Glossary
Applicable Data Protection Laws
These are rules that protect people’s personal information. They make sure companies and organizations handle data safely, respect privacy, and don’t share or misuse it. Some well-known examples include, GDPR in Europe, LGPD in Brazil, PDPA in Singapore, and CCPA in California.
Controller
Is the individual or legal entity which, alone or jointly with others, determines the purposes and means of processing Personal Data.
Cookies
Cookies and similar tracking technologies (web beacons, gifs, pixels, and tags) are types of small, invisible technologies that are used by us and our technology partners on our websites, apps, and/or emails, and may automatically collect data when you use our Services. Except where allowed by applicable law, we place cookies and similar tracking technologies after having received your consent.
Data Processing
It’s anything done with personal info—such as collecting it, saving it, changing it, sharing it, or deleting it. Basically, it covers all the ways data can be handled or used.
Data Protection Authorities
The designated regulatory body established under the applicable legal privacy framework.
Data Protection Officer (DPO)
This is the person in a company who helps make sure privacy rules are followed. They give advice on data protection laws, help create company policies, and talk to privacy regulators if needed.
Data Subject
An identified or identifiable natural person, alive or deceased, to whom the Personal Information relates
IP Address
It’s a number that is automatically assigned to your computer by your Internet Service Provider. Collecting IP addresses is standard practice and is done automatically by many online services. We use IP addresses for purposes such as calculating Service usage levels, diagnosing server problems, personalized advertising, and administering the Service. We may also derive your approximate location from your IP address.
Opt-in
It’s when someone chooses to take part in something that uses their personal info—like signing a form, checking a box, or saying yes to getting emails.
Opt-out
It’s when someone chooses not to take part or decides to stop letting their personal info be used—like unsubscribing from emails or turning off data sharing.
Personalized Advertising
It’s a type of online advertising that’s tailored to people based on things like their interests, preferences, location, or online activity—so the ads feel more relevant to them on other websites. For example, if you frequently visit websites related to a particular subject, you may see more advertisements related to that subject on other websites. Personalized advertising may also be referred to as “internet-based”, “interest-based”, “data-driven”, “behavioral”, or “cross-context” advertising.
Profiling
It’s when personal information is used to figure things out about someone—like how they work, what they like, how healthy they are, or where they go—so decisions or predictions can be made about them.
Third-Party
It’s any group, company, or government agency outside of Kenvue and its related businesses.