privacy notice

To enter this competition we ask for one thing: your email address. We use it to run the draw and to tell you if you have won. We do not use it for marketing, we do not share it with anyone outside the parties named below, it does not leave the EU, and we delete it once the competition is over.

The data controller is Scandinavian Cosmetics AB, The Point, Hyllie Stationstorg 31, 215 32 Malmö, Sweden. It decides why and how your email address is used, and is referred to below as “we”.

Calvin Klein is the brand this competition promotes. The company responsible for your data is the one named above.

For anything in this notice, or to exercise any of the rights below, write to competition@scandinaviancosmetics.com.

Your email address, the ingredient you chose, the fact that you ticked the consent box, and the date and time you entered. That is the complete list.

We do not collect your name, your phone number, your address, your age, your location or your IP address. There are no analytics, no advertising tags, no tracking pixels and no third-party scripts on this site.

The only thing stored on your device is a single marker recording that this device has already entered, so that returning to the page shows the confirmation screen rather than an empty form. It holds no personal data, it is not a cookie, and it is never sent to us.

For one purpose only: to administer this competition and to contact you if you win.

The legal basis is your consent, given by ticking the box on the entry form (Article 6(1)(a) GDPR). The box is never pre-ticked, and entry is not possible without it — without a way to reach you we could not award a prize.

You can withdraw consent at any time by writing to competition@scandinaviancosmetics.com. Withdrawing does not affect anything already done, but because your email address is the only way we can identify and reach a winner, withdrawing before the draw means your entry has to be removed from the competition.

Winners are selected automatically. Everyone who chose the correct ingredient on a given festival day goes into that day’s draw, and one is selected at random by computer. The selection uses a recorded random seed, so the result can be re-checked afterwards by an independent party.

There is no profiling. Nothing about you affects the outcome beyond whether your answer was correct, and we do not score, rank or categorise you in any way.

Two service providers handle it on our behalf, each acting as a processor on our instructions and under a data processing agreement:

Supabase — hosts the database. Stored in the EU, Stockholm region.
Vercel — hosts the website. Runs in the EU, Stockholm region.

Nobody else receives it. We do not sell it, rent it, pass it to Calvin Klein or to any other company for their own purposes, or give it to any advertising or analytics provider.

Inside the European Union. Your email address is not transferred outside the EU or the EEA.

Both providers store and process it in the EU. Where a provider’s support staff outside the EEA can reach EU-hosted data in the course of supporting the service, that access is governed by the European Commission’s Standard Contractual Clauses under our data processing agreement with that provider. No other transfer outside the EEA takes place.

Until the competition has finished and the prizes have been awarded, and then for 90 days so that we can answer any question about how the draw was run. After that, entries are deleted. In practice that means all entries are deleted by 13 November 2026.

A record of each draw is kept for the same 90 days so the result stays verifiable. That record contains the entries that were in the draw, and is deleted on the same schedule.

Under the GDPR you have the right to:

— ask what we hold about you, and get a copy
— have it corrected if it is wrong
— have it deleted
— ask us to restrict how we use it
— object to our use of it
— receive it in a portable, machine-readable form
— withdraw your consent at any time

Write to competition@scandinaviancosmetics.com and we will respond within one month.

If you are not satisfied with how we have handled your data you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy.se. You may also complain to the supervisory authority where you live or work.

No. Entering is entirely voluntary. If you would rather not give us your email address, simply do not enter — nothing else on this page depends on it.

If this notice changes, the new version will be published here. This version is dated 10 August 2026.

The rules of the competition are set out separately in the competition terms.