This policy governs any kind of processing (including collection, use, transfer, storage and deletion) of personally identifiable information (any information that may be used to identify a physical person, and any other information associated therewith) about natural persons, which are either consumers of LEGO® products or services, or representatives of our cooperation partners (“personal data”), by all business units and entities within LEGO MANILA. This policy applies to our processing of personal data collected through any means, actively as well as passively, online as well as offline, from persons located anywhere in the world. Any question regarding our processing of personal data may be directed to:
Level 10-1 Fort Legend Tower, 3rd Avenue & 31st Street, BGC, Taguig
Generally, LEGO MANILA will be guided by the following principles when processing personal data:
1. We will only collect personal data for specific and specified purposes;
2. We will not collect personal data beyond what is necessary to accomplish those purposes;
3. We will not use personal data for purposes other than that for which the data was collected, except as stated herein, or with prior consent;
4. We will not transfer personal data to third parties or across borders, except as stated herein, or with prior consent;
5. We will seek to verify and/or update personal data periodically, and we will accept requests for amendments of personal data;
6. We will apply high technical standards to make our processing of personal data secure;
7. Except when stated herein, we will not store personal data in identifiable form longer than is necessary to accomplish its purpose, or as is required by law.
LEGO Manila encourages families to visit our LEGOmanila.com sites together as a shared activity.
As a general principle, we process personal data in order to facilitate or improve LEGO MANILA’s offerings and services to you. We do purchase supplementary data from public sources to complement our data bases.
We do not process personal data on behalf of third parties, nor do we sell personal data to, or share personal data with, third parties for their own, independent use, except if you allow us to do so (see LEGO MANILA Online Shop at Home below).
We also use third party data hosting companies to store personal data collected by us in their servers, and to do data validation checks for us (see your site ID – Linked Accounts below).
We undertake or commission consumer research projects from time to time and we may share personal data with third party research companies for this purpose. Also, such third party research companies may host survey data in their data bases on our behalf.
All data transfers to third party vendors or partners, including those listed as examples above will be subject to a written contract between us and the third party vendor or partner in question, and the vendor or partner will not have any authority to use such personal data for any purpose other than as instructed by us.
When relevant, personal information may be shared among the business units and entities inside LEGO MANILA.
We will disclose personal data when legally obligated to do so under subpoena or court order, or for law enforcement purposes. For operational security reasons, we process (mirror) personal data in the Philippines. This means that all personal data processed by us is transferred between our facilities in the Philippines periodically.
When a child under the age of 13 (or such higher age as may be determined by local law; in the following, the age 13 is used as the common denominator for easy reference) contacts LEGO Manila online, for example to participate in a contest or to ask a question, we will collect that child’s email address and the e-mail address of the child’s parent or guardian. We will use the child’s e-mail address only for the purpose for which it was collected, and we will use the e-mail address of the parents or guardians only to provide notification about the child’s contact with us, and to provide notification of the types and uses of personal data collected, if and as required by law.
As a parent or guardian of a child under the age of 13 from whom we have collected personal data, you have the right to review and have deleted such personal data, and to refuse to permit further collection or use of such personal data. To do so, you should contact us by clicking here Parents and guardians who wish to review personal data concerning their children will be required to specify the usernames and passwords of the children concerned, and to provide their own e-mail address for verification and contact purposes.
We cannot and will not establish conditions that will require or encourage children to disclose personal data over and above what is reasonably necessary to participate in any activity features on our web sites.
Children under 13 years of age are allowed to participate in contests. However, if such a child wins, notification will be sent to the parent or guardian’s e-mail address (provided by the child when he/she enters the contest). Also, we will not ask the child for any personal data beyond e-mail addresses without obtaining prior parental consent. Any personal data obtained from children and parents during contests will be kept until the contest ends and prizes are delivered, and then it will be deleted.
If any online activity offered by us will allow children under the age of 13 to reveal personal data publicly (for example via un-moderated chat rooms or bulletin boards), we will obtain parental consent before allowing the child to participate. Currently, all such activities are moderated, monitored and/or screened.
When you use our LEGO Shop at Home service online or offline (e.g. ordering online via shop.LEGO.com or via the LEGO Consumer Services Center, via catalogue or otherwise), we will process transaction-related personal data, such as your first and last name, mailing and shipping address, phone number, email address, credit card or other payment information, and (if you have created a [LEGO ID]) your date of birth and gender. We will also process information about your purchases with us.
We will use such personal data to process and deliver your order, to provide notification of order status, and to update your profile periodically to ensure that we have the most accurate personal data available. We will also use said personal data to analyze customer behavior and to customize our LEGO Shop at Home communication with you, if applicable. In this respect, we may transfer tracking information about your use of our sites to external service providers, which will help us optimize your browsing experience. Optimization services will be performed under a written contract between us and any service provider.
If you opt-in (or upon request), we will send you LEGO Shop at Home promotional and marketing emails. These may be targeted to you based on your purchase history or online browsing behaviour.
You may allow us to share your name, address and ordering activity with carefully selected third parties in whose products we believe you might be interested.
Your browser settings, such as the type of browser you use and what plug-ins you have installed. This keeps us from bothering you every time you enter the site in order to make sure that you have the necessary equipment to play a game or download information from our sites. It also allows us to know how many people are using certain types of software, so that we can adjust our site to provide the best browsing experience for every visitor. Your language and region choice. This means that if you have once chosen English as a language this is the default language that will be using when you revisits us What games you play, your high scores and your progress in the games – depending on the features of each game. This state is saved in Flash Local Shared Objects a.k.a. Flash cookies.
Your site ID sign-in state.
Your shopping cart and shopping options.
What products you view and buy in the shop so we can provide you with suggestions.
What products and gallery entries you have rated and the rating you have given.
The last time we asked you to participate in a survey and whether you answered it so we do not prompt you too often.
Your movement on and usage of our sites. We do not collect personal data as part of this. We collect statistical data so we can optimize our site.
Recently used data – to improve performance. In case we store personal data in a cookie, the information will be encrypted and thus safe.
Some cookies last until you close your browser, others are stored for longer. Our maximum cookie age is 400 days – as we want to make sure that you can find your information if you only visit us approximately once a year.
We use third party companies as suppliers for some of our functions. Their use of the data is controlled by our contract with them and they are only allowed to use the data strictly for the purpose we have stated .e.g. the data is not used in connection with data from other companies and we are not tracking user behavior outside our own sites.
Most browsers automatically accept cookies. You can prevent cookies from being stored on your computer or device by setting your browser to not accept cookies. Some browsers provide a mode where cookies are always deleted after a visit. This is called InPrivate in Internet Explorer version 8 and newer; Incognito in Google Chrome version 10 and newer; Private Browsing in Firefox version 3.5 and newer; Private Browsing in Safari version 2 and newer and Private Browsing in Opera version 10.5 and newer.
The exact instructions for this can be found in the manual for your browser. You can delete cookies already on your computer or device at any time. If you choose not to accept cookies at all, you can still visit our website, however we cannot guarantee an optimum experience without cookies.
You may always contact us to review and update personal data we may have stored about you. You may either use the following link. Please note that prior to accessing and making changes to your account, we must verify your identity properly. It may take up to 10 business days before changes take effect.
The LEGO Group may need to change its data processing policy from time to time to keep up with the ways in which we collect, use, transfer, store and/or delete personal data. If policy changes are made, which would materially and adversely affect the privacy of individuals to whom this policy applies, we will endeavor to give notice of such changes to all individuals concerned.
EFFECTIVE DATE: 28th May 2015