Privacy Policy
Personal data processing
| Responsable | KIROS IBERIA SL |
| Contacto | info@latorreoutletzaragoza.com |
| Contacto DPD | dpo@latorreoutletzaragoza.com |
| KIROS IBERIA’s purposes |
|
| Legitimation |
|
| Recipients | Third party providers who are in charge of data processing. The purpose is exclusively to provide us with necessary services for our activity development, always taking into account our instructions. In this sense, they will not be able to use this data for its own purposes (IT systems, security services, marketing services, animation and events). Competent public administrations for the fulfillment of legal obligations. In particular, we count on ROS Spain Management SL services for the Outlet’s management. |
| Storage period | As a general rule, data will be kept as long as they are compatible with the purpose for which they were collected, in compliance with legal storage obligations; and also as long as responsibilities for the processing can be derived (and then be deleted). |
| Rights | You can consult the information on the exercise of the rights provided by the regulations on data protection at the end of this Policy. |
The personal information we collect on our website is processed in compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural people with regard to the processing of personal data and on the free movement of such data; as well as with Organic Law 3/2018, of December 5, on the Personal Data Protection and digital rights guarantee.
In addition, we guarantee that personal data are treated in a lawful, loyal and transparent manner, and they are collected just for specific, explicit and legitimate purposes. The interested parties’ identification will not be allowed for longer than necessary and security will be always guaranteed through the appropriate technical and organizational measures.
WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
The entity that owns the website is the controller of the processing of your personal data.
Company Name: KIROS IBERIA SL
Address: Ronda del Ferrocarril nº 24, Plataforma Logística Zaragoza (PLAZA), 50197-Zaragoza
C.I.F.: B99531527
Phone: +34 876 00 70 20
Contact: info@latorreoutletzaragoza.com
You can contact our Data Protection Delegate at: dpo@latorreoutletzaragoza.com
WHAT DO WE PROCESS YOUR DATA FOR AND WHAT DO YOU ALLOW US TO DO? WHY CAN WE TREAT YOUR DATA?
The controllers process your data when you provide your information by completing the registration or contact forms, sending emails, calling by phone, participating in events, promotions and Outlet activities, accessing the facilities or browsing the website.
Data are treated with various purposes, which are explained in the following lines:
Respond to requests, inquiries, notifications, claims and requests for information. We process data in order to respond all the requests users have sent to us through our Customer Support.
Manage raffles and promotions. Necessary data will be collected when users want to participate in raffles and promotions after giving their consent and according to published Legal Bases.
Manage VIP Club’s new registrations.When the interested party voluntarily registers on our website or in the mobile application, we collect their data to formalize the registration as a Club member, keep the information that allows us to provide our services, maintain contact through electronic commercial communications according to point 4 of this Policy and allow user to access all its exclusive benefits and promotions.
Send commercial communications to interested parties. We keep users informed through periodic communications after they register in our VIP Club, or register his email in other forms provided for this purpose. We will send communications related to offers, promotions, activities, products and services from the Outlet and its stores, as well as other collaborators or suppliers on travel and tourism, sports equipment, leisure, culture, automotive, hotels and restaurants, education and training, financial services, media, computing, technology, internet, telephony and telecommunications, health and beauty, real estate, legitimized by their consent.
Interested parties can oppose each of the communications sent through the mechanism provided in the section "What are your rights?".
Use data storage and retrieval devices. We will use cookies and other tools, with the users’ consent, when they visit our website or use our application for the purposes set forth in our Cookies Policy where they can access more information.
Obtain information about visitors’ location in the centre. Outlet has a WiFi location system exclusively indoor to determine the specific location of visitors who connect to our network through the mechanisms provided for this purpose in the portal and the mobile application.
The traceability information of the WiFi network users will be treated anonymously in order to know the general behaviour of our visitors in the facilities.
For this purpose, the person in charge will treat the MAC addresses of the mobile terminal through an irreversible anonymization process, as well as other data linked to said address such as the information about entry and exit of the Outlet, time of stay and activity carried out within the Outlet, such as the entry / departure and time of stay in the Outlet stores or premises, in order to use this information in an aggregated way to determine patterns and indicators of visitors behaviour, and to compile statistics.
You can obtain more information about the processing at the following link.
Mobile application user. User will be able to use the Outlet's mobile application and access the general information it provides and the management of the Wishlist without registering.
If user decides to register in the VIP Club through the mobile application in order to access all the Outlet advantages, offers and promotions, we will communicate commercially as provided in point 4 of this Policy.
Through the mobile application, user will be able to access other services such as the stores’ map, the tickets reservation for special events with limited capacity and VIP events, and the QR code which is used to identify the user so that he or she can access to events and offers.
If user expressly authorizes it through their terminal configuration, the app will use the device location exclusively to detect if it is near the Outlet and thus be able to recommend him/her the use of our WiFi.
Kimchi. When user voluntarily uses the Kimchi to capture his image, he/she consents that the person in charge can process his/her image in order to provide him/her with the option of downloading it on his/her device or temporarily publishing it on the Outlet video wall, to later be deleted.
The person in charge may publish the image on their social networks or web pages for commercial purposes and without any territorial or temporal limitation with the additional and specific consent of the interested parties.
Interested parties can find out how long we keep the images in the "How long do we keep your data?" section.
Guarantee facilities and people safety through a video surveillance system. This kind of processing is carried out with an exclusive purpose of guaranteeing the facilities safety through a video surveillance system by virtue of a public interest, but also by the legitimate interest of the person in charge, as it is reported in the posters provided for this.
Interested parties can find out how long we keep the images in the "How long do we keep your data?" section.
Comply with legal obligations. We carry out certain processings in compliance with legal obligations such as tax or accounting obligations and we communicate with the competent public administrations when it is necessary.
Minors’ data processing. The processing of minor’s personal data may only be based on his/her consent when he/she is over fourteen years of age. Exceptions are those cases in which the law requires the assistance of holders of parental authority or guardianship for the act celebration or legal business in the context of which consent is obtained for the processing. This data processing of minors under fourteen years of age, based on consent, will only be lawful if that of the holder of parental authority or guardianship, with the scope determined by the holders of parental authority or guardianship.
Consider candidates for our selection processes. interested party voluntarily completes the forms for this purpose and / or provides us with a curriculum, their data will be used to incorporate it into present and future selection processes in our entity, as well as to communicate with him/her for this purpose, legitimized by his consent.
WHO DO WE PROVIDE YOUR DATA TO?
We can communicate personal data to third-party suppliers who are in charge of the processing with the purpose of providing us with certain services (IT systems, security services, marketing services, animation and events), following our instructions without using data for their own purposes and in order to carry out those activities organised by us, or to the competent public administrations in compliance with legal obligations; or to the competent public administrations for the fulfillment of legal obligations.
In particular, we count on ROS Spain Management SL services for the Outlet’s management. Address: ROS Spain Management SL, Ctra de Logroño, Km 6,5 – 50011 Zaragoza, España. Phone +34 876 007 020 - info@latorreoutletzaragoza.com
We also communicate the necessary contact details in order to carry out our commercial communications via email to Active Campaign, which constitutes an international data transfer to the US. We have signed an agreement for theprocessing and obtained additional guarantees for the processing according to the Standard Contractual Clauses approved by the European Commission.
If users use their WhatsApp account to contact and communicate with the Outlet, they do so with the knowledge that those responsible in turn manage a WhatsApp Business account which allows them to establish the conditions for their personal data processing. In this sense, the users’ data will be treated according to these conditions, as well as according to those established by the instant messaging service.
HOW LONG DO WE KEEP YOUR DATA?
As a general rule, data will be kept as long as they are compatible with the purpose for which they were collected and in compliance with legal storage obligations, and then be deleted.
The data collected for the purposes of registering the interested party in our VIP Club and communicating with us commercially will be kept as long as said purposes last or the user opposes the processing.
User browsing data will be kept in accordance with our Cookies Policy .
Images collected by the video surveillance system are stored for a maximum of 30 days unless some circumstance requires its blocking and making them available to the relevant authorities.
Images collected to be published in the videowall will be kept for a maximum of 24 hours unless the interested party authorizes to share them on the controller's media and social networks, in which case they will be kept as long as said purpose lasts or the user opposes the processing.
WHAT ARE YOUR RIGHTS?
You will be able to:
- Obtain more information.
- Withdraw your consent when you have given it for a specific processing.
- Stop receiving our commercial communications requesting to unsubscribe from the email address of the controller.
- Exercise your rights to:
- Access, or knowing what personal data we process about you.
- Rectification, or correcting incorrect or inaccurate personal data.
- Deletion, or removing the personal data that we have about you and we are not legally obliged to keep.
- Opposition, or stop proccesing your personal data for a specific purpose.
- Limitation, or restricting the processing that we carry out.
- Portability, or providing you with the personal data in our possession.
In order to exercise any of the rights granted by the data protection regulations, you may request a form from the person in charge for the exercise of rights or directly download any of the forms proposed by the Spanish Agency for Data Protection through this link and you will have to complete and present it with an ID copy or any other valid identification document at the address or email of the person in charge.
Company Name: Kiros Iberia SL
Address: Ronda del Ferrocarril nº 24, Plataforma Logística Zaragoza (PLAZA), 50197-Zaragoza
C.I.F.: B99531527
Phone: +34 876 00 70 20
You can find more information about your rights or file a claim with our Data Protection Delegate through dpo@latorreoutletzaragoza.com or with the competent control authority at the Spanish Data Protection Agencyhttps://www.agpd.es - Jorge Juan Street, 6. 28001 - Madrid (+34 901 100 099 - + 34 912 663 517).
HOW DO WE GUARANTEE THE SECURITY OF YOUR DATA?
We have adopted the appropriate technical and organizational measures to guarantee an adequate level of security that prevents the destruction, loss or accidental or illegal alteration of personal data, or the unauthorized communication or access to said data.
We have also set up procedures to respond in the appropriate legal terms to any security breach that may occur regarding the personal data.
When hiring suppliers, we guarantee that they implement adequate security measures for the protection of personal data.
CHANGES IN THE PRIVACY POLICY
We have prepared this Policy in accordance with the requirements and obligations of the General Data Protection Regulation.
- La Torre Outlet Zaragoza
- Autovía de Logroño, Km 6, 5, 50011 Zaragoza
- +34 876 007 020
- +34 628 11 50 27
