Skip to main content

Glossary

Applicable Data Protection Laws

These are rules that protect people’s personal information. They make sure companies and organizations handle data safely, respect privacy, and don’t share or misuse it. Some well-known examples include, GDPR in Europe, LGPD in Brazil, PDPA in Singapore, and CCPA in California.

Controller

Is the individual or legal entity which, alone or jointly with others, determines the purposes and means of processing Personal Data.

Cookies

Cookies and similar tracking technologies (web beacons, gifs, pixels, and tags) are types of small, invisible technologies that are used by us and our technology partners on our websites, apps, and/or emails, and may automatically collect data when you use our Services. Except where allowed by applicable law, we place cookies and similar tracking technologies after having received your consent.

Data Processing

It’s anything done with personal info—such as collecting it, saving it, changing it, sharing it, or deleting it. Basically, it covers all the ways data can be handled or used.

Data Protection Authorities

The designated regulatory body established under the applicable legal privacy framework.

Data Protection Officer (DPO)

This is the person in a company who helps make sure privacy rules are followed. They give advice on data protection laws, help create company policies, and talk to privacy regulators if needed.

Data Subject

An identified or identifiable natural person, alive or deceased, to whom the Personal Information relates

IP Address

It’s a number that is automatically assigned to your computer by your Internet Service Provider. Collecting IP addresses is standard practice and is done automatically by many online services. We use IP addresses for purposes such as calculating Service usage levels, diagnosing server problems, personalized advertising, and administering the Service. We may also derive your approximate location from your IP address.

Opt-in

It’s when someone chooses to take part in something that uses their personal info—like signing a form, checking a box, or saying yes to getting emails.

Opt-out

It’s when someone chooses not to take part or decides to stop letting their personal info be used—like unsubscribing from emails or turning off data sharing.

Personalized Advertising

It’s a type of online advertising that’s tailored to people based on things like their interests, preferences, location, or online activity—so the ads feel more relevant to them on other websites. For example, if you frequently visit websites related to a particular subject, you may see more advertisements related to that subject on other websites. Personalized advertising may also be referred to as “internet-based”, “interest-based”, “data-driven”, “behavioral”, or “cross-context” advertising.

Profiling

It’s when personal information is used to figure things out about someone—like how they work, what they like, how healthy they are, or where they go—so decisions or predictions can be made about them.

Third-Party 

It’s any group, company, or government agency outside of Kenvue and its related businesses.