Privacy policy

Vila do Conde Retail Park (the “Centre”) is committed to protecting your privacy. This Privacy Policy explains how the Centre collects and uses personal data about you if you:

• access and use the website located at http://viladoconderetailpark.com/ (the “Site”);
• participate in any competitions or contests that we run;
• use the Wi-Fi facilities when you visit the Centre;
• enter an area of the Centre in which we operate security cameras;
• use the car parking facilities at the Centre; or
• contact us in relation to any of the above. 

Please note that other privacy policies apply in relation to our use of your personal data other than in connection with the types of interaction listed above. We will direct you to these policies at the time of such other interaction. 

Please read this Privacy Policy carefully to find out about:

• Who we are
• Personal data we collect about you, how it is used and why, including the legal basis for our processing
• Who we share your personal data with
• How we use cookies
• How long we keep your personal data for
• Our policy on children’s personal data
• Your rights
• Links to other websites
• Changes to this Privacy Policy
• How you can contact us

You have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent). For more information, please see the section “Your rights”.

If you have any questions about this Privacy Policy or you wish to exercise any of your rights in relation to your personal data, please contact us at Privacy.Porto@viaoutlets.com.

Who we are

When you interact with the Centre for one or more of the reasons set out at the start of this Privacy Policy, the personal data that the Centre collects from you, or that you provide to the Centre, is controlled by a combination of the following companies within the VIA Outlets portfolio:

• VIOUTLETS PORTUGAL MANAGEMENT UNIPESSOAL, LDA, a private company with limited liability under the laws of Portugal, having its seat in Av. Euro 2004, 2890-154 Alcochete, registered with the Chamber of Commerce of Alcochete under number 514142588 (“Manco Centro”);
• Vioutlets Vila do Conde III, Unipessoal, Lda, a private company with limited liability under the laws of Portugal, having its seat in Av. Euro 2004, 2890-154 Alcochete, registered with the Chamber of Commerce of Alcochete under number 509.964.842 (“Propco Centro”), e
• (“VIA Outlets BV”).

The particular combination depends on the reason for your interaction with us. Please see the section “Details of the personal data we collect about you, how it is used and why, including the legal basis for our processing” at the end of this Privacy Policy to understand which of the companies listed above control the personal data that the Centre collects from you, or that you provide to the Centre, in connection with each type of interaction covered by this Privacy Policy.

References in this Privacy Policy to “we” or “us” are to these companies.

Each of the companies listed are committed to protecting your privacy and are (depending on the reason for your interaction with us, as explained above) joint data controllers of your personal data within the meaning of data protection laws applicable in the European Union (“EU”) and European Economic Area (“EEA”).

As joint data controllers, we have arrangements between us to ensure that we handle your personal data correctly and in accordance with data protection laws applicable in the EU and EEA. These arrangements reflect our respective roles and responsibilities in relation to you, and considers which entity is in the best position to fulfil each obligation to you. This arrangement between us does not affect your legal rights.  

Personal data we collect about you, how it is used and why, including the legal basis for our processing

The section “Details of the personal data we collect about you, how it is used and why, including the legal basis for our processing” at the end of this Privacy Policy describes the types of personal data we collect about you, how it is used and why. It also sets out the legal basis for us processing personal data about you in this way.

You entitle us to combine the personal data we collect about you through the different channels you use to interact with us (for example, browsing our Site, contacting us). In addition, we may combine the information we hold about you with information about you held by our selected partners and/or retail outlets where you have agreed that they can share your information with third parties. It is in our legitimate interests to do this so that we can form a clearer picture about our customer base and as a result improve our services and marketing activities (which could also benefit you).

If you ask that we stop using your personal data (see the section “Your rights”) then we may not be able to provide you with all the benefits of the Centre.

Who we share your personal data with

For the purposes set out in the section “Personal data we collect about you, how it is used and why, including the legal basis for our processing”, we sometimes provide your personal data to other companies within the VIA Outlets portfolio and certain service providers who perform certain business operations on our behalf. This includes:

• service providers who help us with our information technology systems (including security);
• a cloud provider who hosts the information stored in our customer database; and
• service providers who help us to operate the security cameras and vehicle number plate recognition system at the Centre.

In some cases, the personal data we collect from you may also be accessed or processed outside the EEA. Such destinations may not have laws which protect your information to the same extent as in the EEA. We have obligations to ensure that your personal data is only accessed or processed from territories outside the EEA where the European Commission has decided that the territory in question ensures an adequate level of protection (known as a ‘white listed’ territory) or, in the absence of a decision by the European Commission, there are appropriate safeguards in place to protect your personal data. For example, if your personal data is accessed or processed from a territory outside the EEA which is not white listed, the appropriate safeguards may be provided by standard data protection clauses adopted by the European Commission (known as ‘model clauses’).

We also have obligations to ensure that your personal data accessed or processed by us or by our service providers and processors operating outside the EEA is treated securely and is protected against unauthorised access, loss or destruction, unlawful processing and any processing which is inconsistent with the purposes set out in this Privacy Policy.

Please ask us if you would like more information about the safeguards that are used to protect your personal data when it is processed outside the EEA (see the section “How you can contact us”).

In addition, we may share your personal data with other organisations in the following circumstances:

• if we are required by applicable law or a public authority to share information about you;
• if we need to share information about you in order to establish, exercise, defend or protect the rights, property or safety of our business, our customers or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection; and
• to successors in title or replacement operators of all or part of our respective businesses. 

How we use cookies

We use cookies to enable our systems to recognise your device so that we can personalise and improve your customer experience whilst using our Site and provide you with relevant online advertising. Please see the section “Personal data we collect about you, how it is used and why, including the legal basis for our processing” and our Cookie Policy available at http://viladoconderetailpark.com/ to find out more.

How long we keep your personal data for

We retain your personal data for no longer than is necessary for the purposes for which the information is collected (see the section “Personal data we collect about you, how it is used and why, including the legal basis for our processing” for details of the relevant purposes). When determining the relevant retention periods, we will take into account factors including:

• legal obligation(s) under applicable law to retain data for a certain period of time, for example, accounting obligations;
• statute of limitations under applicable law;
• (potential) disputes; and
• guidelines issued by relevant national data protection regulators.

Otherwise, we securely erase your information once this is no longer needed for the purposes for which the information is collected.

Our policy on children’s personal data

We do not knowingly collect the personal data of children under 16 years of age, without the prior consent or authorisation of the holder of parental responsibility over the child.

Your rights

By law, you have the following rights with regard to your personal data. Further information and advice about your rights can be obtained from your national data protection regulator. If you wish to exercise any of your rights in relation to your personal data, please contact us at Privacy.Porto@viaoutlets.com.

Right to be informed

What does this mean? You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this Privacy Policy.

Right of access

What does this mean? You have the right to obtain access to your personal data (if we’re processing it) and certain other information (similar to that provided in this Privacy Policy). This is so you’re aware and can check that we’re using your personal data in accordance with data protection law.

Right to rectification

What does this mean? You are entitled to have your personal data corrected if it’s inaccurate or incomplete.

Right to erasure

What does this mean? This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.

Right to restrict processing

What does this mean? You have rights to ‘block’ or suppress further use of your personal data. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.

Right to data portability

What does this mean? You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your personal data between our IT systems and theirs safely and securely, without affecting its usability.

Right to object to processing

What does this mean? You have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent).

Right to withdraw consent

What does this mean? If you have given your consent for direct marketing, you have the right to withdraw your consent at any time. The withdrawal does not affect the lawfulness of previous processing, but from the time you withdraw your consent we will not process any further personal data. As noted above, if you withdraw consent then we may not be able to provide you with all the benefits of the Centre.

Right to lodge a complaint

What does this mean? You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.

We are required by law to act on requests and provide information free of charge, except where your requests are manifestly unfounded or excessive (in particular because of their repetitive nature) in which case we may charge a reasonable fee (taking into account the administrative costs of providing the information or communication or taking the action requested) or refuse to act on the request.

Please consider your request responsibly before submitting it. We will respond to your request as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we will let you know.

To find out how to submit a request, please see the section “How you can contact us”.

Links to other websites

The Site may contain links to other websites operated by unrelated companies and persons (“Third Party Website”). These links are provided for your information only. The inclusion on the Site of any link to a Third Party Website does not mean that we accept any responsibility for that Third Party Website, its content or use, or the use of any features, products and/or services made available through that Third Party Website. We have no control over Third Party Websites or any information or materials contained on them and have not investigated, monitored or checked any Third Party Websites for accuracy, completeness or conformance with applicable laws and regulations. We are not responsible for any damages or injuries caused as a result of your use of, or reliance on, Third Party Websites or any information or materials contained on them. You access and use Third Party Websites at your own risk.

Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time, so please check our Site regularly to keep informed of changes.

How you can contact us

If you have any questions about this Privacy Policy or you wish to exercise any of your rights in relation to your personal data, please contact us at Privacy.Porto@viaoutlets.com.

Details of the personal data we collect about you, how it is used and why, including the legal basis for our processing

Type of interaction with us:

Types of personal data we collect:

• http://viladoconderetailpark.com/ to find out more.

Purpose of processing (how and why we use your personal data):

• http://viladoconderetailpark.com/ to find out more, including how to accept or reject new cookies and to delete existing cookies.

Legal basis for processing:

• http://viladoconderetailpark.com/.

Controller(s) of your personal data:

Type of interaction with us:

• Entering an area of the Centre in which we operate security cameras

Types of personal data we collect:

• We operate security cameras at the Centre in limited areas where we have identified a need and where other solutions are ineffective to achieve the purposes described in the section below. This means that if you visit the Centre you may be captured on security camera.
• There are prominent signs in the areas where the security cameras are operated.

Purpose of processing (how and why we use your personal data):

• Security cameras are used at the Centre for:
• monitoring the security of the Centre;
• safeguarding the safety of visitors and staff at the Centre; and
• preventing and detecting crime.

Legal basis for processing:

• It is in our legitimate interests to collect and use the personal data referred to in the section above so that we can provide a safer, more secure environment for visitors and staff at the Centre, and to protect our property and that of VIA Outlets.
• Please note that access to the security camera footage is restricted to authorised personnel of VIA Outlets and our security service provider that need to have access in order to achieve the purposes described in the section above. In addition, access to the footage will be granted to law enforcement agencies in certain circumstances in order to prevent and detect crime.

Controller(s) of your personal data:

• Centre Manco
• Centre Propco

Type of interaction with us:

• Using the car parking facilities at the Centre

Types of personal data we collect:

• We operate a vehicle number plate recognition system inside the car park at the Centre where we have identified a need and where other solutions are ineffective to achieve the purposes described in the section below. This means that if you use the car parking facilities at the Centre your vehicle number plate will be captured.
• There are prominent signs in the areas where the vehicle number plate recognition system is operated.

Purpose of processing (how and why we use your personal data):

• A vehicle number plate recognition system is used inside the car park at the Centre for preventing and detecting crime. 
• In addition, we aggregate information about the country in which your vehicle is registered to conduct statistical analysis of the geographical attraction of the Centre and build up a clearer picture about our customer base as a group. This helps us to work out how we can improve the Centre and better service visitors to the Centre. 

Legal basis for processing:

• It is in our legitimate interests to collect and use the personal data referred to in the section above so that we can:
• provide a safer, more secure environment for visitors and staff; and
• better understand our customer base as a group so that we can improve the Centre (which could also benefit you).
• Please note that access to the vehicle number plate recognition system is restricted to authorised personnel of VIA Outlets and our security service provider that need to have access in order to achieve the purposes described in the bullet points in the section above. In addition, access to the system will be granted to law enforcement agencies in certain circumstances order to prevent and detect crime.
• Other authorised personnel of VIA Outlets have access to aggregated information about the countries in which visitors’ vehicles are registered but not to the underlying vehicle number plates.

Controller(s) of your personal data:

• Centre Manco
• Centre Propco

Type of interaction with us:

• Contacting us

Types of personal data we collect:

• If you contact us regarding this Privacy Policy by, for example, email, we may keep a record of that correspondence and any personal data that you provide, such as your name and email address. 

Purpose of processing (how and why we use your personal data):

• We use your personal data so that we can respond to your communications.

Legal basis for processing:

• It is in our legitimate interests to collect and use the personal data referred to in the section above so that we can serve our customers’ needs.

Controller(s) of your personal data:

• If you contact us regarding any of the interaction types described above, the data controllers of any personal data you provide are the companies listed beside the relevant interaction type.