Last revised: May 2020
In what follows we provide you with information about the processing of personal data when using the Outletcity App (hereinafter the " App"). Personal data are any data that can be related to you personally, such as your name, address, e-mail address, or usage pattern.1. Controller
The controller of the App within the meaning of Art. 4 para. 7 of the General Data Protection Regulation (hereinafter "GDPR") is OUTLETCITY METZINGEN GmbH, Friedrich-Herrmann-Str. 6, 72555 Metzingen, Germany, email@example.com.
You can reach our data protection officer at firstname.lastname@example.org. Processing of Personal Data
2.1 When using our App, we will collect the necessary personal data described below in order to enable the use of its functions. If you do not provide us with this information, you will not be able to use the App or certain parts of the App.
2.1.1 We will use your advertising ID or another unique code for the operating system of your mobile phone to identify you when you use the App (Art. 6 para. 1 lit. b GDPR).
2.1.2 We will process the language settings of your mobile phone so that we can make the App available to you in the correct language (Art. 6 para. 1 lit. b GDPR).
2.1.3 In addition, we will collect the following data in order to offer the functions of the App and to guarantee its stability and security (Art. 6 para. 1 lit. f GDPR):
- Session data (such as time and duration of App session)
- Usage data (such as accessed content, data volume transmitted, and error notices/crashes of the App), and
- Device and installation data (such as operating system, display size, language settings, and the version of the App).
2.2 When downloading the App, technically necessary information will be transmitted to the App Store, i.e., in particular the user name, e-mail address, and customer number of your account with the App store provider, time of download, and the unique device code number. We have no influence on this data collection and therefore assume no responsibility for it. We process such data only to the extent necessary for downloading the App to your terminal device (Art. 6 para. 1 lit. b GDPR).
2.3 In the App we will process your "Likes", i.e., brands and offers selected by you as preferred, in order to display them to you in the App and to be able to give you directions to the brands and offers on the map (Art. 6 para. 1 lit. b GDPR). On the basis of this information, we will provide you with the opportunity to personalize the sorting/viewing of stores and brands on certain pages in the App. This way, you can customize the results of product category searches, the overview of all offers, and stores on the map according to your personal preferences (Art. 6 para. 1 lit. b GDPR).
2.4.1 Our offer includes certain functionalities (map function and display of available public WiFi hotspots in the vicinity) which are tailored to your location within Outletcity Metzingen. These geodata are only used within the App to show you your location on the integrated map. We use this data according to section 2.4.2 to create user profiles using pseudonyms. There is no further analysis of these geodata by us. You can allow or deny the App access to your geodata at any time in the settings of your operating system. If location sharing is activated, your smartphone will display the data processing via a corresponding icon in the upper bar. Please note that we can offer you some of the functions of the App only if we know your location. You can object to this processing at any time by clicking the opt-out button in the menu "Services > Settings" in the App. To the extent that further personal data are processed in this connection, this will be done on the basis of your consent (Art. 6 para. 1 lit. a GDPR)
2.4.2 For market research purposes and to tailor our services to the needs of users we create user profiles using pseudonyms (Art. 6 Para. 1 lit. f GDPR) to improve our services for you. These data are not combined with any other personal data. You can object to the creation of a user profile by contacting us at the address or e-mail address shown above or the address shown in the Legal Notice or by clicking the opt-out button in the menu "Services > Settings" in the App (also see section 5.3).
2.5.1 If you contact us (e.g., at the mailing address or e-mail address shown above, see section 1.1), we will process the personal data you have provided (e.g., your name and e-mail address) in order to respond to your questions (Art. 6 para. 1 lit. f GDPR).
2.5.2 We will use push notifications to send you messages. In doing so, we will process your device ID (see sec. 2.1.1) on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in informing you of special offers, terms and conditions, and innovations of Outletcity Metzingen and the App. You can object to this processing at any time by clicking the opt-out button in the menu "Services > Settings" in the App (see also section 5.3). We will not use any other personal data from your OUTLETCITY Club customer account for personalization purposes, except with your consent (Art. 6 para. 1 lit. a GDPR).
2.7 We do not use automated decision-making, including profiling.3. Storage Period and Recipients of Data
We process personal data only as long as this is necessary for the aforementioned purposes and erase personal data thereafter or – if we are subject to legal recordkeeping obligations - restrict the processing of personal data.4. Recipients of Data
4.1 In order to be able to offer the App, we will transfer your personal data to our hosting provider. We will also use the following service providers to provide certain services through the App and to improve the App:
- Analysis tools (Google Firebase, Google Analytics, Crashlytics),
- Hosting Provider (Amazon),
- Marketing tools (Emarsys),
- Customer service (PVS),
- Loyalty platform (Point4More).
We have entered into data processing agreements with all of them to ensure data will be processed strictly according to our instructions.
4.2 Some of our service providers are located in third countries:
Copies of the aforementioned guarantees are available from the aforementioned data protection officer (see section 1).5. Your Rights
5.1 You have the following rights with respect to your personal data in accordance with applicable law:
- Right of access;
- Right to correction and erasure;
· Right to restricted data processing;
- Right to data migration.
5.2 If data processing is based on Art. 6 para. 1 lit. a GDPR, you have the right to revoke your consent at any time, in which case the lawfulness of data processing carried out on the basis of your consent prior to revocation will remain unaffected.
5.3 You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 para. 1 lit. f GDPR; this also applies to any profiling based on these provisions. We will no longer process personal data unless we can show compelling legitimate reasons for continued data processing that override your interests, rights and freedoms, and unless we process data to assert, exercise, or defend legal rights or claims. If the purpose of data processing is direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
5.4 You also have the right to complain to a data protection supervisory authority about the processing of your personal data by our company.