Privacy Policy

Who is the Controller?

Ingka Centres Portugal, S.A., with registered offices at Avenida Doutor Óscar Lopes 4450-337 Leça da Palmeira - Matosinhos, legal person 507 161 025.

This PRIVACY POLICY explains how we use any personal information we collect when you use this website and when you visit MAR Shopping Algarve and MAR Shopping Matosinhos.

Data Protection Officer: [email protected]

If you have any questions about exercising your rights as a data subject and, in general, about the processing of your personal data, you can always contact our Data Protection Officer.

For what purpose and legal basis do we collect your personal data?

Click on the buttons below to find out more:

We process your personal data in order to provide you with support on various fronts, capture images of our events, manage the lost and found and, possibly, manage any complaints you may have with our service.

We may use your personal data for the following purposes:

Video surveillance, for the protection of people and property, based on our legitimate interest in this.

Manage your lost and found, based on our legitimate interest in doing so;

Manage your complaints, based on our legitimate interest in doing so;

Transfer them to insurance companies or lawyers, within the exchange of emails with them, based on our legitimate interest in following up on claims and resolving any problems arising from the management of the spaces.

Manage our customer support services, based on our legitimate interest in answering your questions and providing good customer service;

Manage our social networks, based on our legitimate interest in answering your questions and providing good customer service;

Capture images at actions and events, based on our legitimate interest in recording the event and sharing it for communication purposes.

We process your personal data for your adherence to our Loyalty Program, to provide you with gift cards, manage our campaigns and relations with suppliers and service providers, in-store loans and orders, the use of our infrastructures or the provision of free Wi-Fi.

We may also use your personal data for the following purposes:

Process your adherence to our Loyalty Program, so that you can avail our offers and services within that scope, based on the performance of a contract to which you are a party;

Supply of gift cards, based on the performance of a contract to which you are a party, as well as our need to comply with legal obligations;

Management of campaigns and offers and communication with winners, based on the performance of a contract to which you are a party, as well as our need to comply with legal obligations;

Management of our relationship with (potential) suppliers, shopkeepers and other service providers, based on our legitimate interest therein and the performance of a contract to which the data subject is a party;

Management of competitions and targeted marketing actions, as well as the delivery of prizes to data subjects, based on our legitimate interest in doing so and the performance of a contract to which the data subject is a party;

Management of in-store loans, based on the performance of a contract to which the data subject is a party;

Management of orders placed on Ingka's platform, based on the performance of a contract to which it is a party.

We process your personal data if you want to work with us

We may also process your data for

Receiving your spontaneous application and managing it, on the basis of pre-contractual steps at your request or on the basis of the need to execute a contract to which you are a party, as well as our legitimate interest in analyzing applications and finding a vacancy for you;

Receive your application for a specific open position and contact you in the event that we are considering your CV, on the basis of pre-contractual due diligence at your request or on the basis of the need to perform a contract to which you are a party, as well as our legitimate interest in reviewing applications. In the event that you are not hired by us, if you give us your consent, we may store your data for an additional period of 2 years in order to find you another vacancy.

We process your data to provide you with free Wi-Fi, or to send you news about MAR Shopping

Finally, we may process your data for:

To provide you with free Wi-Fi on our premises and to retain your MAC address for this purpose, based on the performance of a contract to which you are a party. If you want to be authenticated with your MAC address every time you go to the mall, you can give your consent for us to store it;

To send you newsletters about MAR Shopping, if you consent to it.

Please note that when your data is processed on the basis of consent, this can be revoked at any time, without any consequences for the data subject. Your consent provided for the purposes for which it is applicable above can be revoked by contacting [email protected].

The data we process based on the need to perform a contract is essential for you to be able to work with us. If you do not provide it, we will not be able to conclude the contract with you.

If you would like to know more about the processing of your data as a customer, you can always consult our Table of Grounds, Purposes and Retention Periods.

How long do we keep your personal data?

For the various purposes, we store your personal data for the following periods of time:

To manage your complaints, if you make them in the Complaints Book, for a period of 3 years. Otherwise, for the duration of the purpose for which the personal data was collected;

For video surveillance purposes, we keep your personal data for a period of 30 days;

For other personal data processed on the basis of our legitimate interest, we retain it until the purpose for which it was collected ceases;

In the case of tax or billing data, we keep it for a period of 10 years;

Personal data processed on the basis of the performance of a contract to which the data subject is a party is kept for the duration of the purpose for which it was collected;

In the specific case of personal data from applications, this is kept for a period of 5 years in order to comply with legal obligations. In the case of a spontaneous application, data that is not directly necessary to comply with the same legal obligation is kept for an additional period of one year. In the case of specific vacancies in the aforementioned situation, data may be kept for an additional period of 2 years if you give your consent;

In the case of use of the Lego Kiddyland platform, the data is kept for a period of 1 year or until you request its deletion, if this occurs earlier;

Personal data processed on the basis of consent is kept for a period of 2 years or until you revoke your consent.

Data relating to free Wi-Fi is kept for 5 days.

Who has access to your personal data? To whom do we disclose your personal data?

In relation to the processing of your personal data, Ingka uses or may use third party service providers to process your personal data on our behalf and in accordance with the instructions provided by us, in strict compliance with the applicable legislation as well as this Statement.

Any entity subcontracted in this context will not transmit your data to other entities without Ingka's prior written consent and without an applicable legal basis for such transmission. Ingka undertakes to subcontract only those entities that offer adequate guarantees of the implementation of technical and organizational measures in order to ensure the protection of your rights. All entities subcontracted by Ingka will be bound to Ingka by a written contract which regulates, among other things, the object and duration of the processing, the nature and purpose of the processing, the categories of data subjects and the rights and obligations of the parties ("Data Processing Agreement").

In accordance with Applicable Law, Ingka may transmit or communicate your personal data to other entities, when such transmission or communication is necessary for the performance of the contract concluded between us, or for pre-contractual steps at your request or when it is necessary to comply with a legal obligation to which Ingka is subject.

In addition, Ingka may disclose your personal data to third parties when this is necessary for the purposes of (i) lawful purposes under applicable law, (ii) compliance with legal obligations of state, administrative or judicial authorities and (iii) responding to requests from those same authorities.

Ingka can periodically verify that third parties fulfill their obligations and comply with the measures for the protection of personal data.

What are your rights?

Please be advised that the legislation in force grants you specific rights, including the right of access, rectification, erasure, restriction of processing, objection to processing and portability of your data in accordance with articles 15 to 21 of the GDPR.

Right of access - You can obtain confirmation that personal data concerning you is being processed, as well as access to it, and a copy of the personal data being processed will be made available to you on request and if there are no legal restrictions.

Right of rectification - You can request that your inaccurate personal data be rectified or that your incomplete personal data be completed.

Right to erasure - Under the terms of the law, you can also request the erasure of your personal data at any time. Ingka may refuse your request in certain situations, namely when the data is still necessary for the purposes for which it was collected, or when the processing is necessary for compliance with a legal obligation.

Right to restriction of processing - The data subject may obtain restriction of processing where:

a) the accuracy of the personal data is contested;

b) the processing is unlawful and the data subject requests restriction as an alternative to erasure;

c) Ingka no longer needs the data for the original purpose and the data is required by the data subject for the establishment, exercise or defense of legal claims and;

d) if the data subject has objected to the processing, until it is established whether the legitimate interests of the controller override those of the data subject.

Right to data portability - When the basis for lawful processing is consent or the performance of a contract and there is processing by automated means, the data subject has the right to request the portability of their data. This right may not, however, prejudice the rights and freedoms of third parties.

Right to object to the processing of personal data - When data is processed on the basis of legitimate interest or public interest, or when data is processed for direct marketing purposes, the data subject has the right to object to the processing.

Right to withdraw/revoke consent - When consent is the legal basis for data processing, you are guaranteed the right to withdraw consent at any time. However, this does not invalidate the lawfulness of the processing carried out up to that date, based on the consent previously given.

You can also contact Ingka at any time by sending an e-mail to [email protected] to be informed clearly of the operations indicated and the rights mentioned and, if you wish, to obtain further information and exercise any of the rights mentioned above.

You can also contact Ingka's Data Protection Officer at the following address: [email protected]

Likewise, we inform you that if you consider that the processing of your data violates the General Data Protection Regulation, you have the right to file a complaint with a competent supervisory authority. In Portugal, the competent authority is Comissão Nacional de Proteção de Dados (www.cnpd.pt).

Cookies

Our website uses cookies. Cookies work to make the browsing experience on our website as smooth as possible and remember your preferences so that you don't have to enter your data repeatedly. They also allow us to optimize the way our website works and, with your consent, to deliver relevant advertisements.

You can control which cookies are used. We have a page dedicated to cookies, which explains more about how and why we use them, and how you can manage them. For more information, please read our Cookie Policy .

Other websites

Our website may contain links to other websites. This PRIVACY POLICY only applies to this website, so when you click on links to other websites you should read their respective PRIVACY POLICIES.

Changes to our PRIVACY POLICY

Our PRIVACY POLICY is periodically reviewed and we will publish any updates to it on this website.

Whenever a change of major importance is considered, we will inform data subjects by appropriate means and by email if they are registered and active in our database.

ANNEX I - Table of purposes, grounds and retention periods