Last amended: 24 May 2018 (minor changes in paragraph 13. "Contact Details".)
LEGO House A/S ("LEGO® House", "we", "us", "our") take our responsibility seriously and always have high ambitions. This Privacy Policy concerns collection, use and disclosure of information with LEGO House A/S as the data controller.
The purpose of our Privacy Policy is to give you knowledge of how we process information about you. We are highly focussed on processing any personal data with care, trust and respect.
If you have any questions or concerns regarding our Privacy Policy, please do not hesitate to contact us at LEGO House via emailing info@LEGOHouse.com
1. Our general principles of collecting, using and processing of data
2. The type of information we collect, use and process
3. Why and how we collect, use and process your information
4. How we use your information within the LEGO Group companies
5. Sharing your information with third parties
6. Your control and options
7. Cookie Policy
8. Children's privacy
9. Data security and integrity
10. Storage
11. Data transfer, storage and processing globally
12. Changes to this Privacy Policy
13. Contact details
1. Our general principles of data processing
In order to ensure that your data is processed correctly, we have adopted the following principles:
We only collect and process your personal data if we have a legal basis for the processing pursuant to existing legislation, e.g.:
We will always inform you of the processing and its purpose, unless (and only in specific circumstances) we have a legitimate basis for not doing it.
By "processing", we mean our collection, use, disclosure, storage and eventually deletion of your data.
We only process your personal data for the original purpose or for other purposes that are not inconsistent with the original purpose.
We do not disclose your personal information to other people or companies outside the LEGO® Group, unless you have given us your consent, or unless we are under legal obligation to do so. For more details, see section 5.
As we are obligated to update our personal data, we will continuously ensure that your data processed by us is correct and updated.
We might choose to add information from other databases to your personal data to ensure that your information is correct and updated.
We do not store your personal data longer than necessary to serve the purpose for which they are processed.
2. The type of information we process
We process two basic types of information - personal information and anonymous information.
We collect your personal data when you visit LEGO® House in Billund, Denmark and when you interact with us on our different channels. Here we will present you with specific terms telling you which specific information that might be collected and for which purpose. We recommend that you read these specific terms on our channels carefully before you accept the terms. At present, our different channels are:
LEGO® House website with social media (Facebook, Instagram, YouTube.)
However, in general we typically process the following types of personal information:
Namely, location information that is delivered by either a mobile device which interacts with one of our websites or which is attached to your IP address and information of use and display and technical data, including your unit's id or IP address.
3. Why and how we process your personal data
4. How we use your information within the LEGO Group companies
LEGO House A/S is located in Billund and is the data controller. For more details about the LEGO Group and its subsidiaries, please visit http://www.lego.com/aboutus/lego-group/locations. Other companies within the LEGO Group may have access to your information if they carry out services on behalf of LEGO House (as data processing entity) and, unless this is illegal according to existing legislation, for their own use (as data controlling entity) for the following purposes:
Social Media (functions) and widgets
Our website contains social media functions, e.g. Facebook's "like" button and widgets, e.g. the "share" button or interactive Mini Programmes. These functions may collect your IP address if you actively click on the link while visiting our website and may use a cookie for making the function work properly. Social media functions and widgets are either hosted by a third party or hosted directly at our website. Your interactions with these functions are subject to the Privacy Policy for the company offering them.
5. Sharing your personal information with other companies
We do not share your personal information outside the LEGO® Group except in limited cases, e.g.:
6. Your control and options
We give you the opportunity to exercise a certain control and make certain choices regarding our processing of your personal data, including:
You may exercise your control and options or request access to or deletion of inaccuracies in your personal data by visiting your account(s) or by contacting LEGO® House Customer Service at info@LEGOHouse.com. If you contact us through LEGO® House Customer Service, we will have to check your identity for security reasons. It may take up to 10 days before the changes become effective. Please note that if you do not enable us to process your personal information, we might not be able to deliver certain products or services, and some of our services might not take your interests and preferences into account. If you have any questions regarding our processing and storage of your personal data, you may contact LEGO® House Customer Service.
7. Cookie Policy
LEGO® House and our third party tracking partners and service providers use technologies such as cookies.
You may find more information on cookies in our Cookie Policy.
8. Children's privacy
Please note that the website, as a starting point, only is directed at persons of 18 years or older.
To the extent that we through other channels collect and process personal information of children, we acknowledge the need for processing the information with extra confidentiality and protection. When we process information from children, we take additional steps to protect their privacy, including:
LEGO® House and subsequent services
We offer our visitors a number of activities in LEGO® House, subsequent services on apps, channels and programmes of what some are primarily directed at families with users of all ages, and others are directed at children. LEGO House and our services, etc. offer a number of activities, including activities that might comprise collection of information from children. We process children's personal data as described above in sections "2. The type of information we process", 3. Why and how we collect, use and process your information, 4. How we use your personal information within the LEGO Group companies, and 5. Sharing your personal information with other companies".
Registration
Children may in certain cases register for our services and programmes, inter alia, in order to be able to view the content, join competitions and test special features. During the registration process, we may ask the child certain information for security reasons and for being able to send notifications, including a parent or guardian's email address, the child's first name and gender, the child's member or account username and the password. We may also request the child's birth date in order to approve their age. We strongly warn children never to use personal information in their usernames.
We do not ask children for more information than what is reasonably necessary in order to participate in an activity.
Collection of the parents' email address: In accordance with COPPA's requirements, we will in all services or programmes directed at children, or where we ask for age and conclude that the user is 12 years or younger, ask for a parent or guardian's email address before we collect any personal information from the child. If you believe that your child participates in an activity that collects personal data or you or another parent/guardian have not received an email with notification of or request for permission, please do not hesitate to contact our Data Privacy Officer at info@legohouse.com. We do not use a parent's email address which we have obtained in connection with the permission for marketing purposes directed at the parent, unless the parent explicitly has accepted to receive marketing material via email or specifically has participated in an activity that allow for such email contact.
Content generated by a child
Certain activities on our services, channels and programmes allow children to generate or manage content and store it with LEGO® House. Some of these activities do not require children to provide any personal information, for which reason you as a parent will not be requested to give permission. If an activity would give the child an opportunity to insert personal information in the content they have generated, we will beforehand review the forwarded material and delete any personal information, or we will request the parents for permission via email to collect this.
Parents' choice and control options
Parents may at any time reject to allow us to use and collect additional personal information from their children in connection with a LEGO® House activity or a specific account, and you may request us to delete any personal data that we have collected in connection with said account. Remember that requesting deletion of a registration may lead to a termination of the account, membership or other services.
Parents may contact the Customer Service to request access, or changes to or deletion of their child's personal information by email info@legohouse.com.
All other inquiries can be directed to LEGO House A/S (see the contact details below).
All inquiries by mail or email must contain the child's username and the parents' email address and telephone number. In order to ensure the childrens' privacy and security, we will take reasonable precautionary measures to verify a parent's identity before we provide access to any personal information.
9. Storage
We store your information as long as your account is active or as long as it is necessary in order to provide the services. If you delete your account or ask us to no longer use your information to provide the services, please contact us at info@legohouse.com. We store and use your data to the extent necessary in order to observe our legal obligations, determine disputes and execute our agreements.
We store your child's information as long as the account is active or as long as it is necessary in order to provide the child with services. If you wish to delete your child's account or ask us to no longer use this information to provide services to the child, please contact us at info@legohouse.com. We store and use the child's information to the extent necessary in order to observe our legal obligations, determine disputes and execute our agreements.
10. Data security and integrity
The security, integrity and confidentiality of your information are very important to us. We have established technical, administrative and physical precautionary measures that are intended for protecting personal information from unauthorised access, transfer, use and change.
Information regarding credit cart details is handled by approved service providers which observe the payment card industry's (PCI) standards and have established appropriate precautionary measures.
If you find an error or problems in our security, please contact us immediately at info@legohouse.com
If LEGO® House discovers a breach of the data security and your information is affected, we will contact you if there is a risk of misuse of your information and if we are legally obligated to do so. In some cases, LEGO® House can be legally obligated to contact (data protection) authorities in case of violation of the rules for processing personal data.
11. Data transfer, storage and processing globally
LEGO® House operates in Denmark whereas other companies within the LEGO Group operate globally. LEGO House may transfer or leave your personal information to individual companies within the LEGO Group or to third parties all over the world for the purposes stated in this Privacy Policy. If your personal information is transferred, stored or processed by us or other companies conducting such services on our behalf, we will take reasonable precautionary measures to ensure the confidentiality of your personal information.
12. Changes to this Privacy Policy
We may change this Privacy Policy occasionally so that it meets new technologies, industry practice, statutory requirements or for other reasons. We will inform you in advance by email or by notification on our website if these changes are significant and if required by law, we will obtain your consent.
13. Contact details
If you have any inquiries, comments or questions relating to this Privacy Policy, you may contact:
LEGO House A/S
Ole Kirks Plads 1, 7190 Billund, Denmark
(LEGO House A/S (P-number 1021673710) is a secondary name of selskabet KOLDINGVEJ 2, BILLUND A/S, Business Registration no. 16632635, Koldingvej 2, 7190 Billund).
- or contact our Customer Service directly by email info@legohouse.com
Our websites and programmes may contain links to other websites which are neither owned nor controlled by us, and we cannot be held responsible for the principles of personal data for these websites. We urge you to pay attention when leaving our websites or programmes and to read the privacy policy for other websites that might process your personal information.