Your comments and questions are important to us. If your inquiry cannot be answered by the FAQ's, please contact us using the Contact Form or call us on +49 (40) 24888-813.
ADD TO BAG
AVAILABLE SOON
NEW
REFILL
Just added to wishlist
REMOVE
SUB TOTAL
item(s)
Discover
QTY :
Remove All
TRACK
RETURN
DETAILS
Payment Method
SUBTOTAL
Delivery Charge
DISCOUNT
Total (Including VAT)
VAT
SHIPPING ADDRESS
BILLING ADDRESS
PAYMENT METHOD
BILLING DATE
BESTSELLER
AVAILABLE SOON
ADD TO BAG
TRY IT ON
ANALYSE YOUR SKIN
AVAILABLE ONLY IN STORE
Privacy Policy
Kanebo Cosmetics Deutschland GmbH ("Kanebo" or "we" or "our") and each of its affiliates and subsidiaries in the EMEA region collectively, the "Kao Group") takes data privacy seriously. This Privacy Policy informs the users of https://www.sensai-cosmetics.com/de/en and any other Kanebo-owned websites or mobile applications on which this Privacy Policy is displayed ("Website”) how we, as controller within the meaning of the General Data Protection Regulation ("GDPR") collect and process any information relating to you ("personal data", e.g. your name and e-mail address) in connection with their usage of the Website.
Note that other websites or mobile apps of Kanebo or its affiliates may be governed by other privacy policies.
Last revised: January 2025
Summary
This Privacy Policy includes information on the following:
1. Name and address of the Controller and information about our Data Protection Officer
2. Categories of Personal Data and Processing Purposes — What personal data do we process about you and why?
Processing Basis and Consequences — What is the legal justification for processing your personal data and what happens if you choose not to provide it?
3. Obligation to provide and possible consequences of not providing personal data
4. Our presences in social media networks
5. Categories of Recipients — Who do we transfer your personal data to?
6. International Data Transfer — Where do we transfer your Personal Data to?
7. Retention Period — How long do we keep your personal data?
8. Your Rights — What rights do you have and how can you assert your rights?
9. Cookies and other tracking technologies
10. Questions and Contact Information
11. Changes to this Privacy Policy
Name and address of the Controller and information about our Data Protection Officer
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is: Kanebo Cosmetics Deutschland GmbH, please see our Imprint.
Categories of Personal Data and Processing Purposes — What personal data do we process about you and why? Processing Basis and Consequences — What is the legal justification for processing your personal data and what happens if you choose not to provide it?
We base the processing of your personal data depending on the respective activity identified in detail below on the following legal basis:
• You have provided your consent to the processing, Art. 6 (1)(a) GDPR ("your consent");
• The processing is necessary for the performance of a contract with us, to which you are a party of, Art. 6 (1)(b) GDPR ("Performance of a contract");
• The processing is necessary for the fulfilment of a legal obligation that we are subject to, Art. 6 (1)(c) GDPR ("Legal obligation");
• The processing is necessary for the purpose of the legitimate interest pursued by us or a third party, except where such interest is overridden by your interest or fundamental rights and freedoms which require the protection of personal data, Art. 6 (1)(f) GDPR ("Legitimate interest").
In the following you will find a detailed description of the data collected for the respective processing activity and the legal basis that the processing is based on
2.1 Metadata
2.1.1 When you visit the Website certain necessary data will be collected automatically. Without the collection of such data the use of the Website may not be possible.
2.1.2 In this case, we will collect the following metadata: browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Website, date and time of accessing our Website, and internet protocol (IP) address. Such data may be linked to you indirectly.
2.1.3 Your IP address will be used to enable your access to our Website. We do not store this data after your access any further. The metadata will be used to improve the quality and services of our Website by analysing the usage behaviour of our users.
2.1.4 The legal basis for the processing is legitimate interest as the use of our Website is not possible without the collection of the data.
2.2 Newsletter
2.2.1 You can sign up to our e-mail newsletter via our newsletter banner on our websites, when you create an account or during the checkout process.
2.2.2 If you request to receive our e-mail newsletter, we process the following personal data about you: e-mail address as well as the request to receive the e-mail newsletter; country and language will be pre-populated due to your location. We process such personal data for purposes of providing the newsletter to the extent permitted by applicable law and analysing your interests for marketing purposes.
2.2.3 The legal basis for the processing of your personal data is your consent, where required, or our legitimate interest.
2.3 Contact form
2.3.1 On our website, we offer you the opportunity to contact us via a contact form.
2.3.2 For this we need the following personal data from you: title, first and last name, e-mail and content of the message; if you are signed into your user account your name and e-mail address will be pre-populated.
2.3.3 The personal data that you provide to us in the context of this contact request will only be used to answer your enquiry/contact request and for the associated technical administration.
2.3.4 The legal basis for the processing of your personal data is our legitimate interest as the processing of your personal data is necessary to respond to your request.
2.4 Account
2.4.1 If you create an account for our “Webshop”, you will be asked to provide the following personal data about you: e-mail address, selected password for your account.
2.4.2 We process such personal data for purposes of account administration, answering your queries or information requests, analysing your interests for marketing purposes, improving our “Webshop” according to usage patterns, and for technical administration or other purposes to which you have agreed (if applicable).
2.4.3 The legal basis for the processing of your personal data is your consent, the performance of a contract and/or our legitimate interest in the pursuing the above-mentioned purposes.
2.5 Product Orders
2.5.1 If you order a product via our “Webshop”, we collect and process the following personal data about you: title, first and last name, e-mail address, telephone number, invoicing and delivery address, and products ordered, to provide desired products or services and related information. In order to minimise the risk of entering an incorrect postal and e-mail address, we are working with a service provider; please see their privacy notice: https://www.gbgplc.com/en/legal-and-regulatory/products-services-privacy-policy.
2.5.2 Such personal data will be added to your personal data stored relating to your account.
2.5.3 We process such personal data for purposes of carrying out the contractual relationship and the product order, compliance with legal obligations, defending, establishing and exercising legal claims, providing you a trouble-free delivery, and analysing your interests for marketing purposes.
2.5.4 The processing of your personal data is based on one of the following legal bases: your consent (if required), performance of a contract, legal obligation, and/or legitimate interest as we have an interest in pursuing the purposes listed in 2.5.3.
2.6 Payment
2.6.1 We process your personal data for the documentation and processing of payment transaction undertaken by you on our Website.
2.6.2 The following categories of personal data are processed: name, information on the third-party payment provider used, confirmation of payment, address.
2.6.3 We base the processing your personal data on the following legal basis: performance of a contract, Legal obligation, legitimate interest in order to protect our business and legal rights.
2.7 Rating & Reviews
2.7.1 You can provide feedback on our goods and services in the form of product ratings and reviews and such feedback will be posted on our Website to be visible to other users.
2.7.2 We process the following personal data: name/username, rating, content of the review, type of product.
2.7.3 The legal basis for the processing is our legitimate interest in the processing and publishing of your feedback and/or consent (if required).
2.8 Virtual Make-up
2.8.1 Our Virtual Make-up Tool allows you to virtually test our make-up products.
2.8.2 We will collect and process the following data categories: picture/real-time video.
2.8.3 The processing of your personal data is based on our legitimate interest as the processing is required to offer the respective service to you as requested by you.
Obligation to provide and possible consequences of not providing personal data
When using our website, you must provide the personal data that is required to fulfil the purpose or that we are legally obliged to collect. Without this data, we will generally not be able to provide the requested service.
Our presences in social media networks
We have various presences in social media networks. We operate the presences with the following providers:
Facebook: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Privacy Policy: https://www.facebook.com/about/privacy;
Instagram: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Privacy Policy: https://instagram.com/about/legal/privacy;
Pinterest: Social network; Service provider: Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland; Privacy Policy: https://policy.pinterest.com/en/privacy-policy;
YouTube: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Privacy Policy: https://policies.google.com/privacy.
We use the technical platform and services of the providers for these information services. We would like to point out that you use our appearances on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address and other information that is available in the form of cookies on your terminal device. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us.
The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection equivalent to the former EU-US Privacy Shield and we have concluded the standard data protection clauses with the companies. We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. The data processing may differ depending on whether you are registered and logged in to the social network or visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your terminal device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your end device can be used to track how you have moved around the network. Buttons embedded in websites enable the platforms to record your visits to these website pages and assign them to your respective profile. Based on this data, content or advertising can be offered tailored to you. If you wish to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies present on your device and restart your browser.
As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by e-mail, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 (1) lit. f GDPR.
To exercise your data subject rights, you can contact us or the provider of the social media platform. To the extent that one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about the profiling, processing of your data when using the website. For questions about the processing of your interaction with us on our site, write to the contact details provided by us above.
The providers describe what information the social media platform receives and how it is used in their privacy statements. There you will also find information about contact options as well as about the settings options for advertisements.
Categories of Recipients — Who do we transfer your personal data to?
We may transfer your personal data to third parties for the processing purposes described above as follows:
5.1 Within the Kao Group: Members of the Kao Group may receive your personal data as necessary for the processing purposes described above. Depending on the categories of personal data and the purposes for which the personal data has been collected, different internal departments within the Kao Group may receive your personal data.
5.2 Data processors: Certain third parties, whether affiliated or unaffiliated, may receive your personal data to process such data under appropriate instructions ("Processors") as necessary for the processing purposes described above, such as Website service providers, order fulfilment providers, payment providers, customer care providers, marketing service providers, IT support service providers, and other service providers who support us in maintaining our commercial relationship with you. The Processors will be subject to contractual obligations to implement appropriate technical and organisational security measures to safeguard the personal data, and to process the personal data only as instructed.
5.3 Other recipients: We may transfer, in compliance with applicable data protection law, personal data to law enforcement agencies, governmental authorities, judicial authorities, legal counsel, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to third parties involved in the merger or acquisition.
5.4 We will not disclose your personal data to third parties for advertising or marketing purposes or for any other purposes without your consent. Any access to your personal data is restricted to those individuals that have a need-to-know in order to fulfil their job responsibilities.
International Data Transfer — Where do we transfer your Personal Data to?
6.1 We may transfer your personal data to countries outside of the European Union ("EU")/European Economic Area (“EEA”) which do not provide for a data protection level as provided in the EU/EEA.
6.2 Some recipients located outside of the EU/EEA and identified in section 5 are located in countries for which the EU Commission has issued an adequacy decision, such as in Switzerland and Japan. The transfer does therefore not require any additional safeguards as provided in Art. 45 GDPR.
6.3 We have implemented appropriate safeguards with regard to transfers of your personal data to any other third countries (such as the U.S.) by putting in place data transfer agreements based on the standard contractual clauses (EU Commission decision 2010/87/EU and/or 2004/915/EC) as referred to in Art. 46 (2)(c) GDPR and/or by relying on binding corporate rules of the recipient (Art. 46 (2)(b) GDPR).
Retention Period — How long do we keep your personal data?
Your personal data will be retained as long as necessary to pursue the above-mentioned purposes. For example, certain personal data, such as order and invoicing data, will typically be retained for about 11 years due to statutory retention requirements for tax purposes, personal data which are required to establish, defend or exercise a claim may be retained for as long as necessary to pursue this purpose and certain personal data may be retained to comply with applicable laws. If you delete your account or did not access your account for a period of two years, we will delete your personal data from our systems and/or take steps to properly anonymise it so that you can no longer be identified from it (except those that must be retained for a longer period as stated before).
To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
Your Rights — What rights do you have and how can you assert your rights?
8.1 Right to withdraw your consent: If you have declared your consent regarding certain collecting, processing and use of your personal data (in particular, regarding the receipt of the e-mail newsletter) you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. Please contact us as stated in Section 10 below to withdraw your consent.
8.2 Additional data privacy rights: Pursuant to applicable data protection law, you may have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data (including objection to profiling). Please note that these aforementioned rights might be limited and/or subject to additional conditions under applicable data protection law. Below please find further information on your rights:
8.2.1 Right to request access to your personal data: You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. This access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and a copy of the personal data undergoing processing. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
8.2.2 Right to request rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
8.2.3 Right to request erasure (right to be forgotten): In certain circumstances, you have the right to obtain from us the erasure of personal data concerning you and we are obliged to erase such personal data.
8.2.4 Right to request restriction of processing: In certain circumstances, you have the right to obtain from us restriction of processing your personal data. In such case, the respective data may be processed only in certain cases.
8.2.5 Right to request data portability: In certain circumstances, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
8.2.6 Right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us where the processing is necessary for our legitimate interest (Art. 6 (1)(f) GDPR), including profiling, and we can be required to no longer process your personal data, unless we demonstrate compelling legitimate grounds for the processing or for the establishment, exercise or defence of legal claims. Where we process your personal data for marketing purposes, including marketing-related profiling, you have the right to object at any time and your personal data will not be processed any longer for such purposes.
You may exercise this right by contacting us as stated in Section 10 below.
Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
If you have given your consent to certain processing (such as the receipt of our e-mail newsletter), you will need to withdraw your consent (e.g., by unsubscribing via the link in each e-mail newsletter) as stated in section 8.1 in order to stop the receipt of such e-mail newsletters.
8.2.8 To exercise your rights, please contact us as stated under Section 10 below.
8.3 Right to lodge a complaint: You also have the right to lodge a complaint with the competent data protection supervisory authority. You can find the contact details of the data protection supervisory authorities in the EU via this link: https://edpb.europa.eu/about-edpb/board/members_en.
Cookies and other tracking technologies
This Website uses cookies and other tracking technologies. For further information, please visit our Cookie Policy.
Questions and Contact Information
If you have any questions about this Privacy Policy or if you want to exercise your rights as stated above in Section 8, please contact us at www.kao.com/global/en/EU-Data-Subject-Request.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, regulatory or operational requirements. We will notify you of any such changes, including when they will take effect, by updating the "Last revised" date above and publishing the updated version here https://www.sensai-cosmetics.com/de/en/privacy or as otherwise required by applicable law.
Join our newsletter
Thank you for signing up to the SENSAI newsletter
You will now start to receive SENSAI news via email
