Swarovski Data Privacy Notice

Title:

Swarovski Korea (the “Company”) protects your personal information and observes the Act on Promotion of Information and Communication Network Utilization and Information Protection and the Personal Data Protection Act. In the event the Company revises, adds or deletes its Privacy Policy, it will notify you through a notice on www.swarovski.com (the “Website”) and/or through other appropriate communication channels for the relevant Program.

This Privacy Policy applies in addition to (where applicable) the privacy policies specific to the Swarovski Crystal Society (“SCS”) or Swarovski Club programs. If there is any inconsistency between any of the provisions in this Privacy Policy and the provisions of the privacy policies specific to the SCS or Swarovski Club programs respectively, the provisions of this Privacy Policy shall prevail.

Article 1. Collected Personal Information Items and Collection Methods

The Company shall collect and use your personal information for the following programs described below (the “Program”). The Company shall collect your personal information when you subscribe as a member of the Program or use a service of the Program.

Program

Collected Personal Information Items

Purpose of Collection

SCS Membership

Name, address, zip code, country, phone number, mobile number, email address, birth date, bank details, preferences, purchase history, membership number
  • Personalized customer advice
  • Delivery of personalized product information and exclusive offers
  • Synchronization with the SCS membership information

Swarovski Club Membership

Name, login ID, password, address, zip code, country, phone number, mobile number, email address, birth date, preferences, purchase history, membership number, your SCS membership status, member’s usage data relating to Swarovski Group’s online offerings and mailings, credit card information
  • Administration of the Swarovski Club membership
  • Personalized customer advice
  • Invitation to special events and promotions
  • Evaluation of voucher offers
  • Delivery of personalized product information and exclusive offers
  • Synchronization with the SCS membership
  • Personal identification
  • Execution and implementation of your purchase agreement
  • Provision of purchase information
  • Market research and product promotion and sale
  • Introduction of new products through DM, EM or other methods and marketing events
  • Preparation of message alerts relating to the purchase or publicity of products that are stored in the customer’s online shopping bag and delivery of such alerts to the customer

    ※www.swarovski.com (“Website”) Membership and SWAROVSKI Membership Service is integrated into Swarovski Club Membership

     

Retail Store Services

Name, mobile number, phone number
  • Contact with customers who made advanced payment

Article 2. Storage and Use of Personal Information

In case of withdrawal from the membership of the Program by you, the Company shall destroy such information as soon as practicable. Provided, however, in case the Company has the obligation to retain such information according to related laws, it shall store the information without destroying them. Provided, however, the Company shall retain the following information for the period outlined below for purposes such as confirmation of the Company’s obligation to manage transaction-related records in accordance with relevant laws, including the Commercial Act, and internal policy: 1) Records regarding agreements or cancellation of purchase applications: Five years (Act on the Consumer Protection in the Electronic Commerce Transactions, etc.) 2) Records regarding payments and supply of goods: Five years (Act on the Consumer Protection in the Electronic Commerce Transactions, etc.) 3) Records regarding consumer complaints or disputes settlement: Three years (Act on the Consumer Protection in the Electronic Commerce Transactions, etc.) 4) Records regarding Website visits: Three months (Telecommunications Security Protection Act)

Article 3. Measures to Secure Personal Information

The personal information of users shall be collected through the security system in electronic form, and treated and protected in documental or electronic form. Our consumer’s private information is stored on the Swarovski Database, and may be used for statistical or marketing analyses, integrated or treated in an identifiable manner. The Company pursues the following technical, managerial measures in order to secure personal information of its users and ensure that it is not lost, stolen, exposed, modified or damaged. Provided, however, the Company shall not be liable for any problems incurred in relation to the exposure of personal information, including IDs and passwords, as a result of the user’s carelessness or internet-related problems.

1. Password Encryption The log in ID (ID) and password of members (where applicable) are stored in non-readable form (hashed), and are knowledgeable only by the user. The confirmation or modification of personal information can only be made by the user who knows the password. 

2. Measures against Hacking The Company is committing its best efforts to prevent the leakage or damage of its members’ personal information due to hacking or computer viruses. In case of personal information damage, the Company is frequently backing up of data, and preventing the exposure or damage of user’s personal information or data by using the latest vaccine programs. It is also ensuring safe transmission of personal information through encrypted communications technology. Firewalls, intrusion detection systems and regular security testing ensure the protection of the consumer database. Strong authentication methods for all privileged accounts are used. 

3. Minimal Handling by Employees and Education The Company personnel with authority to handle personal information will be limited to the relevant manager. A separate password shall be granted for the task, which shall be renewed regularly.

Article 4. Entrustment of Personal Information

The Company currently entrusts the handling of your personal information to other companies as follows:

Entrusted Parties

Entrusted Tasks

Swarovski Crystal Online AG (Swiss),

Daniel Swarovski Corporation AG (Swiss),

D. Swarovski KG (Austria), and

Swarovski Aktiengesellschaft (Liechtenstein)

Maintenance and management of the Company’s servers

SF Express

Work related to delivery and returns handling of ordered goods

EMFO plus

Work related to Kakao and mobile message sending

Bestime

Swarovski Korea Jewelry External Repair

Bowondang

Swarovski Korea Watch External Repair

Maroosoft

Maintenance of the repair system

Ethan & Alice Marketing

Maintenance of the repair inquiry site

In its entrustment contracts, the Company stipulates service providers to strictly observe the Company’s orders regarding the protection of personal information, confidentiality of personal information, prohibition of provision to a third party and assumption of responsibility in case of accidents, entrustment period, and the return or abolishment of personal information after the completion of a task, and maintains such contracts in written or electronic form. 

Article 5. Third Party Transfer of Personal Information

The Company currently transfers your personal information to other companies as follows:

Transferee Transferred Personal Information Items Purpose of Use of Personal Information by the Transferee Transferee’s Retention Period
D.Swarovski KG and Swarovski Aktiengesellschaft Droschistrasse (Liechtenstein) Items under Article 1 Provided under Article 1 Upon occurrence of the following events, Transferee will cease retention of the collected personal information: When a member revokes consent to the collection and management of personal information; when the purpose for the aforementioned collection and management has been fulfilled; or when the company ceases business operations.

Article 6. Destruction of Personal Information

1. Destruction procedure

When the purpose of collection and use of the personal information has been fulfilled, information you filled in or provided shall be moved to a separate database (and in case of hardcopies, to a separate file). The information shall be stored for a certain period of time for information protection purposes pursuant to an internal policy and other relevant laws and regulations and shall be deleted thereafter.

2. Methods of destruction

Any print-out version of personal information will be shredded using a shedder or incinerated, and any personal information stored in the electronic files will be destroyed using a technical method which makes the records irreproducible.

Article 7. Exercise of Rights

You may always query or modify your personal information by accessing your profile on the Website or making such a request by telephone to the Privacy Officer, or make a request to the Privacy Officer to modify, delete or suspend the handling of your personal information. Where the personal information is information of a child under the age of 14, an authorized legal representative has the right to exercise the aforementioned rights for and on behalf of the child.

You may, at any time, request to cancel your membership from the Program by contacting customer_relations.kr@swarovski.com (for Swarovski Club and SCS memberships) or kr.shophelp@swarovski.com (for all other Programs) and the Company shall immediately take the necessary measures.

Article 8. Automatic Collection of Personal Information

“Cookies” are a standard which stores small fragments of data on your computer. The Company may, through the Website, store more than one cookie on your browser or request your browser to transmit the relative data to the Website. The Company may use cookies to control the posting of advertisements, track the usage patterns of the Website, deliver edited contents, record registered information or personalize information. For instance, if you have subscribed to a certain part of the Website, you may choose to save your user name and password on your computer. You may install cookies on your website which will provide this function. The Company’s cookies may include personal information, which may be shared with a legal entity related to the Company. The Company shall retain the right to use anonymous data collected on our users for certain commercial purposes. If you do not wish to use cookies, you can use the function installed in your browser which will deny such cookies. Provided, however, in the event you select to activate the deny cookies function on your browser, certain parts of the Website may not operate properly.

Article 9. Privacy Officer

The Company exerts its utmost efforts to make sure the members can use the Company’s Programs and/or services safely and securely. In the event of any incidences that are against those notified to the members regarding the protection of personal information, the Privacy Officer shall take complete responsibility. However, the Company will not be responsible for any damages to the information caused by, despite technical complementary measures taken, an unexpected incidence attributable to the innate risk of network such as hacking and any disputes resulting or arising from postings by visitors to the Website. Below is the information on the Privacy Officer that is responsible for taking care of your personal information. The Privacy Officer will gladly and promptly answer your inquiries on privacy.