We use cookies to make your experience better. To comply with the new e-Privacy directive, we need to ask for your consent to set the cookies.
Privacy Notice
1. Introduction
This Privacy Notice describes the way we treat all the personal data you provide or that we have obtained through our Dufry Websites and Applications and in our Stores. .
Summary of provisions:
- Controller of Personal Data, Sources of Personal Data and What Personal information about Customers do Dufry Websites and Applications collect?
- Lawful Purposes for Processing and collecting Personal Data
- Sharing your Personal Data
- Storing your Personal Data
- Security of Personal Data
- Transfer of Data Outside of your Country
- Retention of Personal Data
- Minors
- Online Technologies and Cookies
- What Are Your Rights?
- What Are Your Choices?
- Changes to Our Privacy Statement
- Where to make a Data Protection complaint?
2. Controller of Personal Data, Sources of Personal Data and What Personal Information about Customers do Dufry Websites and Applications collect?
(a) Controller and Processors of Personal Data
Dufry AG and WDFG UK Limited (together “Dufry”), the owner of website which you are currently visiting, are joint controllers of the personal data that you (as data subject) provide us or we receive in our Stores and Dufry Websites and Applications.
(b) Types of Personal Data collected and Sources of Personal Data
We collect personal data directly from our customers through Dufry Websites and Applications and our Stores.
We collect the following types of personal data about you from the following sources:
Information that you provide to us: We receive and store any information you enter on Dufry Websites and Applications and Stores or give us in any other way such as during registration, accessing your account or profile, submitting queries or as part of a survey or competition or utilising gift coupons or customer support or communicate with us or purchasing in Stores or using our products or services.
Due to such actions, you may supply us with your (i) name, postal address, email address, phone numbers, (ii) data necessary to process your payment (including the credit card/payment instrument information and personal security code associated with your credit card) for Store purchases or on line purchase of gift vouchers, to reserve purchases (under the Dufry Reserve & Collect Websites), to apply for a refund, or to communicate with customer services regarding a refund to the credit card/payment instrument, (iii) flight departure/destination, flight date and delivery address for the subscriber and airport location to collect any pre ordered reserve & collect products or make purchases of our products and services in Stores. Demographical data such as your age, gender, country, nationality, preferred language, passport number and citizenship, date of birth, country of residence, country of registration to Dufry Websites and Applications, purchases history and other travel information including travel date, preferred departure airport and airline loyalty membership details are also collected. You must hold a valid flight ticket to be able to make duty free or duty paid purchases from Dufry. Such information is collected to meet our contractual obligations with airport authorities and legal obligations towards customs and other regulatory authorities.
When you register for membership, subscribe for services or the newsletter or other marketing communications including blogs or customer comments or use the Dufry Websites and Applications or purchase in our Stores, we collect log in details, passwords, any password questions and hints, similar security information used for authentication and account access is also collected for the access into your personal account and profile and to utilise the Reserve and Collect elements or the Red By Dufry customer loyalty elements of Dufry Websites and Applications or in our Stores.
You can choose not to provide certain information, but then you might not be able to utilise many of the features of the Dufry Websites and Applications. See What Are Your Choices section below.
Information collected automatically through interaction with us: We receive and store information where you interact with us through using our products and services, including online technologies (ie Cookies) and receiving error reports or usage data from software applications on your devices online or via WiFi communications in Stores.
We may operate CCTV in our Stores and collect video footage and images of you and others when you visit our Stores (including your/their location and physical appearance). For more information please contact the Store staff.
We collect and analyse device, connectivity and configuration data including the Internet protocol (IP) address used to connect your computer or device to the internet, computer and connection information such as browser type, version, time zone and other computer software installed on the device, browser plug in types and versions, operating system, shopping preferences, wish list, purchase history, the features you use and pages accessed and web sites visited.
We also collect the Uniform Resource Locator (URL) clickstream to and from our Dufry Websites and Applications, including date and time, cookie number, products viewed and searched for and the phone number used to contact our customer support teams. We collect technical information to help us identify your device for fraud prevention and diagnostic purposes such as any problems to the product and settings, error reports including data as to the type and severity of the problem, details of software and hardware related to an error, contents of files you were using when an error occurred and data about other software on the device.
We collect browser data including persistent and session cookies and other online technologies as set out below in the Online Technologies section below. We utilise Google Analytics to assist with software tools to measure and collect the performance data on Dufry Websites and Applications including download error or performance issues caused. Further information can be found under https://www.google.com/intl/en_uk/analytics/tos.html (Google Analytics Terms of Service & Privacy).
Most browsers allow you to opt out of cookies or turn on “do not track”. For more information, see What are Your Choices section below.
Mobile or Dufry Applications: When you choose to use or download Dufry Websites and Applications or allow connectivity via WiFi connections to your device, we receive information about your location and mobile device, including a unique identifier for your personalised device, your GPS data or wireless networks data (WLAN). Location data is neither stored nor transmitted to third parties. If you agree with the localisation function, we can provide you with location-based services including advertising, search results and personalised content. When you are near one of our Stores, then we can use push email communications to you if you have provided your consent to receive such communications and advertising.
Most mobile devices allow you to turn off location services. For more information, see What are Your Choices section below.
E-Mail Communications: To provide more personalised and interesting email communications, we receive a confirmation when you open email from Dufry Websites and Applications or your device is near one of our Stores, if your computer or device supports this capability and if you have agreed with the localisation function though your device. If you choose not to receive any emails or other mail from us, please adjust your customer communication preferences in your account profile.
Information from other Sources: We receive information about you from other sources and add it to our account information. The third party sources include:
- Updated delivery and contact address data from third parties which are used to update our records and deliver your next purchase more easily;
- Social networks when you grant permission to Dufry Websites and Applications to access your data on one or more networks;
- Service providers that help us determine a location based on your IP address to allow customisation of certain products to your location;
- Our partners which we offer co-branded services or conduct joint marketing activities;
- Publicly-available sources from open government databases or other data in the public domain;
- Information (including CCTV footage and images, as the case shall be) from third parties including the police, tribunals, courts, regulators, airports or other authorities in connection with security incidents or actual or suspected unlawful acts, which may include information relating to actual, alleged or suspected criminal offences.
3. Lawful basis and purposes for processing and using your personal data
(a) Lawful purposes
Your personal data is processed by the Group on the basis of a lawful “justification” for such processing, to the extent required by law. In the majority of cases, the processing of your personal data will be justified on one of the following bases:
(a) It is provided for in your contract of providing products and services requested by you to be provided by us;
(b) It is necessary for us to comply with a legal obligation;
(c) It is with your freely provided unequivocal and informed consent for specified processing purposes;
(d) It is necessary to protect your or someone else’s life; or
(e) It is in our legitimate interests as a business and as your supplier of contractually requested goods, and our interests are not overridden by your interests, fundamental rights or freedoms including legitimate interests as set out below.
The processing of personal data relating to actual, alleged or suspected criminal offences and convictions will be justified by one of the above bases and normally one of the following special conditions:
(a) It is necessary for the purposes of preventing or detecting crime or other unlawful acts;
(b) It is necessary to protect the public against dishonesty; or
(c) We have obtained consent from the relevant individuals involved for the processing.
(b) Purposes of processing personal data
We obtain, use, disclose and otherwise process personal data about customers, based on the execution of a contract to:
(i) process transactions they request, including e-commerce Reserve and Collect selection and mobile transactions;
(ii) process information from the Red By Dufry loyalty programme to verify the identity of the cardholder is the owner of the Red By Dufry loyalty card and to ensure that the collection or redemption of Red By Dufry points and confirm the status of a customer to allow for the correct discount to be applied to the sales of goods purchased in Stores or goods reserved for collection under the Reserve & Collect application and purchased in person in Stores;
This information will enable us to provide access to all areas of the loyalty programmes, the Reserve and Collect and Red By Dufry applications contained in Dufry Websites and Applications.
(iii) review and collect data from the boarding pass, nationality, destination and holder of the valid boarding pass to ensure that the passenger is part of the travelling public to allow Dufry or the Group to provide duty free goods under the terms of the contractual agreement with our landlords or airport authorities;
(iv) provide payment services including credit cards for online purchases and in Stores purchases;
(v) provide goods and services to the customers that they have requested (ie provided an email address to allow the regularly newsletter to be provided to the customer);
(vi) protect the log in details of the subscribers and system integrity of the Dufry Websites and Applications;
(vii) communicate with you and personalize our communications with you. i.e. respond to your queries or accommodate your preferences and registration for program membership. We communicate with you by email or phone or SMS to inform you about our services, how to keep your subscription or account active, to communicate regarding a refund or customer inquiry or assisting with web site or Dufry Websites and Applications access or technical queries;
(viii) to carry out your contractual transactions with us and to provide our products (including the reserving of and pre-selection of duty free products listed in the Reserve and Collect website for collection at the requested Store) to you as requested by you. This includes using your personal information to register or subscribe to any services provided thorough Dufry Websites and Applications; fulfil our legal obligations; we collect personal data especially the following: passenger name, boarding card to ensure that the consumer reserving the products is a valid traveller to meet our contractual obligations to our landlord and long term concession agreement as well to allow the calculation of the VAT or similar tax allowances to be calculated for the customs authorities; comply with legal obligations, policies and procedures and for internal administrative and analytics purposes; process information or claims in connection with incidents at Stores;
(ix) protect the rights or property or safety of Dufry Websites and Applications or Stores, including our customers and visitors; and
(x) assist third parties including the police, tribunals, courts, regulators, airports or other authorities with their investigations or requests or to report security incidents or suspected or actual unlawful acts. This assistance is provided for the purposes of preventing or detecting unlawful acts, the apprehension or prosecution of offenders, protecting the safety of our customers or visitors or in connection with other lawful requests to disclose personal data that we received from or make to third parties (for example missing persons investigations).
Where we process your personal data on the basis of our legitimate interests, those will be our interests in:
- Providing and improving the products we offer and perform essential business operations. This includes operating the products, maintaining and improving the performance of the products, developing new features, conducting research and providing customer support;
- Protecting the security and safety of our products and our customers, to detect and prevent unlawful acts including fraud and to confirm the validity of the subscriber logging into Dufry Websites and Applications;
- Using personal data for statistical and analytical purposes. Whenever reasonably possible we will anonymize such information before using it for statistical or analytical purposes. Such information is processed in the legitimate interests of Dufry AG to maintain the efficiency, relevancy and availability of the Dufry Websites and Applications;
- Effective management and operation of Dufry and the Group companies;
- to maintain our business relationship, where you are a user or subscriber of our Dufry Websites and Applications;
- improve Dufry Websites and Applications, Stores, quality of service and customers shopping experience;
- Advertising : Sending you communications regarding our products, services, campaigns, special offers promotions, contests and customer surveys, newsletters related to Dufry Websites and Applications and Stores and to provide invitations to attend events;
- to commence, protect or defend Dufry in actual or threatened legal proceedings.
Finally, only if you have registered for membership with Dufry Websites and Applications and you have granted consent for this purpose, we will process your data for:
- Provide you with targeted advertising based on your purchase history (including items purchased, day and store of purchase), date of birth, gender, country of residence, country of registration, nationality, Red By Dufry status;
- Provide you with targeted advertising based on the travel information you provide us (and including travel date, preferred departure airport, airline loyalty membership details), by answering the customers surveys you may receive from us from time to time;
- sending or making promotional offers on behalf of other companies that offer travel related services, but if we do this, then we do not give that business your personal data.
4. Sharing your Personal Data
We will not transfer or disclose your personal information, other than as set out below:
(a) Effective management and operation of Dufry and the Group companies, and only when certain services are centralized;
(b) to third party service providers (companies or individuals) that we employ to perform functions on our behalf such as fulfilling orders, delivering to retail locations or Stores, sending postal mail and email, removing repetitive information from customer lists, analysing data, providing marketing assistance, providing search results and links, processing credit card payments and providing customer service. These providers have access to personal information needed to perform their functions, but may not use it for other purposes and include the following categories of data recipients:
(i) advertising and media consultants,
(ii) market research consultants;
(iii) providers of technical services;
(iv) website designers and developers;
(v) cloud computing service providers;
(vi) electronic storage providers;
(vii) customer services;
(c) in releasing account and other personal data to comply with the law, undertaking litigation or other proceedings or to enforce or comply with or apply our terms of use and other agreements, or protect the rights, property or safety of Dufry Websites and Applications or Stores. This includes exchanging information with other companies for fraud prevention and credit risk reduction;
(d) to comply with legal or regulatory requirements or obligations in accordance with applicable law, a court order or a subpoena;
(e) with regulatory authorities, airport authorities, Dufry AG and Group landlords and concession partners and customs and tax authorities to show the calculation of such tax exemptions;
(f) to data analytical firms, Google Analytics Inc.;
(g) in an emergency, such as to safeguard the life, health, or property of an individual; or
(h) to third parties including the police, tribunals, courts, regulators, airports or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts. This includes allowing such third parties to access and take copies of CCTV images or other video footage where CCTV cameras are in place and these relate to such incidents and acts;
5. Storing your Personal Data
Your personal information you have provided to the controller will be located in a Dufry AG cloud based customer management database software tool located within data centres maintained in the territories of the EEA, the purpose of which is to manage the business relationship with you, in accordance with the provisions of the data protection laws.
Dufry AG will manage the customer relationship with you and any marketing materials can be provided, by Dufry as Controller.
6. Security of personal data
Your personal data will be secured by taking security measures that are commensurate with the sensitivity of the personal data processed. To this end, Dufry and all Group entities maintain appropriate physical, technical, and administrative security measures with a view to protecting personal data against theft; accidental loss; unauthorised alteration; unauthorised or accidental access, processing, erasure, use, disclosure or copying; and/or accidental or unlawful destruction.
When we have provided (or you have chosen) a password allowing access to certain benefits of the Dufry Websites and Applications, you are responsible for safeguarding it and keeping it confidential and you undertake not to allow it to be used by third parties. Unfortunately, the transmission of information thorough the internet is not completely secure. Although we will take all reasonable commercial measures to protect your personal data, we cannot guarantee the security of any personal information or data you disclose on line. You accept the inherent security implications of using the internet and to the extent permitted by law, we will not be responsible for any breach of security, unless we have been acting with gross negligence and only within the limitations as set out in the terms and conditions of use for Dufry Websites and Applications.
7. Transfers of Data Outside of Your Country
Your personal data (as described above) may be transferred to other Group entities or to third parties described above, only to the extent required for Dufry AG and group companies to perform their obligations to you, or for you to access your Dufry Websites and Applications, or for the purposes described above in this Notice, provided such purposes are in accordance with applicable laws. In particular:
- Your profile and contact information contained in systems such as corporate communications systems, customer relationship management databases or directories will be accessible to all marketing, sales and customer support or customer care employees of Group companies worldwide.
- Your personal data may be transferred to or accessed by Group employees located inside or outside your country, and/or a person or company that is not part of the Group located in or outside your country, on a need-to-know basis. Transfers outside the EU may be made pursuant to the European Commission's Standard Contractual Clauses ("SCC"), the EU-U.S. Privacy Shield certification or other legally acceptable mechanisms which ensure an adequate level of protection. As permitted by law, you may be entitled, upon request to the Global Data Protection Co-Ordinator, to be informed about the appropriate safeguards that have been taken to protect your Personal Data for transfer outside the EU.
- Dufry AG may process your personal data as a controller in order to administer and provide you with products and services that you requested, to administer global sales and customer programs, promotional and marketing activities and surveys, competitions and coupon and gift promotions, communications with customers, advertising campaigns with us, to manage sales and customer relationships and to prepare sales and customer relationship management and customer support reporting, consistent with the terms of this Notice. Dufry AG is located in Switzerland, a country that benefits from an adequacy decision of the European Commission that has found Swiss law to afford adequate protection to personal data.
- Transfers may be made to respond to law enforcement requests or discovery procedures, or where required or permitted by applicable laws, court orders, government regulations, or government authorities (including tax and employment). Such transfers may entail access by courts or governmental authorities outside your country, after having ensured that only your minimal necessary data is disclosed and transferred, or that such data is de-identified or that, where possible, appropriate stipulative court orders have been issued.
A list of the countries located outside the EU to which your Personal Data may be transferred, and an indication of whether they have been determined by the European Commission to grant adequate protection to Personal Data, can be found at https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/data-transfers-outside-eu_en.
Transfers of Personal Data in accordance with this Section 7 are based on the same legal bases as applicable for the respective purposes of processing as set out above.
8. Retention of personal data
Dufry data retention policy requires that personal data be retained for no longer than required to fulfil the purposes for which it was collected. In general, personal data, or records containing personal data, will be retained for periods of time required in accordance with applicable legal, tax, or accounting obligations. In specific circumstances, and in accordance with applicable law, Dufry may retain your personal data for longer periods of time (such as for the duration of the relevant statute of limitation) so that we have an accurate record of our dealings with you or to protect the legitimate interests of Dufry AG or local Dufry entity name, who owns this Dufry Website or Application. In all cases, where your information is no longer required, Dufry will ensure it is disposed of in a secure manner.
9. Minors
Dufry Websites and Applications do not provide products and services to children. Whilst we may sell toys and confectionary which may appeal to children, any reservation for our products and services can only be provided to adults over the age of 18 years old. We do not knowingly collect personal information from children under the age of 18 years, without the consent of the child’s parent or guardian. Accordingly, the parent will need to complete and submit a fully completed and signed Parental Personal Data Consent Form along with evidence of the person’s identity, to the email address: privacy@dufry.com.
10. Online Technologies including Cookies
As a visitor, subscriber or continuing to access the Dufry Websites and Applications or via the WiFi network or location services in Stores, you consent to use of cookies and other online technologies as detailed in this Section and in accordance with this privacy statement. Dufry and its third party marketing partners may use cookies, invisible pixels and web beacons to obtain information about you while visiting the Dufry Websites and Applications and our Stores.
(a) Cookies
A "cookie" is a small text file that identifies your mobile device and/or equipment on our server. None of the Cookies we use collect your personal information and they cannot be used to identify you, only the mobile device and/or equipment used. Unless stipulated otherwise, we will not pass personally identifiable data to third parties.
In order to use Cookies in Dufry Websites and Applications, we ask your express consent to accept cookies on the Dufry Websites by clicking “ACCEPT”: (in the introductory page of the Dufry Websites and Applications, for it to be placed on the hard drive of your mobile device and/or equipment.)
We use 'persistent' cookies. 'Persistent' cookies usually have a long shelf life because they are "collected" and "updated" every time a user visits an application and/or page where the same or a similar cookie is being used.
Once you consent to the use of Cookies, the file is added and the cookie helps to analyse web traffic and lets us know when you visit a particular site. Cookies allow applications to respond to you as an individual. The web application can tailor its operations to your needs, by gathering your likes and dislikes and remembering information about your preferences. We use traffic log cookies to identify which applications and/or pages are being used. This helps us analyse data on web traffic and improve our Dufry Websites and Applications in order to adapt it to the customer’s needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Information obtained through cookies is used by us and by third parties that we have hired in order to show you advertising related to your preferences. For a full list of the cookies that we use, please click here.
Cookies generally help us provide better Dufry Websites and Applications, which allows us to monitor which pages you find useful and those which are not. A cookie does not allow us to access any other data on your mobile device, equipment or to any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer. Cookies, including those which have already been set, can be deleted from your hard drive.
If you wish to do so, you can change your browser settings and choose the options of storage or access to cookies, and enable, disable or delete them. These options should be done following the instructions in your browser:
However, you should be aware that by disabling the use of cookies may result in the inability to access some of the application areas, or suspend communications containing personalized information or avoid the correct functioning and access to Dufry Websites and Applications. For more information about how to change cookies settings in the browser, you can visit https://www.allaboutcookies.org.
(b) Google Analytics
Google Analytics are used to help us understand how to make the best use of our content and find out how we can improve it. These cookies allow us to track your progress through our Dufry Websites and Applications, collect personal data at their origin, which applications and/or pages you visit, and the time you spend on the site. This data is then stored by Google in order to create reports.
The information generated by the Google cookies about your use of the Dufry Websites and Applications, including your IP address, can be transmitted and stored by Google on servers in the United States. Google may use this information for the purpose of evaluating your use of the website, compiling application activity reports for us and providing other services relating to website activity and internet usage. Google may transfer this information to third parties when so required by law or where such third parties process the information on behalf of Google. Google will not associate your IP address with any other data held by Google. The Google Website has more information about Google Analytics and a copy of Google’s privacy policy pages.
(c) Interest based advertising tools including Google Inc “similar audiences” function, conversion tracking and Adserver Systems for distribution of advertising material and campaign analysis
We also work with vendors and strategic marketing partners to help deliver advertisements and personalised content that we believe will be of interest to you. These vendors and other partners include advertisers, advertising agencies, advertising networks, audience segment providers, data exchanges, analytics providers and other similar providers.
We may also engage one of these vendors to deliver our advertisements to consumers whose online behaviours on sites other than Dufry Websites and Applications indicate that they be interested in Dufry products and services. In other instances, we engage in special arrangements with certain advertisers in which we think our website visitors and subscribers would have an interest. We allow these advertisers to deliver co-branded messages (Dufry and advertiser) directly to consumers who have visited or subscribed to Dufry Websites and Applications.
Dufry Websites and Applications use what are known as Adserver systems for internet advertising and distribution of advertisements to desktop computers and mobile devices (ie. tablets, computer and smartphones). These systems control the distribution of advertisements using cookies. The cookies are stored for advertising contracts and by clicking on the advertiser’s advertisements, as well as by visiting the advertisers website on your computer or mobile device. The Adserver systems and cookies enable the provider to review the success of their advertising and to address website visitors with targeted advertising by activating advertisements that are personalised and related to the interests of the providers’ website visitors. Whilst personal data, ie name, address are not stored. You can deactivate the use of cookies by Adserver systems by means of a cookie opt out by clicking on the link below.
You can use the following link to deactivate Adserver system cookies: http://site.adform.com/privacy-policy/en/
(d) Social media log in and plug ins
On some of our websites, applications and\or mobile solutions, we use social plugins of the social network https://www.facebook.com (“Plug In”), which is operated by Facebook Inc., 1601 S.California Ave, Palo Alto, CA 94304, USA (“Facebook”).
The websites and\or our mobile solutions in Dufry Websites and Applications can contain a Plug in are marked with a clearly visible Facebook logo (ie white “f” on a blue icon) or the addition of “Facebook Social Plugin”).
If you access a website and\or mobile solutions like this containing such a plugin, your browser will establish a direct connection with the Facebook servers and Facebook will transmit the content of the plugin directly to your browser.
If you are registered with Facebook and are logged into your Facebook user account, Facebook will receive the information that you accessed the respective website by the integration of the plugin. If you use the plugin actively by activating the “like” button or the “share” button or placing a commentary on the respective website and\or mobile solutions, the corresponding information will be transmitted from your browser directly to Facebook and used there in Dufry Websites and Applications.
In order to avoid Facebook collecting the above information about you when you access such a website, please following the instructions in settings on the Facebook website and/or log out of the Facebook website, before visiting the respective website in Dufry Websites and Applications. Additionally, you should delete any Facebook cookies present from your browser.
The purpose and extent of data collection and further use and usage of data by Facebook as well as your rights and setting options in this regard for the protection of your Personal Data or private space can be found in the Facebook Privacy Policy. We assume no responsibility for the contents of the websites and\or mobile solutions and the Facebook Privacy Policy.
On some of our websites, applications and \or mobile solutions, we use social plugins of the social network www.Linkedin.com (“Plug In”), which is operated by Microsoft Corporation, One Microsoft Way, Redmond, 98052 – 6399, USA (“LinkedIn”).
The websites and\or mobile solutions in Dufry Websites and Applications can contain a plug in are marked with a clearly visible LinkedIn logo) or the addition of “LinkedIn Social Plugin”).
If you access a website and\or mobile solutions like this containing such a plugin, your browser will establish a direct connection with the LinkedIn servers and LinkedIn will transmit the content of the plugin directly to your browser.
If you are registered with LinkedIn and are logged into your LinkedIn user account, LinkedIn will receive the information that you accessed the respective website and\or mobile solutions by the integration of the plugin. If you use the plugin actively by activating the “share” button or placing a commentary on the respective website, the corresponding information will be transmitted from your browser directly to LinkedIn and used there in Dufry Websites and Applications.
In order to avoid LinkedIn collecting the above information about you when you access such a website, please following the instructions in settings on the LinkedIn website and/or log out of the LinkedIn website, before visiting the respective website and\or mobile solutions in Dufry Websites and Applications. Additionally, you should delete any LinkedIn cookies present from your browser.
The purpose and extent of data collection and further use and usage of data by LinkedIn as well as your rights and setting options in this regard for the protection of your Personal Data or private space can be found in the LinkedIn Privacy Policy. We assume no responsibility for the contents of the websites and\or mobile solutions and the LinkedIn Privacy Policy.
On some of our websites, applications and\or mobile solutions, we use social plugins of the social network youtube.com or other networks found at www.google.com (“Plug In”), which is operated by Google. Inc.,1600 Amphitheatre Parkway, Mountain View, CA 940439 United States.
The websites and\or mobile solutions in Dufry Websites and Applications can contain a plug in are marked with a clearly visible Google logo) or the addition of “Google Social Plugin”).
If you access a website like this containing such a plugin, your browser will establish a direct connection with the Google servers and Google will transmit the content of the plugin directly to your browser.
If you are registered with Google and are logged into your Google or gmail user account, Google will receive the information that you accessed the respective website and\or mobile solutions by the integration of the plugin. If you use the plugin actively by activating the “share” button or placing a commentary on the respective website and\or mobile solutions, the corresponding information will be transmitted from your browser directly to Google and used there in Dufry Websites and Applications.
In order to avoid Google collecting the above information about you when you access such a website and\or mobile solutions, please following the instructions in settings on the Google websites and/or log out of the Google website, before visiting the respective website and\or mobile solutions in Dufry Websites and Applications. Additionally, you should delete any Google cookies present from your browser.
The purpose and extent of data collection and further use and usage of data by Google Analyticals) as well as your rights and setting options in this regard for the protection of your Personal Data or private space can be found in the Google Privacy Policy. We assume no responsibility for the contents of the websites and\or the mobile solutions and the Google Privacy Policy.
11. What are your rights?
You have the right under applicable law to access, obtain a copy and correct personal data concerning you, subject to limited exceptions that may be prescribed by applicable laws. Where justified and mandated by applicable law, you may also require that your personal data be deleted or blocked, or you may be entitled to obtain information about the processing of your data, or object to further processing of your data.
In the event your personal data is processed on the basis of your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can do this by (i) in some cases deleting the relevant Personal Data from the relevant IT system (although note that in this case it may remain in back-ups and linked systems until it is deleted in accordance with our data retention policy) or (ii) contacting your Global Data Protection Co-Ordinator.
You also have the right to be informed about how your personal data is handled and from whom we receive your data.
As permitted by law, you also have the following additional rights:
- Data portability - where we are relying upon your consent or the fact that the processing is necessary for the performance of a contract to which you are party as the legal basis for processing, and that personal data is processed by automatic means, you have the right to receive all such personal data which you have provided to Dufry or the Group in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.
- Right to restriction of processing - you have the right to restrict our processing of your personal data where:
- you contest the accuracy of the personal data until we have taken sufficient steps to correct or verify its accuracy;
- where the processing is unlawful but you do not want us to erase the personal data;
- where we no longer need your personal data for the purposes of the processing, but you require such personal data for the establishment, exercise or defence of legal claims; or
- where you have objected to processing based on legitimate interest from Dufry (see below) and pending verification as to whether Dufry or the Group has compelling legitimate grounds to continue processing.
Where your personal data is subject to restriction in this way we will only process it with your consent or for the establishment, exercise or defense of legal claims.
- Right to object to processing justified on legitimate interest grounds - where we are relying upon legitimate interest to process personal data, then you have the right to object to that processing. If you object, we must stop that processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where we need to process the personal data for the establishment, exercise or defence of legal claims. Where we rely upon legitimate interest as a basis for processing we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.
- Right to object to processing for marketing purposes – you have the right to object to any processing of your data for marketing purposes (including profiling). Additionally, see What are Your Choices?
Please contact us by submitting a Data Subject Access Request Form (available upon request) in writing or by email to either of the addressees listed below.
Some of these rights may not apply in certain circumstances. For example, you may not be entitled to know we have shared your personal data with the police or to receive a copy of your personal information if it relates to a police investigation and we have been informed by the police that notifying you or providing you with a copy will prejudice their investigations.
Dufry has appointed a Global Data Protection Co-Ordinator who may be contacted securely and confidentially at the following E – Mail address : privacy@dufry.com. Alternatively, you can send your Data Subject Access Request Form, written comments, questions or concerns to:
Dufry AG,
Brunngässlein 12
Basel, 4052
Switzerland
Attention : Global Data Protection Co-Ordinator; or
WDFG UK Limited
4 New Square
Bedfont Lakes
Middlesex
TW14 8HA
Attention: UK Data Protection Co-Ordinator
12. What are Your Choices ?
Dufry Websites and Applications provide you with access to a range of information about your account and your interactions with us. To ensure that your personal data is accurate and up to date, we encourage you to regularly review and update your information as appropriate, if or your contact details or address has changed. If you have subscribed to Dufry Websites and Applications, especially the Red By Dufry application or the Reserve and Collect websites, then you can either access your account and make the changes or request the changes are made by sending an email request along with evidence of your identity to privacy@dufry.com.
We like to inform you about our products and services and those of our partners and to also send you surveys, promotional materials and invitations to events, to participate in competitions or receive coupons or gift certificates as well as communications on your birthday or other special events. If you choose not to receive such communications or modify what method of communications such as SMS, email, letter or phone we use to contact you or you choose not to agree to the use of cookies or other on line technologies, then you to opt out of such activities by submitting the opt out provision which is the unsubscribe link to the website to allow the customer to unsubscribe (if an electronic communication), or for all other non-electronic communications, by submitting an objection email or letter to specify your preferences to privacy@dufry.com. You can change your preferences or choices at any time or provide a new consent to such activities by providing a signed consent form consenting to the use of cookies, advertising materials or preferred method of communication to privacy@dufry.com.
13. Changes to our Privacy Notice
Changes and amendment to the terms of this Privacy Notice can be made at any time and shall apply as soon as they are published on any Dufry Websites and Applications. Should you not agree to any changes or amendments, then you should refrain from continuing to use our services or products or access Dufry Websites and Applications or our Stores.
14. Where to make a Data Protection complaint?
You have the right to lodge complaints pertaining to the processing of your personal data with the relevant data protection supervisory authority.
Cookies Inventory
RESERVE & COLLECT (worlddutyfree.com)
| Name | Category | Provider | Purpose | Expiry | Type |
| AWSALB | Necessary | Dufry | Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. | 6 days | HTTP |
| AWSALBCORS | Necessary | Dufry | Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. | 6 days | HTTP |
| com.adobe.reactor.dataElementCookiesMigrated | Necessary | Dufry | Used in context with the cache-function on the website, facilitating data transfer between Adobe DTM onto Adobe Launch. | Persistent | HTML |
| form_key | Necessary | Dufry | Ensures visitor browsing-security by preventing cross-site request forgery. This cookie is essential for the security of the website and visitor | Session | HTTP |
| mage-banners-cache-storage | Necessary | Dufry | This cookie is necessary for the cache function. A cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor´s browser | 1 day | HTTP |
| mage-banners-cache-storage | Necessary | Dufry | This cookie is necessary for the cache function. A cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor´s browser | Persistent | HTML |
| mage-banners-cache-timeout | Necessary | Dufry | This cookie is necessary for the cache function. A cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor´s browser | Persistent | HTML |
| mage-cache-sessid | Necessary | Dufry | This cookie is used in context with load balancing. This optimizes the response rate between the visitor and the site, by distributing the traffic load on multiple network links or servers | 1 day | HTTP |
| mage-cache-storage | Necessary | Dufry | This cookie is used in context with load balancing. This optimizes the response rate between the visitor and the site, by distributing the traffic load on multiple network links or servers | 1 day | HTTP |
| mage-cache-storage | Necessary | Dufry | Used to optimize the loading speed on the website. This is done by pre-loading some procedures in the visitor´s browser | Persistent | HTML |
| mage-cache-storage-section-invalidation | Necessary | Dufry | This cookie is used in context with load balancing. This optimizes the response rate between the visitor and the site, by distributing the traffic load on multiple network links or servers | 1 day | HTTP |
| mage-cache-storage-section-invalidation | Necessary | Dufry | Used to optimize the loading speed on the website. This is done by pre-loading some procedures in the visitor´s browser | Persistent | HTML |
| mage-cache-timeout | Necessary | Dufry | This cookie is necessary for the cache function. A cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor´s browser | Persistent | HTML |
| mage-messages | Necessary | Dufry | Necessary for the functionality of the website´s chat-box function | 1 day | HTTP |
| mage-translation-file-version | Necessary | Dufry | Used in context with the language setting on the website. Facilitates the translation into the preferred language of the visitor | Session | HTTP |
| mage-translation-file-version | Necessary | Dufry | Used in context with the language setting on the website. Facilitates the translation into the preferred language of the visitor | Persistent | HTML |
| mage-translation-storage | Necessary | Dufry | Used in context with the language setting on the website. Facilitates the translation into the preferred language of the visitor | Session | HTTP |
| mage-translation-storage | Necessary | Dufry | Used in context with the language setting on the website. Facilitates the translation into the preferred language of the visitor | Persistent | HTML |
| PHPSESSID | Necessary | Dufry | Preserves user session state across page requests | 1 day | HTTP |
| product_data_storage | Necessary | Dufry | Necessary for the compare-products function on the website | Persistent | HTML |
| recently_compared_product | Necessary | Dufry | Necessary for the compare-products function on the website | 1 day | HTTP |
| RT | Necessary | | This cookie is used to identify the visitor through an application. This allows the visitor to login to a website through their LinkedIn application for example | 6 days | HTTP |
| test | Necessary | Dufry | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website | Persistent | HTML |
| test | Necessary | Dufry | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website | Session | HTTP |
| ‘Remember me’ | Necessary | Dufry | Used to automatically login the user between sessions where they have logged in using the Single Sign On (SSO). If the user does not explicitly click on logout, then SSO will use this cookie to automatically login the user next time he will access the SSO | 1 year | |
| section_data_ids | Preferences | Dufry | Used in a context with the shopping cart functionality. Remembers any wish-list products and visitor credentials when checking out | 1 day | HTTP |
| _ga | Statistics | Dufry (Google Analytics) | Registers a unique ID that is used to generate statistical data on how the visitor uses the website | 2 years | HTTP |
| _gat | Statistics | Dufry (Google Analytics) | Used by Google Analytics to throttle request rate | 1 day | HTTP |
| _gid | Statistics | Dufry (Google Analytics) | Registers a unique ID that is used to generate statistical data on how the visitor uses the website | 1 day | HTTP |
| AMCV_# | Statistics | Dufry | Unique user ID that recognizes the user on returning visits | 2 years | HTTP |
| AMCVS_#AdobeOrg | Statistics | Dufry | Unclassified | Session | HTTP |
| product_data_storage | Statistics | Dufry | Determines which products the user has viewed, allowing the website to promote related products | 1 day | HTTP |
| recently_compared_product_previous | Statistics | Dufry | Necessary for the compare-products function on the website | 1 day | HTTP |
| recently_viewed_product | Statistics | Dufry | Determines which products the user has viewed, allowing the website to promote related products | 1 day | HTTP |
| recently_viewed_product_previous | Statistics | Dufry | Collects information on which products have been viewed by the visitor. This is used for optimizing the specific visitor´s navigation on the website | 1 day | HTTP |
| _boomr_akamaiXhrRetry | Marketing | Dufry | Collects information on user preferences and/or interaction with web-campaign content. This is used on CRM campaign platform used by the website owners for promoting events or products | Persistent | HTML |
| _fbp | Marketing | | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 3 months | HTTP |
| _gcl_au | Marketing | Google AdSense | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services | 3 months | HTTP |
| ads/ga-audiences | Marketing | | Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor´s online behaviors across websites | Session | Pixel |
| eng_mt | Marketing | Dufry | Tracks the conversion rate between the user and the advertisement banners on the website. This serves to optimize the relevance of the advertisements on the website | Persistent | HTML |
| everest_g_v2 | Marketing | Everest Tech | Used for targeted ads and to document efficacy of each individual ad | 2 years | HTTP |
| Everest_session_v2 | Marketing | Everest Tech | Used for targeted ads and to document efficacy of each individual ad | Session | HTTP |
| fr | Marketing | | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 3 months | HTTP |
| MUID | Marketing | Microsoft/Bing.com | Used widely by Microsoft as a unique user ID. The cookie enables user tracking by synchronizing the ID across many Microsoft domains | 1 year | HTTP |
| pixel | Marketing | outbrain.com | Unclassified | Session | Pixel |
| recently_compared_product | Marketing | Dufry | This cookie is used to determine which products the visitor has viewed. This information is used to promote related products and optimize ad-efficiency | Persistent | HTML |
| Recently_compared_product_previous | Marketing | Dufry | Collects information on which products have been viewed by the visitor. This is used for optimizing the specific visitor´s navigation on the website | Persistent | HTML |
| recently_viewed_product | Marketing | Dufry | Collects information on which products have been viewed by the visitor. This is used for optimizing the specific visitor´s navigation on the website | Persistent | HTML |
| recently_viewed_product-previous | Marketing | Dufry | Collects information on which products have been viewed by the visitor. This is used for optimizing the specific visitor´s navigation on the website | Persistent | HTML |
| tr | Marketing | | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | Session | Pixel |
| trctestcookie | Marketing | Dufry | Detects whether partner data synchronization is functioning and currently running. This function sends user data between third party advertisement companies for the purpose of targeted advertisements | Session | HTTP |
| _uetsid | Unclassified | Dufry | Unclassified | 1 day | HTTP |
| _uetsid | Unclassified | Dufry | Unclassified | Persistent | HTML |
| _uetsid_exp | Unclassified | Dufry | Unclassified | Persistent | HTML |
| demdex | Marketing | Demdex.net | Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads. | 179 days | HTTP |
| dpm | Marketing | Demdex.net | Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third party advertisement hubs, which facilitates real-time bidding for advertisers. | 179 days | HTTP |
| Mbox | Marketing | Dufry | This cookie is used to collect non -personal information on the visitor's behavior and non-personal visitor statistics, which can be used by a third -party ad -targeting agency. | 1 day | HTTP |
| _uetvid | Unclassified | Dufry | Unclassified | 16 days | HTTP |
| _uetvid | Unclassified | Dufry | Unclassified | Persistent | HTML |
| _uetvid_exp | Unclassified | Dufry | Unclassified | Persistent | HTML |
Red By Dufry
| Name | Category | Provider | Purpose | Expiry | Type |
| _ga | Statistics | Dufry (Google Analytics) | Registers a unique ID that is used to generate statistical data on how the visitor uses the website | 2 years | HTTP |
| _gat | Statistics | Dufry (Google Analytics) | Used by Google Analytics to throttle request rate | 1 day | HTTP |
| _git | Statistics | Dufry (Google Analytics) | Registers a unique ID that is used to generate statistical data on how the visitor uses the website | 1 day | HTTP |
| pagevisit | Statistics | r1.trackedweb.net | Registers statistical data on users ‘behavior on the website. Used for internal analytics by the website operator | Session | Pixel |
| _fbd | Marketing | | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 3 months | HTTP |
| _gcl_au | Marketing | Google AdSense | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services | 3 months | HTTP |
| AA003 | Marketing | atdmt.com | Collects information on user behavior on multiple websites. This information is used in order to optimize the relevance of advertisement on the website | 3 months | HTTP |
| ads/ga-audiences | Marketing | | Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor´s online behavior across websites | Session | Pixel |
| ATN | Marketing | atdmt.com | Targets ads based on behavioral profiling and geographical location | 2 years | HTTP |
| dmSessionID | Marketing | Dufry | Collects information on what products the visitor has viewed and the content of the shopping-cart. This is used to increase the website conversion rate through targeted advertisement and product promotions through emails | 1 day | HTTP |
| fr | Marketing | | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 3 months | HTTP |
| https://cx.atdmt.com/ | Marketing | atdmt.com | Sets a unique ID for the visitor that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third party advertisement hubs, which facilitate real-time bidding for advertisers | Session | Pixel |
| IDE | Marketing | Google/ Doubleclick.net | Used by Google DoubleClick to register and report the website user´s actions after viewing or clicking one of the advertiser´s ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user | 1 year | HTTP |
| pagead/1p-user-list/# | Marketing | | Unclassified | Session | Pixel |
| r/collect | Marketing | Google/ Doubleclick.net | The cookie is used to send data to Google Analytics about the visitor´s device and behavior. It tracks the visitor across devices and marketing channels | Session | Pixel |
| recordID | Marketing | Dufry | Collects information on what products the visitor has viewed and the content of the shopping-cart. This is used to increase the website´s conversion rate through targeted advertisement and product promotions through emails | 1 year | HTTP |
| test_cookie | Marketing | Google/ Doubleclick.net | Used to check if the user´s browser supports cookies | 1 day | HTTP |
| tr | Marketing | | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | Session | Pixel |
| ‘Remember me’ | Necessary | Dufry | Used to automatically login the user between sessions where they have logged in using the Single Sign On (SSO). If the user does not explicitly click on logout, then SSO will use this cookie to automatically login the user next time he will access the SSO | 1 year | |
| _rollupGA | Unclassified | Dufry (Google Tag Manager) | Unclassified | 2 years | HTTP |
| _rollupGA_gid | Unclassified | Dufry (Google Tag Manager) | Unclassified | 1 day | HTTP |
| identity | Unclassified | r1.trackedweb.net | Unclassified | Session | Pixel |