Protection Officer at DPO.my@pcis.lvmh-pc.com;
14.1.2 By telephone – at 1800-18-0218 (Customer Department); or
14.1.3 By online form – available on the Site at https://www.dior.com/en_my/beauty/contact-parfum.
14.2 All requests and enquiries will first be evaluated by us, including an assessment as to whether such requests and enquiries are generated by a genuine user of the Site, or data subject who is a natural person. After we have completed our evaluation and have satisfied that the requests and enquiries are not, or are not likely to be, spam messages, phishing attempts or other potential fraudulent or illegal activities, we will respond to the initial contact person.
15. GOVERNING LAW
This Policy is prepared pursuant to the PDPA and shall be governed by the laws of Malaysia.
16. EFFECT OF THIS PRIVACY POLICY
16.1 This Policy applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use, disclosure and/or Processing of your personal data by us. If there is a formal written and executed contract between the Company and you (“Formal Agreement”) and to the extent of any inconsistencies between that Formal Agreement and the terms of this Policy, the terms of the Formal Agreement will prevail to the extent permitted by the PDPA or other laws in Malaysia.
16.2 We reserve the right to revise this Policy from time to time without prior notice.
17. THIRD PARTY WEBSITES
This Policy only applies to the Site and information that we may collect from you. The Site may contain links to other websites which are not owned, operated or maintained by us. When visiting these third party websites or disclosing your personal data to third parties, you should read their privacy policies, or ask relevant questions before you disclose your personal data. We are not responsible for the Processing of your personal data by such third parties.
18. INFORMATION ON COOKIE MANAGEMENT
18.1 This section sets out our policy for managing cookies on the Site in order to provide you with information on the origin and use of browsing data collected when you visit our Site, and the tools provided to allow you to express your choices about cookies.
18.2 Cookies are small text files which are stored on your computer’s hard drive or user device by your web browser. Some cookies are essential for using the Site, while others optimise and personalise the contents displayed. The cookies that may be stored on your device when you visit the Site are issued by Dior and/or third parties. Only the entity issuing the cookies will be able to read or modify the information they contain.
18.3 Subject to your choices, different types of cookies may be installed on your device for the purposes detailed below. For the sake of transparency, we inform you of the purposes of the third-party cookies that we are aware of, and the ways in which you can make choices about these cookies. All cookies may be cross-referenced with your customer data in order to personalize your experience, limit commercial interaction, ensure the proper functioning of your loyalty benefits, improve our services and guarantee your satisfaction.
18.3.1 “Essential” cookies, which are cookies essential for browsing the Site and allow you to use the Site’s main features. For example, these cookies are intended particularly for saving your choices or desire not to make a choice about tracker cookies, service authentication, saving the contents of a shopping cart, and customizing the interface. Removing these cookies may make it hard for you to browse the Site or may make it impossible to place an order. These cookies may be issued by Dior or by its service providers.
These cookies enable or facilitate digital communications and/or may be strictly necessary for the provision of an online communication service at your express request. As a result, they do not require your prior consent. Saving or reading such cookies is necessary for provision of the service and will be based on Dior’s legitimate interest in implementing such processing for the proper use of its Site.
18.3.2 “Personalisation” cookies, which allow us to personalize and improve your user experience, for example, by making your searches easier and optimizing your shopping experience. They also allow us to adapt the look of the Website to your device display during your visits. These cookies may be issued by Dior or by its service providers. The issue and use of cookies by third parties on our Site may also be subject to the privacy protection policies of these third parties.
Such cookies are saved or read, subject to your prior consent. If you refuse these cookies, you will not be able to benefit from the functionalities described in this paragraph.
18.3.3 “Analytical” cookies, which make it possible to gauge the audience for Site content and to establish visitor statistics and volumes in order to evaluate and improve our service ergonomics. These cookies include those used to create similar profiles that will be prospected according to your information. These cookies may be issued by Dior or by its service providers. The issue and use of cookies by third parties on our Site may also be subject to the privacy protection policies of these third parties.
The information communicated to technical service providers is transmitted in the form of aggregate statistics and traffic volumes, and excludes any personal data. These statistics are reconciled with the traffic statistics of other websites, as well as with your customer data.
Such cookies are saved or read, subject to your prior consent. Refusing these cookies will not affect your Site browsing, but you will not be able to benefit from the quality of service we wish to offer our Site visitors.
18.3.4 Advertising cookies, which are not essential for browsing but allow you to see more relevant advertisements personalized to your interests on the Site. Such targeting cookies allow, for example, the display of personalised advertising, capping of display (not presenting the same advertising in a repetitive manner), combatting click fraud, billing the display service, and measurement of targets to better understanding audience interest. Advertising content personalization can also be achieved by using our partner’s technology, to associate your device’s Site browsing information with the data you provided us when you registered.
Such cookies are saved or read, subject to your prior consent. Refusing these cookies will not affect your Site browsing, but we will not be able to offer you advertising that takes your interests and browsing history into account.
18.3.5 Cookies issued by third party companies. The issue and use of cookies by third parties on our Site are subject to the privacy policies concerning these third parties. This includes, for example, the use of third party applications that allow you to share Site content with others, inform others that you have visited our Site or notify them of your opinion concerning our Site, in particular the use of “Share” and “Like” buttons featured on social networks such as Facebook, Twitter, Instagram, Pinterest etc. These cookies are not essential for browsing on the Site.
We have no control over how third parties collect information about your Site browsing and associated with the personal data they may hold. We invite you to read the privacy policies of these third parties to learn more.
18.4 If your device is used by more than one person and operates more than one browser, we cannot be certain that the services and advertisements sent to your device are appropriate for your personal use of your device, rather than of another user of your device. If you choose to share your device and browser cookie settings with others, you are responsible for doing so at your own discretion.
18.5 Any cookies saved on your device are automatically deleted at the end of their defined lifespan. You may also modify or delete cookies at any time after their use via your web browser. More information may be available from your web browser provider.
18.6 Please note that any choices in your browser settings concerning the acceptance or refusal of cookies will likely modify your browsing experience and your access to the Site and certain services which require the use of such cookies.
Effective Date: September 2024
Version last updated: July 2026
Dasar Privasi
1. SIAPA KAMI
1.1 Ini adalah Dasar Privasi ("Dasar" atau "Dasar Privasi") LVMH Perfumes and Cosmetics (Malaysia) Sdn. Bhd. ("Syarikat", "Parfums Christian Dior" atau "Dior"). Kami adalah sebuah syarikat liabiliti terhad yang ditadbir oleh undang-undang Malaysia yang beralamat utama di No. 3A-3, Aras 3A Menara Milenium, 8, Jalan Damanlela, Bukit Damansara - 50490 Kuala Lumpur / Malaysia, dan didaftarkan dengan Suruhanjaya Syarikat Malaysia dengan nombor pendaftaran syarikat 199401013101 (298780-T). Tanpa mengehadkan mana-mana peruntukan lain dalam Dasar ini, rujukan kepada "kami", "kita", "milik kami", atau perkataan yang diterbitkan daripadanya merujuk kepada Syarikat dan setiap syarikat berkaitan, sekutu dan syarikat bersekutu Syarikat.
1.2 Kami memiliki dan mengendalikan laman web di https://www.dior.com/en_my/beauty ("Laman") dan kami mengendalikan pelbagai kedai fizikal, butik dan lokasi jualan di Malaysia.
1.3 Pegawai Perlindungan Data kami boleh dihubungi melalui maklumat yang dinyatakan dalam Seksyen 14 Dasar ini.
2. TUJUAN DASAR INI
2.1 Kerahsiaan dan keselamatan data peribadi anda adalah penting bagi kami. Kami komited untuk menawarkan perkhidmatan yang diperibadikan sambil menghormati dan melindungi privasi, hak dan pilihan anda.
2.2 Tujuan Dasar ini adalah untuk memaklumkan anda secara telus, mudah dan menyeluruh tentang cara kami boleh mengumpul, menggunakan, mendedahkan, merekod, menyimpan, mendapatkan semula, menghantar, mengatur atau menyesuaikan ("Memproses" atau "Pemprosesan") data peribadi anda selaras dengan Akta Perlindungan Data Peribadi 2010 Malaysia ("PDPA"). Dasar ini terpakai kepada data peribadi yang anda berikan atau yang kami kumpulkan melalui aktiviti dan interaksi anda dengan kami, sama ada berkaitan dengan platform digital kami (termasuk Laman) ("Platform Digital"), atau berkaitan dengan Pemprosesan data peribadi anda di kedai fizikal, lokasi jualan yang dikendalikan oleh kami, saluran perkhidmatan pelanggan, aktiviti pemasaran, dan/atau sebarang interaksi lain yang anda ada dengan kami. Rujukan kepada "Laman" dalam Dasar ini hendaklah dianggap termasuk rujukan kepada Platform Digital.
2.3 Sekiranya terdapat sebarang ketidakkonsistenan antara terjemahan Bahasa Malaysia dan versi Bahasa Inggeris, versi Bahasa Inggeris hendaklah diutamakan.
2.4 Kandungan Dasar Privasi ini mungkin berubah dari semasa ke semasa, oleh itu sila semak secara berkala. Sebarang perubahan kepada Dasar Privasi ini akan disiarkan di dan boleh dilihat di Laman. Penggunaan berterusan anda terhadap perkhidmatan kami dan penggunaan Laman hendaklah dianggap, setakat yang dibenarkan oleh undang-undang yang berkenaan, sebagai pengakuan dan penerimaan anda terhadap sebarang perubahan tersebut.
2.5 Dengan memberikan data peribadi anda kepada kami atau dengan mengakses, menggunakan dan/atau melihat Laman atau mana-mana perkhidmatan, fungsi atau kandungannya (termasuk penghantaran, penyimpanan sementara atau penyimpanan mana-mana data peribadi tersebut), anda hendaklah dianggap telah bersetuju dengan setiap dan semua terma serta notis dalam Dasar ini, dan sebarang pindaan berikutnya. Jika anda tidak bersetuju, sila segera hentikan penggunaan Laman dan/atau perkhidmatannya dan JANGAN berikan sebarang data peribadi kepada kami. Anda berhak untuk menarik balik sebarang persetujuan bagi kami untuk mengumpul, menggunakan, mendedahkan atau Memproses data peribadi anda pada bila-bila masa dengan menghubungi Pegawai Perlindungan Data kami (lihat Seksyen 14 di bawah).
2.6 Laman (dan mana-mana perkhidmatan, fungsi dan kandungannya) tidak bertujuan untuk digunakan oleh mana-mana individu yang berumur di bawah 18 tahun. Kami tidak, dan tidak berhasrat untuk, menjalankan transaksi melalui Laman dengan sesiapa yang kami ketahui berumur di bawah 18 tahun. Dengan menggunakan Laman dan/atau perkhidmatannya dan memberikan sebarang data peribadi kepada kami, anda mengisytiharkan dan mengesahkan bahawa anda berumur sekurang-kurangnya 18 tahun ke atas dan bersetuju dengan terma yang dinyatakan dalam Dasar ini.
3. BAGAIMANA KAMI MENGUMPUL DATA PERIBADI
3.1 Data peribadi bermaksud sebarang maklumat yang boleh mengenal pasti anda sama ada secara langsung atau tidak langsung.
3.2 Data peribadi yang kami kumpulkan bergantung kepada titik sentuh interaksi kami, dan juga terhad kepada yang relevan dan sesuai untuk interaksi tersebut. Sebagai contoh:
3.2.1 Pelawat Laman yang melayari Laman dan melihat produk, maklumat dan tawaran kami boleh berbuat demikian tanpa mengenal pasti diri mereka, dan perkara yang sama berlaku untuk pelayaran di kedai dan media sosial. Melainkan anda memilih untuk berinteraksi dengan kami melalui titik sentuh tersebut, seperti membuat pembelian di laman kami, mendaftar untuk salah satu program atau perkhidmatan kami, atau menghantar komen atau suka secara dalam talian, pengumpulan data kami terhad kepada penggunaan 'kuki' untuk pelawat Laman. Sila rujuk Seksyen 18 di bawah untuk maklumat lanjut mengenai pengurusan kuki.
3.2.2 Bagi pelanggan dan individu lain yang mendaftar untuk program atau perkhidmatan, kami mesti mengumpul maklumat yang relevan daripada anda. Maklumat yang kami kumpulkan berkaitan dengan transaksi tertentu serta hubungan keseluruhan kami dengan anda. Sebagai contoh, jika anda membuat pembelian dari Laman atau di kedai kami, kami mesti mengumpul maklumat untuk memproses (dan, jika berkenaan, memenuhi dan menghantar) pesanan anda.
3.2.3 Bagi pelanggan dan individu lain yang mendaftar untuk program atau perkhidmatan kami, kami umumnya mengumpul butiran hubungan anda, keutamaan hubungan, dan maklumat yang membolehkan kami membuat cadangan kepada anda tentang produk atau perkhidmatan kami yang mungkin menarik minat anda. Kami boleh memusatkan maklumat berkaitan pelanggan kami supaya kami mempunyainya tersusun di satu tempat, kerana ini membantu kami mengurus hubungan kami dengan anda serta pilihan dan keutamaan anda.
3.3 Bergantung kepada sifat interaksi anda dengan kami, kami boleh mengumpul data peribadi anda:
3.3.1 Melalui Laman kami, melalui telefon, e-mel atau secara peribadi melalui pelbagai aktiviti. Aktiviti-aktiviti ini termasuk, tetapi tidak terhad kepada, keadaan di mana/apabila anda:
(a) menggunakan Laman kami, mendaftar akaun dengan kami, membeli produk melalui Laman kami dan/atau berinteraksi dengan kami melalui Laman kami atau laman web sekutu kami;
(b) melawati kami melalui kedai atau kaunter fizikal kami (termasuk sudut, kedai pop-up dan butik di pusat membeli-belah);
(c) mengisi dan/atau melengkapkan borang kami (di kedai atau dalam talian);
(d) bertanya tentang, mendaftar untuk, menghadiri atau menyertai sebarang acara, tinjauan, promosi, peraduan, kejohanan, pertandingan, program (termasuk program kesetiaan) dan aktiviti lain yang dianjurkan atau ditaja oleh kami atau bagi pihak kami;
(e) terlibat atau berhubung dengan Jabatan Perhubungan Awam atau Jabatan Pelanggan kami;
(f) menyertai dan/atau menjawab tinjauan atau soal selidik kepuasan kami melalui teknologi atau interaksi automatik. Apabila anda berinteraksi dengan Laman, kami boleh mengumpul data teknikal secara automatik tentang peralatan, tindakan pelayaran dan corak anda. Kami mengumpul data teknikal dengan menggunakan kuki, log pelayan, suar web, dan teknologi serupa yang lain. Kami juga boleh menerima data teknikal tentang anda jika anda melawati Laman menggunakan kuki kami. Sila rujuk Seksyen 18 di bawah untuk maklumat lanjut mengenai pengurusan kuki;
(g) bersetuju untuk menerima komunikasi kami (melalui e-mel, cara telekomunikasi (seperti SMS, MMS), mel atau platform media sosial);
(h) melawati halaman media sosial kami (termasuk komen/suka anda) atau menyiarkan/berkongsi kandungan atau komen kami;
(i) berinteraksi dengan sebarang pengiklanan media digital atau pengiklanan berbayar enjin carian yang berkaitan dengan Dior; dan
(j) berkongsi maklumat dengan pembekal data pihak ketiga.
3.3.2 Melalui pihak ketiga atau sumber yang tersedia secara umum, termasuk tetapi tidak terhad kepada:
(a) Data teknikal daripada pembekal analitik, rangkaian pengiklanan, pembekal maklumat carian, atau pihak ketiga yang kami kontrak dan/atau subsidiari dan sekutu mereka untuk menyediakan perkhidmatan kepada anda;
(b) Data hubungan, data kewangan dan data transaksi daripada pembekal perkhidmatan teknikal, pembayaran dan penghantaran; dan
(c) Data identiti dan data hubungan daripada broker data atau pengagregat; dan/atau
(d) Data identiti dan data hubungan daripada sumber yang tersedia secara umum.
3.4 Data peribadi anda juga boleh dikumpulkan oleh ejen dipercayai kami atau pembekal pihak ketiga yang bertindak sebagai subkontraktor mengikut arahan kami dan bagi pihak kami sahaja. Sebarang data peribadi yang dikumpulkan oleh ejen atau pembekal pihak ketiga tersebut bagi pihak kami adalah dikumpulkan untuk tujuan yang dinyatakan dalam Dasar ini, dan tertakluk kepada piawaian perlindungan dan kerahsiaan yang sama seolah-olah dikumpulkan secara langsung oleh kami.
3.5 Data peribadi yang penting atau perlu kepada Dior untuk tujuan dikumpulkan boleh ditanda dengan asterisk (*) pada setiap borang pengumpulan data peribadi tersebut (sama ada di Laman kami, atau dalam bentuk elektronik atau fizikal). Jika anda tidak mengisi medan wajib ini, ini boleh menjejaskan keupayaan kami untuk menyediakan produk dan/atau perkhidmatan yang diminta dan keupayaan kami untuk memeterai perjanjian yang perlu berkaitan dengan penyediaan produk dan/atau perkhidmatan kami kepada anda. Maklumat lain yang diminta boleh menjadi pilihan dan membolehkan kami mengenali anda dengan lebih baik serta meningkatkan komunikasi dan perkhidmatan kami kepada anda. Walaupun tidak wajib, kami mengesyorkan agar anda mengisinya untuk membolehkan anda mendapat manfaat daripada pengalaman terbaik yang mungkin semasa interaksi kami dengan anda.
3.6 Setakat yang anda mendedahkan kepada kami sebarang data peribadi individu lain, kami hendaklah menganggap, tanpa pengesahan bebas, bahawa anda telah mendapat persetujuan individu tersebut untuk pendedahan data peribadi tersebut serta pemprosesan yang sama selaras dengan terma Dasar ini.
3.7 Kami akan menggunakan usaha komersial terbaik kami untuk mendapatkan persetujuan anda (nyata atau tersirat) bila-bila masa kami perlu mengumpul, memproses, menggunakan atau menyimpan data peribadi anda. Walau bagaimanapun, jika disebabkan ketidakpraktisan perniagaan atau sebab lain, kami tidak dapat mendapatkan persetujuan anda, kami akan bergantung, setakat yang tersedia, kepada pengecualian di bawah undang-undang dan peraturan yang berkenaan.
4. APAKAH DATA PERIBADI YANG KAMI KUMPULKAN
4.1 Bergantung kepada data peribadi yang anda berikan atau kongsi dengan kami, jenis data peribadi yang kami kumpulkan dan proses boleh termasuk tetapi tidak terhad kepada:
(a) Identiti anda (cth. nama, umur, jantina, tarikh lahir, kewarganegaraan, kebangsaan, bangsa, kad pengenalan, butiran pasport);
(b) Butiran hubungan anda (cth. alamat, alamat e-mel, nombor telefon, akaun media sosial);
(c) Minat dan keutamaan peribadi anda (termasuk maklumat tentang acara atau program yang anda hadiri bersama kami dan keutamaan anda dalam menerima mesej pemasaran daripada kami dan pihak ketiga kami serta keutamaan komunikasi anda);
(d) Maklumat transaksi anda (cth. pembelian yang dibuat di kedai atau dalam talian, termasuk pesanan anda, nombor penjejakan dan invois pembelian anda, jumlah dan jenis pembelian anda);
(e) Maklumat pembayaran seperti maklumat berkaitan kad kredit, kad debit dan/atau butiran pembayaran lain anda. Berkenaan pembelian anda, butiran bank anda disulitkan melalui pelayan kami. Pembayaran dibuat melalui platform pembayaran selamat yang diperakui PCI-DSS, dilengkapi dengan langkah-langkah kawalan, untuk memastikan keselamatan pembelian yang dibuat dan untuk memerangi penipuan;
(f) Perjalanan dalam talian anda bersama kami (cth. apabila anda menggunakan Laman, halaman media sosial rasmi kami, laman web rakan kongsi kami dan pangkalan data), khususnya maklumat yang diketahui tentang anda (cth. gambar profil anda, foto, suka, lokasi dan senarai rakan);
(g) Maklumat teknikal (cth. alamat protokol internet (IP), data log masuk anda, jenis dan versi pelayar, jenama dan model (telefon bimbit sahaja), sistem pengendalian, versi perkakasan, platform, tetapan peranti dan teknologi pengenalan lain pada peranti yang digunakan untuk mengakses Laman, nama dan jenis fail dan perisian, pengecam peranti, tetapan zon masa dan lokasi, lokasi peranti seperti melalui GPS, Bluetooth atau isyarat WiFi, jenis dan versi plug-in pelayar, sistem pengendalian dan platform, maklumat sambungan seperti nama pengendali mudah alih atau ISP anda, jenis pelayar, bahasa dan zon masa serta alamat IP);
(h) Data penggunaan anda (cth. maklumat tentang cara anda menggunakan Laman termasuk penebusan tawaran kami, cara anda menggunakan peranti untuk mengakses Laman, termasuk skrin yang anda lawati dan carian yang anda buat melalui Laman). Sebahagian maklumat ini boleh dikumpulkan menggunakan kuki yang diletakkan dalam pelayar web anda apabila anda melayari Laman kami. Sila rujuk Seksyen 18 di bawah untuk maklumat lanjut mengenai pengurusan kuki;
(i) Rangkaian dan sambungan anda yang disediakan kepada kami, bergantung kepada kebenaran yang anda berikan, daripada kenalan buku alamat peranti mudah alih dan desktop anda, dan media sosial lain seperti WeChat, Facebook, Instagram, Pinterest dan Twitter;
(j) Permintaan atau maklumat anda yang telah anda sampaikan melalui jabatan pelanggan atau jabatan perhubungan awam kami (sama ada dalam bentuk bertulis atau lisan) atau yang diberikan oleh anda berkaitan dengan interaksi anda dengan kami;
(k) Komunikasi anda dengan kami melalui platform media sosial, e-mel, mesej elektronik dan komunikasi elektronik serta bukan elektronik yang lain;
(l) Maklumat yang tersedia secara umum atau boleh diakses secara umum tentang anda;
(m) Maklumat rakan kongsi pihak ketiga berkaitan cara anda menggunakan produk/perkhidmatan rakan kongsi pihak ketiga kami, seperti ulasan anda tentang rakan pedagang kami atau pembekal perkhidmatan lain; dan
(n) Sebarang maklumat yang kami anggap perlu atau sesuai dari semasa ke semasa berkaitan dengan urusan dan/atau hubungan anda dengan kami.
4.2 Kami juga boleh mengumpul data peribadi yang digambarkan sebagai "data peribadi sensitif", seperti data kesihatan tertentu (cth. keadaan kulit dan fizikal), data biometrik atau maklumat tentang agama anda. Kami umumnya tidak mengumpul data peribadi sensitif secara sengaja. Walau bagaimanapun, dalam keadaan tertentu atau terhad, kami boleh mengumpul data tersebut terus daripada anda, dan hanya dengan persetujuan nyata anda.
4.3 Kami juga boleh mengumpul, menggunakan dan berkongsi data agregat seperti data statistik atau demografi untuk sebarang tujuan. Data agregat boleh diterbitkan daripada data peribadi anda tetapi tidak dianggap sebagai data peribadi di bawah PDPA kerana data ini tidak mendedahkan identiti anda secara langsung atau tidak langsung. Sebagai contoh, kami boleh mengagregat data penggunaan anda untuk mengira peratusan pengguna yang mengakses ciri Laman tertentu. Walau bagaimanapun, jika kami menggabungkan atau menghubungkan data agregat dengan data peribadi anda supaya ia boleh mengenal pasti anda secara langsung atau tidak langsung, kami melayan data gabungan tersebut sebagai data peribadi yang akan digunakan selaras dengan Dasar ini.
4.4 Kami menjemput anda untuk sentiasa memaklumkan kepada kami secara bertulis tentang sebarang perubahan dalam data peribadi anda dengan menghubungi kami di butiran yang dinyatakan dalam Seksyen 14 Dasar ini.
5. TUJUAN KAMI MENGUMPUL, MENGGUNAKAN ATAU MENDEDAHKAN DATA PERIBADI ANDA
5.1 Kami boleh mengumpul, menggunakan, mendedahkan dan/atau Memproses data peribadi anda untuk satu atau lebih tujuan berikut (secara kolektif, "Tujuan", dan setiap satu, "Tujuan"):
5.1.1 Memproses, memudahkan dan/atau berurusan dengan minat anda dalam produk dan/atau perkhidmatan kami;
5.1.2 Mentadbir, memudahkan, memproses, berurusan dengan dan/atau mengurus pembelian anda terhadap produk dan perkhidmatan kami (setiap satu, "Transaksi"). Ini termasuk tetapi tidak terhad kepada:
(a) Menjana dan menyimpan dokumen berkaitan Transaksi seperti pesanan penghantaran dan pengumpulan, sebut harga dan invois;
(b) Menguruskan keperluan penghantaran anda, memproses pesanan dan transaksi pembayaran (termasuk sebarang kutipan hutang atau aktiviti), melaksanakan transaksi dan pembekalan produk dan/atau perkhidmatan kepada anda yang telah anda minta;
(c) Menguruskan pertanyaan ad-hoc, permintaan atau tempahan anda; dan/atau
(d) Penilaian kelayakan kredit anda (yang mana kami boleh menggunakan pihak ketiga).
5.1.3 Mengurus penyertaan anda dalam mana-mana acara dan promosi kami yang anda telah daftar;
5.1.4 Mentadbir, memudahkan, mengurus, memproses dan/atau berurusan dalam sebarang perkara yang melibatkan penggunaan atau akses anda ke Laman, termasuk mengenal pasti anda untuk log masuk ke Laman, portal kami dan perkhidmatan dalam talian lain yang disediakan oleh atau bagi pihak kami;
5.1.5 Memantau, memproses dan/atau menjejaki penggunaan Laman anda untuk memberi anda pengalaman yang lancar, memudahkan atau mentadbir penggunaan Laman anda, dan/atau untuk membantu kami meningkatkan pengalaman anda dalam menggunakan Laman;
5.1.6 Memproses, memudahkan dan/atau mentadbir akaun dalam talian yang anda mungkin buka dengan kami, termasuk memudahkan transaksi anda di Laman atau bagi pihak kami;
5.1.7 Untuk melatih, membangunkan atau melaksanakan kecerdasan buatan bagi menyokong pengalaman pengguna, fungsi dan operasi Laman serta berkaitan dengan Laman;
5.1.8 Memudahkan dan mengurus perkhidmatan pelanggan dari segi menjawab, mengendalikan dan memproses pertanyaan, permintaan, maklum balas atau sebarang aduan yang anda mungkin hantar kepada kami melalui laman web kami, jabatan pelanggan kami, di halaman media sosial kami, atau yang diberitahu kepada kami melalui cara lain;
5.1.9 Mendaftarkan anda sebagai pelanggan mana-mana produk atau perkhidmatan kami di pangkalan data kami untuk menghubungi anda atau berkomunikasi dengan anda melalui telefon/panggilan suara, mesej teks (termasuk SMS dan aplikasi pesanan lain seperti WhatsApp, WeChat dan Line) dan/atau mesej faks, e-mel, mel pos atau melalui kaedah sah lain yang dipersetujui oleh anda untuk satu atau lebih Tujuan yang dinyatakan di sini;
5.1.10 Untuk tujuan pemasaran, termasuk tetapi tidak terhad kepada, penyediaan maklumat, bahan dan dokumen pemasaran, pengiklanan dan promosi berkaitan produk, perkhidmatan, peraduan dan acara, melalui telefon/panggilan suara, mesej teks (termasuk SMS dan aplikasi pesanan lain seperti WhatsApp, WeChat dan Line), dan/atau mesej faks, e-mel, mel pos atau melalui kaedah sah lain yang dipersetujui oleh anda;
5.1.11 Untuk tujuan pemasaran semula digital, termasuk tetapi tidak terhad kepada menggunakan butiran hubungan anda seperti e-mel atau nombor mudah alih anda untuk mensasarkan semula anda di saluran media sosial seperti Facebook dan Instagram;
5.1.12 Memudahkan dan menawarkan perkhidmatan yang disesuaikan dan diperibadikan khususnya untuk tujuan membangunkan produk dan perkhidmatan kami dan meningkatkan sebarang interaksi berterusan antara anda dan kami berkaitan hubungan anda dengan kami, Laman atau Transaksi anda;
5.1.13 Menjalankan penyelidikan (termasuk penyelidikan pelanggan), tinjauan, tinjauan pasaran, analisis dan aktiviti pembangunan (termasuk tetapi tidak terhad kepada analitik data, dan/atau pemprofilan), mendapatkan maklum balas anda tentang produk dan perkhidmatan kami untuk meningkatkan produk dan perkhidmatan kami serta meningkatkan sebarang interaksi berterusan antara anda dan kami berkaitan hubungan anda dengan kami, Laman atau Transaksi anda;
5.1.14 Untuk tujuan berkaitan pengurusan identiti dan akses pelanggan, atau sistem pengurusan, platform, alat dan pangkalan data yang setara yang dikendalikan, diurus atau boleh diakses oleh Syarikat atau Kumpulan LVMH (seperti yang ditakrifkan dalam Seksyen 6 di bawah) ("CIAM"), yang bertujuan terutamanya untuk peningkatan keseluruhan perkhidmatan pelanggan Syarikat dan tawaran produk Dior. Berkaitan dengan CIAM, data peribadi boleh Diproses untuk, antara lain, tujuan berikut:
(a) Keselamatan dan pencegahan penyalahgunaan perkhidmatan;
(b) Mengesan atau mencegah aktiviti haram (cth. penipuan, pengubahan wang haram) atau ancaman terhadap keselamatan fizikal dan keselamatan, keselamatan IT dan rangkaian;
(c) Mencegah penyalahgunaan perkhidmatan;
(d) Menjalankan usaha wajar korporat yang perlu lain;
(e) Meningkatkan, mempertingkatkan atau membangunkan barangan atau perkhidmatan baharu;
(f) Meningkatkan, mempertingkatkan atau membangunkan kaedah atau proses baharu untuk operasi perniagaan berkaitan dengan barangan dan perkhidmatan organisasi;
(g) Mempelajari atau memahami tingkah laku dan keutamaan individu (termasuk kumpulan individu yang dibahagikan mengikut profil);
(h) Mengenal pasti barangan atau perkhidmatan yang mungkin sesuai untuk individu (termasuk kumpulan individu yang dibahagikan mengikut profil) atau mempersonalkan atau menyesuaikan barangan atau perkhidmatan tersebut untuk individu; dan/atau
(i) Meningkatkan, mempertingkatkan atau membangunkan barangan atau perkhidmatan baharu;
5.1.15 Menjalankan usaha wajar dan aktiviti lain yang mungkin diperlukan oleh obligasi undang-undang dan/atau kawal selia yang terpakai kepada kami (termasuk tetapi tidak terhad kepada pemeriksaan anti-pengubahan wang haram dan pemeriksaan Kenali Pelanggan Anda), keperluan atau garis panduan pihak berkuasa kerajaan yang kami tentukan terpakai kepada kami, dan prosedur pengurusan risiko kami yang mungkin diperlukan oleh undang-undang;
5.1.16 Untuk mencegah atau menyiasat sebarang penipuan, aktiviti haram, peninggalan atau salah laku, menangani konflik kepentingan, atau menangani atau menyiasat sebarang aduan (termasuk sebarang makluman yang dihantar sebagai sebahagian daripada obligasi kewaspadaan kosmetik kami);
5.1.17 Untuk memudahkan dan/atau memastikan keselamatan dan sekuriti premis kami, serta pelanggan, kakitangan dan/atau pelawat premis kami, dan untuk menangani, mengendalikan dan/atau menjalankan proses, perkara dan/atau susunan disiplin, keselamatan, pencegahan jenayah dan/atau jaminan kualiti;
5.1.18 Mematuhi atau seperti yang diperlukan oleh sebarang permintaan atau arahan mana-mana pihak berkuasa kerajaan (sama ada Malaysia atau negara lain) yang kami dijangka patuh, atau menjawab permintaan maklumat daripada agensi awam, kementerian, lembaga berkanun atau pihak berkuasa yang serupa;
5.1.19 Menjalankan latihan untuk meningkatkan kualiti produk dan perkhidmatan kami serta kualiti perkhidmatan kakitangan kami;
5.1.20 Menyimpan, mengehoskan dan/atau membuat sandaran data peribadi anda kepada mana-mana pembekal perkhidmatan atau ejen pihak ketiga, sama ada di dalam atau di luar Malaysia;
5.1.21 Menyelenggara dan/atau membangunkan sistem IT atau perniagaan serta infrastruktur kami termasuk pengujian dan peningkatan sistem-sistem ini;
5.1.22 Memudahkan, berurusan dengan dan/atau mentadbir audit luaran atau dalaman perniagaan kami, Transaksi dan/atau sebarang transaksi/interaksi lain dengan pelanggan kami;
5.1.23 Memudahkan, berurusan dengan dan/atau sebagai sebahagian daripada transaksi aset perniagaan yang berpotensi (termasuk pembelian, penjualan, pajakan, penggabungan atau amalgamasi atau sebarang pemerolehan, pelupusan atau pembiayaan lain sesebuah organisasi atau sebahagian organisasi atau mana-mana perniagaan atau aset organisasi), di mana transaksi tersebut melibatkan Dior;
5.1.24 Untuk berurusan dengan atau sebagai sebahagian daripada kebankrapan, pembubaran, penyusunan semula, penstrukturan semula, insolvensi, penerimaan atau penyerahan untuk manfaat pemiutang kami; dan/atau
5.1.25 Sebarang tujuan perniagaan sampingan lain yang berkaitan atau berhubung dengan perkara-perkara di atas.
5.2 Untuk kelengkapan, anda akan menerima komunikasi pemasaran daripada kami jika anda telah meminta maklumat daripada kami atau membeli barangan atau perkhidmatan daripada kami atau jika anda memberikan kami butiran anda apabila anda mendaftar dalam mana-mana program kesetiaan, menyertai mana-mana pertandingan atau mendaftar untuk mana-mana promosi dan, dalam setiap kes, anda tidak memilih untuk tidak menerima pemasaran tersebut.
6. SIAPAKAH PENERIMA DATA PERIBADI ANDA?
6.1 Kami mungkin perlu mendedahkan data peribadi anda kepada pihak ketiga, sama ada yang terletak di dalam atau di luar Malaysia, untuk mana-mana Tujuan. Kami menggunakan usaha munasabah kami untuk memastikan bahawa hanya orang yang diberi kuasa dengan sewajarnya boleh mengakses data peribadi anda apabila diperlukan untuk Tujuan yang disebutkan di atas. Dalam hubungan ini, anda dengan ini mengakui, bersetuju dan membenarkan:
6.1.1 pendedahan data peribadi anda kepada pihak ketiga tersebut untuk satu atau lebih Tujuan;
6.1.2 pemindahan data peribadi anda kepada pihak ketiga tersebut di luar negara untuk satu atau lebih Tujuan; dan
6.1.3 pihak ketiga yang disebutkan untuk kemudiannya mengumpul, menggunakan, mendedahkan dan/atau Memproses data peribadi anda untuk satu atau lebih Tujuan.
6.2 Kami tidak memberikan data peribadi anda kepada pihak ketiga melainkan anda telah bersetuju untuk kami berbuat demikian atau ia dibenarkan secara sah oleh undang-undang. Kami juga boleh mendedahkan data berkaitan anda kepada pihak ketiga bagi mematuhi kewajipan undang-undang, kawal selia atau konvensional, atau sebagai tindak balas kepada permintaan daripada pihak berkuasa yang kompeten.
6.3 Tanpa mengehadkan keumuman Perenggan 6.1 dan 6.2, pihak ketiga tersebut termasuk:
6.3.1 mana-mana syarikat berkaitan dan bersekutu, sekutu dan subsidiari kami, termasuk mana-mana entiti Dior lain dan mana-mana entiti dalam kumpulan LVMH (LVMH Moët Hennessy – Louis Vuitton SE) (termasuk LVMH Recherche dan Agache SE) ("Kumpulan LVMH");
6.3.2 Ejen, rakan kongsi, vendor, pembekal perkhidmatan, ejen, kontraktor, sub-kontraktor atau pembekal pihak ketiga kami yang dipercayai, termasuk entiti lain Kumpulan LVMH, yang bertindak sebagai pemproses mengikut arahan kami dan semata-mata bagi pihak kami. Sebagai contoh, kami mempercayakan perkhidmatan tertentu kepada pihak ketiga yang bertanggungjawab mengurus makluman kewaspadaan kosmetik, pihak ketiga yang membantu kami dalam penganjuran acara kami, pihak ketiga yang menyediakan perkhidmatan IT, agensi komunikasi digital dan perhubungan awam, pihak ketiga yang membantu kami dengan perkhidmatan pelanggan dan logistik, pembekal perkhidmatan logistik (termasuk mereka yang membantu kami dalam pengurusan pesanan anda), pembekal perkhidmatan pembayaran, pembekal yang menjamin transaksi daripada penipuan, pembekal perkhidmatan pengurusan penyelesaian pemasaran dan prospeksi komersial, pembekal perkhidmatan pelanggan dan pembekal perkhidmatan penganjuran acara;
6.3.3 Pusat membeli-belah atau kedai tempat anda membeli produk kami atau menerima perkhidmatan kami;
6.3.4 Juruaudit, perunding, akauntan, peguam atau penasihat kewangan atau profesional lain kami; dan
6.3.5 Pihak ketiga yang pendedahan oleh kami adalah untuk satu atau lebih Tujuan, yang seterusnya akan mengumpul dan memproses data peribadi anda untuk satu atau lebih Tujuan. Tanpa mengehadkan keumuman Perenggan 6.2.6 ini, pihak ketiga tersebut termasuk pemungut hutang, agensi kredit, syarikat kewangan atau bank.
6.4 Anda juga boleh memilih untuk mendedahkan data peribadi anda kepada rakan kongsi, pengiklan atau sekutu kami dengan mengikuti pautan ke dan dari laman web mereka. Sila ambil perhatian bahawa laman web ini mempunyai dasar privasi mereka sendiri dan kami tidak mempunyai kawalan ke atas cara mereka menggunakan data peribadi anda.
6.5 Kami juga boleh menawarkan anda peluang untuk menggunakan log masuk media sosial anda. Sila sedar bahawa dalam kes ini anda berkongsi maklumat profil anda dengan kami. Data peribadi yang dikongsi bergantung kepada tetapan platform media sosial anda. Sila ambil perhatian bahawa rangkaian sosial ini mempunyai dasar privasi mereka sendiri.
6.6 Di mana data dikongsi dengan pihak ketiga, kami menggunakan usaha terbaik kami untuk memastikan pihak ketiga tersebut mempunyai reputasi yang baik dan mempunyai dasar privasi untuk melindungi data peribadi anda. Sila ambil perhatian bahawa pihak ketiga ini boleh bertindak sebagai pengawal data; dalam kes sedemikian, mereka mempunyai dasar privasi mereka sendiri.
7. PEMINDAHAN DATA KE LUAR NEGARA
7.1 Oleh kerana kami beroperasi di banyak negara di seluruh dunia dan untuk menyediakan anda dengan perkhidmatan yang diperibadikan di seluruh dunia, sebahagian data anda mungkin dikumpulkan, digunakan, didedahkan dan/atau Diproses di luar Malaysia.
7.2 Anda perlu mengetahui bahawa keperluan perlindungan dan keselamatan data berbeza mengikut tempat, dan mungkin tidak menawarkan tahap perlindungan yang sama seperti di negara asal anda. Walau bagaimanapun, di mana sebarang data peribadi dipindahkan ke luar Malaysia untuk mana-mana Tujuan, kami akan mengambil langkah-langkah untuk memastikan bahawa pemindahan tersebut mematuhi keperluan PDPA dan data peribadi anda terus menerima piawaian perlindungan yang sekurang-kurangnya setanding dengan yang diberikan di bawah PDPA.
8. PERLINDUNGAN DATA PERIBADI
8.1 Untuk melindungi data peribadi anda daripada penggunaan, pengumpulan, pendedahan, Pemprosesan atau risiko serupa yang tidak dibenarkan, kami telah mengambil langkah berjaga-jaga untuk melindungi data anda daripada kehilangan, penyalahgunaan, pengubahan, kemusnahan atau akses oleh pihak ketiga yang tidak dibenarkan, termasuk penggunaan sistem komputer dengan akses terhad yang ditempatkan di kemudahan menggunakan langkah-langkah keselamatan fizikal, penyimpanan data dalam bentuk yang disulitkan, dan penggunaan prosedur dan ciri keselamatan yang ketat yang lain.
8.2 Anda perlu sedar, walau bagaimanapun, bahawa tiada kaedah penghantaran melalui Internet atau kaedah penyimpanan elektronik yang benar-benar selamat. Walaupun keselamatan tidak dapat dijamin, kami berusaha untuk melindungi dan mengambil langkah-langkah untuk melindungi keselamatan data peribadi anda.
8.3 Kami juga boleh dikehendaki oleh rakan kongsi dan syarikat kumpulan kami untuk mengekalkan tahap perlindungan yang sama untuk data anda. Langkah-langkah ini dinilai dan dikemas kini untuk menangani ancaman dan cabaran baharu, serta keperluan undang-undang baharu di negara-negara tempat kami beroperasi.
8.4 Dalam mencipta akaun anda di Laman, memasukkan kata laluan peribadi yang mematuhi keperluan keselamatan kami adalah wajib dan merupakan sebahagian daripada Dasar kami.
9. PENGEKALAN DATA PERIBADI
9.1 Kami tidak akan menyimpan data peribadi lebih lama daripada yang diperlukan untuk mematuhi kewajipan undang-undangnya. Kami hanya menyimpan data peribadi anda selagi kami memerlukannya untuk mencapai Tujuan yang dikejar, memenuhi keperluan anda, atau mematuhi kewajipan undang-undang atau perniagaan kami.
9.2 Sebagai prinsip umum (yang tidak mengikat kami), data peribadi anda akan disimpan dalam pangkalan data pelanggan kami:
9.2.1 Jika anda adalah "pelanggan" (iaitu anda telah membeli produk Dior): untuk tidak lebih daripada 10 tahun selepas pembelian pertama anda untuk pengurusan hubungan pelanggan, tetapi tidak lebih daripada 5 tahun untuk pembangunan perniagaan; tempoh ini akan diperbaharui setiap kali anda berinteraksi dengan Dior (cth. pembelian);
9.2.2 Jika anda adalah "pelanggan prospektif" (iaitu anda tidak pernah membeli produk Dior tetapi anda berminat dengan jenama Dior): untuk tidak lebih daripada 3 tahun; tempoh ini akan diperbaharui setiap kali anda berinteraksi dengan Dior (cth. apabila menyertai acara);
9.2.3 Jika anda berhubung dengan jabatan Perhubungan Awam: untuk tidak lebih daripada 10 tahun selepas hubungan awal; tempoh ini akan diperbaharui setiap kali anda berinteraksi dengan Dior (cth. apabila meminta maklumat daripada kami);
9.2.4 Di mana kuki diletakkan pada komputer atau peranti digital anda, kami umumnya menyimpannya untuk tidak lebih daripada 13 bulan.
9.3 Apabila kami tidak lagi perlu menggunakan data peribadi anda, objektif kami adalah untuk memadamkannya daripada sistem dan rekod kami atau menganonimkan supaya anda tidak lagi boleh dikenal pasti daripadanya.
10. MELINDUNGI PRIVASI KANAK-KANAK
10.1 Kami telah mengamalkan amalan yang direka untuk memastikan bahawa kami tidak mengumpul atau mengekalkan sebarang maklumat daripada kanak-kanak di bawah umur 18 tahun ("Kanak-kanak"). Jika kami mengetahui bahawa kami telah mengumpul sebarang maklumat daripada Kanak-kanak secara tersalah, kami akan memadamnya dengan segera, melainkan persetujuan ibu bapa atau penjaga sah telah diperoleh.
10.2 Tanpa mengehadkan mana-mana peruntukan lain dalam Dasar ini, kecuali sebagaimana yang dibenarkan oleh undang-undang:
10.2.1 berkaitan dengan pemprosesan data peribadi yang berkaitan dengan Kanak-kanak, sila ambil perhatian bahawa kami memerlukan persetujuan daripada ibu bapa atau penjaga Kanak-kanak atau orang yang mempunyai tanggungjawab ibu bapa ke atas Kanak-kanak; dan
10.2.2 berkaitan dengan pemprosesan data peribadi yang berkaitan dengan individu yang dianggap tidak mampu mengurus hal ehwalnya sendiri ("Orang Istimewa"), sila ambil perhatian bahawa kami memerlukan persetujuan daripada orang yang dilantik oleh mahkamah untuk mengurus hal ehwal Orang Istimewa tersebut atau orang yang telah diberi kuasa secara sah atau dengan cara yang sah untuk bertindak bagi pihak Orang Istimewa tersebut.
11. KETEPATAN DATA PERIBADI
11.1 Kami umumnya bergantung kepada data peribadi yang diberikan oleh anda (atau bagi pihak anda). Kami menggalakkan individu yang telah mempercayakan data mereka kepada kami untuk memastikannya terkini (seperti jika anda menukar alamat e-mel, alamat atau nombor telefon anda), supaya kami mempunyai maklumat yang betul dalam fail kami. Kami juga menggalakkan pengguna untuk mengemas kini keutamaan mereka dengan kami, seperti berkaitan produk dan kekerapan hubungan, supaya kami dapat mempersonalkan perkhidmatan kami mengikut jangkaan dan keperluan anda.
11.2 Sila maklumkan kepada kami tentang sebarang perubahan pada data peribadi anda atau jika terdapat sebarang kesilapan dalam data peribadi yang kami pegang tentang anda dengan menghubungi Pegawai Perlindungan Data kami di butiran hubungan yang dinyatakan dalam Seksyen 14 Dasar ini.
11.3 Kami tidak akan bertanggungjawab atas pergantungan pada data peribadi yang tidak tepat atau tidak lengkap yang timbul daripada anda tidak memaklumkan kami tentang sebarang perubahan dalam data peribadi yang anda telah berikan kepada kami pada mulanya. Kami juga tidak mempunyai sebarang kewajipan untuk mengesahkan secara bebas ketepatan atau kelengkapan data peribadi yang diberikan oleh atau bagi pihak anda.
12. MENARIK BALIK PERSETUJUAN ANDA
12.1 Anda berhak pada bila-bila masa untuk menarik balik persetujuan anda untuk pengumpulan, penggunaan, pendedahan dan/atau Pemprosesan data peribadi anda. Untuk berbuat demikian, sila hubungi kami menggunakan butiran yang diberikan dalam Seksyen 14 Dasar ini. Walau bagaimanapun, sila ambil perhatian bahawa bergantung kepada sifat atau skop permintaan anda, penarikan balik persetujuan anda boleh mengakibatkan akibat undang-undang tertentu timbul, termasuk kami tidak dapat melaksanakan transaksi yang diminta oleh anda atau penamatan hubungan anda dengan kami, mengikut keadaan. Untuk tujuan ini, kami mungkin memerlukan bukti identiti anda dan butiran penuh permintaan anda sebelum kami memprosesnya.
12.2 Tanpa mengehadkan keumuman perkara di atas, jika anda tidak lagi ingin menerima butiran tawaran, berita dan acara kami, anda boleh berhenti melanggan pada bila-bila masa dengan menggunakan pautan hiperteks yang disediakan untuk tujuan ini dalam setiap e-mel yang kami hantar kepada anda. Anda juga boleh meminta komunikasi tidak diperibadikan tentang produk dan perkhidmatan kami.
13. HAK ANDA BERKAITAN DATA PERIBADI ANDA
13.1 Jika anda ingin menggunakan hak anda berkaitan data peribadi anda, seperti:
13.1.1 Membuat permintaan akses untuk salinan data peribadi yang kami pegang tentang anda;
13.1.2 Membuat permintaan pembetulan untuk membetulkan, merektifikasi atau mengemas kini mana-mana data peribadi anda yang kami pegang tentang anda;
13.1.3 Membuat permintaan untuk menarik balik atau mengehadkan pemprosesan data peribadi anda;
13.1.4 Menarik balik persetujuan anda dan meminta kami berhenti mengumpul, menggunakan, mendedahkan dan/atau Memproses data peribadi anda; dan/atau
13.1.5 Membuat permintaan untuk data peribadi yang kami pegang tentang anda dipindahkan kepada organisasi/entiti lain pilihan anda,
anda dialu-alukan untuk menghubungi kami di butiran hubungan yang dinyatakan dalam Seksyen 14 Dasar ini. Kami akan menjawab permintaan anda secepat yang munasabah.
13.2 Kami mungkin memerlukan dan meminta pengesahan untuk memastikan bahawa kami tidak menyediakan data peribadi kepada orang yang tidak dibenarkan. Kami berhak untuk menolak permintaan anda, di mana sesuai atau sebagaimana yang dibenarkan di bawah undang-undang yang berkenaan.
14. MAKLUMAT HUBUNGAN KAMI
14.1 Anda boleh mengarahkan permintaan dan pertanyaan anda kepada kami berkaitan data peribadi anda dengan cara berikut:
14.1.1 Melalui e-mel – kepada Jabatan Pelanggan kami di onlinecare.my@dior.com.my atau kepada Pegawai Perlindungan Data Syarikat di DPO.my@pcis.lvmh-pc.com;
14.1.2 Melalui telefon – di 1800-18-0218 (Jabatan Pelanggan); atau
14.1.3 Melalui borang dalam talian – tersedia di Laman di https://www.dior.com/en_my/beauty/contact-parfum.
14.2 Semua permintaan dan pertanyaan akan terlebih dahulu dinilai oleh kami, termasuk penilaian sama ada permintaan dan pertanyaan tersebut dijana oleh pengguna tulen Laman, atau subjek data yang merupakan orang semula jadi. Selepas kami melengkapkan penilaian kami dan berpuas hati bahawa permintaan dan pertanyaan tersebut bukan, atau tidak mungkin, mesej spam, percubaan pancingan data atau aktiviti penipuan atau haram yang berpotensi lain, kami akan menjawab kepada orang hubungan awal.
15. UNDANG-UNDANG YANG MENGAWAL
Dasar ini disediakan menurut PDPA dan hendaklah ditadbir oleh undang-undang Malaysia.
16. KESAN DASAR PRIVASI INI
16.1 Dasar ini terpakai bersama-sama dengan mana-mana notis lain, klausa kontraktual dan klausa persetujuan yang terpakai berkaitan dengan pengumpulan, penggunaan, pendedahan dan/atau Pemprosesan data peribadi anda oleh kami. Jika terdapat perjanjian bertulis dan dilaksanakan secara rasmi antara Syarikat dan anda ("Perjanjian Rasmi") dan setakat mana-mana ketidakkonsistenan antara Perjanjian Rasmi tersebut dan terma Dasar ini, terma Perjanjian Rasmi akan diutamakan setakat yang dibenarkan oleh PDPA atau undang-undang lain di Malaysia.
16.2 Kami berhak untuk menyemak Dasar ini dari semasa ke semasa tanpa notis terlebih dahulu.
17. LAMAN WEB PIHAK KETIGA
Dasar ini hanya terpakai kepada Laman dan maklumat yang mungkin kami kumpulkan daripada anda. Laman mungkin mengandungi pautan ke laman web lain yang tidak dimiliki, dikendalikan atau diselenggarakan oleh kami. Apabila melawati laman web pihak ketiga ini atau mendedahkan data peribadi anda kepada pihak ketiga, anda perlu membaca dasar privasi mereka, atau bertanya soalan yang relevan sebelum anda mendedahkan data peribadi anda. Kami tidak bertanggungjawab atas Pemprosesan data peribadi anda oleh pihak ketiga tersebut.
18. MAKLUMAT TENTANG PENGURUSAN KUKI
18.1 Bahagian ini menetapkan dasar kami untuk mengurus kuki di Laman bagi memberi anda maklumat tentang asal usul dan penggunaan data pelayaran yang dikumpulkan apabila anda melawati Laman kami, dan alat yang disediakan untuk membolehkan anda menyatakan pilihan anda tentang kuki.
18.2 Kuki adalah fail teks kecil yang disimpan pada cakera keras komputer atau peranti pengguna anda oleh pelayar web anda. Sesetengah kuki adalah penting untuk menggunakan Laman, manakala yang lain mengoptimumkan dan mempersonalkan kandungan yang dipaparkan. Kuki yang mungkin disimpan pada peranti anda apabila anda melawati Laman dikeluarkan oleh Dior dan/atau pihak ketiga. Hanya entiti yang mengeluarkan kuki akan dapat membaca atau mengubah suai maklumat yang terkandung di dalamnya.
18.3 Tertakluk kepada pilihan anda, pelbagai jenis kuki boleh dipasang pada peranti anda untuk tujuan yang terperinci di bawah. Demi ketelusan, kami memaklumkan anda tentang tujuan kuki pihak ketiga yang kami ketahui, dan cara anda boleh membuat pilihan tentang kuki ini. Semua kuki boleh dirujuk silang dengan data pelanggan anda untuk mempersonalkan pengalaman anda, mengehadkan interaksi komersial, memastikan fungsi manfaat kesetiaan anda yang betul, meningkatkan perkhidmatan kami dan menjamin kepuasan anda.
18.3.1 Kuki "Penting", iaitu kuki yang penting untuk melayari Laman dan membolehkan anda menggunakan ciri utama Laman. Sebagai contoh, kuki ini bertujuan khususnya untuk menyimpan pilihan anda atau keinginan untuk tidak membuat pilihan tentang kuki penjejak, pengesahan perkhidmatan, menyimpan kandungan troli beli-belah, dan menyesuaikan antara muka. Membuang kuki ini boleh menyukarkan anda untuk melayari Laman atau mungkin menjadikannya mustahil untuk membuat pesanan. Kuki ini boleh dikeluarkan oleh Dior atau oleh pembekal perkhidmatannya. Kuki ini membolehkan atau memudahkan komunikasi digital dan/atau mungkin sangat diperlukan untuk penyediaan perkhidmatan komunikasi dalam talian atas permintaan nyata anda. Oleh itu, ia tidak memerlukan persetujuan anda terlebih dahulu. Penyimpanan atau pembacaan kuki tersebut adalah perlu untuk penyediaan perkhidmatan dan akan berdasarkan kepentingan sah Dior dalam melaksanakan pemprosesan tersebut untuk penggunaan Lamannya yang betul.
18.3.2 Kuki "Pemperibadian", yang membolehkan kami mempersonalkan dan meningkatkan pengalaman pengguna anda, contohnya, dengan memudahkan carian anda dan mengoptimumkan pengalaman membeli-belah anda. Ia juga membolehkan kami menyesuaikan rupa Laman kepada paparan peranti anda semasa lawatan anda. Kuki ini boleh dikeluarkan oleh Dior atau oleh pembekal perkhidmatannya. Pengeluaran dan penggunaan kuki oleh pihak ketiga di Laman kami juga boleh tertakluk kepada dasar perlindungan privasi pihak ketiga ini. Kuki sedemikian disimpan atau dibaca, tertakluk kepada persetujuan anda terlebih dahulu. Jika anda menolak kuki ini, anda tidak akan dapat mengambil manfaat daripada fungsi yang diterangkan dalam perenggan ini.
18.3.3 Kuki "Analitik", yang memungkinkan pengukuran penonton kandungan Laman dan penetapan statistik dan volum pelawat untuk menilai dan meningkatkan ergonomik perkhidmatan kami. Kuki ini termasuk yang digunakan untuk membuat profil serupa yang akan dijangkau mengikut maklumat anda. Kuki ini boleh dikeluarkan oleh Dior atau oleh pembekal perkhidmatannya. Pengeluaran dan penggunaan kuki oleh pihak ketiga di Laman kami juga boleh tertakluk kepada dasar perlindungan privasi pihak ketiga ini. Maklumat yang disampaikan kepada pembekal perkhidmatan teknikal dihantar dalam bentuk statistik agregat dan volum trafik, dan tidak termasuk sebarang data peribadi. Statistik ini diselaraskan dengan statistik trafik laman web lain, serta dengan data pelanggan anda. Kuki sedemikian disimpan atau dibaca, tertakluk kepada persetujuan anda terlebih dahulu. Menolak kuki ini tidak akan menjejaskan pelayaran Laman anda, tetapi anda tidak akan dapat mengambil manfaat daripada kualiti perkhidmatan yang kami ingin tawarkan kepada pelawat Laman kami.
18.3.4 Kuki Pengiklanan, yang tidak penting untuk pelayaran tetapi membolehkan anda melihat iklan yang lebih relevan yang diperibadikan mengikut minat anda di Laman. Kuki penyasaran sedemikian membenarkan, contohnya, paparan iklan yang diperibadikan, pengehadkan paparan (tidak mempersembahkan iklan yang sama secara berulang), memerangi penipuan klik, pengebilan perkhidmatan paparan, dan pengukuran sasaran untuk memahami minat penonton dengan lebih baik. Pemperibadian kandungan pengiklanan juga boleh dicapai dengan menggunakan teknologi rakan kongsi kami, untuk mengaitkan maklumat pelayaran Laman peranti anda dengan data yang anda berikan kepada kami semasa anda mendaftar. Kuki sedemikian disimpan atau dibaca, tertakluk kepada persetujuan anda terlebih dahulu. Menolak kuki ini tidak akan menjejaskan pelayaran Laman anda, tetapi kami tidak akan dapat menawarkan anda pengiklanan yang mengambil kira minat dan sejarah pelayaran anda.
18.3.5 Kuki yang dikeluarkan oleh syarikat pihak ketiga. Pengeluaran dan penggunaan kuki oleh pihak ketiga di Laman kami adalah tertakluk kepada dasar privasi yang berkaitan dengan pihak ketiga ini. Ini termasuk, sebagai contoh, penggunaan aplikasi pihak ketiga yang membolehkan anda berkongsi kandungan Laman dengan orang lain, memaklumkan orang lain bahawa anda telah melawati Laman kami atau memberitahu mereka tentang pendapat anda mengenai Laman kami, khususnya penggunaan butang "Kongsi" dan "Suka" yang terdapat di rangkaian sosial seperti Facebook, Twitter, Instagram, Pinterest dan sebagainya. Kuki ini tidak penting untuk pelayaran di Laman.
Kami tidak mempunyai kawalan ke atas cara pihak ketiga mengumpulkan maklumat tentang pelayaran Laman anda dan yang dikaitkan dengan data peribadi yang mungkin mereka pegang. Kami menjemput anda untuk membaca dasar privasi pihak ketiga ini untuk mengetahui lebih lanjut.
18.4 Jika peranti anda digunakan oleh lebih daripada satu orang dan mengendalikan lebih daripada satu pelayar, kami tidak dapat memastikan bahawa perkhidmatan dan iklan yang dihantar ke peranti anda adalah sesuai untuk penggunaan peribadi anda terhadap peranti anda, dan bukannya pengguna lain peranti anda. Jika anda memilih untuk berkongsi tetapan kuki peranti dan pelayar anda dengan orang lain, anda bertanggungjawab untuk berbuat demikian atas budi bicara anda sendiri.
18.5 Sebarang kuki yang disimpan pada peranti anda dipadamkan secara automatik pada akhir jangka masa yang ditetapkan. Anda juga boleh mengubah suai atau memadam kuki pada bila-bila masa selepas penggunaannya melalui pelayar web anda. Maklumat lanjut mungkin tersedia daripada pembekal pelayar web anda.
18.6 Sila ambil perhatian bahawa sebarang pilihan dalam tetapan pelayar anda mengenai penerimaan atau penolakan kuki berkemungkinan akan mengubah pengalaman pelayaran anda dan akses anda ke Laman serta perkhidmatan tertentu yang memerlukan penggunaan kuki tersebut.
Tarikh Berkuat Kuasa: September 2024
Versi terakhir dikemas kini: Julai 2026
Candidate Privacy Statement
Statement relating to the protection of your personal data collected in the context of recruitment
This Privacy Statement for Candidates (hereinafter the “Privacy Statement”) is intended to provide visitors and users (“You”) of the www.dior.com website, as well as of all the Dior’s websites with .com, .it, .ru, .co, .jp, .cn domain names suffixes (hereinafter collectively the “Website”) with information relating to how the Maison Parfums Christian Dior (hereinafter “Parfums Christian Dior” or “We/Us”) processes your personal data (hereinafter the “Personal Data” or “Data”) and about your rights in this respect.
Parfums Christian Dior places the highest priority and takes the utmost care to protect your Personal Data.
Who are we? Who is the Data Controller of your Personal data?
During your recruitment experience, and in order to inform you in advance, the Data Controller will be Parfums Christian Dior within the meaning of the regulations applicable to personal data and in particular with regard to article 24 of the Regulations (EU) 2016/679 (hereinafter "GDPR").
As an example, referring to some of the Maison iconic products:
J’adore
Miss Dior
Capture Total
Parfums Christian Dior S.A. (head office), a public limited company under French law with its head office located at 33 avenue Hoche, Paris 8, France, registered with the Paris Trade and Companies Register under number 552 065 187 and represented by Laurent Kleitman in his capacity as President Director General Parfums Christian Dior,
And all Parfums Christian Dior affiliates
The Dior soul is expressed in each of the Maison's products and in the attention paid to each stage of their manufacture. From Grasse in Paris to the Jardins Dior, Parfums Christian Dior sublimates the finest materials so that each of its creations contributes to its aura around the world.
2. What is a “personal data”?
Personal Data refers to any information or pieces of information that could identify You either directly (e.g. your name, surname, email, home address, etc.) or indirectly (e.g. through pseudonymized data, such as a unique ID number, etc.). It may also include unique identifiers like your computer’s IP address.
3. Why and how do We use the Personal Data that We collect?
3.1 How do We collect your Personal Data?
We collect your Personal Data as follows:
directly from You when You use our Website and our services (completion of various forms on the Website, direct communication with Us through our institutional departments, etc.);
automatically when You access or use the Website (technical details, IP address, browsing information, etc.).
3.2 What Data do We collect?
We collect several types of Personal Data about You:
Personal Data that We collect directly from You
We collect Personal Data that You provide directly when You use our Website.
This is specifically the case when You:
interact with Us through the contact forms,
register to receive our newsletters or institutional documentation,
apply to job offers.
The categories of Personal Data that We collect include:
Identification and contact information: e.g., last name, first name, mailing address, contact details needed to identify You when You interact with Us,
Application information: e.g., last name, first name, email address, telephone number, professional experience and all the information You provide by sending your application and/or your curriculum vitae: photo, skills, education level, spoken languages, salary expectations, home address, hobbies, family status, etc. We only collect and store this Data in connection with the management of our own job offers and do not use them for any other purposes, including for commercial purposes.
Personal Data that We collect automatically
We automatically collect certain Data about You when You access or use the Website, specifically:
Technical information: We collect information about the device that You use to login, as well as your use of the Website (g., operating system, type of browser used, whether a proxy is used, location of the device inferred from your IP address that identifies your computer, access time, accessed pages and the link that enabled You to access our Website),
Browsing information: We use tracking technologies to collect Data about You when You use our Website.
3.3 On what legal grounds and for which purposes do We use the Data that We collect?
In accordance with current personal data protection regulations, We only collect Personal Data when We have a legal basis to do so.
Personal Data is collected either:
i. based on pre-contractual measures
ii. based on your consent,
iii. in our legitimate interest, or
iv. to meet our legal obligations.
(i) We collect your Personal Data on the basis of pre-contractual measures, in particular in the context of the processing of applications (CV and motivation letter) and management of interviews.
(ii) We collect Personal Data based on your consent, for the following purposes:
Share opportunities that can match your profile and keep you up to date on the life of Maison Dior,
(iii) We collect Personal Data based on our legitimate interest, for the following purposes:
· to manage your requests and queries: We use your Data to send You the information You request,
to defend our interests in the event of a dispute or court action,
to manage cybersecurity of the Website,
to prevent fraudulent acts in order to ensure the security of our assets and contents.
(iv) We may also store your Personal Data when the law requires Us to do so or to defend our legal rights.
3.4 Who has access to your Data?
3.4.1 Accessibility within Parfums Christian Dior
Your Data is processed by the Maison Parfums Christian Dior for the purposes described above and are only accessible to Parfums Christian Dior personnel who need to know it to perform their duties.
In this respect, your Personal Data is processed by the following departments of the Maison Parfums Christian Dior and/or other Maisons of the LVMH Group:
Parfums Christian Dior Institutional Communication Department and Financial Communication Department for the management of your requests and queries, as well as to send You newsletters;
Parfums Christian Dior Human Resources department to manage your applications to job offers;
Parfums Christian Dior Security Department to manage cybersecurity of the Website;
Parfums Christian Dior Fraud and Legal Departments to manage fraudulent acts or legal claims if any.
3.4.2 Accessibility by third parties
Certain third parties may have access to your Data, specifically:
(i) our subcontractors and service providers acting for technical and logistical reasons (carriers, Website hosting, security and maintenance providers, fraud management service providers, technical service providers responsible for sending e-mails and newsletters, anti-spam and anti-bot services, recruitment agencies which may provide Us with advice on the management of our candidates’ databases and help with the selection of profiles within such databases, etc.);
(ii) other LVMH Group affiliates for recruitment purposes: when you apply to an LVMH Group affiliate’s job offer, this affiliate collects and processes your Data as independent data controller. In such case, your Data will be processed according to this affiliate’s personal data protection policy, which You may obtain by contacting it directly. Likewise, the rights You enjoy pursuant to personal data protection laws must be directly enforced against it;
(iii) any authority, court or other third party when disclosure is required by law, regulations or a judicial decision, or if such disclosure is necessary to protect and defend our rights.
3.5 Is any Personal Data transferred outside of the European Economic Area?
Your Data is processed in France by the Maison Parfums Christian Dior. However, We may rely on certain service providers, which are located abroad or which themselves rely on processors located abroad, including outside of the European Economic Area (EEA) in countries where personal data protection laws differ from those that apply in the EEA.
With reference to the data relating to applications, the LVMH Group has adopted binding corporate rules ("BCR") which the French Supervisory Authority (the CNIL) has declared to be compliant with current legislation and suitable for offering an adequate level. of protection in case of data transfer within the Group, also outside the European Economic Area.
3.6 How long do We store your Data?
Data is stored as long as required for the purpose for which it was collected and, in any case, will be destroyed at the end of such period.
Please see the list below for additional details about these periods.
Any transfer of your Data outside of the EEA will take place with appropriate safeguards in place that comply with applicable personal data protection regulations. Upon request, We will provide You with a copy of applicable safeguards.
Purpose: Management of your requests and queries
Data categories: Identification Data (last name, first name, mailing address, contact details needed to identify You when You interact with Us).
Period of storage before erasure: Duration required to manage your requests and queries. Your Data will then be either deleted or anonymized, unless we need to keep it to meet our legal obligations for the applicable statutory retention period.
Purpose: Sending You our newsletters
Data categories: Your email address
Period of storage before erasure: Duration of your subscription. Then, the Data will be destroyed or anonymized.
Purpose: Management of your applications to job offers
Data categories: Application information
Period of storage before erasure: Duration of two (2) years from when the Data has been provided or from the last contact with You. At the end of this 2-year period, Parfums Christian Dior may contact You to know whether You want Parfums Christian Dior to keep retaining your Personal Data, for the purpose of informing You of an opportunity that may arise and match your career aspirations and skills. In any event, your Data will be erased at your request, within a maximum period of 1 month from your request.
Purpose: Security of the Website
Data categories: Technical information of your device (IP address, device type, browser ID, etc.)
Period of storage before erasure: 6 months, then the Data is either deleted or anonymized.
Purpose: Disputes/complaints
Data categories: Data concerning the dispute/complaint
Period of storage before erasure: Duration of the complaint + 5 years from the complaint.
In the event of a court action: duration of proceedings through full enforcement of the legal decision or settlement agreement
4. What are your rights in relation to your Data?
4.1 Access, rectification and portability
In accordance with current regulations, You have the right to access your Data. You may also request correction of Your Personal Data should they be inaccurate. Depending on the purpose of processing, You also have the right to have incomplete Personal Data completed.
To respond to your request, We may ask You to provide Us with a proof of your identity. We may also need to ask You for additional information or supporting documents. We will make every effort to respond to your request as soon as possible.
You may, to the extent provided for by law, exercise your right to Data portability which allows You to retrieve, in an interoperable format, the Personal Data that You provided to Us.
4.2 Right to erasure of your Data and to limitation of the processing of your Data
You may request erasure of your Personal Data if:
You believe that our processing of your Personal Data is no longer needed for the purposes described in this Privacy Policy,
You believe that the processing is unlawful or You contest the accuracy of the Data We process about You,
You withdrew your consent to the processing of your Data.
Alternatively, to the extent provided for by law, You may request limitation of the processing of your Data.
Please note that despite the exercise of your right to erasure or processing limitation, We will store some of Your Personal Data when the law requires Us to do so, or to exercise or defend our rights.
4.3 Right to establish instructions for the management of your Personal Data after your death
For France and when mandatory local provisions so provide, You may determine how You want Us to handle your Personal Data upon your death.
4.4 Procedure to exercise your Data protection rights
Vous pouvez exercer vos droits en matière de protection des Données selon les modalités suivantes ou si vous avez des questions ou réclamations concernant le traitement de vos données personnelles.
by using the following email address: gdpr_hr@diormail.com
by using the following contact form: https://www.dior.com/en_gb/contact-parfum
by mail at the following address: Data Protection Officer, Parfums Christian Dior, 190 avenue Charles de Gaulle, 92200 Neuilly sur Seine, France.
You also have the right to contact Dior’s lead Supervisory Authority, the CNIL, at any time in order to file a complaint against Dior’s data protection and privacy practices. The CNIL can be contacted by using
the following information:
Commission Nationale de l'Informatique et des Libertés – CNIL
3 Place de Fontenoy
TSA 80715 - 75334 Paris, Cedex 07
Phone. +33 1 53 73 22 22
Fax +33 1 53 73 22 00
Website: http://www.cnil.fr/
We also wish to inform you about the contacts of other authorities in Europe that you can find and contact on the website of the European Data Protection Board: https://edpb.europa.eu/about-edpb/board/members_en
When the processing of your Data is based on your consent (e.g., subscription to the newsletter), You may withdraw your consent at any time without justification. This right can be exercised by changing your options regarding subscriptions to our newsletters by clicking on the hyperlink provided for this purpose in each email We send You.
5. How is your Personal Data secured?
Parfums Christian Dior uses technical and organizational measures that comply with French and EU legal and regulatory requirements, to keep your Data secure and confidential. Under written agreements, Parfums Christian Dior requires its service providers and processors to provide safeguards and implement sufficient security measures to protect the Personal Data they have agreed to process, in accordance with applicable requirements under personal data protection laws. However, Parfums Christian Dior does not control all risks related to the operation of the Internet and draws your attention to the inherent risks of using any website.
6. Third party websites
There may be links to third-party websites (such as LVMH Group affiliates’ websites) that We do not control, and which are governed by their own confidentiality and personal data protection policies. This Privacy Statement does not apply to third-party websites. Please review the confidentiality and personal data protection policies of the third-party websites that You visit to understand how they process your Data. Parfums Christian Dior shall not be liable for any use of your Data by any third parties.