Last update: 17.10.2023

  • What is personal data?
  • What is the purpose of this Policy?
  • What data is processed?
  • Why do we process your data?
  • How long do we keep your personal data?
  • Will you receive commercial offers?
  • Who is your data for?
  • What protection for the data of minors?
  • What data can be shared with social networks?
  • Do our Sabon stores use video surveillance?
  • How do we keep your data safe?
  • Where is your data processed?
  • What are your rights?
  • How to exercise your rights?
  • How do we use cookies?
  • How to stay informed of any modification of our Data Protection Policy?
  • What is personal data?

    Personal data is information that directly or indirectly identifies you. For example, your surname, first name, date of birth, postal or e-mail address, your customer number, your purchase history or the IP address of your computer etc.

A processing of personal data is any operation or set of operations performed on personal data. For example, the collection, recording, consultation, analysis of your personal data are processing of your data.


  • What is the purpose of this Policy?

    Our company Sabon Holdings registered at Bucharest, Sfinții Voievozi street no.65 floor 2 District 1, J40/7199/2005, CUI RO16222607, would like to remind you of its commitment to respect the trust you place in it and to apply the regulations in force in Romania and in the European Union regarding the protection of personal data  (General Data Protection Regulation or "GDPR").

This Policy informs you about the conditions under which Sabon, in its capacity as data controller, collects and uses your data. It completes the information brought to your attention when you communicate your data to us by filling in a form. For example, when creating a customer account on one of our websites, or when you join our loyalty program.


This Policy applies to data collected in-store, by mail or by telephone when you contact our customer service, as well as when you use our sites or mobile applications. These are rules relating to the personal data of all our customers, prospects and candidates, regardless of the channel in which this data is collected.

It is accessible to all and permanently since

We invite you to read it carefully and to refer to it regularly.


  • What data is processed?

    We may process the following categories of personal data:  

Data relating to your identity: e.g. title, surname, first name, address, date of birth...

Contact data: e.g. address, telephone number, e-mail address...

Financial data: e.g. information related to methods of payment...

Technical data: le.g. login data, browsing history, login and password...

Commercial data: e.g. customer number, purchase history, information relating to your customer account and your loyalty account, reviews about our products, customer segment, records of telephone conversations...

Well-being data, data relating to health: e.g. skin tendency, skin sensitivity, allergies or pregnancy, which you may be required to communicate to us as part of the care in Institute. In certain special cases, it may be data of a medical nature (in case of request from you and to meet our legal obligations related to cosmetovigilance)


This data depends on your interactions with our company: e.g. creation of a loyalty card, creation of a customer account on one of our systems, ordering by mail or online, subscription to the Newsletter, contacting customer service and your use of our services, sites and mobile applications.

The mandatory or optional nature of the communication of your data is indicated to you at the time of their collection. Failure to provide information that is marked as mandatory will prevent us from fulfilling your request. For example, your delivery address is required to deliver your order to you.


We point out that we do not store your credit card data used for the payment of your purchases on our site, this data being directly communicated in secure mode to our Payment Service Provider.


  • Why do we process your data?

    For each processing, we collect and use only the data that is relevant and necessary for the purpose pursued.


We process your data for the purposes of performing a contract with you in order to:  

-  Register and execute your orders

-  Provide the services to which you subscribe

-  Process your requests and complaints

-  Ensure after-sales service

-  Recover the unpaid


We also use your data for other purposes that allow us to pursue our legitimate interests, ensuring that we always respect your rights and interests, and where necessary, on the basis of your express consent:  

-  Manage and improve the customer relationship and the quality of customer service

-  Improve your experience when using our websites and mobile applications

-  Implement commercial prospecting  operations

-  Suggest you offers adapted to your preferences by the means of profiling and segmentation methods (methods to understand your preferences better in order to offer you offers of services and personalized products)

-  Implement games and advertising contests

-  Perform statistical analyses

-  Conduct satisfaction surveys

-  Ensure the management and publication of customer reviews on our products

-  Preventing abuse and fraud and managing litigation

-  Perform  new services or changes on our sites and applications

-  Performing our financial, accounting and archiving activities

-  Ensuring the physical and systems security measures.


Your data may also be used to allow us to comply with our legal or regulatory obligations regarding the obligations related to accounting and taxes, the financial obligations related to the security of the payment processes, the legal obligations regarding the sanitary protection associated with the cosmetic products, the collaboration with the public authorities, keeping the data according to the legal requirements.

Following our cosmetic health protection process, we may collect personal data about your health by contacting our customer service to report a problem with one of our products. In such a case, we must justify the collection of personal health data on the basis of one of the derogations in Article 9 GDPR in order to process sensitive data. In the case of fulfilling the obligation of health protection associated with cosmetic products, we process such data for reasons of public interest in the field of public health, in particular to ensure high standards of quality and safety of our products.


  • How long do we keep your personal data?

    We take care to retain your personal data only as long as necessary to achieve each of the purposes set out in this Policy.

We apply retention periods adapted to each purpose, for example:


For customers in distance selling, we keep their data 4 years from their last order made on the site, by mail or by phone.


For in-store customers, we keep their data for 4 years from their last purchase.


Regarding people who do not have a customer account, we keep their data for 2 years from their last interaction with our Brand (for example a click in our Newsletter, a participation in a contest).


We are required to retain accounting information relating to your purchases for a period of 5 years in order to fulfill our legal obligations.


Regarding job opportunities: The data of your application (name, surname, CV, letter of intent, etc.) will be kept in an active database throughout the recruitment process. After which:

- In case of employment: the data will either be reused and kept for staff management purposes, or deleted or archived for a maximum period of 5 years as evidence in case of dispute.

- If the application is rejected:

a. If you agree, we will keep your data for up to 2 years from our last contact to contact you again for new opportunities.

b. In all cases, we will keep certain data in an intermediate archive for a maximum of 5 years for evidentiary purposes in case of dispute.

  • Will you receive commercial offers?

    In compliance with the choices you have made, we may use your contact details to send you commercial offers, in particular by post, telephone, e-mail or SMS.

Offers by e-mail or SMS:  


Subject to your consent, you may receive offers by e-mail or SMS for our products and services, as well as offers for products and services from partner companies. You can withdraw your consent at any time with future effect. In the event that you have communicated your data to us on the occasion of an order and unless you object, we may send you offers for our products and services.


You remain free to object at any time to receive these offers.


-  For our offers by email: by clicking on the unsubscribe link in each email, or by visiting your customer account from our Website, or by contacting our customer service.

-  For our offers by SMS: by contacting our customer service.


Non-advertising messages: We may contact you by e-mail or SMS to provide you with a better service or to fulfil our legal obligations. These are not commercial offers and these messages do not include an unsubscribe link. For example, sending your loyalty reward or reminding you of the time left to use it.


Offers by post or telephone:


We may send you offers by post or contact you by telephone to suggest you offers for our products and services. You can also receive offers through us by post or telephone from partner companies. If you no longer wish to receive these offers, simply inform customer service.


  • Who is your data for?


The recipients of personal data are part of the authorized staff belonging to Sabon Holdings, entities of the Yves Rocher Group of which it is a part, as well as service providers, partners or other third-party data processors.

The following entities and their employees will have access to your data:

• IT service providers (e.g. software maintenance and development, website maintenance and development),

• Providers of CRM type solutions

• Providers of marketing services, which include providers of market research services, providers of services through which marketing communications are transmitted, providers of services for monitoring traffic and the behavior of users of online tools, providers of personalization services of various types of marketing, providers of marketing services through social media resources, providers of services for creating the content of marketing forms,

• Group companies (other than Associated Operators)

These third parties would include third contracting parties located outside the European Union or in countries for which the European Commission has not recognized an adequate level of protection regarding the processing of personal data (eg Israel) but in relation to which we will implement appropriate guarantees.

The data may also be transmitted to the competent public authorities, at their request, or in order to comply with other legal obligations.


Subject to your choices, you may receive through us commercial offers from selected partner companies. Your data will then only be used punctually for one or more prospecting campaign(s) on the part of these partner companies. In a responsible approach, we have chosen not to communicate your data directly to the partners concerned if they will only be able to save your data in their customer file if you respond to their offer.


  • What about protection for the data of minors?

    It may happen that minors wish to provide us with their contact details to subscribe to our Newsletter, create a customer account or become a member of our loyalty program.

For those of them who are under the age of 16, we ask them to verify that they have the authorization of their parents (or legal guardians) before providing us with any personal information. In store, we also ensure this authorization (for example, presence of the parent at the creation of the loyalty card).

For people who we know are under the age of 13, we will not send them news and offers from our Brand.

Regarding people who we know are under the age of 18, we have chosen to never select their contact details for the purpose of sending prospecting messages from third-party partner companies of Sabon.


  • What data can be shared with social networks?

    We would like to clarify the information that is shared with Facebook when using the "social login" function and the "like" button installed on our site.

Facebook’s "social login" function:


In the event, to facilitate the creation of your internet customer account, you choose to use your Facebook account, you consent to share with us certain information of your profile: name, first name, email address and date of birth only. This data is only used to facilitate the creation of your account.


The Facebook "Like" button implemented on our site:


We include on our site the "Like" application button provided by the social network "Facebook". Facebook is likely to identify you through this button, even if you did not use this button when you visited our website. This type of application button may allow Facebook to track your navigation on our site, simply because your Facebook account was activated on your terminal (open session) during your navigation on our site.


We have no control over the process used by this social network to collect information relating to your browsing on our site and associated with the personal data they have.


In general, we invite you to consult the privacy policy of social networks in order to be aware of the objectives they pursue, in particular advertising, by using browsing information that they can collect through their application buttons. These privacy protection policies must in particular allow you to express your choices with social networks, in particular by setting up your accounts of use of each of them.


  • Do our Sabon stores use video surveillance?  

    It is possible that some stores under the Sabon banner have installed cameras to protect you, and also, prevent and fight against theft of goods. For these purposes, you can be filmed and your image can be stored for 30 days.

Please contact the relevant store directly if you have any requests regarding video surveillance.


  • How do we ensure the security of your data?

    We take all necessary measures to ensure the security and confidentiality of your data in order to prevent its loss, accidental destruction, misuse and unauthorized access. The security of your data is ensured by anonymization measures, encryption, protection of our information systems, data backup... etc.


  • Where is your data stored?

    We have chosen to support data hosting providers who are committed to storing data on the territory of the European Union.

In the event that, by exception, a service provider is required to transfer data outside the territory of the European Union, we ensure that the processing implemented complies with a level of protection of personal data corresponding to that required by the Regulation (GDPR), supplemented by  the internal rules  of  Sabon.  


  • What are your rights?

    In accordance with the applicable regulations, you have different rights that you can exercise at any time.

You have a right of access, a right of rectification, a right to erasure of data concerning you, as well as the right to request the portability of the data you have provided to us.


You have the right to object for legitimate reasons to the processing carried out concerning your data, or to request the limitation of such processing.


You also have the right to object at any time and without reason to the processing of your data for advertising purposes, as well as to profiling when it is carried out for the same purpose.


You have the right to issue directives relating to the fate of your data after your death.

Please note that your request may be rejected if the processing in question is necessary for the exercise of the right to freedom of expression and information, or if we have other legal grounds or legitimate reasons to further process your personal data, or if the processing is necessary for compliance with a legal obligation, for reasons of public interest in the field of public health, or for us to establish, exercise or defend legal claims, for example, if we consider that you have violated our terms of use or, finally, whether the processing in question is necessary for archiving purposes in the public interest, scientific or historical research.

  • How to exercise your rights?

    To exercise any of your rights, simply send an email at or contact us by phone at 0377.101.455.

You can also write to us by contacting our Customer Service by post at the following address: SABON ROMANIA SRL- Customer Service at Bucharest, Sfinții Voievozi street no.65 floor 2 District 1.


Indicate your name, first name, postal address or e-mail address associated with your account and if possible, customer or loyalty card number.  In case of doubt about your identity, we may ask you for additional information or proof of identity (double-sided copy, allowing us to verify the identity of the author of the request).

We will respond to your request within one month of receiving your complete request. We reserve the right not to act on manifestly unfounded or excessive requests.


We have appointed a Data Protection Officer (DPO) whose mission is to ensure compliance with the applicable regulations and the rules described in this Policy.


If you have any questions or comments about the processing of your personal data, you can also contact the Data Protection Officer’s office at the following email address:

We are committed to making every effort to respect your rights with regard to your personal data. If, however, you consider that these rights have not been respected, you have the possibility to lodge a complaint with the Romanian Authority for Supervision of the Personal Data Protection at Bucharest Bd. G-ral. Gheorghe Magheru no. 28-30, District 1, postal cod 010336 or its webpage at whose mission is to ensure compliance with the Regulations applicable to personal data.


  • How do we use cookies?

What is a cookie?

A cookie is a small file deposited and read during your consultation on our Site. A cookie can also be used when reading an email, installing or using a mobile application via your computer, smartphone, tablet, etc.

Why do we use cookies?

Depending on your choices, the purpose of cookies is to:

-  Determine in real time the most relevant advertisements based on your navigation on our Site

-  Offer content that match your interests

-  Analyze the traffic and performance of the website (statistics, storage of your device, implementation of security measures)

-  Offer services related to social networks


  • How to set your cookie choices?

Your choices of cookies can be made by category. Only strictly necessary cookies are always deposited for the proper functioning of the Site.

You have several choices:

-  Accept all cookies: all categories of cookies are used

-  Refuse all cookies except those strictly necessary

-  Setting cookies by accepting or not accepting the desired categories


After 6 months, we will ask you to formulate your choices again.


You can find at any time the details of each cookie in the section "details of partners and cookies" by clicking on


How long are cookies stored?


Each cookie has its own lifespan, up to a maximum of 13 months.

You can find at any time the retention periods of each cookie in the section "details of partners and cookies" by clicking on the "Cookie settings" button above.

What are the third-party cookies on our website?

When cookies are emitted and used by partners, they are subject to their privacy policy. We invite you to consult these policies directly on their website.

Partner applications on our website:


Some features of our website come from our partners. They allow you to share content and your preferences with these partners. They also make it possible to provide you with advertising that matches your interests. This is the case of features from partners like Facebook, YouTube, Amazon, Pinterest, Snapchat, Tiktok.


Do we use cookies on other websites?


Our advertisements on other websites and applications may contain cookies that allow us to:


-  Calculate the amount of money due to our partners

-  Establish statistics on the display and clicks on this content

-  Adapt the presentation of the site if you click on our advertisement.


  • How to stay informed of any modification of our Data Protection Policy?

    We undertake to update as much as necessary this Policy made available on our website accessible to all and whose application covers the relationship between consumers and Sabon Holdings whatever the context of this relationship: stores, Internet, mail, telephone.


Information about cookies


Last updated: June 17, 2021


What is a cookie?


Cookies are alphanumeric identifiers that we and our service providers may plant on your computer, mobile or other device that allow us to identify your web browser or device when you return to the Site and/or when you use the same computer or browser. Cookies allow our systems to recognize your browser so that we may track your usage trends on the Site, improve our quality of services, create a personalized user experience on the Site and provide you with third party advertising on the Site and elsewhere. Your browser may give you the ability to block or delete cookies should you wish to do so.


You can use the ‘Help’ menu in your browser for further information.


Please note that blocking all cookies will have a negative impact upon the usability of many websites, including our own. We therefore recommend that you permit the use of cookies when using our websites.


Cookies on our website may be set by us, by third parties under contract with us, or by independent third parties such as advertisers.


Cookie duration
Cookies placed on your computer as a result of your use of our Site will never be stored for longer than 13 months from the date of your last visit.


Cookie classification
The table below sets out the various types of cookies that we (or relevant third parties) may use and includes information you can use to control and learn more about such cookies.


Cookie Type

Why we use it and additional information

Strictly Necessary Cookies (Functionality Cookies)

Strictly Necessary Cookies, also called Functionality Cookies, as their name suggests, are vital to the proper functioning of the website. They enable us to remember your selections between pages, meaning we can pass that information on without you ever having to re-enter it. We may use cookies to make sure our website performs as it needs to, and to make sure the correct results are being delivered in accordance with your selections. We may also use cookies to heighten your experience by recognizing whether you are a first-time visitor and remembering your preferences and previous searches.

Analytics and Statistic Cookies

We may use cookies to monitor and understand more about how our websites and services are used and accessed, which in turn lets us optimize the user experience and build a website that suits the needs of our users and drive the direction of our business. For example, we may use Google Analytics who store cookies on your device to generate anonymous reports and statistics. Google stores this information in accordance with their privacy policy.

Marketing and Advertisement Cookies

Our site may display ads that are relevant to you, depending on your interests. We may also use third-party advertising solutions that show you ads related to the Services when you are on other websites. These tailored advertisements are served by third parties using cookies which will track your behavior across the web, using anonymous statistical rather than personally identifiable information, including information relating to your use of the Services, your location and demographic characteristics. Third party advertisers may also use cookies, for such purposes of ensuring relevant advertisements are being displayed, to help prevent the same adverts being served twice to the same user, and to ensure that adverts are correctly sized and don’t detract from your experience of the site.
Refusing the deposit of cookies
You can opt-out of third-party advertising networks using your information for interest-based advertising by using the cookie banner displayed on this website and its button “refuse all”. To learn more about targeted advertising and how you can accept or refuse (opt-out of) this type of advertisements, we recommend that you visit or You will need to opt-out on each device you use to access the Services. Your information will not be shared with our third party advertising network partners for the purpose of interest-based advertising if you opt-out, however, you will continue to receive interest-based advertising from us when using the Services. Please note these opt-out mechanisms may use a cookie on your device, and if you clear the cookies from your browser it may ‘forget’ the opt-out.

Social Media Cookies

Social media cookies allow users to interact more easily with social media, such as Facebook and Instagram. We do not control social media cookies and they do not allow us to gain access to your social media accounts. Please refer to the relevant social media platform’s privacy policies for information about their cookies: Facebook Cookie Policy, Instagram Cookie Policy.


Service Providers
We may transfer to your information to third parties that provide us with services, including web maintenance and information verification. These third parties will have access to limited information that is necessary for the performance of their services and not for any other purpose.


 Cookie List

We use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Functional Cookies
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Performance Cookies
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.    All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor

its performance.

Targeting Cookies
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.    They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.



Cookie Settings