개인보호정책

At McArthurGlen, we take the privacy of your data seriously. We understand that by providing your personal information - whether through our website, using our WIFI or at our outlet centres – you are trusting us with your information.

We have developed this policy to give you full transparency about the information we collect from you, why we collect it and how we use it. We also need to ensure that you understand the rights you have over your personal data, including your rights of access to that data, how you can correct it and, if necessary, how you can erase it..

If you wish to learn more about the data we hold, including your rights, please click on the sections below:

Policy Introduction

This website (“Site”) is controlled and operated by McArthurGlen UK Limited (referred to in this Privacy Policy as "McArthurGlen", "we", "us" or "our").

McArthurGlen develops and manages designer outlet centres across the UK and Europe. We work with our other Group Companies to provide services at these centres and to facilitate and enhance your experience at these centres and on this Site.

This Privacy Policy ("Policy") explains what personal information we and our Group Companies collect and record about you and what we do with that information, including when you visit this Site. It set outs a description of your data protection rights, including your right to object to some of the processing which we carry out. This Policy also explains what personal information we collect and record on our in-centre computers and devices and in certain cases offline, and what we do with that information. Annexed to this Policy is additional information that relates specifically to the personal information we collect and record when you use WiFi provided by us and via our Group Companies (“WiFi Annex”). Please read this Policy carefully.

For the purposes of this Policy: “Group Company” means our parent company and any subsidiaries of our parent company, including us. This includes our subsidiary management companies operating in each of our locations. A list of these Group Companies and their locations can be found at the end of this Policy. We may change this list from time to time; "Centre Owner" means an owner of one of the designer outlet centres which we manage (“Centre”).

The information we collect

We collect, receive, store and process the following information about you:

information that you provide via the Site, including information you provide when you register with the Site (e.g. name, address, telephone numbers, email address and date of birth), join our Privilege Club (our exclusive club where you can sign up to keep up to date with our latest news, events and offers), purchase a gift card, enter into competitions or complete surveys;
information that you provide to us for the purpose of subscribing to direct marketing;
information about your computer and about your visits to and use of this Site, such as Internet Protocol (IP) addresses, date and time that you visited the Site, the type of Internet browser and computer operating system, referral source, length of visit, page views and website navigation paths;
information relating to any purchases you make via our Site (e.g. gift cards) or any other transactions that you enter into through our Site (including your name, address, telephone number, email address, card details and transaction history);
information contained in or relating to any communications that you send to us or send through our Site (including the communication content and meta data associated with the communication);
information we obtain from private social media companies (see also Social Media below) including from outside the European Union, about your interests and preferences;
information as set out in the 'Cookies and similar technologies' section below;
information collected through transactions or interactions offline or on our in-centre computers or devices, including information you provide when signing up to our Privilege Club, when purchasing gift cards, when completing surveys, entering into competitions and when using in-centre computers and devices; and
information described in the WiFi Annex.

Use of your information

We use your personal information for the following purposes:

to administer our Site, business and the Centres;
to enable your use of the products and services available on our Site or otherwise made available offline or on our in-centre computers and devices;
to provide and administer our Privilege Club;
to manage and run competitions or offers;
to confirm orders and fulfil orders placed on our Site;
to respond to your questions or requests for additional information and communicate with you about the Site and the Centres;
to provide you with information that you have specifically requested or that we have asked if you would like to receive;
for internal research and analysis so that we can see how our Site and the Centres’ and/or our Group Companies' products and services are being used, understand how we can improve our Site and the Centres’ and/or our Group Companies' products and services and decide our and our Group Companies’ marketing strategies;
to deal with enquiries and complaints made by or about you relating to us, our Site and the Centres;
to keep our Site and systems secure and prevent fraud;
where relevant, to meet legal, regulatory and compliance requirements;
where relevant, for the establishment, exercise or defence of legal claims;
to monitor and analyse the use of any account to prevent, investigate and/or report security incidents or crime;
verify compliance with the terms and conditions governing the use of our Site and in-centre computers and devices;
to protect the rights, property, or safety of us, Group Companies, our customers, Centre Owners or others;
to understand your interests and preferences so we can tailor the content, offers and promotions we surface on our Site to better match your interests and preferences – see also our Cookie Policy
to understand and identify the features of our customer base for insight purposes and in order to better target our advertising (e.g. reaching out to a similar demographic on social media); and
for the purposes described in the WiFi Annex.

We will also inform you from time to time of other products and/or services we offer which we consider may be of interest to you by email / phone / SMS / post, where permitted by applicable law (which may require that we obtain your consent). As well as unsubscribing within communications, you may email us at any time at preferences@mcarthurglen.com to indicate that you do not want to receive direct marketing communications from us.

We may combine information we collect about you through transactions or interactions offline or on our in-centre terminals or our email and SMS communications with the customer profile we hold about you in order to tailor our subsequent communications and communication channels to better match your interests and preferences and provide you with a better customer experience.

Social Media

We also use personal information we obtain from social media sites online including, Facebook, Instagram, Twitter, YouTube and TripAdvisor for our (and our businesses’) research and analytics purpose. Where appropriate, and in line with their own policies, we may match information from these sites to better understand, and improve, our customers' experience. This includes posts or other information made public or made available to us where you use hashtags or tags relating to us, our Group Companies, our business, the Centre Owners, the Centres and our industry. Information from these sites may include information which has been held outside the European Union.

Information Sharing

We disclose or transfer personal information to other parties as follows:

to any Group Company for the purposes identified in this Policy, including those uses set out above (a list of our Group Companies and their locations can be found at the end of this Policy);
to third party service providers that perform functions on our behalf in relation to the Site and the purposes set out in this Policy (for example, website hosting, social media analysis providers, marketing email service providers, data analysts website developers);
media agencies and their advertising partners in order to run targeted marketing campaigns as described above;
if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions or other agreements or to protect the rights, property, or safety of McArthurGlen, the Group Companies, our customers, or others;
to government authorities, and to other third parties when compelled to do so by government and law enforcement authorities or otherwise as required or permitted by law, including but not limited to in response to court orders and subpoenas. We also disclose user information when we have reason to believe that someone is causing injury to or interference with our rights or property, other users of our site, or anyone else that could be harmed by such activities. Additionally, we cooperate with law enforcement inquiries and other third parties to enforce laws, intellectual property rights and other rights;
to sellers or buyers as part of a sale or merger of our business or assets;
in compliance with and to the extent permitted by data protection regulation, to an applicable Centre Owner or one of its group companies or to buyers as part of a sale or merger of a Centre Owner or Centre. In addition, if we or one of our Group Companies ceases the role as a manager of a designer outlet centre, we will need to transfer your personal data to the Centre Owner or the replacement manager to ensure the continuity of our, or our relevant Group Company's products and services; and
as described in the WiFi Annex.

In addition, with your consent where required by law, we share your personal information with carefully selected third parties so that they can send you information about special promotions and offers.

We also share information about visitors to this Site in an anonymous or aggregate form with third parties including advertisers, business partners, and sponsors, to understand customer trends and patterns and manage and improve our business relationships.

If you would like a list of the third parties with whom we share personal information, please contact, Data Protection Officer, McArthurGlen@dataprotectionpeople.com

Transferring your information

You understand and acknowledge that by using this Site, we collect and use personal information in the UK. We transfer personal information to countries outside the European Economic Area (“EEA”) to our Group Companies and to third parties, including to countries which have different data protection standards to those which apply in the EEA. Our Group Company locations are set out in the 'Our Group Companies' section below. Our service providers include locations in Australia and Canada.

Where service providers process your personal information in countries deemed adequate by the European Commission, we rely on the European Commission's decision to protect your personal information,

For transfers to Group Companies and service providers outside the EEA, we use standard contractual clauses or rely on a service provider's Privacy Shield certification or a service provider's (EU data protection authority approved) corporate rules that are in place to protect your personal information. You have a right to ask us for a copy of the standard contractual clauses or a copy of the other methods used (by contacting us as set out below).

Retaining your Data

We retain personal information used to send you direct marketing for as long as we can lawfully market to you. Where we no longer have grounds to market to you (e.g. because you opt-out) or the details we hold are no longer up-to-date (e.g. the email address we hold is invalid) we will delete personal information we hold about you from our marketing data base but retain some information on a 'suppression list' on an ongoing basis so we can manage your preferences going forward.

Personal information captured for competition purposes, or for the processing of gift cards, is cleansed regularly.

Legal basis for processing your information

We process your personal information with your consent when you agree that we may place Cookies, when you agree to receiving direct marketing or on other occasions where we ask you for consent, for the purpose which we explain at that time. Where we do process personal information based on consent, your consent is revocable at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

We process your personal information when we are required to do this by law, including in response to requests by government or law enforcement authorities conducting an investigation or court orders.

We process your personal information when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract. This applies in any case where we provide or deliver products and services to you pursuant to a contract, such as when you purchase a gift card, process your registration on the Site or enter into a competition. If you do not provide the personal information that we need in order to provide or deliver the service, we will not be able to provide or deliver services to you.

We also process your personal information when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights).

Your Rights

You may ask us for a copy of your information and, where applicable, to correct it, erase it or to transfer it to other organisations at your request. You also have rights to object to some processing and, where we have asked for your consent to process your personal information, to withdraw this consent. Where we process your personal information because we have a legitimate interest in doing so (as explained above), you also have a right to object to this. These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your personal information.

We hope that we can satisfy queries you may have about the way we process your personal information. However, if you have unresolved concerns you also have the right to complain to data protection authorities. You can bring the complaint in your member state of residence, place of work or where an alleged infringement of data protection law occurred.

To protect your privacy and security we will take reasonable steps to verify your identity when dealing with requests.

In relation to France, if you do not wish to be contacted by phone, you can register on the Bloctel opt-out list (for more information, please click here. You also have a right to set down instructions on the management of your personal information after death.

Our Group Companies

Name of entity	Country
Outlet Services Holdco Limited	Jersey
McArthurGlen Management Gesellschaft m.b.H.	Austria
McArthurGlen Management (Belgium) S.P.R.L	Belgium
McArthurGlen Management Vancouver Limited	Canada
MG-RB Europe SAS	France
McArthurGlen Service GmbH	Germany
McArthurGlen Management Greece Designer Outlet EPE	Greece
MGR Management & Retail Srl	Italy
McArthurGlen Management Spain SLU	Spain
MGE-RB (Roermond) Management Co B.V.	Netherlands
MGE-RB (Rosada) Management Co B.V.	Netherlands
McArthurGlen UK Ltd	United Kingdom

Wifi Policy

Introduction

This Annex to the Privacy & Cookies Policy (“Policy”) relates to your use of a WiFi service (the “WiFi Service”) which is provided by or on behalf of McArthurGlen UK Limited (referred to in this WiFi Annex as "McArthurGlen", "we", "us" or "our") from our venues when you have applied to access or accessed the WiFi Service. This Annex, in addition to the Policy, explains in further detail how we use your personal information we collect and generate when you use the WiFi Service.

For the purposes of this Annex, “Group Company” has the same meaning as set out in the Policy.

Information we collect

We collect, receive, store and process the following information about you:

information that you provide when registering for the WiFi Service (e.g. name, address, telephone numbers, email address and date of birth);
your device details and MAC address (see below for further information about MAC addresses);
details about when and where you connect to the WiFi Service including your venue location and the WiFi access point(s) where you are using the WiFi service. This data will be collected automatically by the wireless access point unless your phone/device is switched off or you have switched off WiFi on your phone/device; and
your communications with us in connection with the WiFi Service.

We will collect your personal information from you and from your use of the WiFi Service, from our WiFi providers and from social media providers if you register using a social media account.

A MAC address unique identifier for your device that tells us the make of a device e.g. Samsung or Apple, but it does not tell us your name or phone number, or allow us to access any data held on your device. If your WiFi settings on your mobile device are turned on when you visit one of our locations (including the parking area but no further) then we automatically collect the MAC address from your device. We explain how we use MAC addresses in the next section.

Use of your information

In addition to the purposes described in the Policy, we use your personal information for the following purposes:

to provide the WiFi service to you and to enable you to connect to the WiFi Service efficiently on return visits;
to respond to your questions, requests for additional information, enquiries or complains about the WiFi Service;
to communicate information about the WiFi Service to you, including changes to the WiFi Service;
to keep our WiFi Service secure and prevent fraud;
to monitor and analyse the use of the WiFi Services to prevent, investigate and/or report security incidents or crime;
to verify compliance with the terms and conditions governing the use of the WiFi Service; and
for research and analytics of use of the WiFi Service to identify general consumer trends, to understand better customer, consumer and social behaviours and to improve our products and services. We provide aggregated statistics about our sales, customers, traffic patterns to third parties for analytics purposes but these statistics will not include any information that is likely to identify you as an individual.

We use MAC addresses to determine your distance from WiFi sensors located across the location you are visiting. We aggregate this information to create reports on the movement of visitors to our locations. We use this information, for example, to optimise the layout of our locations, design marketing promotions, change staffing hours, or measure the impact of a campaign. You can opt out of having your location data collected at any time by visiting http://optout.mcarthurglen.com. With your consent, we use your location data for the purpose of selecting and sending you marketing offers and alerts which might interest you during your visit to a location.

Sharing your information

In addition to the disclosures described in the Policy, we disclose or transfer personal information to third party service providers that perform functions on our behalf in relation to the WiFi Services and the purposes set out in this Annex and the Policy. Third party providers of analytics and reporting services include AM Networks Ltd, 77a Cheap Street, Sherborne, Dorset, DT9 3BA; Skyfii Group Pty Ltd, Darlinghurst, New South Wales 2010, Australia; and Aislelabs Inc, 210-43 Hanna Ave, Toronto ON, M6K 1X1, Canada.

If you would like a list of the third parties with whom we share personal information, please contact Data Protection Officer, McArthurGlen@dataprotectionpeople.com

Transfers

See the 'Transfers' section of the Policy.

Retention

We retain information that you provide when registering for the WiFi Service and your device details and MAC address for two years from collection.

Legal basis for processing

If it is mandatory for you to provide personal information, we will make this clear at the time and will also explain what will happen if you do not provide the information.

We process your personal information when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract (for example, when we provide or deliver services to you pursuant to a contract). If you do not provide the personal information that we need in order to provide or deliver the WiFi Service, we will not be able to provide or deliver WiFi Services to you.

We process your personal information when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights).

Where we do process personal information based on consent, your consent is revocable at any time.

Your rights

See the ‘Your rights’ section of the Policy.

Contact

The contact details of our Data Protection Officer are as follows:

Data Protection Officer, McArthurGlen@dataprotectionpeople.com

Changes to this Policy

We reserve the right to modify this Annex at any time. Changes to this Annex will be posted on the Site or on WiFi Service log-in or registration pages. You should review this Policy frequently.

Name	Description	Sent From (URL)
ASP.NET_SessionId	This cookie is required to identify requests from the same browser during a limited session time window when browsing the website. This cookie is deleted when you close your browser.	.mcarthurglen.com
ARRAffinity	This cookie is used to route the request made through a web browser to our website to the same machine in our cloud environment. This cookie is deleted when you close your browser.	.mcarthurglen.com
EPi:NumberOfVisits	This cookie is used to store what the number of times you access pages on our site. It allows us to personalise content on our site based on the frequency you have viewed content on our site	.mcarthurglen.com
.EPiForm_BID	This cookie is used when a visitor submits data to us via one of our online forms. This cookie allows us to identify the forms submissions you have made to us. We use this data to personalise content for you on the site	.mcarthurglen.com
.EPiForm_VisitorIdentifier	This cookie is used when a visitor submits data to us via one of our online forms. This cookie allows us to identify the forms submissions you have made to us. We use this data to personalise content for you on the site	.mcarthurglen.com
EPiForm_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx}:{xxxxx}	This cookie is used when a visitor submits data to us via one of our online forms. This cookie allows us to store any partial form submissions so you can continue with the submission should you return. (The xxx refer to a unique identifier)	.mcarthurglen.com
EPI-MAR-{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx:xx}	This cookie is used to record a visitors interaction with our site and any website optimisation test we may have running. The data used in this cookie ensures that a user has a consistent experience. The cookie is removed after the test has completed. Typically our optimisation tests are short-lived (1 week)	.mcarthurglen.com
Mcd-Mar-{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx:xx}	This cookie is used to record a visitors interaction with our site and any website optimisation test we may have running. The data used in this cookieis used to record the test version a user saw. The cookie is removed after the test has completed. Typically our optimisation tests are short-lived (1 week)	.mcarthurglen.com
__RequestVerificationToken	This cookie is used to prevent spam and malicious data input on our site. The cookie ensures that only you can submit data to the form that we show you.	.mcarthurglen.com
JSESSIONID	This cookie is required to identify requests from the same browser during a limited session time window when browsing the website. This cookie is deleted when you close your browser. We use this cookie to understand how fast our website perfroms for our users	.mcarthurglen.com
NREUM	This cookie is used to page and load speeds as experienced in a browser. We use this data to monitor and optimise performance of our website. This cookie is only created in browsers that do not support the Navigation Timing API. When a browser supports the Navigation Timing API, a native interface can be used to determine navigation start time.	.mcarthurglen.com
NRAGENT	This cookie is used to communicate between the New Relic collector aggregating end user metrics and the agent(s) running in the associated web application. A token identifies and correlates application tiertransaction traces with corresponding browser traces. This allows us to collect various performance and applications for how your browser delivers our website	.mcarthurglen.com
__cfuid	This cookie is used to speed up page loading times and override any security restrictions that may be applied to a browser based on the IP address it is coming from.	.mcarthurglen.com

Name	Description	Sent From (URL)
Mcd-EntryUrl	This cookie is used to store your entry point (url) to our site. This cookie allows us to identify if you have visited the site from one of our digital campaigns (email / advert etc). We use this data to personalise content for you on the site.	.mcarthurglen.com
Mcd:Status	This cookie is used to personalise content after you have opted in to our privilege club programme, based on whether you have signed up previously	.mcarthurglen.com
Mcd:SignUpDismiss	This cookie records whether you have dismissed an on-page notification that we wish to show you. We use the data to prevent the notification being shown to you again.	.mcarthurglen.com
Mcd:PopupDismiss-{xxxxx}	This cookie records whether you have dismissed an on-page notification that we wish to show you. We use the data to prevent the notification being shown to you again.	.mcarthurglen.com
emergencyNotification	This cookie records whether you have dismissed an on-page notification that we wish to show you. We use these notifications to let you know of important news / alerst that may impact your visit to one of our outlets. We use the data to prevent the notification being shown to you again. This cookie is deleted when you close your browser.	.mcarthurglen.com
cookieconsent_status	This cookie records whether you have seen and dismissed our cookie consent notification. We use the data to prevent the notification being shown to you again.	.mcarthurglen.com
_cfduid	This website uses tawk.to, a live chat solution provided by tawk.to Ltd. Tawk.to uses cookies to help us identify and track visitors	.mcarthurglen.com
__tawkuuid	This website uses tawk.to, a live chat solution provided by tawk.to Ltd. Tawk.to uses cookies to help us identify and track visitors	.mcarthurglen.com
TawkConnectionTime	This website uses tawk.to, a live chat solution provided by tawk.to Ltd. Tawk.to uses cookies to help us identify and track visitors	.mcarthurglen.com
optimizelyEndUserId	This cookie is used to record a visitors interaction with our site and any website optimisation test we may have running. You can opt out of Optimisely at the following page https://www.optimizely.com/legal/opt-out/	.mcarthurglen.com
fFbm_{*}	These cookies are set by Facebook for application integration and expires within one year. We use these cookie to provide you with a streamlined privilege club signup process. See here for more information on Facebook’s practices at https://www.facebook.com/help/cookies/	.mcarthurglen.com

Name	Description	Sent From (URL)
__utma	Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics.	.mcarthurglen.com
__utmb	Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics.	.mcarthurglen.com
__utmz	Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics.	.mcarthurglen.com
__utmv	Used to store visitor-level custom variable data. This cookie is created when a developer uses the _setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics.	.mcarthurglen.com
_ga	This cookie is used to distinguish users	.mcarthurglen.com
_gid	This cookie is used to distinguish users	.mcarthurglen.com
_gat	Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>	.mcarthurglen.com
_gac_{property-id}	Contains campaign related information for the user. If you have linked your Google Analytics and AdWords accounts, AdWords website conversion tags will read this cookie unless you opt-out	.mcarthurglen.com
_gcl_{*}	These cookies are used	.mcarthurglen.com
_hjClosedSurveyInvites	This cookie is set once a visitor interacts with a Survey invitation modal popup. It is used to ensure that the same invite does not re-appear if it has already been shown. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out	.mcarthurglen.com
_hjDonePolls	"This cookie is set once a visitor completes a poll using the Feedback Poll widget. It is used to ensure that the same poll does not re-appear if it has already been filled in. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out"	.mcarthurglen.com
_hjMinimizedPolls	"This cookie is set once a visitor minimizes a Feedback Poll widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out"	.mcarthurglen.com
_hjMinimizedTestersWidgets	"This cookie is set once a visitor minimizes a Recruit User Testers widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out"	.mcarthurglen.com
_hjIncludedInSample	"This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels. You can opt out of HotJar recording via the following link https://www.hotjar.com/legal/policies/privacy https://www.hotjar.com/legal/compliance/opt-out"	.mcarthurglen.com
fr	This cookie allows us to measure the effectiveness of our online advertisements, provide social features and and to analyse traffic to our site.	.mcarthurglen.com
dpr	This cookie allows us to measure the effectiveness of our online advertisements, provide social features and and to analyse traffic to our site.	.mcarthurglen.com
ry_ry_mc4rth2_realytics	This cookie allows us to measure the effectiveness of our online advertisements, provide social features and and to analyse traffic to our site.	.mcarthurglen.com