Privacy Policy

This privacy policy describes how Unibail-Rodamco-Westfield Netherlands B.V. (Unibail-Rodamco-Westfield) uses your personal data that we collect via the website www.thebriefingmallofthentherlands.com (the Website).

If we make changes to this privacy policy, we will inform you about this. The most recent version will be available on this website at all times, along with a brief overview of the most important changes compared to the previous version.

Who is responsible?

The person responsible for the processing of personal data that we collect through the Website is Unibail-Rodamco-Westfield. We are based in Amsterdam. Our visiting address is Schiphol Boulevard 371, 1118 BJ Schiphol. Our postal address is PO-Box 75705, 1118 ZT Schiphol, but you can also contact us via e-mail: info@leidsenhagevernieuwt.nl.

What personal data do we collect?

Through the Website we collect personal data that you provide us directly when you fill in the contact form. We also collect personal data by keeping track of how you use the Website. We do this, for example, through Google Analytics on the Website.

Which personal data we collect and process from you in concrete terms will depend on the way in which you have contact with us, for example, whether you only visit the Website or fill in the contact form. Below we have stated which personal data we can collect via the Website:

Name and contact details:: If you fill in a contact form on the Website, we collect your name, telephone number, e-mail address, and gender. We also collect any further information that you include in the contact form, such as the name of the organization on whose behalf you fill out the form, as well as the sector in which it works, your comments or requests and any personal details in the attachments that you add to your message.
Device and browser:: Through Google Analytics we collect information about the type of device with which you use to visit and keep track of which pages of the Website you have visited.

How do we use the personal data that we collect?

We use the personal data we collect in order to respond to your request or request via the contact form and to contact you to possibly conclude a lease with the organization on whose behalf you fill out the form. You are not obliged to provide us with personal data, but if you don’t, we may not be able to provide you with any service. For example: if you want us to respond to a request from you, we need your contact details.

What is the legal basis of data processing?

For the personal data we collect through the Website, our basis is your consent. You can revoke this permission at any time free of charge, after which we will delete your data. You can withdraw your consent by sending an e-mail to info@leidsenhagevernieuwt.nl.

Where do we keep your personal data?

We keep your personal data on servers that are located within the European Economic Area. Your data will not be stored or processed outside the European Economic Area.

We share personal data with processors who carry out part of the processing of personal data on our instructions. If we sell our business or part of it (including individual assets), or if we merge or otherwise merge with another company, we will share your personal data with the new owner or our merger partner. We also share personal data with regulators, investigation services or other government bodies if we are required to do so by law.

We have written agreements with all processors about the way in which they process personal data on our behalf. We ensure compliance with these agreements.

For what period do we keep your personal data?

We do not store your personal data longer than necessary for the purpose for which we process the personal data. The storage period may differ per purpose.

Contact details and other information that you provide to us via the website:: We keep this information for a maximum of 2 years after the last contact with you.

What are your rights?

You have the right to inspect the personal data we process, the right to rectify or delete this data, the right to request a restriction of your processing, the right to transfer your data and the right to object. Most of these rights are not absolute. Below we describe your rights in more detail and provide information on how you can exercise your rights.

We will respond to your request within one month but have the right to extend this period by two months. If we do this, we will inform you about this within one month of your request.

Right of access:

You can ask us to confirm whether we process personal data of you. If this is the case, you can ask us to access these. We will also provide you with the following information:

the purpose of the processing;
the categories of personal data that we process from you;
any third parties to whom we have provided your personal data;
the expected retention period of your personal data or, if this is not possible, the criteria we use to determine the retention period;
your right to request the rectification or removal of your personal data or to request a limitation of processing;
your right to file a complaint with the supervisor;
and if we have not received the personal data from you, all available information about the source of that personal data.

Right to rectification:

You can ask us to correct your personal data if they are incorrect. With due regard for the purpose of the processing, you can also ask us to complete incomplete personal data.

Right of objection:

You have the right to object to our processing of your personal data. However, you only have this right if we process your personal data on the basis that this is necessary for our legitimate purposes (see section “What is the legal basis of the data processing?” for more information).

We will meet your request unless we:

have compelling legitimate reasons to continue with the processing and these grounds outweigh your interests, rights and freedoms;
or need the personal data in connection with the institution, exercise or substantiation of a legal claim.

Right to object to ‘direct marketing’:

If we process your personal data for direct marketing purposes, you have the right to object. If you make use of this right, we will stop processing your personal data for this purpose. In that case you will no longer receive our newsletter.

Right to limit the processing:

You can request us to obtain the limitation of our processing of your personal data. If we comply with your request, we will – in addition to storage – only process your personal data with your consent or for the establishment, execution or substantiation of a legal claim, to protect the rights of others, or for weighty reasons of general interest for the European Union or a Member State.

We will meet your request if:

you dispute the accuracy of the personal data for the period to verify this;
the processing is unlawful and you object to the deletion of the personal data, but instead request the limitation of the processing;
we no longer need the personal data, but you need them for determining, exercising or substantiating a legal claim;
you object to the processing of your personal data by us for the period that we need to assess whether we have justified grounds for further processing that outweigh your interests.

If we have limited the processing of your personal data, we will inform you before we lift the restriction.

Right to removal:

You have the right to ask us to delete your personal data. This right is not absolute. We are only obliged to comply with your request under certain conditions.

We must delete your personal data if one of the following situations applies:

your personal data is no longer necessary for the purposes for which we collected or processed it;
you withdraw your consent and there is no other legal basis for further processing the personal data (only applicable if we process your personal data on the basis of permission);
you object to the processing and we do not have any prevailing compelling justified grounds for the processing;
we have processed your personal data in an unlawful manner; or
we must delete your personal data in order to comply with a legal obligation under the law of the European Union or Dutch law.
We are not obliged to comply with the request insofar as the processing of your personal data is necessary for:
the exercise of the right to freedom of expression and information;
the fulfillment of a legal obligation laid down in the law of the European Union or the Dutch law;
or determining, exercising or substantiating a legal claim.

Right to data transfer:

You may ask us for a copy of your personal data. You may also ask us to transfer your personal data to a third party if this is possible. You have this last right only if the processing is based on your consent or because it is necessary for the execution of an agreement between you and us, and the processing is carried out by automated processes.

If we comply with your request, we will provide you with your personal data in a structured, standard and machine-readable form. If we are of the opinion that complying with your request affects the rights and freedoms of others, we have the right not to comply with your request.

Right to file a complaint with a regulator:

We always strive to meet your requests and complaints. In addition, you always have the right to turn to the Dutch Data Protection Authority with requests and complaints. If you do not live in the Netherlands, you can also turn to your local privacy supervisor. The data from the Dutch Data Protection Authority are:

Autoriteit Persoonsgegevens Postbus 93374 2509 AJ DEN HAAG 0900-2001 201 www.autoriteitpersoonsgegevens.nl

How do we protect your personal data?

We have taken appropriate technical and organizational measures to protect your personal data. Access to your personal data is limited to persons who necessarily have access to this. The Website is secured by means of an SSL certificate (https).