Effective Date: January 31, 2019
Personal Information Collection
KRC may collect personal information like name, telephone number, email address, date of birth, and home or business mailing address, when you access certain areas of the Website that require registration or your contact information. Such information is provided to us directly by you. We also collect certain information using automated technologies, such as which pages of our Website you access, which web browser you use, and other Website usage metrics. In addition, if you visit our retail properties, we may also collect information from your smart devices such as phones and tablets when you use our Wi-Fi services or interact with applications offered in connection with our tenants’ marketing programs. This information may include device identification, and GPS or location-based data. Credit card and payment information for paid services may also be handled by a third-party payment processor; however, KRC does have access to specific payment card account information.
At other times, KRC may collect aggregated information that cannot be used to directly identify you. Aggregated information may include statistical information about the types of classes of users on our Website, or demographical and geographical identification of groups who visit our properties. For example, we may aggregate non-personal information, such as the number of visitors to a particular area of the Website or tenant location. KRC will not use aggregated information in a way that can be linked directly back to individual visitors. This information may be provided to us by our advertising partners and third-party Service Providers (defined below).
How KRC Collects Personal Information
KRC may also collect additional information from your web browser each time you visit our Website. We may collect information on the pages that you visit, the promotions or advertisements that you click on, and other actions that you take while using our Website. This information may include your Internet Protocol ("IP") address or Media Access Control ("MAC") number, the type of browser, the time that your browser was used to access our Website, and the referring website address.
Our Service Providers (defined below) may also use other standard web-based technologies to analyze your movements while accessing our Website or retail properties. The technologies may include, without limitation, web "beacons," "pixel tags," "clear gifs," or location-based sensors. These technologies help us ascertain the effectiveness of our product and service offerings and marketing programs, allow us to customize the services offered on or through our Website and shopping centers and residential properties, and help determine the best use for Website content, and product and service offerings. Some of this information, including the IP address, may be stored on our Service Provider’s server logs, and may be available for extended periods of time.
Our Use and Disclosure of Your Personal Information
KRC may use the services of independent companies to provide certain services to you ("Service Providers"). KRC may share your personal information, such as email address, or mobile access numbers, with the Service Providers as appropriate and as necessary, however, these independent companies will not use your personal information for their own direct marketing purposes without our permission. We may analyze and share personally identifiable information with third parties that assist KRC with its marketing objectives. For example, if you elect to continue to receive services, such as newsletters, Website updates, and event schedules via email or text messaging, our Internet Service Providers may provide those types of services. You will have the option to opt-out of such offerings at the time of registration and at the time you receive a particular email. Your carrier’s usage rates will apply.
When you register on one of our Websites, you will be given the opportunity to select the types of information that you wish to receive as well as the opportunity to consent to receive such information. Based on your selections, KRC may use your personal information to contact you via mail, email, or messaging in order to give you updates about KRC’s special events, new services, or other promotions that may be of interest to you. We also use return e-mail addresses to answer the e-mail we receive from you. We may also use your IP address to help protect KRC and our Service Providers from fraud.
Additional uses of your non-personal and personal information will allow us to tailor products and services specific to your desires, to help organize and manage member relationships and our business, to conduct business, to provide you with customer and guest support, to perform functions that are described to you at the time of collection, and to enforce our Website’s Terms and Conditions of Use. We use the information we receive about you to offer content, services and features to you and other KRC Users. We may also share information about you with our advertisers and website and applications developers.
KRC may also disclose your personal information as is necessary to: (a) comply with a subpoena or court order; (b) cooperate with law enforcement or other government agency; (c) establish or exercise our legal rights; (d) protect the property or safety of our company and employees, contractors, vendors, and suppliers; (e) defend against legal claims; (f) help with internal and external investigations; or (g) as otherwise required by law or permitted by law. We may disclose your information in connection with the sale or merger of KRC or any transaction that involves the sale or assignment of some or all of our assets.
Data Storage and Security
KRC makes reasonable efforts to ensure that our Service Providers have implemented physical, electronic, and procedural security measures to assist with safeguarding your personal information, and to help protect against unauthorized access and disclosure. Notwithstanding our efforts, the Internet has inherent security risks. KRC cannot promise, and you should not expect, that the information that you submit or upload to the Website, whether personal information or other information, or personal searches and other communications, will always be impenetrable from attacks by cyber criminals. You should take care with regard to how you handle and disclose your personal information or any username or password that you are required to use to access services on this Website or Wi-Fi service.
Children and Data Collection
This Website is a public website that is viewable by anyone without restriction. However, KRC’s Website content is neither directed toward minors nor children who are under the age of 13. We do not knowingly collect personal information from children under the age of 13 without parental consent. If KRC or its Internet Service Providers become aware that a minor or a child under the age of 13 has provided us with personal information without parental consent, that information will be deleted from our databases. Parents who have questions about personal information that may have been submitted by a child or on behalf of a child under the age of 13 should email us at firstname.lastname@example.org.
KRC will not share any personal information about you with outside third-parties for their direct marketing purposes to the extent prohibited by California law, unless you agree otherwise as authorized by your prior written consent.
California residents have the right to request information from KRC regarding the manner by which KRC shares personal information with affiliated companies and third parties for their direct marketing purposes. To find out what and how we share such information, you may send us an e-mail request at email@example.com or mail a request to: Director of Security and Infrastructure, 3333 New Hyde Park Drive, New Hyde Park, New York 11042. If you include "MyData" in the subject line, you will receive the following information:
- The categories of information we disclosed to third parties for their direct marketing purposes during the preceding calendar year, if any;
- The names and addresses of the third parties who received information for their direct marketing purposes; and
- Examples of the products and services subject to the third-party’s direct marketing programs, if the nature of the third party’s business cannot be determined from their names.
How You May Access and Change the Information that KRC Collects; Opting out
The first time that you provide us with registration information through our Website, you may be offered the opportunity to subscribe to and receive additional information about our products and services. After your initial registration, you may review your information at any time and make changes, corrections, or deletions by contacting customer service at firstname.lastname@example.org. Each commercial e-mail that we send to you will offer you the opportunity to opt-out of continuing to receive such messages. We may take up to ten (10) business days to process your opt-out requests. In some instances, we may have already shared your information with one of our authorized third parties before you changed your information preferences. In those cases, you may have to directly contact those third parties to opt-out of receiving their communications. FTC email compliance guidance allows us to send you transactional and relationship e-mail without offering you the opportunity to opt-out of receiving those types of e-mail.
General Information and Privacy Support Contact
Correspondence may be directed to our Director of Security and Infrastructure. Contact information for KRC is as follows
Kimco Realty Corporation
3333 New Hyde Park Road
New Hyde Park, NY 11042