Customer commitment to data protection and privacy
Protecting personal data and your privacy is of greatest concern for the H&M Group. The H&M Group consists of company affiliate of H & M Hennes & Mauritz AB and its brands; H&M, COS, Weekday, Monki, H&M HOME, & Other Stories, Arket and Afound.
The H&M Group manifests its commitment to privacy and data protection by embracing the following principles.
H&M uses personal data lawfully, fairly and in a transparent manner H&M collects no more personal data than necessary, and only for a legitimate purpose. H&M retains no more data than necessary or for a longer period than needed. H&M protects personal data with appropriate security measures.
H&M GROUP PRIVACY NOTICE
About this Privacy Notice
This Privacy Notice intends to establish a clear, concise and transparent communication on the collection, use, processing, storing etc. of personal data relating to customers of the H&M Group.
Within the meaning of this Privacy Notice “customer of H&M Group” means former, current and potential customer or user of a product or service offered by an H&M Group affiliate and brand, visitors to one of our official websites or stores, member of a loyalty program or community.
Who is responsible for processing of your personal data?
The Swedish company, H & M Hennes & Mauritz GBC AB is primary responsible for the processing of personal data within the scope of this Privacy Notice.
Identity of H&M Group controller:
H & M Hennes & Mauritz GBC AB
Address: Mäster Samuelsgatan 46
ZIP: 106 38 Stockholm
Companies register: Bolagsverket/Swedish Companies Registration Office
Authorised representative: Helena Helmersson
VAT registration number: VAT NO. SE556070171501
The named H&M Group controller above are throughout this Privacy Notice individually or collectively referred to as “H&M”, “we” or “us”.
Why do we use your personal data?
We will use your personal data to be able to create your account, to process your purchase order and payment transactions and to manage your deliveries, claims, returns and refunds in a secure and effective manner.
How do we use your personal data?
The personal data we obtained from you when creating the account, placing a purchase order or making a payment will be used only to the extent necessary to process that order and to deliver the requested products and services.
Whenever you place a purchase order, make a payment, return a product or signing up for a financial service we use your personal data to verify your identity and your capacity to enter into a contract, that financial information you provide us is accurate, check creditworthiness, conduct fraud checks or prevent other illegal activity.
Where do we store your data?
The personal data that we collected from you is stored within a country of the European Union or the European Economic Area (“EU/EEA”) but may also, whenever necessary, be transferred to and processed in a country outside of the EU/EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws and without undermining your statutory rights.
From time to time we may transfers personal data from the EU/EEA to a third country not being approved by European commission as a safe country for such transfer (adequacy decision). Whenever applicable H&M will use Standard Contractual Clauses to ensure a similar level of protection as granted within the EU/EEA or other lawful grounds for transfer.
Who has access to your data?
We share your personal data within the H&M Group whenever necessary to fulfil the intended purpose. For the same reason, personal data is also shared with suppliers carrying out certain services and tasks on our behalf, such as order fulfilment and payment processing. H&M is always fully responsible for its suppliers.
We may from time to time also share personal data with independent third parties, such as electronic communication providers, banks, payment services and postal services. Please be aware that many of these recipients have an independent right or obligation to process your personal data in their own rights.
Except as explicitly stated herein, we never pass on, sell or swap your data to any third parties. General Information
What is the legal ground for processing?
When making products and services available to you we will process your personal data necessary for concluding a contract with you and to fulfil any obligations derived from that contract, whether the contract refers to a purchase order and payment, or the use of other services provided by us or by third parties.
How long do we keep your personal data?
We will keep and process your personal data no more than necessary for us to perform our contractual obligations. Your account profile and purchase data will be stored as long as your account is active. If you have not used our services for the past 24 months your account will be deactivated and your data will be erased, unless there is an ongoing dispute between us or other reasons for keeping your data as set out below.
For the purpose of Compliance with Laws, we are compelled to continue to save and sometimes use your purchase order data to abide with applicable tax and accounting legislation and to protect consumer rights.
Automated credit assessments
Payment credit applications are usually processed automatically whereby decisions are made by computer algorithms and not humans. In case your credit application has been assessed by a computer algorithm and been denied you have the right to express your point of view and to contest the decision.
Which rights do you have?
Right to access:
You have the right to request information about the personal data we hold on you at any time. You can contact H&M and we will provide you with your personal data via e‑mail.
Right to portability:
Whenever H&M processes your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.
Right to rectification:
You have the right to request rectification of your personal data if the General Information information is incorrect, including the right to have incomplete personal data completed.
If you have a M.IN.T CARE account, you can edit your personal data under your account pages.
Right to erasure:
You have the right to erase any personal data processed by H&M at any time except for the following situations:
*you have an ongoing matter with Customer Service
*you have an open order which has not yet been shipped or partially shipped
*you have an unsettled debt with H&M, regardless of the payment method
*if you are suspected or have misused our services within the last four years
*your debt has been sold to a third party within the last three years or one year for deceased customers
*your credit application has been rejected within the last three months
*if you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes
Right to restriction:
You have the right to request that H&M restricts the process of your personal data under the following circumstances:
* if you have claim that your personal data is incorrect, H&M must restrict all processing of such data pending the verification of the accuracy of the personal data.
* if the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead
* if H&M no longer needs the personal data but it is required by you to defend legal claims.
How do you exercise your rights?
We take data protection very seriously and therefore we have dedicated customer service personnel to handle your requests in relation to your rights stated above. You can always reach them at firstname.lastname@example.org.
You can exercise your right to rectification under your account pages, where you also can delete your account.
Data Protection Officer:
We have appointed a Data Protection Officer to ensure that we continuously process your personal data in an open, accurate and legal manner. You can contact our Data Protection Officer at email@example.com and write DPO as subject matter.
Right to complain with a supervisory authority:
If you have complaints about the way H&M Group processes and protects your personal data and privacy you have the right, at any time, to make a complaint to the Swedish Data Protection Authority or any other competent a General Information supervisory authority in the country of residence.
Updates to our Privacy Notice:
We may need to update our Privacy Notice. The latest version of the Privacy Notice is always available on our website. We will communicate any material changes to the Privacy Notice.
The revision history is set out in section Changes of this Privacy Notice. Who is responsible for the processing personal data?
Who is responsible?
H & M Hennes & Mauritz GBC AB is the controller and responsible for the cookies downloaded onto your device when you access any of our official websites and for the access and collection of data from the same device.
What is a cookie?
A “cookie” is a small text file that is downloaded onto your device such as computer or smartphone when you access our websites.
When referring to cookies we include:
First- and third party cookies, tracking pixels and plug-ins, including technologies those from third parties, other tracing technologies.
All cookies have an owner which tells you who the cookie belongs to. The owner is the domain specified in the cookie. Whenever you visit our website, we place cookies onto your device for different reasons. Such cookies are called “first-party” cookies, whereas cookies set by a different owner such as social media platforms or ad network/ad tech providers, are called “third party” cookies.
Below you will find more detailed information about our cookies and the reason for using them.
What types of cookies do we use and why?
Our cookies are grouped into four categories:
Strictly necessary cookies
Performance cookies tell us about how you use the site and they help us to make it better. For example, these cookies count the number of visitors to our website and see how visitors move around when they are using it. This helps us to improve the way our site works, for example, by ensuring that users find what they are looking for easily.
Functional cookies allow our site to remember your preferences, helping you to customize your content on our website. This type of cookie enables us to highlight products and services we believe is of interest and relevance to you. This way we can remember you when you return to our site and to give you best possible user experience.
Who has access to cookie information?
Information obtained from cookies is shared within the H&M Group to the extent necessary to fulfil its purpose. Information obtained from third party cookies is also available to the third-party provider placing the cookie on our site. We will not share first-party cookie information with third parties nor sell swap or otherwise disclose such information with anyone outside the H&M Group.
How long are cookies stored in your browser or on your device?
Cookies can be stored for varying lengths of time on your browser or device.
Persistent cookies (or permanent cookies) will be stored in one of your browser’s subfolders until you delete them manually or your browser deletes them based on the duration period contained within the cookie’s file. Their duration depends on the date of expiry written in them.
Session cookies are immediately deleted when you close your browser. When you restart your browser and go back to the site that created the cookie, the website will not recognize you.
How to manage your cookies?
Managing browser settings
You can manage your cookies from your computer or mobile device using web browser. All commercial web browsers are featured with cookie management functionality. Please check your web browser to find out more how to delete or disable cookies etc. You can easily stop your browser from accepting cookies altogether by configuring your browser’s cookie settings.
If you choose to disable cookies in your web browser, you will not be able to take advantage of all our features.
Opting-out from social media platforms, ad network/ad tech providers Please follow the link to learn more about how to opt-out of the cookies provided by some of our partners here: Google Analytics