Privacy Notice

The Estée Lauder Companies Inc., located at 767 Fifth Avenue, New York, NY 10153 and your local Estée Lauder affiliate (together “Estée Lauder” , “we” , “us”, “our”), are responsible for the processing of your personal data in connection with the single sign–on solution.

Depending on your role, Estée Lauder may collect the following types of personal data in connection with the single sign–on solution:
 · Name
 · Employee ID or other identifier
 · Work or Personal Email Address
 · Work or personal mobile phone number
 · Password that you create
 · Job title and organization information
 · Work Location
 · Employment start and end date

We will obtain the above information directly from you, your Estée Lauder business contact or, if you are an employee of Estée Lauder, from the Estée Lauder HR system in which your personal data is stored during the course of your employment relationship.

This personal data will be used to facilitate your access to websites and applications made available by Estée Lauder, including to send you communications such as password reset emails.

Certain of your personal data (such as your email address) may be disclosed to these websites or applications in order to facilitate your access. For details on how your personal data is used in connection with these websites and applications, please review the Privacy Notice available on that website or application.

The personal data collected through the single sign–on solution may be accessed by authorized personnel of Estée Lauder for the purposes described above, and our third–party processors such as Hub City Media identity and access management consultants. Estée Lauder has contractually bound our third–party processors to appropriate information security and confidentiality requirements in accordance with applicable law. These affiliates and third–party processors may be located outside your country of residence (such as in the United States) and your personal data may be subject to applicable foreign laws. Estée Lauder will take all necessary steps to comply with any legal requirements on data transfers.

We maintain appropriate administrative, technical and physical safeguards designed to protect personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Personal data collected in connection with the single sign–on solution will be retained as long as necessary to serve the purposes for which it was collected.

Subject to applicable law, you may have the right to access, update or delete your personal data, to withdraw your consent you previously provided to us, to data portability, where technically feasible, or to restrict or object to the processing of your personal data. You may also lodge a complaint with your local data protection authority.

If you have any questions regarding the manner in which we or our service providers treat your personal data or if would like to exercise your rights in relation to the processing of your personal data, please contact privacy@estee.com.

For residents of the European Economic Area: Some of the data recipients described above are in countries that have not been recognized by the European Commission as providing an adequate level of data protection, such as the United States. When we transfer personal data to these countries, we will protect that data with appropriate data transfer mechanisms. For more information about such transfers, contact us as set out above.