Privacy Notice for the OUTLETCITY App
Last revised: June 2021
In the following we provide you with information about the processing of personal data when using the OUTLETCITY App (hereinafter the "App"). Personal data are any data that can be related to you personally, such as your name, address, e-mail address, or usage pattern.1. Controller
1.1 The controller of the App within the meaning of Art. 4 para. 7 of the General Data Protection Regulation (hereinafter "GDPR") is OUTLETCITY METZINGEN GmbH, Friedrich-Herrmann-Str. 6, 72555 Metzingen, Germany, email@example.com.
1.2 You can reach our data protection officer at firstname.lastname@example.org. Processing of Personal Data
2.1 When using our App, we will collect the necessary personal data described below in order to enable the use of its functions. If you do not provide us with this information, you will not be able to use the App or certain parts of the App.
2.1.1 We will generate and use unique codes to identify you when you use the App (Art. 6 para. 1 lit. b GDPR).
2.1.2 We will process the language settings of your mobile phone so that we can make the App available to you in the correct language (Art. 6 para. 1 lit. b GDPR).
2.1.3 In addition, we will collect the following personal data in order to offer the functions of the App and to guarantee its stability and security (Art. 6 para. 1 lit. f GDPR):
- Session data (such as time and duration of App session)
- Usage data (such as accessed content, data volume transmitted, and error notices/crashes of the App), as well as
- Device and installation data (such as operating system, display size, language settings, and the version of the App).
2.2 When downloading the App, technically necessary information will be transmitted to the App Store, i.e., in particular the user name, email address, and customer number of your account with the App store provider, time of download, and the unique device code number. We have no influence on this data collection and therefore assume no responsibility for it. We process such data only to the extent necessary for downloading the App to your end device (Art. 6 para. 1 lit. b GDPR).
2.3 In the App we will process your "Likes", i.e., brands and offers selected by you as preferred, in order to display them to you in the App and to be able to give you directions to the brands and offers on the map (Art. 6 para. 1 lit. b GDPR). On the basis of this information, we will provide you with the opportunity to personalize the sorting/viewing of stores and brands on certain pages in the App. This way, you can customize the results of product category searches, the overview of all offers, and stores on the map according to your personal preferences (Art. 6 para. 1 lit. b GDPR). This information will also be used in your OUTLETCITY CLUB account if and as soon as you register for the OUTLETCITY CLUB and connect your account to the App.
2.3.1 Our offer includes certain functionalities (map function and display of available public WiFi hotspots in the vicinity) which are tailored to your location within Outletcity Metzingen. These geodata are only used within the App to show you your location on the integrated map. We use this data according to section 2.3.2 to create user profiles using pseudonyms. There is no further analysis of these geodata by us. You can allow or deny the App access to your geodata at any time in the settings of your operating system. If location sharing is activated, your smartphone will display the data processing via a corresponding icon in the upper bar. Please note that we can offer you some of the functions of the App only if we know your location. You can object to this processing at any time by clicking the opt-out button in the menu "Services > Settings" in the App. To the extent that further personal data are processed in this connection, this will be done based on your consent (Art. 6 para. 1 lit. a GDPR).
2.3.2 For market research purposes and to tailor our entire services to the needs of App users we create user profiles using pseudonyms (Art. 6 para. 1 lit. f GDPR) to improve our services for you. These data are not combined with any other personal data. You can object to the creation of a user profile by contacting us at the address or e-mail address shown above or the address shown in the Legal Notice or by clicking the opt-out button in the menu "Services > Settings" in the App (also see section 5.3).
2.4 If you contact us (e.g., at the mailing address or e-mail address shown above, see section 1.1), we will process the personal data you have provided (e.g., your name and e-mail address) in order to respond to your questions (Art. 6 para. 1 lit. f GDPR).
2.5 We will use push notifications to send you messages. In doing so, we will process a unique code (see sec. 2.1.1) based on Art. 6 para. 1 lit. f GDPR as far as we are legally permitted to do so without your consent, or otherwise based on your consent (Art. 6 para. 1 lit. a GDPR). We have a legitimate interest in informing you of special offers, terms and conditions, and innovations of Outletcity Metzingen and the App. You can object to this processing at any time by clicking the opt-out button in the menu "Services > Settings" in the App (see also section 5.3). We will not use any other personal data from your OUTLETCITY CLUB customer account for advertising or personalization purposes, except with your consent (Art. 6 para. 1 lit. a GDPR).
2.7 If you redeem the code of a shopping pass in the App, we will process your OUTLETCITY CLUB code as well as the date of redemption and the date and time of activation of the respective shopping pass on the basis of Art. 6 para. 1 lit. b GDPR.
2.8 We do not use automated decision-making, including profiling.3. Storage Period
We process personal data only as long as this is necessary for the aforementioned purposes and erase personal data thereafter or – if we are subject to legal retention obligations - restrict the processing of personal data.4. Recipients of Data
4.1 In order to be able to offer the App, we will transfer your personal data to our hosting provider. We will also use other service providers as data processors to provide certain services through the App and to improve the App:
We have entered into data processing agreements with all of them to ensure your personal data will be processed strictly according to our instructions.
4.2 We only transfer personal data to third countries to the extent that data processors operate in third countries. In the absence of an adequacy decision by the European Commission for the respective third country, this is done subject to appropriate or adequate safeguards.
Copies of the aforementioned safeguards are available from the aforementioned data protection officer (contact see section 1.2).5. Your Rights
5.1 You have the following rights with respect to your personal data in accordance with applicable law:
- Right of access;
- Right to rectification and erasure;
Right to restricted of processing;
- Right to data portability.
5.2 If data processing is based on Art. 6 para. 1 lit. a GDPR, you have the right to revoke your consent at any time, in which case the lawfulness of data processing carried out on the basis of your consent prior to revocation will remain unaffected.
5.3 You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 para. 1 lit. f GDPR; this also applies to any profiling based on these provisions. We will no longer process personal data unless we can show compelling legitimate reasons for continued data processing that override your interests, rights and freedoms, and unless we process data to assert, exercise, or defend legal rights or claims. If the purpose of data processing is direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
5.4 You also have the right to lodge a complaint with a supervisory authority.