Privacy

(i) Klépierre may collect Your Personal Data in connection with Your visit and Your use of its online services and those of its partners, Your customer journey for those services (e.g. cookies for audience metering) or Your contacts with the Klépierre teams, in particular at Klépierre:

Your Personal Information may also be collected in connection with Your use of other products and services offered by Klépierre, particularly in its shopping centers.

That Personal Information is that which You provide by means of forms, whether or not in hard copy, either on the websites or mobile applications provided by Klépierre, or at the terminals installed in its shopping centers, or in response to enquiries made to You by Klépierre employees or service providers authorized by it.

On these occasions, Klépierre takes into account the principles of minimum data processing and data protection, from the design stage of projects and in default settings (privacy by design and privacy by default settings). Therefore, only relevant, appropriate and limited information is collected for the purposes for which it is processed.

The Personal Data required for processing are indicated in the collection medium with a "! " or "*". Outside of these situations, you are free to decide whether you wish to provide (any part of) your Personal Data, taking into account that such a decision may lead to a restriction on your access to certain services or products offered by Klépierre, or other functionalities offered on its websites and mobile applications (such as keeping your date of birth to congratulate you on your birthday).

(ii) Social plug-ins
Our websites may use plug-ins (the ""Plug-ins"") provided by social networks (facebook.com, Instagram, twitter, etc.). The Plug-ins are identified by the logo of the social network to which they belong. They allow you to mark the pages of these networks in Your Favorites and share Your Favorites with their other users.

When you visit a page that contains Plug-ins, your browser connects directly to the corresponding social media servers. The Integrated Plug-ins inform the social network that you have opened the corresponding page on our sites. If you are connected to the social network, your visit can be linked to your account on the social network. If you use the plug-ins, for example by clicking on the "share" button on Facebook, the corresponding information is sent directly by your browser to the social network of Facebook and is stored there. Even if you are not connected to the social network, it is possible that the Plug-ins transmit your IP address to the social network.

These notes also apply to the use of the "JustAsk" functionality with which you can communicate with Klépierre via Facebook Messenger.

For more information about the purpose and scope of data processing by social media and Your rights in this respect, and to set up options to protect Your privacy, please refer to the privacy policies of the website of each of these networks, including:

(iii) Registration, connection via Facebook
In addition, we offer you the possibility to register with our websites using the Facebook registration button or via the "Login" button. If You choose to create an account using Your account on Facebook's social network, and subject to Your prior consent, the relevant social network will send us the Personal Data You have provided to that network (including but not limited to Your last name, first name, username, profile picture, e-mail address, gender, date of birth, education(s) and profession), Your contact details (street name, city, postal code and country), Your telephone number, Your "likes and dislikes" (such as pages, films, music, TV programmes, etc.).), Your publications, Your friends lists and other information that You have indicated as public information.

(iv) Cookies
When browsing our sites, cookies may be placed on Your device (computer, phone or tablet) depending on the preferences You have set and which You can change at any time.

A cookie is a small text file containing information relating to the navigation on these websites, the main purpose of which is to improve the way in which they are viewed and to enable personalised services to be provided to users.

On computers, cookies are managed by the Internet browser.

These cookies may be session cookies (in which case the cookie is automatically deleted when the browser is closed) or permanent cookies (in which case the cookie remains on the device until its expiry date).

Here you will find the cookies used by our websites.

How can you accept or reject cookies?
You can set your browser to accept or reject cookies, either systematically or depending on the sender, or to notify you when a cookie is stored on the terminal.

However, deleting all cookies used by the browser, including those used by other websites, may result in modification or loss of certain settings or information.

The configuration of each browser is different. You are responsible for following the instructions of your browser editor (the links available on the date of the most recent update of this page):

For more information about cookies and their consequences, please visit the website of the Dutch Data Protection Authority.

Your Personal Data is collected for specific, explicit and legitimate purposes. Depending on the situation, Your Personal Data may be used to:

None of Your Personal Data is currently processed by us in the context of automated decision-making regarding You, including profiling. However, Klépierre may send You personalised advertisements and other specific offers based on Your own Personal Information and the analysis of Your user behaviour and, in particular, the consumption preferences You have communicated to us. You can object to this profiling at any time under the conditions set out in article 7 below.

In addition, Klépierre may also use Your Personal Data for administrative purposes or for other purposes imposed by applicable law (for example, to notify You of a significant change in this Charter).

Klépierre streeft ernaar Uw Persoonsgegevens te beschermen en te beveiligen om ervoor te zorgen dat deze geheim gehouden worden en om te voorkomen dat deze worden vertekend, beschadigd, vernietigd of aan onbevoegde derden worden verstrekt.

Voor zover de verstrekking van gegevens aan derden noodzakelijk en toegestaan is, zal Klépierre ervoor zorgen dat die derden hetzelfde beschermingsniveau bieden als door Klépierre wordt geboden en verlangt Klépierre contractuele garanties om er met name voor te zorgen dat de gegevens uitsluitend worden verwerkt voor geoorloofde doeleinden, met alle noodzakelijke geheimhouding en beveiliging.

Klépierre treft technische en organisatorische maatregelen om ervoor te zorgen dat de Persoonsgegevens zo veilig mogelijk bewaard blijven, gedurende de periode dat dat noodzakelijk is voor het realiseren van de beoogde doeleinden en in overeenstemming met het toepasselijk recht.

Hoewel Klépierre alle redelijke maatregelen treft om Uw Persoonsgegevens te beschermen, is geen enkele verzend- of opslagtechnologie volledig onfeilbaar.

In overeenstemming met de toepasselijke Europese regelgeving verbindt Klépierre zich, in geval van een bewezen inbreuk in verband met Persoonsgegevens, die een groot risico zou kunnen inhouden voor de rechten en vrijheden van de betrokkenen, om die inbreuk te melden aan de betrokken toezichthoudende autoriteit en, voor zover dat is vereist op grond van die regelgeving, aan de betrokkenen (afhankelijk van de individuele dan wel algemene situatie).

Onverminderd het voorgaande dient U voorzichtigheid te betrachten om ongeoorloofde toegang tot Uw Persoonsgegevens en Uw apparaten (computer, smartphone, tablet, etc.) te voorkomen, in het bijzonder door een sterk wachtwoord te kiezen.

Voorts kunnen de websites en mobiele applicaties van Klépierre links bieden naar websites van derden die voor U interessant kunnen zijn (zoals sociale netwerken). Klépierre heeft geen zeggenschap over de content op de websites van die derden of hun praktijken als het gaat om de bescherming van de Persoonsgegevens die zij mogelijk verzamelen. Derhalve aanvaardt Klépierre geen enkele aansprakelijkheid voor de verwerking door die derden van Uw Persoonsgegevens, welke niet valt onder dit Handvest. U bent zelf verantwoordelijk voor het verkrijgen van informatie over de beleidsregels van die derden inzake bescherming van Persoonsgegevens.

(i) Your rights
Subject to the restrictions applicable under applicable regulations, You have the following rights with respect to Your Personal Data:.

➢ Right to information about the processing of Your Personal Data

Klépierre strives to provide you with concise, transparent, understandable and easily accessible information, in clear language, on the conditions under which Your Personal Data is processed".
➢ Right of access, rectification, erasure (or "right of forgetfulness") with respect to Your Personal Data

The right of inspection gives you the opportunity to obtain information from Klépierre about whether or not we process Your Personal Data and the conditions of such processing, as well as to receive a copy thereof (for an additional copy, Klépierre may charge a reasonable administration fee based on the administration costs incurred). If this request is sent electronically, the information will be provided in a common electronic form, unless you indicate otherwise.

In addition, You have the right to obtain immediate rectification by Klépierre of any Personal Data that is inaccurate or incomplete.

Finally, subject to exceptions provided by applicable law (e.g. retention necessary to comply with a legal obligation), You have the right to request Klépierre to delete Your Personal Data immediately for any of the following reasons:

- Your Personal Data is no longer needed for the purposes for which it was collected or otherwise processed;
- You wish to revoke your consent that served as the legal basis for processing your Personal Data, where applicable, and there is no other legal basis for such processing;
- You believe and can determine that Your Personal Data has been unlawfully processed;
- Your Personal Data must be deleted on the basis of a legal obligation.
➢ Right to Restrict the Processing of Your Personal Data
The regulations in force stipulate that this right may be exercised in certain situations, in particular:
- If You dispute the accuracy of Your Personal Data, for as long as necessary to verify its accuracy;
- if you believe and can determine that the processing of Your Personal Data is unlawful but you object to the removal of the Personal Data and instead require that the processing be restricted;
- If Klépierre no longer needs Your Personal Data, but You still need it to establish, exercise or defend Your legal rights;
- if You object to the processing on the grounds of the legitimate interest of the data controller, for as long as necessary to verify whether the legitimate interests of the data controller outweigh Your legitimate interests.

➢ Right to object to marketing (including profiling)
You may object at any time to the processing of Your Personal Data for marketing purposes. You can also only object to profiling. In that case, you will no longer receive personalised offers.
➢ Right to transferability of Your Personal Data
If the processing is based on Your consent or an agreement, the right to data transfer allows You to receive the Personal Data You have provided to Klépierre in a structured, common and machine-readable form, and to transfer that Personal Data to another data controller, without being hindered by Klépierre.

Wherever technically possible, you may request Klépierre to forward this Personal Data directly to another data controller".
➢ Right to revoke consent to the processing of Personal Data
If Klépierre processes your Personal Data on the basis of your consent, it may be revoked at any time by using the means available to you for that purpose (hyperlink and/or the procedure indicated under 7.2 of this Charter). However, the withdrawal of your consent is, in accordance with applicable law, only valid for the future and therefore does not affect the lawfulness of the processing carried out prior to this withdrawal.
➢ Right to lodge a complaint with a supervisory authority
If, despite Klépierre's efforts to protect the confidentiality of Your Personal Data, You consider that Your rights are not being respected, You have the right to lodge a complaint with a supervisory authority.
An overview of the supervisory authorities can be found on the website of the European Commission.
➢ Right to have access to your Personal Data after your death
Finally, You have the right to dispose of Your Personal Data after Your death by adopting general or specific provisions. Klépierre declares that it will comply with these provisions.
In the absence of provisions, Klépierre acknowledges the rights of heirs to exercise certain rights, in particular the right of access, if necessary for the settlement of the estate, and the right to object to the closure of the deceased's user accounts and to the processing of his/her data.
(ii) Procedures for exercising Your rights

For all questions relating to this Charter and/or for exercising Your rights as described above, for modifying Your information via the "My Account" page, to which You are entitled at any time, or for a specific question (not covered by the options offered on the "My Account" page), You can contact Klépierre, either by e-mail or post, by sending a letter, together with a copy of an identity document, to the following address:

Klépierre Management Nederland B.V.
T.a.v. Digital Marketing Department
P.O. Box 8243
3503 RE Utrecht
Email address: GDPR.nederland@klepierre.com

Klépierre will send you a response as soon as possible and in any case within one month after receipt of your request.

If necessary, this period may be extended by two months, given the complexity and number of requests addressed to Klépierre. In this case, you will be informed of this extension and the reasons for the delay.

If your application is submitted electronically, the information will, where possible, also be provided to you electronically, unless you explicitly indicate otherwise.

If Klépierre does not respond to your request, it will inform you of the reasons for not responding and you can lodge a complaint with a supervisory authority and/or start legal proceedings.