CANADIAN RESERVE & COLLECT

PRIVACY POLICY

1. Introduction

The website under the domain “www.shopdutyfree.com” (hereinafter the “Website” or “Reserve & Collect”) is owned and operated by Dufry North America, LLC whose registered address is at One Meadowlands Plaza, 11th Floor, East Rutherford, NJ 07073 (hereinafter “Dufry”, “we”, “our”, and “us”).

This Privacy Policy governs the way we treat all the personal information you provide or that we have obtained from you through the Website. This data will be processed in accordance with the data protection and e-commerce laws applicable at any time.

When giving consent during any aspect of the registration process by selecting the confirmation box, this shall be deemed to be the user’s express consent to their data being processed by Dufry for the purpose of pre booking items, sending sales information (including the electronic newsletter) on products sold by Dufry, and on the activities and services provided by Dufry, other companies in the Dufry group and third party companies with which Dufry has trade agreements (and which offer their products and services through the Website), by post, email, SMS, or any other equivalent means of electronic communication, and so that their data are processed in order to create categories and/or set up profiles for similar promotional or advertising purposes, although adapted to your profile as a user of the Dufry group’s services.

2. Use of Your Personal Information

If you choose to use the Website, we may ask you to provide personal information, for example, when you register for the use of the Website, subscribe to any services provided through the Website or place a reservation. Personal information requested and processed may include, but not be limited to, your name, address, email address, phone number, financial or credit card information.

Your personal information will enable us to provide you with access to all areas of the Website and to supply any services you have requested. It will also enable us to contact you if this is necessary as a result of use of the Website. We will also use and analyze the information we collect so that we can manage, support, improve and develop our services and/or the Website.

We may also use your personal information to send you newsletters, notify you of special offers or promotions or ask you to participate in customer surveys or to provide information about our services and/or the Website, unless you have specifically forbidden such use of your personal information. We try to adapt any marketing material that we send to you, however, if you do not wish to receive such communications from us, please inform us by sending an email to privacy@dufry.com or following the instructions that will be provided in each communication (e.g. by clicking an unsubscribe link).

3. Disclosure of your personal information

Your personal information may be disclosed, shared and transferred within the Dufry corporate group. We will not transfer or disclose your personal information outside the Dufry corporate group, except in connection with a joint venture or the proposed sale or as a result of the actual sale of all or part of the assets of, or shares in, the company. Unless required by law, we will not share, transfer or distribute without your consent, any personal information you provide to us.

4. Where do we store your personal information?

Dufry informs you that the personal information you have provided will be included in a data file owned by it, the purpose of which is to manage the business relationship with you, in accordance with the provisions of the applicable Canadian data protection laws.

Please note that in order to fulfil the purposes of the data file your personal information may be communicated to Dufry group companies in Europe subject to the limitations laid down in current legislation. Your personal information will primarily be stored within Canada, but may be transferred and processed outside the country where you use the Website, including countries located in Europe. All transfers of personal information are performed in accordance with the applicable data protection laws.

You will be responsible for providing accurate information to ensure the authenticity of the data entered when completing a form.

5. Security and retention of personal information

We employ appropriate technical and organizational security measures to protect the information you provide to us, to prevent access by unauthorised persons and unlawful processing, accidental loss, destruction and damage. Such security measures may include, where appropriate, use of firewalls and other virus protection, encryption mechanisms, training of Dufry personnel and applying access rights management systems. When we have provided (or you have chosen) a password allowing you access to certain benefits of the Website, you are responsible for safeguarding it and keeping it confidential and you undertake not to allow it to be used by third parties. Where the Website allows on-line transactions, we will use a sufficient security measures such as "Security Sockets Layer" (SSL) to guarantee the security of online transactions.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do everything possible to protect your personal information, we cannot guarantee the security of any personal information you disclose online. You acknowledge and accept the inherent security implications of using the Internet and will not hold us responsible for any breach of security unless we have been negligent, and only within the limits set out in the terms and conditions of this Website

We store your personal information only as long as necessary for the purposes described herein or as long as necessary due to applicable laws. When we no longer need your personal information, your personal information will be deleted or permanently anonymized.

6. Rights over your personal information

You may at any time exercise your right to request information and access to your personal information we have collected, as well as request rectification, deletion or replenishment of any incorrect, outdated, unnecessary or incomplete personal information we hold on you. However, we cannot delete such personal information that we are obligated to keep due to applicable laws. You also have the right to withdraw your consent or forbid the use and processing of your personal information for direct marketing and other equivalent commercial purposes.

If you wish to make use of the above mentioned rights or any other rights granted to you by the applicable data protection laws, you may do so by writing to Dufry at the contact information below, enclosing a photocopy of your identity card or official document proving your identity, or sending an email to privacy@dufry.com stating your name, telephone number and attaching a scan of your identity card or official document proving your identity.

Finally, Dufry will keep your data strictly confidential at all times and comply with the mandatory duty of confidentiality, adopting for that purpose the technical and organisational measures necessary to ensure the safety of your data and prevent its alteration, loss, or unauthorized processing or access, given the state of technology, the nature of the data stored and the risks to which they are exposed.

7. Who is responsible of your personal information?

The local Dufry affiliate operating in your jurisdiction is the data controller in relation to your personal information and is responsible for your personal information in accordance with the applicable data protection laws. You may contact Dufry with any questions regarding this by Phone at: 1-877-253-3272, by email: privacy@dufry.com or by post address at: Dufry Customer Service, Vancouver International Airport, C4425 International Airport, 3211 Grant McConachie Way, Richmond, British Columbia, V7B 0A4.

8. Changes to our privacy policy

Any changes we make to our privacy policy in the future will be published in this Website. You are encouraged to read the privacy policy every time you log into the Website.

9. Links to third party Websites and/or websites

This privacy policy applies to this Website only and does not apply to other third party Websites and/or websites that can be accessed from this Website.

Our Website may contain links to and from the Websites and/or websites of our partner networks, advertisers and affiliates. They are merely for information purposes. If you follow a link to any of these Websites and/or websites, please bear in mind that they have their own privacy policies and that we assume no responsibility or liability arising from their policies. Therefore you should carefully read any such third party privacy policy.

.