This privacy and cookie statement explains what personal data Keune Haircosmetics B.V. (hereinafter Keune, Keune Haircosmetics, we, us or our) collects and for what purposes this personal data is used in connection with our services, products, use of our websites and visits to our facilities. In addition, this privacy and cookie statement refers to the rules, guarantees and rights regarding the processing of personal data and how to exercise the rights in relation to this processing.

Keune Haircosmetics B.V. is responsible for processing your personal data in connection with our services, products, use of our websites and visits to our premises. Keune is committed to respecting and protecting your privacy and the personal data you share with us.

Keune Haircosmetics B.V. Koningsweg 15, 3762 EA Soest T: +31(0)356016161 www.keune.com

info@keune.com In connection with the sale and delivery of our products, the local KEUNE subsidiary also processes your personal data in order to process the order correctly. The contact details of the KEUNE subsidiary are as follows:

Keune Haircosmetics UK LTD 100 – 101 Unit 1 The post building, Museum Street, WC1A 1PB, London, United Kingdom

onlineshop-uk@keune.com

Keune Haircosmetics collects personal data from you as a website visitor and/or customer and/or supplier. Personal data is data that can be traced to an identified or identifiable natural person ("data subject"). We collect and process various personal data:

• Your gender;

• Your first and last name;

• Your e-mail address;

• Your phone number;

• Your delivery and/or billing address, place of residence;

• Your age and date of birth;

• Information about your activities on the Keune website;

• Your order history

• Your favourite salon

• Your login details for your Keune account

• Your IP address and;

• Camera images at the entrance of our premises.

Keune will only process your personal data in accordance with the General Data Protection Regulation.

The purposes of the processing of your personal data by Keune Haircosmetics are:

• the delivery of the products and services requested by you;

• the administration thereof and processing of your payment;

• creation of your personal account;

• communication with you in a personalized manner and informing you about Keune products and/or services, in accordance with your choices;

• providing customer service, including service around purchasing services and/or products and handling complaints and requests for information;Processing your participation in contests, promotions or surveys, conducting market research and improving our business, services and products or to develop new business, services and products;

• the performance of marketing activities;

• communicating promotional and marketing information with you (including our newsletter and loyalty program), including purposes of direct marketing and retargeting;

• improving our websites, products and services, and security purposes;

• conducting and reporting on statistical analyses;

• ensuring the security and protection of our visitors and property;

• aggregating and/or anonymizing personal data to generate other data for our use and;

• for other legitimate commercial purposes.

The legal basis for processing personal data is the performance of an agreement, the fulfillment of a legal obligation, your consent (for example, to receive the newsletter) or a legitimate business interest.

If the processing of personal data is based on explicit consent, you always have the right to withdraw this consent by sending a request to persoonsgegevens@keune.com. Withdrawal of your consent does not make previous processing based on consent unlawful, but ensures that the processing must be terminated and your data (after any retention period) destroyed, unless there is another legal basis for processing your data.

Our legitimate interests include marketing, advertising, security, (crime) prevention, IT management, research and analysis of our own products or services, corporate governance, legal affairs, internal management.

Keune does not retain personal data for longer than is necessary for the purpose for which it was collected. The period for which personal data are retained is based on the following criteria:

• The length of time we have an ongoing relationship with you and provide the services to you (for example, as long as you have an account with us or continue to use our services);

• Whether there is a legal obligation that we must comply with (for example, certain laws require us to retain our transactions for a certain amount of time before we can delete them); or

• Whether retention is desirable given our legal position (such as with respect to statutes of limitations, litigation or investigations by authorities).

In addition, the following retention periods apply more specifically:

• Administrative data: seven years from the time of capture;

• Camera images at the entrance to our buildings: two weeks from the time of capture;

• Other data: five years from the time of capture.

If Keune Haircosmetics has reason to believe that it may face possible liability, the statute of limitations is twenty years.

Keune only shares your personal data with third parties if strictly necessary, e.g. withservice providers of services such as website hosting, payment processing, order fulfillment, information technology and related infrastructure facilities, customer service and e-mail delivery. If this is the case, Keune has entered into a processing agreement with these third parties to the extent required by law. Keune requires these third parties to process and protect your personal data with care.

Within Keune, only those Keune employees have access to the data, for whom this is necessary given the purpose for which your personal data is processed.

Keune will take appropriate technical and organizational security measures against loss or unlawful processing of your personal data. This may include the use of secure registration forms, data encryption and access restriction to your personal data.

Certain countries do not have an adequate level of protection for personal data. However, you can be assured that Keune will take appropriate security measures regarding the confidentiality and protection of your data. For transfers from the EEA to countries that do not offer an adequate level of data protection according to the European Commission, we have taken adequate measures such as contractual agreements, as approved by the European Commission, concluded with third parties.

You have a number of rights under applicable data protection law in the United Kingdom. You have the right to ask us for access to your personal data. In addition, you can request us to rectify, delete or block your personal data. You also have the right to object to the processing of your personal data. Finally, you can request the transfer of your personal data if the processing is based on consent and the processing takes place via automated processes.

You can send these requests to persoonsgegevens@keune.com. We will process your request within four weeks after you have submitted it. In addition, if you see reason to do so, you can file a complaint with the Personal Data Authority, The UK Information Commissioner. Postal address:

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline number: 0303 123 1113

The Keune Web site use "cookies" to help you personalize your online experience. A cookie is a text file placed on your hard drive by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you. One of the main purposes of cookies is to save time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize Keune web pages, or register with Keune site or services, a cookie helps Keune to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses, and so on. When you return to the same Keune Web site, the information you previously provided can be retrieved, so you can easily use the Keune features that you customized. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies.

• Form-related cookies: When you submit a date using a form such as the one found on the contact page, cookies can be set to remember your user data for future correspondence.

• Preference-related cookies: when you indicate a preferred salon to us, we store this preference using a cookie. On your next visit, the preferred salon will still be listed.

• Third party cookies: This website uses Google Analytics, one of the most trusted analytics solutions on the internet to help us understand how you use the website and how we can improve your experience. These cookies can track things like how long you spend on the website and pages you visit.

We may change this Privacy Statement from time to time. Changes to this Privacy Statement will become effective when we publish the revised statement. If necessary, we will notify you of changes to our Privacy Statement.