Privacy Policy

Nestle Korea Co., Ltd., including Nespresso affiliates, Nespresso Business Unit (hereinafter referred to as “Nespresso”) is doing its best to ensure that personal information provided by users is protected when operating Nespresso's brand homepage. Nespresso complies with the personal information protection regulations which are required by information and communication service providers such as PERSONAL INFORMATION PROTECTION ACT, PROTECTION OF COMMUNICATIONS SECRETS ACT, TELECOMMUNICATIONS BUSINESS ACT, ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, ETC and personal information protection guidelines established by the Korean government such as the Korea Communications Commission, the Ministry of Science and Technology Information and Communication, and the Ministry of Public Administration and Security, and through its Privacy Policy, informs you of the purposes and methods of using the personal information provided by users, and what measures are being taken to protect personal information. Nespresso's privacy policy is disclosed on the first screen of the homepage and can be viewed easily by users at any time.

Nespresso's Privacy Policy is subject to change due to changes in laws and guidelines, changes in Nespresso's internal policies, etc. and when the Privacy Policy changes, we immediately publish the change and the date of change through the brand's homepage so that users can easily recognize the revised content.

Collection of Personal Information Items and Collection Methods
Purposes of Collection and Use of Personal Information
Retention and Use Period of Collected Personal Information
Procedure for Destruction of Personal Information
Outsourcing of Personal Information Processing
Rights of Users and Legal Guardians and How to Exercise Them
Measures for Personal Information Protection
Operation and Refusal of Automatic Personal Information Collection Devices
Collection and Opt-out of Behavioral Information
Provision of Personal Information to Third Parties
Transfer of Personal Information Overseas
Personal Information Management Officer and Relevant Department
Notification Obligations Regarding Policy Changes

1. Items of personal information collected and method of collection

Nespresso collects the following personal information from users for the purpose of user registration, product orders, consultations, and various service provisions.

Nespresso (In-Home):
1.1 Collection Items
1)Required Collection Items
(1) Membership registration and contract:
Email, name, phone number, postal code, address
(2) Product orders:
Name, postal code, phone number, address (billing and shipping)
(3) Inquiry:
Email, Name, Phone Number
(4) Nespresso Family Service Usage:
Member Number, Mobile Phone Number, Nespresso Product Serial Number, Date of Nespresso Product Purchase, Nespresso Product Purchase Channel

Nespresso Professional (B2B):
1.1 Collection Items
1)Required Collection Items
(1) Membership Registration and Contract:
Email, Company Name, Contact Person Name, Password, Nespresso Club Member Number, Postal Code, Address (2) Product Order:
Name, Postal Code, Phone Number, Address (Billing, Shipping) (3) Inquiry:
Email, Company Name, Contact Person Name Email, Name, Company Name, Company Type, Number of Users, Address, Phone Number 2) Optional Collection Items
(1) Product-related information, promotions, and marketing-related information:Phone number, email, postal code, address
(2) Customer service: Name, phone number, postal code, address for handling consumer inquiries, order cancellations, returns, and after-sales service inquiries
(3) Digital advertising - personalized targeted advertising:
Online identifiers including cookies or advertising IDs, email address, client identifier, internet protocol (IP) address, partner-provided identifiers, content type, content ID and content, product browsing information, purchase history, browser usage history (customer action information). The specific items collected may vary depending on the advertising platform.

3) Automatically Collected Items

Certain data is automatically collected from your device or web browser, including but not limited to: Device information such as IP address, unique identifiers, device type, domain, browser type, version and language, operating system and system settings, general location information and time zone, and similar device and usage information.
Online activity and browsing information collected through cookies and similar technologies, including clicked links, page views, purchases, searches, features used, items viewed, time spent on the platform, uploaded information, items added to the shopping cart, and interactions with others on the platform.

1.2 Collection Methods

Personal information is collected through the following methods:

(1) Online registration: Desktop PC, mobile web, or mobile application.
(2) Offline registration: Completing a paper membership registration form.
(3) Phone: Providing information and consent over the phone.
(4) Live chat: Providing information and consent through a chat window.
(5) Email - Consent to be obtained through Email Inquiry or Consultation, followed by submission of inquiry details.

During the process of purchasing Nespresso products, the following information may be collected: payment method, card name, card number, cardholder name, expiration date, first two digits of the card password, 8-digit birthdate or business registration number for credit/debit card payments, bank name and account number for bank transfers. Additionally, when delivering the goods, the recipient's name, phone number, address, and postal code may also be collected.

2. Purpose of collecting and using personal information

Most brand homepage services can be used without a separate user registration. However, for brand member service, product purchase, and participation in various events, we are collecting personal information necessary from users, through consumer survey, to provide better quality services to users including customized service. The collected personal information is used for the following purposes.
2.1. Fulfillment of contracts for service provision and settlement of fees according to service provision

Provision of contents, provision of specific customized services, delivery of goods or sending invoices, identification, purchase and payment, collection of fees

2.2. Member Management

Membership-based services and limited self-verification measures are implemented to ensure personal identification, prevent misuse by malicious users, unauthorized usage, confirm intention to join, restrict multiple registrations, verify consent from legal guardians when collecting personal information of children under the age of 14, verify legal guardianship for dispute resolution, retain records for dispute resolution, handle complaints and grievances, and deliver notifications of updates and changes.

2.3. Use for Marketing, Advertising

Development of new services and provision of customized services, provision of services and advertisements according to statistical characteristics, checking the validity of the service, providing event and advertising information and providing opportunities to participate, identifying the frequency of access, and statistics on service use by members.

2.4. Provision and management of personalized benefits for Nespresso
Family Provision of specific personalized benefits, provision of customized services, product delivery, identity verification

3. Period of retention and use of personal information

During the use of Nespresso's brand website membership services and product registration services as a member of Nespresso's brand website, Nespresso and Nespresso Family retain and utilize users' personal information in accordance with regulations. Upon request for membership cancellation, Nespresso membership withdrawal, deletion of registered product information, or upon the achievement of the purpose of collecting and using personal information, the respective personal information will be destroyed within 5 business days. When requesting withdrawal from Nespresso Club membership, registered machine information will be deleted, and Nespresso SMILE membership may also be terminated. However, the following information is retained for the specified period for the reasons below.

[Retention of information according to related laws]
Retention of member information for a certain period of time specified by related laws if it is necessary to preserve it in accordance with the provisions of related laws such as Commercial Law, ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC.

Items to be retained: Records on contract or withdrawal of subscription, etc.
- Laws for grounds and policies: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC
- Retention period: 5 years
Items to be retained: Records on payment and supply of goods, etc.
- Laws for grounds and policies: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC
- Retention period: 5 years
Items to be retained: Records on consumer complaints or dispute settlement
- Laws for grounds and policies: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC
- Retention period: 3 years
Items to be retained: Records on display/advertising
- Laws for grounds and policies: ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC
- Retention period: 6 months
Items to be retained: Books and supporting documents for all transactions prescribed by the tax law
- Laws for grounds and policies: FRAMEWORK ACT ON NATIONAL TAXES
- Retention period: 5 years
Items to be retained: Records on electronic financial transactions
- Laws for grounds and policies: ELECTRONIC FINANCIAL TRANSACTIONS ACT.
- Retention period: 5 years
Items to be retained: Service visit history
- Laws for grounds and policies: PROTECTION OF COMMUNICATIONS SECRETS ACT, Act on Information and Communication Network
- Retention period: 1 year
Items to be retained: Illegal use record
- Laws for grounds and policies: Company internal policy
- Retention period: 1 year

4. Destruction procedure of personal information

1) Nespresso destroys the respective personal information within 5 business days when a member requests for membership cancellation, when the retention period of personal information has expired, or when the personal information becomes unnecessary for the purpose of processing.

2) If the retention period of personal information agreed upon by the user has expired or if the purpose of processing personal information has been achieved, but the information must be retained in accordance with other laws, Nespresso will store the information in a separate database or in a different location. Personal information stored separately will not be used for any purpose other than the purpose of retention, unless required by law.

3) The procedure and method for the destruction of personal information are as follows:

(1) Procedure for destruction:
The company selects personal information for destruction and destroys it in accordance with the company's privacy policy.
(2) Method of destruction:
The company safely destroys electronically recorded personal information by using technical methods to make the information irreproducible, such as anonymization. Personal information recorded on paper documents is shredded or incinerated for destruction.

5. Consignment of personal information processing

Nespresso is consigning the processing of personal information necessary to provide services as follows. Nespresso stipulates necessary matters to ensure that personal information can be safely processed during consignment contracts in accordance with relevant laws and regulations.

The company may entrust the processing of personal information in order to provide useful information such as new product introductions and event updates, and in such cases, a separate consent process is followed. If users do not utilize services related to the tasks entrusted by Nespresso to subcontractors, their personal information will not be provided to subcontractors. Users have the right to refuse consent for the processing of personal information through outsourcing. However, if consent is not given, it will not be possible to provide services related to tasks that involve personal information processing, such as identity verification, customer information analysis, and product delivery services.

Consignment Company	Scope of Work for Consignment	Shared Personal Information/Retention and Use Period:
NHN KCP Corp	Payment agency service	Credit card information, mobile phone number, customer name, customer email, customer mobile phone number / 5 years
ADYEN B.V.	Payment agency service	Card number, card expiration date, cardholder name, first two digits of card password, date of birth (8 digits) or business registration number / 5 years
Cybersource	Payment agency service	Card number, card expiration date, cardholder name / 5 years
KG Inicis	Payment agency service	Company name, representative name, resident registration number (alien registration number), email address, deposit account information, representative phone number, fax number, mobile phone number, customer name, customer phone number, customer mobile phone number, customer email address / 5 years
Naver Financial Corp	Naver Pay Easy Payment Service	Credit card number, card expiration date, CVC number, first two digits of the card password / 5 years
Iron Mountain	Customer information card storage and logistics agency	Retention of membership registration forms containing personal information without outsourcing processing / 1 year
UBASE Inc.	Coffee machine repair and history management	Customer name/address/number, machine serial number, purchase date, warranty period, malfunction symptoms, request date / 3 years
HIQ System Co Ltd	Coffee machine repair and history management	Customer name/address/number, machine serial number, purchase date, warranty period, malfunction symptoms, request date / 3 years
Ohjin Yanghaeng Co. Ltd	Coffee machine repair and history management	Customer name/address/number, machine serial number, purchase date, warranty period, malfunction symptoms, request date / 3 years
Value Point Inc	Promotional material production and event operation agency, DM sending to online/offline members	Address, contact person's name, phone number, email / Destroyed after achieving the purpose
Humming IMC	Marketing event agency	Address, phone number, contact person's name / Destroyed after achieving the purpose
UBCN	Customer inquiries for machine payment terminals	Address, phone number, contact person's name / 3 years
SaleCycle Limited	Sending E-Mails for items in the shopping cart	Name, email address, IP address, and unique machine ID / 13 months
Nestle Business Services AOA, INC.	Sending app push notification and email	Name, Email address, Nespresso Club ID, purchase information / Until the end of the service contract period
EMNet Inc	Advertising operation agency	Email address / Until the end of the service contract period
12CM Inc	Machine Registration cloud, Smile (point program) operation management, KakaoTalk message sending	Machine Registration - club member ID & phone number Name, phone number, Kakao customer key, address / Until account information is deleted
JKon Company Inc.	Member SMS/E-Mail sending	Phone number, name, email address / 12 months
Interohrigin	Advertising operation, event operation agency	Name, phone number, email address, address, club member ID, social media ID, resident registration number (in some cases for prize distribution) / Until the end of the service contract period
Google	Digital advertising media (1st party data utilization)	Email address / Until account information is deleted
Meta Platforms Inc. (Facebook)	Digital advertising media (1st party data utilization)	Email address / Until account information is deleted
Criteo	Digital advertising media (1st party data utilization)	Email address / 400 days
IPG DXTRA Korea Ltd	Digital marketing and social media event agency	Name, phone number, email address, address, Instagram ID / 1 month / 1 month
Kakao Corp.	Customer matching targeting and advertising exposure	Name, phone number, email address, address, purchase history / 2 months
TBWA	Advertising, event agency, DM, SMS/E-Mail, KakaoTalk message sending to online/offline members	Name, phone number, email address, address / 2 months
JH Logistics Co Ltd (CJ Korea Express)	Order delivery processing agency	Name/address/phone number / Until the end of the service contract period
ILYANG LOGIS Co LTD	Order delivery processing agency	Name/address/phone number / Until the end of the service contract period
TE LOGIS Co.,Ltd	Order delivery processing agency	Name/address/phone number / Until the end of the service contract period
UBASE INC	Customer service, provision of information for product and service promotion and marketing purposes	Customer name, phone number, address, order history, consultation history, consultation recording / 3 months
Microsoft Azure	Storage of order invoices in electronic document form	Name, address, phone number / 5 years
BizSpring	Data analysis platform construction	Analysis and reporting tools, web-app behavioral data / 12 months
Entrench	AB Test & Data analysis	AB Test and growth analysis, web-app behavioral data / Until the end of the service contract period
Hahmshout Global	Digital marketing and social media event management	Name, phone number, email, address, Instagram ID / Until the end of the service contract period
Hahm Partners	Digital marketing and social media event management	Name, phone number, email, address, Instagram ID / Until the end of the service contract period
Teads Korea	PR marketing and consumer event management	Email address / Until the end of the service contract period
Jellablue	Social media event management	Name, phone number, email, address, Instagram ID / 1 month
Amazon Web Services, Inc	Machine Registration service, Smile(loyalty program) management	Machine Registration - Club member ID, phone number, Smile(loyalty program) - Name, phone number, Kakao customer key, address / Until the end of the service contract period
Amazon Web Services, EMSA SARL	Machine Registration service, Smile(loyalty program) management	Machine Registration - Club member ID, phone number, Smile(loyalty program) - Name, phone number, Kakao customer key, address / Until the end of the service contract period
Adobe Experience Cloud	Customer matching targeting and ad exposure, App push notification message sending, Email sending	Club member ID, name, mobile phone number, online identifiers including internet protocol address (GA cookie ID), partner-provided identifier (ECID), cookie or ad ID, content ID and content, client identifier, address, email address, Nespresso product serial number, browser usage history (customer action information) / 18 months.

6. Rights of users and legal representatives and how to exercise them

Users and legal guardians can access and modify their own personal information or that of a child under the age of 14 registered on the brand's website at any time, and may also request cancellation of their membership.

To access and modify personal information of the user or a child under the age of 14, please use the "Personal Information Change" (or "Member Information Modification") feature. To request cancellation (withdrawal of consent) and deletion, please contact Nespresso Club (Home Use: 080-734-1111, Professional Use: 080-734-1113), and after going through the identity verification process, you can directly view, correct, or withdraw. Alternatively, you can contact the Personal Information Manager in writing, by phone, or by email, and we will promptly take appropriate action.

If a user requests correction of personal information errors, we will not use or provide the personal information until the correction is completed. If incorrect personal information has already been provided to a third party, we will notify the third party without delay to ensure that the correction is made.

Personal information that has been terminated or deleted at the request of the user or legal guardian will be handled in accordance with the retention and use period of collected personal information and the procedures for the destruction of personal information, as specified in sections "3. Retention and Use Period of Collected Personal Information" and "4. Procedures for the Destruction of Personal Information". It will be processed to ensure that it cannot be accessed or used for any other purposes.

7. Personal Information Protection Measures

The company implements the following administrative/technical/physical measures to ensure the safety of personal information and prevent its loss, theft, leakage, alteration, or damage:
7.1 Administrative Measures
1) Establishment and implementation of internal personal information protection plans

The company establishes internal management plans for personal information, including the designation of a personal information protection manager, and checks annually to ensure the proper implementation of these plans.

2) Operation of a dedicated organization for personal information protection

The company operates a dedicated organization for personal information protection, consisting of representatives and the personal information protection manager. This organization continuously implements technical and administrative protective measures to ensure that company employees comply with their obligations to protect user personal information.

7.2 Technical Measures
1) Password encryption

User passwords are encrypted and stored, and only the user knows the password. Only the user who knows the password can verify and modify their personal information.

2) Measures to prevent hacking and other security threats

The company makes every effort to prevent the leakage or damage of user personal information due to hacking, computer viruses, and other security threats.
Regular data backups are performed to prepare for data loss, and the latest antivirus programs are used to prevent the leakage or damage of user personal information and data. Secure transmission of personal information over networks is ensured through encryption communication. Intrusion prevention systems are used to control unauthorized access from external sources. The company strives to implement all possible technical measures to ensure the security of the system. However, the company is not responsible for any issues arising from the user's negligence or problems on the Internet, such as the leakage of this email or password.

7.3 Physical Measures : Access control to personal information processing systems, computer rooms, and document storage locations is implemented through physical locking devices.

To prevent unauthorized access to personal information, standards for granting, changing, and revoking access rights to personal information processing systems are established and enforced. Intrusion prevention and detection systems are installed and operated. The company also minimizes the number of employees handling personal information and separates the internal and external networks for PCs used by employees who can download personal information from the personal information processing system to reduce the risk of personal information leakage.

8. Information on the Operation and Refusal of Automatic Collection Devices for Personal Information

During the process of using the service or conducting business, service usage records, access logs, cookies, access IP information, and member information processed for marketing purposes may be generated and collected.

8.1 Collection and Purpose of Cookie Information
Nespresso processes anonymous data for the improvement of the Nespresso website content, optimization of the website for visitors, and understanding visitor statistics and website usage. In performing these activities, Nespresso may collect anonymous information such as browser type, operating system, access date and time using tracking technology ("cookies"). Cookies themselves cannot be used to identify the user. Cookies are small pieces of information that are sent to and stored on your computer's hard drive.

Users have the option to choose whether to allow cookie installation. Therefore, users can choose to allow all cookies, receive a confirmation prompt for each cookie, or refuse the storage of all cookies by adjusting the options in their web browser. However, if the storage of cookies is refused, some online shop services that require login may be difficult to use.

[Methods to Refuse Cookie Collection]
(1)Web Browsers
- Microsoft Edge: Menu > Settings > Privacy, Search, and Services > Tracking Prevention > Choose a tracking prevention level
- Chrome: Menu > Settings > "Privacy and security"
- Safari: Preferences > "Prevent cross-site tracking" and "Block all cookies"
- Other major internet web browsers such as Firefox and Opera also provide cookie deletion functions.
(2) Mobile Devices
- Android: Home > Settings > Google > Ads > Opt out of Ads Personalization (ON)
- iPhone: Home > Settings > Privacy > Tracking > Allow Apps to Request to Track (OFF)
(3) Cookie Policy Page
- Click 'here' in the Cookie Settings Management section and select preferences for each cookie item in the pop-up window.

9. Collection and Opt-out of Behavioral Information

9.1 Nespresso collects and utilizes behavioral information to provide users with optimized personalized services, benefits, and online tailored advertisements during the service usage process.

9.2 Nespresso collects behavioral information in the following ways:

Customized advertising delivery through third parties

Third Party for Personalized Advertising	Types of Behavioral Information Provided	Purposes of Behavioral Information Usage	Methods of Collecting Behavioral Information	Retention and Usage Period	Consequences of Refusal	Disadvantages if consent is refused
Google Ads	Cookies or advertising IDs, email address, client identifier, online identifiers including IP address, partner-provided identifiers	Cookies or advertising IDs, email address, client identifier, online identifiers including IP address, partner-provided identifiers	Automated Collection upon Website and App Visits/Usage	Third-party and retargeting ad delivery, managing potential customers	Until deleted by Google users / Information not associated with Google accounts is anonymized after 8-18 months	Inability to receive personalized ads
Meta	Cookies, content types, content IDs	_fbp	Automated Collection upon Website and App Visits/Usage	Third-party and retargeting ad operation	90 days	Inability to receive personalized ads
Criteo	Cookies, email address, browsing history, purchase history	UID	Automated Collection upon Website and App Visits/Usage	Third-party and retargeting ad operation	400 days	Inability to receive personalized ads
RTB House	Cookies, browser usage history (customer action information)	LID, UID, UTMs	Automated Collection upon Website and App Visits/Usage	Third-party and retargeting ad operation	Deleted within 90 days after the end of the service contract period	Inability to receive personalized ads
Adobe Experience Cloud	Online identifiers including internet protocol address (GA cookie ID), partner-provided identifier (ECID), cookie or ad ID, browser usage history (customer action information)	Online identifiers including internet protocol address (GA cookie ID), partner-provided identifier (ECID), cookie or ad ID, browser usage history (customer action information)	Automated Collection upon Website and App Visits/Usage	Third-party and retargeting ad operation	DPersonal information will be destroyed within 5 business days when it becomes unnecessary due to Nespresso membership cancellation request or expiration of personal information retention period or achievement of processing purpose	Inability to receive personalized ads

9.3 Nespresso collects only the minimum necessary behavioral information required for online tailored advertisements and other personalized services and benefits. Nespresso does not collect sensitive behavioral information that could clearly infringe upon individuals' rights, interests, or privacy, such as beliefs, family and kinship relationships, education and medical history, and other social activity records.

9.4 Nespresso collects advertising identifiers for online tailored advertisements through mobile apps. Users can block or allow personalized advertisements in the app by changing the settings on their mobile devices.
* Blocking/allowing advertising identifiers on smartphones
(1) (Android) ① Settings → ② Privacy → ③ Ads → ③ Reset Advertising ID or Delete Advertising ID
(2) (iPhone) ① Settings → ② Privacy → ③ Tracking → ④ Allow Apps to Request to Track (OFF)
※ Menu and methods may vary slightly depending on the mobile OS version.

9.5 Users can block or allow online tailored advertisements in web browsers by changing cookie settings. However, please note that changing cookie settings may affect the use of certain services such as automatic website login.
* Blocking/allowing personalized advertisements through web browsers
(1) Internet Explorer (Internet Explorer 11 for Windows 10) - Select Tools → Internet Options - Select the Privacy tab and choose Advanced in Settings. Then select Block or Allow for cookies.
(2) Microsoft Edge - Click the '...' icon in the top right corner of Edge, then click Settings. - On the Settings page, click 'Privacy, search, and services' on the left side. In the "Tracking prevention" section, choose whether to enable tracking prevention and select the level. - Select whether to always use "Strict" tracking prevention when searching in InPrivate mode. - In the "Privacy" section below, choose whether to send "Do Not Track" requests.
(3) Chrome browser - Click the '⋮' icon (Customize and control Chrome) in the top right corner of Chrome, then click Settings. - At the bottom of the Settings page, click 'Advanced' to display advanced settings. In the "Privacy" section, click Content settings. - In the Cookies section, select the checkbox for "Block third-party cookies and site data.

9.6 Log Analysis through Google Analytics
Nespresso utilizes Google Analytics, a web and app log analysis tool provided by Google, Inc. ("Google"). Log analysis refers to the analysis of customer service usage patterns on the website. Google processes information on behalf of Nespresso and analyzes the usage of your website. No personally identifiable information is processed during this process.
[Refusal Method]
- You can refuse Google's information processing by downloading and installing additional features for your web browser from tools.google.com/dlpage/gaoptout.

9.7 Collection of Advertising Identifiers (ADID/IDFA) in Mobile Apps
Nespresso may collect ADID/IDFA, which are advertising identifiers for mobile app users. These identifiers may be collected for personalized service provision or measurement for better advertising experiences.
[Refusal Method]
- iOS: Settings > Privacy > Advertising > Limit Ad Tracking
- Android: Settings > Google (Google Settings) > Ads > Opt out of Ads Personalization

10. Matters concerning provision of personal information to third parties

In principle, Nespresso does not disclose users' personal information to the outside. However, the following cases are exceptions:

When the user who is the subject of personal information agrees to provide in advance
In accordance with the provisions of the law or at the request of an investigative agency for the purpose of investigation in accordance with the procedures and methods specified in the law
When the information subject or its legal representative is in a state where it is not possible to express his or her intention, or when prior consent cannot be obtained due to an unknown address, etc. and it is clearly deemed necessary for the benefit of the imminent life, body or property of the information subject or a third party

11. Transfer of personal information to overseas

As a multinational brand, Nespresso maintains a database within various jurisdictions. Nespresso may transfer your data to destinations located outside of your country of residence, i.e. to one of these databases, a member of the Nespresso group, or to a partner that has agreed to keep your data confidential and secure. Nespresso guarantees that the data sent to the database in that country will be protected at the same level, and will strive to prevent data from being transferred to third parties in these countries. By providing your data, you are considered to be expressly consenting to the transfer of personal data outside the country for this purpose, which may result in data transfers to Nespresso Group affiliates/partners. You have the option to refuse the transfer of personal information overseas during the membership registration process. However, if you choose to refuse consent, your membership registration may be denied, and Nespresso services and family services cannot be provided.
Its specific details are as follows.

Personal Information Items Transferred	Transferred to Country	Date of Transfer	Transfer Method	Recipient Entity	Recipient Entity's Data Protection Officer	Purpose of Recipient Entity's Use	Retention Period of Transferred Personal Information
Name, Email, Phone Number, Address	Switzerland	Immediately upon registration	Electronic transfer to overseas	Nestle Nespresso S.A.	Flecq Olivier (Data Protection Manager) (Contact: dataprotectionoffice@nestle.com / +41 27 617 22 70)	Contract performance and service provision for Nespresso Club membership, fee settlement, member management, and customer claim handling	Until member withdrawal or dormant accounts, which is 5 years.
Card Number, Card Expiry Date, Cardholder Name, First 2 Digits of Card's PIN, Birthdate (8 digits) or Business Registration Number	Netherlands	When storing credit card information	Electronic transfer to overseas	ADYEN B.V.	Mariette Swart (Mariette.Swart@adyen.com)	Credit card payment intermediary services	5 years
Card Number, Card Expiry Date, Cardholder Name	USA and UK	Upon payment/cancellation	Electronic transfer to overseas	Cybersource	Hyungki Lee (hyoyi@visa.com)	Contract performance for product supply and payment collection	5 years
Name, Address, Phone Number	Netherlands	Upon order confirmation/cancellation	Electronic transfer to overseas	Microsoft Azure	Scott McLean (Privacy Officer for all EU regions)	Storage of order details in electronic document format	5 years
Name, Email, IP Address, Individual Device ID	UK, Ireland	Upon email subscription and throughout user journey on the website (browser information)	Electronic transfer to overseas	SaleCycle	Andrew Elves (andrew.elves@salecycle.com) Ashley Nokes (ashley.nokes@salecycle.com)	Email delivery service for marketing purposes	13 months
Customer Call Recording Data, Name, Email, Phone Number, Address	Switzerland	Immediately upon call completion	Electronic transfer to overseas	Nestle Nespresso S.A.	Flecq Olivier (Data Protection Manager) (Contact: dataprotectionoffice@nestle.com / +41 27 617 22 70)	Quality or educational purposes (payment card information is not recorded, prior notice is given for call recording when the call starts if required by law)	2 years
Club member ID, name, mobile phone number, online identifiers including internet protocol address (GA cookie ID), partner-provided identifier (ECID), cookie or ad ID, content ID and content, client identifier, address, Nespresso product serial number, browser usage history (customer action information)	Amsterdam, Netherlands	Immediately upon registration	Electronic transfer to overseas	Adobe	Vincent Rezzouk-Hammachi (dpo@adobe.com)	Customer matching targeting and ad exposure, App push notification message sending, Email sending, Marketing activities (email, phone, mail, SMS, app push)	18 months

12. Personal Information Management Officer and Related Departments

Nespresso has designated the following departments and Personal Information Management Officer to protect users' personal information and handle complaints related to personal information.

[Nestle Korea Chief of Privacy Officer]

Name: Hwang, Sanghyun

Email Address : DataPrivacy@kr.nestle.com

[Nespresso Business Unit - Personal Information Complaint Handling Department]

Nespresso Club

Phone Number: (Home Use) 080-734-1111, (Professional Use) 080-734-1113

If you need to report or consult about other personal information infringement, please contact the following organizations.

Personal Information Infringement Report Center (Korea Internet & Security Agency) - privacy.kisa.or.kr / 118(no area code required)
Cyber Investigation Department of the Korean National Police Agency - police.go.kr / 182(no area code required)
Cyber Investigation Division of the Supreme Prosecutors' Office - www.spo.go.kr / 1301 (no area code required)
Personal Information Dispute Resolution Committee - www.kopico.go.kr / 1833-6972 (no area code required)

13. Notification obligations due to policy changes

Nespresso Privacy Policy was enacted on June 1, 2014, and in the event of addition, deletion, or modification of the contents according to changes in laws, policies or technologies, we will notify the changed Privacy Policy through the brand homepage.

Privacy Policy Last updated: March 28, 2024
Privacy Policy Effective Date: June 1, 2014
Previous Privacy Policy History

Privacy Policy | Customer Service | Nespresso Professional