Controller and Processors of Personal DataDufry AG and the owner of the local website (as set out in the terms) which you are currently visiting or the local Dufry entity which owns the local Store that you are visiting or from whom you are purchasing goods are joint controllers of the personal data that you (as data subject) provide us or we received in our Stores and Dufry Websites and Applications. Types of Personal Data collected and Sources of Personal DataWe collect personal data directly from our customers through Dufry Websites and Applications and our Stores.We obtain, use, disclose and otherwise process personal data about customers to (i) process transactions they request, including e-commerce Reserve and Collect selection and mobile transactions, (ii) improve Dufry Websites and Applications, Stores, quality of service and customers shopping experience, (iii) send communications about our products, services, campaigns, promotions, competitions, sweepstakes and customer satisfaction surveys, (iv) prevent and detect fraud and abuse, (v) process information or claims in connection with incidents at Stores, (vi) enable service providers to perform certain activities on Dufry’s behalf, (vii) protect the log in details of the subscribers and system integrity of the Dufry Websites and Applications, (viii) comply with legal obligations, policies and procedures and for internal administrative and analytics purposes,(ix) allow valid RED BY DUFRY loyalty members to access their accounts and accumulate and redeem points under their RED BY DUFRY loyalty card and receive the relevant discount on their purchases in Stores according to their status as a RED BY DUFRY loyalty card member and (x) to commence, protect or defend Dufry in actual or threatened legal proceedings.We collect the following types of personal data about you from the following sources:Information that you provide to us: We receive and store any information you enter on Dufry Websites and Applications and Stores or give us in any other way such as during registration, accessing your account or profile, submitting queries or as part of a survey or competition or utilising gift coupons or customer support or communicate with us or purchasing in Stores or using our products or services.Due to such actions, you supply us with your (i) name, postal address, email address, phone numbers, (ii) data necessary to process your payment (including the credit card/payment instrument information and personal security code associated with your credit card) for Store purchases or on line purchase of gift vouchers, to reserve purchases (under the Dufry Reserve & Collect Application), to apply for a refund, or to communicate with customer services regarding a refund to the credit card/payment instrument, (iii) flight destination, flight date and delivery address for the subscriber and airport location to collect any pre ordered reserve & collect products or make purchases of our products and services in Stores. Demographical data such as your age, gender, country, preferred language, passport number and citizenship, date of birth and country of residence are also collected. You must hold a valid flight ticket to be able to make duty free or duty paid purchases from Dufry. Such information is collected to meet our contractual obligations to our landlord and airport authorities and legal obligations towards customs and other regulatory authorities.When you register for membership, subscribe for services or the newsletter or other marketing communications including blogs or customer comments or use the Dufry Websites and Applications or purchase in our Stores, we collect log in details, passwords, any password questions and hints, similar security information used for authentication and account access is also collected for the access into your personal account and profile and to utilise the Reserve and Collect elements or the RED BY DUFRY customer loyalty elements of Dufry Websites and Applications or in our Stores.You can choose not to provide certain information, but then you might not be able to utilise many of the features of the Dufry Websites and Applications. See What Are My Choices section below. (https://sso.dufry.com/profile)Information collected automatically through interaction with us: We receive and store information where you interact with us through using our products and services, including online technologies (ie Cookies) and receiving error reports or usage data from software applications on your devices online or via WiFi communications in Stores.We collect and analyse device, connectivity and configuration data including the Internet protocol (IP) address used to connect your computer or device to the internet, computer and connection information such as browser type, version, time zone and other computer software installed on the device, browser plug in types and versions, operating system, shopping preferences, wish list, purchase history, the features you use and pages accessed and web sites visited.We also collect the Uniform Resource Locator (URL) clickstream to and from our Dufry Websites and Applications, including date and time, cookie number, products viewed and searched for and the phone number used to contact our customer support teams. We collect technical information to help us identify your device for fraud prevention and diagnostic purposes such as any problems to the product and settings, error reports including data as to the type and severity of the problem, details of software and hardware related to an error, contents of files you were using when an error occurred and data about other software on the device.We collect browser data including persistent and session cookies and other online technologies as set out below in the Online Technologies section below. We utilise Google Analytics to assist with software tools to measure and collect the performance data on Dufry Websites and Applications including download error or performance issues caused. Further information can be found under http://www.google.com/intl/en_uk/analytics/tos.html (Google Analytics Terms of Service & Privacy).Most browsers allow you to opt out of cookies or turn on do not track. For more information, see What are My Choices section below [https://sso.dufry.com/profile].Mobile or Dufry Applications: When you choose to use or download Dufry Websites and Applications or allow connectivity via WiFi connections to your device, we receive information about your location and mobile device, including a unique identifier for your personalized device, your GPS data or wireless networks data (WLAN). Location data is neither stored nor transmitted to third parties If you agree with the localisation function, we can provide you with location-based services including advertising, search results and personalized content. Once you are near one of our Stores, then we can use push email communications to you if you have provided your preference to receive such communications and advertising.Most mobile devices allow you to turn off location services. For more information, see What are My Choices section below [https://sso.dufry.com/profile].E-Mail Communications: To provide more personalized and interesting email communications, we receive a confirmation when you open email from Dufry Websites and Applications or your device is near one of our Stores, if your computer or device supports this capability. Additionally, we compare our customer list to lists received from other companies, in an effort to reduce repetitive or unnecessary messages or spam being sent to our customers.If you choose not to receive any Emails or other mail from us, please adjust your customer communication preferences in your account profile.Information from other Sources: We receive information about you from other sources and add it to our account information. The third party sources include: Updated delivery and contact address data from third parties which are used to update our records and deliver your next purchase more easily; Social networks when you grant permission to Dufry Websites and Applications to access your data on one or more networks; Service providers that help us determine a location based on your IP address to allow customisation of certain products to your location; Our partners which we offer co-branded services or conduct joint marketing activities; Publicly-available sources from open government databases or other data in the public domain; and Credit history information from credit bureaus, which we use to help prevent and detect fraud.