Privacy Policy

• Who is the Data Controller:
  
  Ingka Centres Portugal, S.A., with registered office at Avenida Doutor Óscar Lopes 4450-337 Leça da Palmeira - Matosinhos, legal person 507 161 025.
  
  This PRIVACY POLICY explains how we use any personal information we collect when you use this website and when you visit MAR Shopping Algarve and MAR Shopping Matosinhos.
  
  Data Protection Officer: privacy.centres.pt@ingka.com
  
  If you have any questions about exercising your rights as a data subject and, in general, about the processing of your personal data, you can always contact our Data Protection Officer.
  
  For what purpose and on what legal basis do we collect your personal data?
  
  We process your personal data to provide you with support on various fronts, capture images of our events, manage requests and finds and, possibly, manage any complaints you may have with our service.
  
  We may use your personal data for the following purposes:

• Video surveillance, for the protection of people and property, based on our legitimate interest in this.

• Managing your lost and found, based on our legitimate interest in doing so;

• Manage your claims, based on our legitimate interest in doing so;

• Transfer them to insurance companies or lawyers, in exchange for emails with them, based on our legitimate interest in following up on claims and resolving any problems arising from the management of the spaces.

• Manage our chatbot and customer support services, based on our legitimate interest in answering your questions and providing good customer service;

• Manage our social networks, based on our legitimate interest in answering your questions and providing good customer service;

• Capture images at actions and events, based on our legitimate interest in recording the event and sharing it for communication purposes.

We process your personal data for your membership of our Loyalty Program, to provide you with gift cards, to manage our campaigns and relationships with suppliers and service providers, in-store loans and orders, the use of our infrastructures or the provision of free Wi-Fi.

We may also use your personal data for the following purposes:

• Processing your membership of our Loyalty Program, so that you can take advantage of our offers and services in that context, based on the performance of a contract to which you are a party;

• Supply of gift cards, based on the execution of a contract to which you are a party, as well as our need to comply with legal obligations;

• Management of campaigns and offers and communication with winners, based on the performance of a contract to which you are part, as well as our need to comply with legal obligations;

• Management of our relationship with (potential) suppliers, shopkeepers and other service providers, based on our legitimate interest in this and the execution of a contract to which the data subject is a part;

• Management of competitions and targeted marketing actions, as well as the delivery of prizes to data subjects, based on our legitimate interest and the performance of a contract to which the data subject is a part;

• Management of in-store loans, based on the execution of a contract to which the data subject is a part;

• Management of orders placed on the Ingka platform, based on the performance of a contract to which you are part.

We process your personal data if you want to work with us.

We may also process your data to:

• Receive your spontaneous application and manage it, on the basis of pre-contractual due diligence at your request or on the basis of the need to execute a contract to which you are a party, as well as our legitimate interest in analyzing applications and finding a vacancy for you;

• Receive your application for a specific, open position and contact you in the event that we are considering your CV, based on pre-contractual due diligence at your request or on the need to perform a contract to which you are a party, as well as on our legitimate interest in reviewing applications. In the event that you are not hired by us, if you give us your consent, we may store your data for an additional period of 2 years in order to find you another vacancy.

We process your data to provide you with free Wi-Fi, or to send you news about MAR Shopping.

Finally, we may process your data to:

• Provide you with free Wi-Fi on our premises and retain your MAC address for this purpose, based on the performance of a contract to which you are a party. If you wish to be authenticated with your MAC address every time you visit the mall, you can give your consent for us to store it;

• Send you newsletters about MAR Shopping, if you consent to this.

Please note that when your data is processed on the basis of consent, this can be revoked at any time, without any consequences for the data subject. Your consent provided for the purposes for which it is applicable above can be revoked by contacting privacy.centres.pt@ingka.com.

The data we process on the basis of the need to perform a contract is essential for you to be able to work with us. If you do not provide it, we will not be able to conclude the contract with you.

If you would like to know more about the processing of your data as a customer, you can always consult our Table of Grounds, Purposes and Retention Periods.

How long do we keep your personal data?
For the various purposes, we keep your personal data for the following periods of time:

• To manage your complaints, if you make them in the Complaints Book, for a period of 3 years. Otherwise, for the duration of the purpose for which the personal data was collected;

• For video surveillance purposes, we keep your personal data for a period of 30 days;

• For other personal data processed on the basis of our legitimate interest, we keep them until the purpose for which they were collected ceases;

• In the case of tax or billing data, we keep it for a period of 10 years;

• Personal data processed on the basis of the performance of a contract to which the data subject is a party is kept for the duration of the purpose for which it was collected;

• In the specific case of personal data from applications, these are kept for a period of 5 years in order to comply with legal obligations. In the case of a spontaneous application, data that is not directly necessary to comply with the same legal obligation is kept for an additional period of one year. In the case of specific vacancies in the aforementioned situation, data may be kept for an additional period of 2 years if you give your consent;

• In the case of use of the Lego Kiddyland platform, data is kept for a period of 1 year or until you request its deletion, if this occurs earlier;

• Personal data processed on the basis of consent is kept for a period of 2 years or until you revoke your consent.

• Data relating to the provision of free Wi-Fi is kept for 5 days.

Who has access to your personal data? To whom do we disclose your personal data?

In relation to the processing of your personal data, Ingka uses or may use third party subcontractors to process your personal data on our behalf and in accordance with the instructions provided by us, in strict compliance with the applicable legislation as well as this Statement.

Any entity subcontracted in this context will not transmit your data to other entities without Ingka's prior written consent and without an applicable legal basis for such transmission. Ingka undertakes to subcontract only those entities that offer adequate guarantees of the implementation of technical and organizational measures in order to ensure the protection of your rights. All entities subcontracted by Ingka will be bound to Ingka by a written contract which regulates, among other things, the object and duration of the processing, the nature and purpose of the processing, the categories of data subjects and the rights and obligations of the parties (“Agreement on the Processing of Personal Data”).

In accordance with Applicable Law, Ingka may transmit or communicate your personal data to other entities, when such transmission or communication is necessary for the performance of the contract concluded between us, or for pre-contractual steps at your request or when it is necessary to comply with a legal obligation to which Ingka is subject.

In addition, Ingka may disclose your personal data to third parties where this is necessary for the purposes of (i) lawful purposes under applicable law, (ii) compliance with legal obligations of state, administrative or judicial authorities and (iii) responding to requests from such authorities.

Ingka may periodically verify that third parties fulfill their obligations and comply with the measures for the protection of personal data.

What are your rights?

Please be advised that the legislation in force grants you specific rights, including the right of access, rectification, erasure, restriction of processing, objection to processing and portability of your data in accordance with articles 15 to 21 of the GDPR.

Right of access - You can obtain confirmation that the personal data concerning you is being processed, as well as access to it, and a copy of the personal data being processed will be made available to you on request and if there are no legal restrictions.

Right of rectification - You can request that your inaccurate personal data be rectified or that your incomplete personal data be completed.

Right to erasure - In accordance with the law, you can also request the erasure of your personal data at any time. Ingka may refuse your request in certain situations, namely when the data is still necessary for the purposes for which it was collected, or when the processing is necessary for compliance with a legal obligation.

Right to restriction of processing - The data subject may obtain restriction of processing where:

a) The accuracy of the personal data is contested;
b) The processing is unlawful and the data subject requests restriction as an alternative to erasure.
c) Ingka no longer needs the data for the original purpose and the data is required by the data subject for the establishment, exercise or defense of legal claims and;
d) If the data subject has objected to the processing, until it is ascertained whether the legitimate interests of the controller override those of the data subject.

Right to data portability - When the basis for lawful processing is consent or the performance of a contract and processing is carried out by automated means, the data subject has the right to request the portability of their data. This right may not, however, prejudice the rights and freedoms of third parties.

Right to object to the processing of personal data - When data is processed on the basis of legitimate interest or public interest, or when data is processed for direct marketing purposes, the data subject has the right to object to the processing.

Right to withdraw/revoke consent - When consent is the legal basis for processing the data, you are guaranteed the right to withdraw consent at any time. However, this does not invalidate the lawfulness of the processing carried out up to that date on the basis of the consent previously given.

You can also contact Ingka at any time by sending an e-mail to privacy.centres.pt@ingka.com to be informed clearly of the operations indicated and the rights mentioned and, if you wish, to obtain further information and exercise any of the rights mentioned above.

You can also contact Ingka's Data Protection Officer at the following address: privacidade@ikea.com.

Likewise, we inform you that if you consider that the processing of your data violates the General Data Protection Regulation, you have the right to file a complaint with a competent supervisory authority. In Portugal, the competent authority is the National Data Protection Commission (www.cnpd.pt).

Cookies

Our website uses cookies. Cookies work to make the browsing experience on our website as smooth as possible and remember your preferences so that you do not have to enter your data repeatedly. They also allow us to optimize the way our website works and, with your consent, to deliver relevant advertisements.

You can control which cookies are used. We have a page dedicated to cookies, which explains more about how and why we use them, and how you can manage them. For more information, please read our Cookie Policy.

Other websites

Our website may contain links to other websites. This PRIVACY POLICY only applies to this website, so when you click on links to other websites you should read their respective PRIVACY POLICIES.

Changes to our PRIVACY POLICY

Our PRIVACY POLICY is periodically reviewed and we will post any updates to it on this website.

Whenever a change of major importance is considered, we will inform data subjects by appropriate means and by email if they are registered and active in our database.