privacy notice

Calvin Klein is the data controller for this competition and decides how your email address is used. The controller is [full legal entity name and registered address to be confirmed], and can be contacted at [privacy contact address to be confirmed].

Your email address, and the ingredient you chose. That is the whole of it.

We do not ask for your name, your phone number, your age, your address or anything else, so we do not hold any of them. Your email address is the only way we can reach you, which is why it is the one thing we ask for.

There is no analytics on this page, no advertising or tracking pixels, no third-party scripts and no cookies.

The page saves a single flag in your browser’s local storage to remember that this device has already entered, so you are not asked to enter twice. It records nothing about you, it is never sent anywhere, and clearing your browser data removes it.

Solely to administer this competition and to contact the winners. Your answer is used only to work out whether your entry goes into that day’s draw.

We will not use your address for marketing, we will not add you to a mailing list, and we will not sell it or pass it to anyone beyond the parties running this competition. [Lawful basis under GDPR Article 6 to be confirmed by CK legal; the entry form asks for consent].

In the European Union. The entry database and the application that writes to it are both hosted in EU regions. [Named processors, and confirmation that no personal data is transferred outside the EU and EEA, to be confirmed].

[Retention period to be confirmed. Placeholder: entries are deleted no later than 90 days after the last day of the festival, once the winners have received their prize]. After that nothing about your entry remains, other than an anonymous record that the draw was run.

Email [privacy contact address to be confirmed] from the address you entered with, and ask us to delete your entry. We will delete it and confirm that we have.

Deleting your entry before the draw takes you out of the competition — if your address is not there, it cannot be drawn.

You can also ask for a copy of what we hold, ask us to correct it, ask us to restrict or stop using it, and withdraw your consent at any time. If you are not satisfied with how we have handled your data you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

• The controller entity, its registered address and a contact route
• Whether an EU representative or data protection officer must be named
• The lawful basis, and whether consent as collected on the form meets it
• The retention period, and who deletes the data when it expires
• The processors to be named, and whether any of them place data outside the EU and EEA
• A minimum age for entrants, and how it is handled if a child enters
• Whether this notice must also be published in Swedish

[Not yet published — draft, undated]. This notice sits alongside the competition terms, which are also in draft.