Privacy Policies

Your privacy is important to us, and we recognize the trust you are placing in it through your dealing with it.

This privacy policy will handle personal data collected by using contact e-mail addresses of the present website (“the Website”) of our users.

Therefore, we are subject to national, international and European data protection laws and regulations, including the General Data Protection Regulation (EU) 2016/679 (hereinafter the "GDPR").

1.1 When you wish to contact us using form on the Website

We may collect the following personal data from you:

• first name/last name

• title (optional)

• company name

• e-mail address

• phone number (optional)

• service of interest

• country of interest

1.2 When you ask to receive the Newsletter

We may collect the following personal data from you:

• e-mail address

• first name/last name

• title (optional)

• company name

• industry of interest

• service of interest

• country of interest

When you want to receive the Newsletter, to receive the specific documentation ou are contacting us via the contact e-mail addresses of the Website, you expressly accept that your personal data may be collected by the Controller:

Unibail Management

Simplified joint stock company with a share capital of EUR 20 000,00

Registered office is located at 7 Place du Chancelier Adenauer 75016 Paris

Registered with the Paris Trade and Companies Registry under SIRET 414 878 389 RCS Paris

VAT Number FR49414878389

Tel: 33 1 53 437 437

You can contact the data controller (Unibail Management or another company of the Unibail-Rodamco-Westfield Group) and its data protection officer:

• at the following postal address: 7 place du Chancelier Adenauer 75016 Paris,

• at the following email address: data.protection@urw.com

We process your personal data collected via the contact form on the Website on the basis of our legitimate interest in order to be able to provide you with a response.

Moreover and subject to obtain your consent, your personal data may be processed by Unibail Management in order to send you commercial prospectus in relation to products and services of Westfield Rise. In this case, you will have the right to object to these communications, simply and free of charge, at any time, by clicking on the dedicated unsubscribe link or by contacting us at the following address: data.protection@urw.com.

Personal data collected will be kept for 3 years from last digital contact or use of the services.

Pursuant to applicable laws you have various rights in relation to the processing of your personal data, depending on the relevant situation:

• Right to access to your personal data: You have the right to request confirmation that we process your personal data and, in this case, to receive a copy of it;

• Right to rectification of your personal data: If the personal data we are processing are inaccurate, you have the right to request the rectification of your personal data;

• Right to erasure of your personal data: You have the right to request the erasure of some or all of your personal data;

• Right to object to the processing of your personal data: You have the right to object to the processing of your personal data. This means that you can ask us to stop the processing of your personal data until we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. If we process your personal data for direct marketing purposes and you object to that use, we will stop the processing of your data for such purposes;

• Right to restriction of the processing of your personal data: You have the right to request the restriction of processing of your personal data, in particular if you dispute the accuracy, lawfulness or our need to process your personal data. In such case and if applicable, we will then process the personal data only for the establishment, exercise or defence of legal claims or, where necessary, for protection of another natural or legal person, or other limited reason dictated by applicable laws;

• Right to data portability: You have the right to receive a copy of your personal data

  provided to us, in an interoperable format or, where appropriate and technically feasible, you may also ask for the transmission of such data directly to another data controller;

• Only for French citizens: You have the right to give instructions regarding the further processing of your personal data after your death.

If you wish to exercise your rights mentioned above, please enter your request via the following link: : MyRights.

If you wish to obtain additional information, please contact us at the following address: data.protection@urw.com or via post at 7 place du Chancelier Adenauer, 75116 PARIS, France.

May you have a complaint about the way your data are processed, you may lodge a formal complaint with the competent data protection authority.

Your information is strictly confidential and will never be transferred to a third party for commercial and/or promotional purpose. However, we may use subcontractors for the following reasons.

As of today, we work with one subcontractors: SENDINBLUE — 106 boulevard Haussmann, 75008 Paris, France. French Simplified Joint Stock Company with a registered capital of 387 722 euros. RCS of Paris: 498 019 298. Intra-community VAT number: FR80498019298

1. Managing the Business relationship

Your personal data may be transferred:

• to internal departments and to any company of the Unibail-Rodamco Westfield group to which the controller belongs;

• to any service provider acting as a subcontractor for maintenance and support purposes;

• to any counsel, agent or service provider (including attorneys, notaries, experts, arbitrators, insurers) involved in the management of the lease, its execution, its translation, if any, or in any litigation relating to the lease or the asset concerned;

2. Disclosure for legal reasons

Your personal data may be disclosed in order to comply with the law, upon valid legal request of the relevant authorities (e.g. summons, or court order).

The validity of such request will be assessed before any disclosure, especially if such request comes from a country outside the European Union.

3. Conduct of specific statistical surveys

Your Personal data collected in the framework of our commercial relationship may be transferred to our service provider in charge of conducting such statistical surveys. The servers of such company are located in the European Economic Area.

4 Change of Ownership

Your personal data may be transferred if Unibail Management or Unibail-Rodamco-Westfield Group, or any of the companies members of the Group, is involved in a merger, acquisition, dissolution, or sale of all or a portion of its assets. You will be notified via email and/or a prominent notice on the Website of any change in ownership and choices you may have regarding your personal information.

If we receive personal information about you that we did not ask for either directly from you, from someone on your behalf, or through someone on our behalf, and we determine that we could have collected this information from you had we asked for it, we will take reasonable steps to notify you, as soon as practicable, that we have collected your personal information. If we could not have collected this personal information, we will lawfully de-identify or destroy that personal information. Any unsolicited information provided by you, someone on your behalf or someone on our behalf, will be used for the purposes for which it was provided.

The protection of your personal data is important for Us. Your personal information are collected, stored, processed and transferred for the strict purposes for which it has been collected and according to the strict rules established in the Privacy Policy that is in line in particular with the GDPR.

Unibail-Rodamco-Westfield Group implements all the necessary technical and organizational security measures, in line with international best practices (such as ISO 27002:2013), in order to protect the personal data we collect against accidental or intentional manipulation, loss, destruction and unauthorized accesses. The Information Security Management System is continuously reviewed and adapted to the cyber-threats evolution.

We take the security of all the personal data we process very seriously and we are committed to protecting your personal data. We have therefore implemented appropriate technical and organizational security measures, and have chosen our providers accordingly.

We have entered into specific data processing agreements with each of our service providers that qualify as a processor and have checked their general technical and organizational measures. The service providers are only authorized to process your personal data, as data processor, in compliance with the provision of this Privacy Notice, only on our behalf and according to our instructions. We cannot control all the risks related to the use of the Internet, and data security also relies on everyone's vigilance and good use of these technologies, therefore we invite you to remain highly vigilant on potential inherent risks while using Internet services.

Your personal data will not be transferred to any country outside the European Economic Area.

This website may contain links or references to other websites or companies not operated or controlled by us (hereinafter “Third-Party Websites”) which have their own privacy policies. The policies and procedures described here do not apply to those Third Party Websites.

We do not warrant that the information on the Third-Party Websites is accurate, complete and up to date. We make no warranties, express or implied, as to any of these Third-Party Websites and also disclaims any liability with respect to the access and content of these Third-Party Websites.

When you visit our website, we or our partners may use cookies and similar technologies to collect information about your use of our website.

What are cookies?

Cookies are small text files which are placed on your Terminal (computer or mobile phone) when you visit a website. Cookies are widely used in order to make websites work or to work more efficiently.

They help website to recognize your device and remember information about your visit (e.g., your preferred language, font size, other preferences, and information about your activity).

Our Use of cookies?

When you visit our website, we may place different types of cookies in your Terminal:

Strictly necessary cookies.

These cookies and technologies are necessary for the Website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies and technologies, but some parts of the site will not then work.

Performance cookies.

These cookies and technologies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

Targeting cookies.

These Cookies and Technologies may be set through the Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. If you do not allow these Cookies and Technologies, you will experience less targeted advertising.

Your choices regarding cookies?

By using our Website, you can consent to the use of the above-mentioned Cookies. Your choices are retained for a maximum period of 6 (six) months. You have several ways to manage your choices regarding cookies:

Our cookies management tool

The cookies management module available on our Website allows you to control the use that we and our partners make of the cookies present on the Website. You can choose at any time to accept, refuse, or set them all according to our choices by clicking on the appropriate button in the cookies management module, except for cookies strictly necessary for the use of the Website that you cannot disactivate.

Under the California law, California resident have the right to opt-out of the "sale" or "share" of your personal information to third parties. A “sale” is broadly defined to include a disclosure for something of value, and a “share” is broadly defined to include a disclosure for cross-context behavioral advertising. Click “Decline all” to opt-out of sales or shares of your personal information through tracking technologies on the Website.

The choices offered to you by your browser software:

Most browsers allow you to manage your cookies preferences by changing your browser settings.

You may set your browser to:

• Automatically reject or accept all cookies;

• Refuse or accept first party cookies and/ or third parties cookies;

• Receive a notification before any cookies are saved, giving you the chance to decide whether to accept it.

Your browser's "Help" function should tell you how to do this.

Alternatively, you can follow the links below that provide instructions for managing cookies settings in commonly used browsers:

• Chrome (https://support.google.com/chrome/answer/95647?hl=en )

• Internet Explorer (http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies )

• Mozilla Firefox (https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox)

• Safari (https://support.apple.com/fr-fr/guide/safari/sfri11471/mac )

The present privacy policy relates to our current privacy standards which may be modified. Any change will take effect from publication of the last updated version of the Privacy Policy.

Updated : 15.07.2024