McArthurGlen Privacy & Cookies Policy – July 20221

 

At McArthurGlen, we take the privacy of your data seriously. We understand that by providing your personal information - whether through our website, using our WIFI or at our outlet centres – you are trusting us with your information.

 

We have developed this policy to give you full transparency about the information we collect from you, why we collect it and how we use it. We also need to ensure that you understand the rights you have over your personal data, including your rights of access to that data, how you can correct it and, if necessary, how you can erase it.

 

If you wish to learn more about the data we hold, including your rights, please click on the sections below:

 

 

Policy Introduction

 

This website (“Site”) is controlled and operated by McArthurGlen UK Limited (referred to in this Privacy Policy as "McArthurGlen", "we", "us" or "our").

 

McArthurGlen develops and manages designer outlet centres across the UK and Europe. We work with our other Group Companies to provide services at these centres and to facilitate and enhance your experience at these centres and on this Site.

 

This Privacy Policy ("Policy") explains what personal information we and our Group Companies collect and record about you and what we do with that information, including when you visit this Site. It set outs a description of your data protection rights, including your right to object to some of the processing which we carry out. This Policy also explains what personal information we collect and record on our in-centre computers and devices and in certain cases offline, and what we do with that information. Annexed to this Policy is additional information that relates specifically to the personal information we collect and record when you use WiFi provided by us and via our Group Companies (“WiFi Annex”). Please read this Policy carefully.

 

For the purposes of this Policy: “Group Company” means our parent company and any subsidiaries of our parent company, including us. This includes our subsidiary management companies operating in each of our locations. A list of these Group Companies and their locations can be found at the end of this Policy. We may change this list from time to time; "Centre Owner" means an owner of one of the designer outlet centres which we manage (“Centre”).

 

The information we collect

We collect, receive, store and process the following information about you:

 

· information that you provide via the Site or our mobile apps, including the McArthurGlen Club app ("apps"), including information you provide when you register with or use the Site or apps (e.g. name, address, telephone numbers, email address, preferred centre, interests and date of birth), join our Privilege Club (our exclusive club where you can sign up to keep up to date with our latest news, events and offers) or the replacement for Privilege Club, known as McArthurGlen Club, purchase a gift card, enter into competitions or complete surveys;

· information that you provide to us for the purpose of subscribing to direct marketing;

· information about your computer or mobile device and about your visits to and use of this Site or our apps, such as Internet Protocol (IP) addresses, geolocation, date and time that

you visited the Site or apps, the type of Internet browser and computer operating system, referral source, length of visit, page views and website or app navigation paths;

· information relating to any purchases you make via our Site or apps (e.g. gift cards) or any other transactions that you enter into through our Site or apps (including your name, address, telephone number, email address, card details and transaction history);

· information contained in or relating to any communications that you send to us or send through our Site or apps (including the communication content and meta data associated with the communication);

· information we obtain from private social media companies (see also Social Media below) including from outside the European Union, about your interests and preferences;

· information as set out in the 'Cookies and similar technologies' section below;

· information collected through transactions or interactions offline or on our in-centre computers or devices, including information you provide when signing up to our Privilege Club or the replacement for Privilege Club, known as McArthurGlen Club, when purchasing gift cards, when completing surveys, entering into competitions and when using in-centre computers and devices;

· information about which brands you have visited if you use one of our apps to scan a QR code in-store or you are logged into McArthurGlen Club when you do so;

· information about which e-mails from us you open;

· information about your postcode when you register with us (e.g. for McArthurGlen Club) so that we know how far you travel to our Centres and your likelihood of visiting a particular Centre; and

· information described in the WiFi Annex.

 

Use of your information

 

We use your personal information for the following purposes:

 

· to administer our Site and apps, business and the Centres;

· to enable your use of the products and services available on our Site and apps or otherwise made available offline or on our in-centre computers and devices;

· to provide and administer our Privilege Club or the replacement for Privilege Club, known as McArthurGlen Club, including to personalise and improve the service you receive through these programmes (e.g. birthday offers, promotions at your local Centre);

· to manage and run competitions or offers;

· to confirm orders and fulfil orders placed on our Site or apps;

· to respond to your questions or requests for additional information and communicate with you about the Site or apps and the Centres;

· to provide you with information that you have specifically requested or that we have asked if you would like to receive;

· for internal research and analysis so that we can see how our Site, apps and the Centres’ and/or our Group Companies' products and services are being used, understand how we can improve our Site or apps and the Centres’ and/or our Group Companies' products and services and decide our and our Group Companies’ marketing strategies;

· to deal with enquiries and complaints made by or about you relating to us, our Site or apps and the Centres;

· to keep our Site, apps and systems secure and prevent fraud;

· where relevant, to meet legal, regulatory and compliance requirements;

· where relevant, for the establishment, exercise or defence of legal claims;

· to monitor and analyse the use of any account to prevent, investigate and/or report security incidents or crime;

· verify compliance with the terms and conditions governing the use of our Site, apps and in-centre computers and devices;

· to protect the rights, property, or safety of us, Group Companies, our customers, Centre Owners or others;

· to understand your interests and preferences so we can tailor the content, offers and promotions we surface on our Site or apps to better match your interests and preferences – see also our Cookie Policy

· to understand and identify the features of our customer base for insight purposes and in order to better target our advertising (e.g. reaching out to a similar demographic on social media); and

· for the purposes described in the WiFi Annex.

 

We will also inform you from time to time of other products and/or services we offer which we consider may be of interest to you by email / phone / SMS / post, where permitted by applicable law (which may require that we obtain your consent). As well as unsubscribing within communications, you may email us at any time at preferences@mcarthurglen.com to indicate that you do not want to receive direct marketing communications from us.

 

We may combine information we collect about you through transactions or interactions offline or on our in-centre terminals or our email and SMS communications with the customer profile we hold about you in order to tailor our subsequent communications and communication channels to better match your interests and preferences and provide you with a better customer experience.

 

Social Media

 

We also use personal information we obtain from social media sites online including, Facebook, Instagram, Twitter, YouTube and TripAdvisor for our (and our businesses’) research and analytics purpose. Where appropriate, and in line with their own policies, we may match information from these sites to better understand, and improve, our customers' experience. This includes posts or other information made public or made available to us where you use hashtags or tags relating to us, our Group Companies, our business, the Centre Owners, the Centres and our industry. Information from these sites may include information which has been held outside the European Union.

 

 

Information Sharing

We disclose or transfer personal information to other parties as follows:

 

· to any Group Company for the purposes identified in this Policy, including those uses set out above (a list of our Group Companies and their locations can be found at the end of this Policy);

· to third party service providers that perform functions on our behalf in relation to the Site and apps or our Centres and for the purposes set out in this Policy (for example, website hosting, social media analysis providers, marketing email service providers, data analysts website developers);

· media agencies and their advertising partners in order to run targeted marketing campaigns as described above;

· if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions or other agreements or to protect the rights, property, or safety of McArthurGlen, the Group Companies, our customers, or others;

· to government authorities, and to other third parties when compelled to do so by government and law enforcement authorities or otherwise as required or permitted by law, including but not limited to in response to court orders and subpoenas. We also disclose user information when we have reason to believe that someone is causing injury to or interference with our rights or property, other users of our site, or anyone else that could be harmed by such activities. Additionally, we cooperate with law enforcement inquiries and other third parties to enforce laws, intellectual property rights and other rights;

· to sellers or buyers as part of a sale or merger of our business or assets;

· in compliance with and to the extent permitted by data protection regulation, to an applicable Centre Owner or one of its group companies or to buyers as part of a sale or merger of a Centre Owner or Centre. In addition, if we or one of our Group Companies ceases the role as a manager of a designer outlet centre, we will need to transfer your personal data to the Centre Owner or the replacement manager to ensure the continuity of our, or our relevant Group Company's products and services; and

· as described in the WiFi Annex.

In addition, with your consent where required by law, we share your personal information with carefully selected third parties so that they can send you information about special promotions and offers.

 

We also share information about visitors to this Site and our apps in an anonymous or aggregate form with third parties including advertisers, business partners, and sponsors, to understand customer trends and patterns and manage and improve our business relationships.

 

If you would like a list of the third parties with whom we share personal information, please contact, Data Protection Officer, McArthurGlen@dataprotectionpeople.com

 

 

Cookies and Similar Technologies

We are committed to ensuring that your privacy is protected. We aim to be as open and transparent as possible around the information we collect when you visit our Site and apps, including through the use of "cookies".

 

This section explains what cookies are and how we use them. It also explains the different types of cookies we use, and how you can change or delete them. We hope that this helps you understand and feel more confident about our use of cookies. If you have any further queries, please contact Data Protection Officer, McArthurGlen@dataprotectionpeople.com

 

What are Cookies?

 

Cookies are small pieces of information sent by a web server to a web browser which allows the server to uniquely identify the browser on each page.

 

We also use other tracking technologies, which are similar to cookies. This can include pixel tags and tracking URLs. All these technologies are together referred to in this Cookie Policy as “Cookies”.

 

How do we use Cookies?

 

 

The types of Cookies that we use on our Site and apps, and the purposes for which they are used, are set out below. Note that the Cookies we use are subject to change and that we endeavour to keep our Cookie list up to date.

 

 

· Strictly necessary cookies: These cookies are essential in order to enable you to move around our Site and apps and use their features, such as accessing secure areas of our Site or apps. Without these cookies, any services on our Site or apps you wish to access cannot be provided.

 

· Analytical/performance cookies: These cookies collect information about how you and other visitors use our Site and apps, for instance which pages you go to most often, and if you get error messages from web pages. We use data from these cookies to help test designs and to ensure a consistent look and feel is maintained on your visit to the Site and

apps. All information these cookies collect is aggregated. It is only used to improve how a website works.

 

We use Google Analytics, for example, to anonymously track website and app usage and activity. Google Analytics is a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer or device, to help the website analyse how users use the Site or our apps. The information generated by the cookie about your use of the Site or apps (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. Google will use this information for the purpose of evaluating your use of the Site or apps, compiling reports on website activity and providing other services relating to website activity and internet usage. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this Site. Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en-GB.

 

 

You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this Site. <a href=“javascript:gaOptout()“>Disable Google Analytics</a>.

 

 

Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies/. Please note that on this website, Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking).

 

 

 

· Functionality cookies: These cookies allow our Site or apps to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting. Additionally, these cookies can be used to allow an optional service to function such as offering a live chat session. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.

 

· Targeting cookies: These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.

 

· Social media cookies: These cookies allow you to share what you’ve been doing on our Site or apps on social media such as Facebook and Twitter. These cookies are not within our control. Please refer to the respective privacy policies for how their cookies work.

 

· Pixel tags: Also known as a clear GIF or web beacon. These are invisible tags placed on certain pages of our Site or apps but not on your computer. When you access these pages, pixel tags generate a generic notice of that visit. They usually work in conjunction with cookies, registering when a particular device visits a particular page. If you turn off cookies, the pixel tag will simply detect an anonymous website visit.

 

· Tracking URLs: These are used to determine from which referring website the Site is accessed.

 

 

We require your consent for the use of some Cookies. You can give your consent either by closing the cookie banner displayed on the landing page of our website or by browsing the Site outside the cookie banner and clicking on any of the items on the Site. Please note that we track your consent using a technical Cookie; therefore, in the event you delete any Cookies stored on your devices you will see the Cookie banner once again.

 

If you do not want to allow Cookies at all, or only want to allow use of certain Cookies, please refer to your browser settings. You can also use your browser settings to withdraw your consent to our use of Cookies at any time and delete Cookies that have already been set. Please note that by deleting our cookies or disabling future Cookies you may not be able to access certain areas or features of our Site.

To find out more about Cookies please visit: www.allaboutcookies.org or see www.youronlinechoices.eu which contains further information about behavioural advertising and online privacy.

 

Strictly Necessary

Always active

 

These cookies are essential in order to enable you to move around our Site and use its features, such as accessing secure areas of our Site. Without these cookies, any services on our Site you wish to access cannot be provided.

Name Description Sent From (URL)

ASP.NET_SessionId This cookie is required to identify requests from the same browser during a limited session time window when browsing the website. This cookie is deleted when you close your browser. .mcarthurglen.com

ARRAffinity This cookie is used to route the request made through a web browser to our website to the same machine in our cloud environment. This cookie is deleted when you close your browser. .mcarthurglen.com

EPi:NumberOfVisits This cookie is used to store what the number of times you access pages on our site. It allows us to personalise content on our site based on the frequency .mcarthurglen.com

you have viewed content on our site

.EPiForm_BID This cookie is used when a visitor submits data to us via one of our online forms. This cookie allows us to identify the forms submissions you have made to us. We use this data to personalise content for you on the site .mcarthurglen.com

.EPiForm_VisitorIdentifier This cookie is used when a visitor submits data to us via one of our online forms. This cookie allows us to identify the forms submissions you have made to us. We use this data to personalise content for you on the site .mcarthurglen.com

EPiForm_{xxxxxxxx-xxxx-

xxxx-xxxx-xxxxxxxx}:{xxxxx} This cookie is used when a visitor submits data to us via one of our online forms. This cookie allows us to store any partial form submissions so you can continue with the submission should you return. (The xxx refer to a unique identifier) .mcarthurglen.com

EPI-MAR-{xxxxxxxx-xxxx-

xxxx-xxxx-xxxxxxxx:xx} This cookie is used to record a visitors interaction with our site and any website optimisation test we may have running. The data used in this cookie ensures that a user has a consistent experience. The cookie is removed after the test has completed. Typically our optimisation tests are short-lived (1 week) .mcarthurglen.com

Mcd-Mar-{xxxxxxxx-xxxx-

xxxx-xxxx-xxxxxxxx:xx} This cookie is used to record a visitors interaction with our site and any website optimisation test we may have running. The data used in this cookieis used to record the test version a user saw. The cookie is removed after the test has completed. Typically our optimisation tests are short-lived (1 week) .mcarthurglen.com

__RequestVerificationToken This cookie is used to prevent spam and malicious data input on our site. The cookie ensures that only you can submit data to the form that we show you. .mcarthurglen.com

JSESSIONID This cookie is required to identify requests from the same browser during a limited session time window when browsing the website. This cookie is deleted when you close your browser. We use this cookie to understand how fast our website performs for our users .mcarthurglen.com

NREUM This cookie is used to page and load speeds as experienced in a browser. We use this data to monitor and optimise performance of our website. This cookie is only created in browsers that do not support the Navigation Timing API. When a browser supports the Navigation Timing API, a native interface can be used to determine navigation start time. .mcarthurglen.com

NRAGENT This cookie is used to communicate between the New Relic collector aggregating end user metrics and the agent(s) running in the associated web application. A token identifies and correlates application tier transaction traces with corresponding browser traces. This allows us to collect various performance and applications for how your browser delivers our website .mcarthurglen.com

__cfuid This cookie is used to speed up page loading times and override any security restrictions that may be applied to a browser based on the IP address it is coming from. .mcarthurglen.com

__utma Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics. .mcarthurglen.com

__utmb Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics. .mcarthurglen.com

__utmz Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics. .mcarthurglen.com

__utmv Used to store visitor-level custom variable data. This cookie is created when a developer uses the _setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics. .mcarthurglen.com

_ga This cookie is used to distinguish users .mcarthurglen.com

_gid This cookie is used to distinguish users .mcarthurglen.com

_gat Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id> .mcarthurglen.com

Mcd:Consent This cookie records whether you have seen and dismissed our cookie consent notification. We use the data to prevent the notification being shown to you again. .mcarthurglen.com

Mcd-EntryUrl This cookie is used to store your entry point (url) to our site. This cookie allows us to identify if you have visited the site from one of our digital campaigns (email / advert etc). We use this data to personalise content for you on the site. mcarthurglen.com

Epi:StateMarker This cookie is requires to tell our website whether it can use session functionality to identify request coming from the same browser during a limited session window. This cookie will be deleted when you close your browser .mcarthurglen.com

Mcd:SavedOffers This cookie records the offers you have chosen as your favourites. We use the data to remember your favourite offers across website sessions / visits .mcarthurglen.com

Mcd:MappedInIntroDismiss

 

 

 

 

 

 

 

Mcg:Club:Auth This cookie records whether you have dismissed a pop ul window explaining how to use our online store map. We use this data to stop you seeing the pop up on your next visit to the online map This cookie is required to access functionality where user authentication is needed, e.g. to access McArthurGlen Club features .mcarthurglen.com .mcarthurglen.com

Functionality

Inactive

These cookies allow our Site to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features.

Name Description Sent From (URL)

Mcd:Status This cookie is used to personalise content after you have opted in to our privilege club programme, based on whether you have signed up previously .mcarthurglen.com

Mcd:SignUpDismiss This cookie records whether you have dismissed an on-page notification that we wish to show you. We use the data to prevent the notification being shown to you again. .mcarthurglen.com

Mcd:PopupDismiss-

{xxxxx} This cookie records whether you have dismissed an on-page notification that we wish to show you. We use the data to .mcarthurglen.com

prevent the notification being shown to you again.

Mcd:Loyalty This cookie is used to record whether you have logged into the My Account section of the site. We use the data in the cookie to retrieve the correct details of your participation in our Loyalty program (example - your points balance) .mcarthurglen.com

emergencyNotification This cookie records whether you have dismissed an on-page notification that we wish to show you. We use these notifications to let you know of important news / alerts that may impact your visit to one of our outlets. We use the data to prevent the notification being shown to you again. This cookie is deleted when you close your browser. .mcarthurglen.com

_cfduid This website uses tawk.to, a live chat solution provided by tawk.to Ltd. Tawk.to uses cookies to help us identify and track visitors .mcarthurglen.com

__tawkuuid This website uses tawk.to, a live chat solution provided by tawk.to Ltd. Tawk.to uses cookies to help us identify and track visitors .mcarthurglen.com

TawkConnectionTime This website uses tawk.to, a live chat solution provided by tawk.to Ltd. Tawk.to uses cookies to help us identify and track visitors .mcarthurglen.com

optimizelyEndUserId This cookie is used to record a visitors interaction with our site and any website optimisation test we may have running. You can opt out of Optimizely at the following page https://www.optimizely.com/legal/opt-out/ .mcarthurglen.com

fFbm_{*} These cookies are set by Facebook for application integration and expires within one year. We use these cookie to provide you with a streamlined privilege club signup process. See here for more information on Facebook’s practices at https://www.facebook.com/help/cookies/ .mcarthurglen.com

Analytical/Performance

Inactive

These cookies collect information about how you and other visitors use our Site, for instance which pages you go to most often, and if you get error messages from web pages. We use data from these cookies to help test designs and to ensure a consistent look and feel is maintained on your visit to the Site. All information these cookies collect is aggregated. It is only used to improve how a website works.

Name Description Sent From (URL)

_gac_{property-id} Contains campaign related information for the user. If you have linked your Google Analytics and AdWords accounts, AdWords .mcarthurglen.com

website conversion tags will read this cookie unless you opt-out

_gcl_{*} These cookies are used .mcarthurglen.com

_hjClosedSurveyInvites This cookie is set once a visitor interacts with a Survey invitation modal popup. It is used to ensure that the same invite does not re-appear if it has already been shown. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out .mcarthurglen.com

_hjDonePolls "This cookie is set once a visitor completes a poll using the Feedback Poll widget. It is used to ensure that the same poll does not re-appear if it has already been filled in. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out" .mcarthurglen.com

_hjMinimizedPolls "This cookie is set once a visitor minimizes a Feedback Poll widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out" .mcarthurglen.com

_hjMinimizedTestersWidgets "This cookie is set once a visitor minimizes a Recruit User Testers widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out" .mcarthurglen.com

_hjIncludedInSample "This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out" .mcarthurglen.com

fr This cookie allows us to measure the effectiveness of our online advertisements, provide social features and to analyse traffic to our site. .mcarthurglen.com

dpr This cookie allows us to measure the effectiveness of our online advertisements, .mcarthurglen.com

provide social features and to analyse traffic to our site.

ry_ry_mc4rth2_realytics This cookie allows us to measure the effectiveness of our online advertisements, provide social features and to analyse traffic to our site. .mcarthurglen.com

Allow all Save settings

 

 

Securing your Information

 

We take reasonable steps to protect your personal information as you visit and use the Site and our apps and to protect such information from loss, misuse, unauthorised access, disclosure, alteration or destruction. Unfortunately no data transmission can be guaranteed to be 100% secure. As a result we cannot warrant the security of any information you provide to us and you do so at your own risk.

 

 

Transferring your information

 

You understand and acknowledge that by using this Site and our apps, we collect and use personal information in the UK. We transfer personal information to countries outside the European Economic Area (“EEA”) to our Group Companies and to third parties, including to countries which have different data protection standards to those which apply in the EEA. Our Group Company locations are set out in the 'Our Group Companies' section below. Our service providers include locations in Australia and Canada.

 

Where service providers process your personal information in countries deemed adequate by the European Commission, we rely on the European Commission's decision to protect your personal information,

 

For transfers to Group Companies and service providers outside the EEA, we use standard contractual clauses or rely on a service provider's (EU data protection authority approved) corporate rules that are in place to protect your personal information. You have a right to ask us for a copy of the standard contractual clauses or a copy of the other methods used (by contacting us as set out below).

 

 

Retaining your Data

 

We retain personal information used to send you direct marketing for as long as we can lawfully market to you. Where we no longer have grounds to market to you (e.g. because you opt-out) or the details we hold are no longer up-to-date (e.g. the email address we hold is invalid) we will delete personal information we hold about you from our marketing data base but retain some information on a 'suppression list' on an ongoing basis so we can manage your preferences going forward.

 

Personal information captured for competition purposes, or for the processing of gift cards, is cleansed regularly.

 

 

Legal basis for processing your information

 

We process your personal information with your consent when you agree that we may place Cookies, when you agree to receiving direct marketing or on other occasions where we ask you for

consent, for the purpose which we explain at that time. Where we do process personal information based on consent, your consent is revocable at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

 

We process your personal information when we are required to do this by law, including in response to requests by government or law enforcement authorities conducting an investigation or court orders.

 

We process your personal information when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract. This applies in any case where we provide or deliver products and services to you pursuant to a contract, such as when you have signed up for Privilege Club or its replacement, known as McArthurGlen Club, or when you purchase a gift card, process your registration on the Site or enter into a competition. If you do not provide the personal information that we need in order to provide or deliver the service, we will not be able to provide or deliver services to you.

 

We also process your personal information when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights).

 

 

Your Rights

 

You may ask us for a copy of your information and, where applicable, to correct it, erase it or to transfer it to other organisations at your request. You also have rights to object to some processing and, where we have asked for your consent to process your personal information, to withdraw this consent. Where we process your personal information because we have a legitimate interest in doing so (as explained above), you also have a right to object to this. These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your personal information.

 

We hope that we can satisfy queries you may have about the way we process your personal information. However, if you have unresolved concerns you also have the right to complain to data protection authorities. You can bring the complaint in your member state of residence, place of work or where an alleged infringement of data protection law occurred.

 

To protect your privacy and security we will take reasonable steps to verify your identity when dealing with requests.

 

In relation to France, if you do not wish to be contacted by phone, you can register on the Bloctel opt-out list (for more information, please click here. You also have a right to set down instructions on the management of your personal information after death.

 

 

Changes to this Policy

 

We reserve the right to modify this Policy at any time. Changes to this Policy will be posted on the Site. You should review this Policy frequently.

 

Our Group Companies

Name of entity Country

Outlet Services Holdco Limited Jersey

McArthurGlen Management Gesellschaft m.b.H. Austria

McArthurGlen Management (Belgium) S.P.R.L Belgium

McArthurGlen Management Vancouver Limited Canada

MG-RB Europe SAS France

McArthurGlen Service GmbH Germany

McArthurGlen Management Greece Designer Outlet EPE Greece

MGR Management & Retail Srl Italy

McArthurGlen Management Spain SLU Spain

MGE-RB (Roermond) Management Co B.V. Netherlands

MGE-RB (Rosada) Management Co B.V. Netherlands

McArthurGlen UK Ltd United Kingdom

 

 

Contact Information

 

If you have any queries, comments or requests in relation to your personal information or this Policy, you can email us at McArthurGlen@dataprotectionpeople.com or contact us by post at: Data Protection Officer, McArthurGlen UK Limited, Nations House, 3rd Floor, 103 Wigmore Street, London, W1U 1WH, United Kingdom.

 

 

Wifi Policy

 

Introduction

This Annex to the Privacy & Cookies Policy (“Policy”) relates to your use of a WiFi service (the “WiFi Service”) which is provided by or on behalf of McArthurGlen UK Limited (referred to in this WiFi Annex as "McArthurGlen", "we", "us" or "our") from our venues when you have applied to access or accessed the WiFi Service. This Annex, in addition to the Policy, explains in further detail how we use your personal information we collect and generate when you use the WiFi Service.

For the purposes of this Annex, “Group Company” has the same meaning as set out in the Policy.

 

Information we collect

We collect, receive, store and process the following information about you:

· information that you provide when registering for the WiFi Service (e.g. name, address, telephone numbers, email address and date of birth);

· your device details and MAC address (see below for further information about MAC addresses);

· details about when and where you connect to the WiFi Service including your venue location and the WiFi access point(s) where you are using the WiFi service. This data will be collected automatically by the wireless access point unless your phone/device is switched off or you have switched off WiFi on your phone/device; and

· your communications with us in connection with the WiFi Service.

We will collect your personal information from you and from your use of the WiFi Service, from our WiFi providers and from social media providers if you register using a social media account.

 

A MAC address unique identifier for your device that tells us the make of a device e.g. Samsung or Apple, but it does not tell us your name or phone number, or allow us to access any data held on your device. If your WiFi settings on your mobile device are turned on when you visit one of our locations (including the parking area but no further) then we automatically collect the MAC address from your device. We explain how we use MAC addresses in the next section.

 

Use of your information

In addition to the purposes described in the Policy, we use your personal information for the following purposes:

 

· to provide the WiFi service to you and to enable you to connect to the WiFi Service efficiently on return visits;

· to respond to your questions, requests for additional information, enquiries or complains about the WiFi Service;

· to communicate information about the WiFi Service to you, including changes to the WiFi Service;

· to keep our WiFi Service secure and prevent fraud;

· to monitor and analyse the use of the WiFi Services to prevent, investigate and/or report security incidents or crime;

· to verify compliance with the terms and conditions governing the use of the WiFi Service; and

· for research and analytics of use of the WiFi Service to identify general consumer trends, to understand better customer, consumer and social behaviours and to improve our products and services. We provide aggregated statistics about our sales, customers, traffic patterns to third parties for analytics purposes but these statistics will not include any information that is likely to identify you as an individual.

We use MAC addresses to determine your distance from WiFi sensors located across the location you are visiting. We aggregate this information to create reports on the movement of visitors to our locations. We use this information, for example, to optimise the layout of our locations, design marketing promotions, change staffing hours, or measure the impact of a campaign. You can opt out of having your location data collected at any time by visiting http://optout.mcarthurglen.com. With your consent, we use your location data for the purpose of selecting and sending you marketing offers and alerts which might interest you during your visit to a location.

 

Sharing your information

 

In addition to the disclosures described in the Policy, we disclose or transfer personal information to third party service providers that perform functions on our behalf in relation to the WiFi Services and the purposes set out in this Annex and the Policy. Third party providers of analytics and reporting services include AM Networks Ltd, 77a Cheap Street, Sherborne, Dorset, DT9 3BA; Skyfii Group Pty Ltd, Darlinghurst, New South Wales 2010, Australia; and Aislelabs Inc, 210-43 Hanna Ave, Toronto ON, M6K 1X1, Canada.

 

If you would like a list of the third parties with whom we share personal information, please contact, Data Protection Officer, McArthurGlen@dataprotectionpeople.com

 

Transfers

See the 'Transfers' section of the Policy.

 

Retention

 

We retain information that you provide when registering for the WiFi Service and your device details and MAC address for two years from collection.

 

Legal basis for processing

 

We process your personal information when we are required to do this by law, including in response to requests by government or law enforcement authorities conducting an investigation or court orders.

 

If it is mandatory for you to provide personal information, we will make this clear at the time and will also explain what will happen if you do not provide the information.

 

We process your personal information when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract (for example, when we provide or deliver services to you pursuant to a contract). If you do not provide the personal information that we need in order to provide or deliver the WiFi Service, we will not be able to provide or deliver WiFi Services to you.

 

We process your personal information when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights).

 

Where we do process personal information based on consent, your consent is revocable at any time.

 

Your rights

 

See the ‘Your rights’ section of the Policy.

 

Contact

 

The contact details of our Data Protection Officer are as follows: Data Protection Officer, McArthurGlen@dataprotectionpeople.com

 

Changes to this Policy

 

We reserve the right to modify this Annex at any time. Changes to this Annex will be posted on the Site or on WiFi Service log-in or registration pages. You should review this Policy frequently.