Source: https://www.legoland.com/en/california/about-us/mobile-app/privacy-policy/
Timestamp: 2019-04-23 06:02:53+00:00

Document:
This LLC App is provided to you by LEGOLAND® California, LLC.
You can contact LEGOLAND California, LLC at ONE LEGOLAND Drive, Carlsbad, CA 92008 or by phone 760-918-5346.
All information, materials, functions and other content ("Content") contained on the LLC App are our copyrighted property or the copyrighted property of our licensors or licensees. All trademarks, service marks, trade names, and trade dresses are proprietary to us and/or our licensors or licensees. We may terminate your further access to the LLC App or change the LLC App or delete content or features in any way, at any time and for any reason or no reason. You agree that you will not copy, distribute or reverse engineer the Content, or use the Content in any way except as integrated in or necessary for use of the LLC App.
Some services on the LLC App permit or require you to create an account to participate or to secure additional benefits. Please see the Terms and Conditions here.
We may suspend or terminate your ability to use any LLC App or portion thereof in case of failure to comply with said Terms and Conditions for any special terms related to a particular service.
You agree that we, and not the App Distributors, are responsible for addressing any claims by you or any third party relating to the LLC App or your possession and/or use of the LLC App, including, but not limited to: (i) product liability claims; (ii) any claim that the LLC App fails to conform to any applicable legal or regulatory requirement; and (iii) claims arising under consumer protection or similar legislation. You agree that we, and not the App Distributors, are responsible for the investigation, defense, settlement and discharge of any third party intellectual property infringement claim related to the LLC App or your possession and use of the LLC App.
As a result of using the App, personal data about you are processed by us. Personal data are to be understood as all information that relates to an identified or identifiable natural person. Because the protection of your privacy while using the App is important to us, we would like to inform you with the following information about what personal data we process when you use the App and how we treat these data. Moreover, we will inform you about the grounds under law for the processing of your data and, in as far as the processing is required for the maintenance of our lawful interests, about our legal interests.
When you download the App, certain necessary information is transferred to the app store that you chose to use (e.g. Google Play or Google App Store), in particular the username, e-mail address, the customer number of your account, the time of download, payment information and individual device code are processed. The processing of these data is done exclusively through the app store and is beyond our sphere of influence.
These data are automatically sent to us, (1) so that we can make the service and the associated functions available to you; (2) to improve the functions and features of the App and (3) to prevent misuse and to rectify malfunctions and (4) to offer you a personalized guest experience. This data processing is justified on the basis that (1) the processing is required in order to fulfil the requirements of the contract between you as the data subject and us in accordance with Art. 6(1)(b) GDPR for the use of the App, or (2) we have a legitimate interest in guaranteeing the functionality and fault-free operation of the App and being able to offer a service that is in line with the requirements of the market and with the interests of the users and prevails over your rights and interests in the protection of your personal data in accordance with Art. 6(1)(f) GDPR.
When you login using a form or a Facebook account to receive further information and offers from the Merlin group of companies in future by e-mail and SMS, we use your login data, such as your name, e-mail address, postcode, Facebook ID (when logging in through a Facebook account), date and time of registration, in order to supply you with information and offers that you have requested from us or could be of interest to you, in as far as you have given your consent to us contacting you for this purpose. Your Login data such as your name and e-mail address are retained as long as you are registered to receive information and offers via e-mail address and SMS. Did you login only for receiving personalized information and offers in the context of the use of the app we retain your login data such as your name and e-mail address for a period of 24 month after the last time you used the app.
The processing and use of usage data is performed to make the service available. This data processing is justified on the basis that the processing is required for the fulfilment of the contract to use the App between you as the data subject and us in accordance with Art. 6(1)(b) GDPR.
This App uses Google Firebase which uses the data to provide analytics and attribution information and for bugfixing. The reader data contain no personal data, only system information such as App version and build number, operation system, system utilization, etc.
2.1 The data entered by you at the time of login are passed on within our company group Merlin Entertainments plc for internal administration purposes, including general customer service to the extent required.
Any passing on of personal data is justified on the basis that we have a legitimate interest in passing on the data for administrative purposes within our company group and your rights and interests in the protection of your personal data in the context of Art. 6(1)(f) GDPR do not prevail.
2.2 If it is required to investigate illegal use or misuse of the App or for legal proceedings, personal data are passed on to the prosecuting authorities or other authorities or, if applicable, to affected third parties or legal advisers. However, this happens only if there are indications of behavior suggesting illegal use or misuse. Passing on of data can also take place if this serves to implement the conditions of use or other legal requirements. We are also legally obliged to provide information on the request of certain public bodies. These public bodies are law enforcement authorities, authorities that have the power to impose fines for infringements of the law and the tax authorities.
Passing on of personal data is justified on the basis that (1) the processing is required to fulfil a legal obligation that we are subject to in accordance with Art. 6(1)(f) GDPR in connection with national legal requirements to pass on data to law enforcement authorities, or (2) we have a legitimate interest in passing on the data in the case of finding indications of behavior suggesting misuse or to implement our conditions of use, other conditions or legal claims to the named third parties and your rights and interests in the protection of your personal data in the context of Art. 6(1)(f) GDPR do not prevail.
Passing on of personal data is justified on the basis that (1) we have a legitimate interest in passing on the data for administrative purposes within our company group and your rights and interests in the protection of your personal data in the context of Art. 6(1)(f) GDPR do not prevail and (2) we carefully select, regularly check and have contractually obliged our third-party companies and external service providers in the context of Art. 28(1) GDPR as commissioned processors to process all personal data exclusively in accordance with our instructions.
Any passing on of personal data is justified on the basis that we have a legitimate interest in modifying our company's legal form to commercial and legal circumstances appropriate to need and your rights and interests in the protection of your personal data in the context of Art. 6(1)(f) GDPR do not prevail.
Processing of your personal data for purposes other than the described purposes takes place only if a legal provision allows this or you have consented to the changed purpose of the data processing. In the case of further processing for other purposes than that for which the data was originally collected, we inform you before the further processing takes place about these other purposes and make all further information relevant to this available to you.
We delete or anonymize your personal data as soon as they are no longer required for the purpose for which they were collected or used in accordance with the previous clauses. As a rule, we store your personal data for the period of use or the contractual relationship of the App plus a period of 60 days during which we keep backup copies after deletion, in as far as these data are no longer needed for criminal proceedings or for the safeguarding, assertion or enforcement of legal claims.
You have the right upon request at any time to be informed about the personal data relating to you and processed by us to the scope defined in Art. 15 GDPR. You can submit your request by post or by e-mail to the address given below.
You have the right to demand that we immediately correct personal data relating to you in as far as these data are incorrect. Please use the contact addresses given below for this purpose.
You have the right to demand that we restrict processing in accordance with the provisions of Art. 18 GDPR. This right exists in particular if the correctness of the personal data is disputed between the user and us and for the period required for checking the correctness and in the case that the user demands a restriction of processing instead of deletion where there is an existing right to deletion; and furthermore for the case that the data are no longer required for the purpose pursued by us, but the user needs them for asserting, exercising or defending legal claims and in cases where the successful exercise of an objection between us and the user is still disputed. In order to assert your right to restriction of processing please use the contact addresses given below.
You have the right to obtain from us the personal data relating to you that you have made available to us. We must provide you with the data in a structured, commonly used, machine-readable format in accordance with the provisions of Art. 20 GDPR. In order to assert your right to data transferability, please use the contact addresses given below.
You have the right to submit an objection in accordance with Art. 21 GDPR at any time against the processing of personal data relating to you that is performed inter alia on the basis of Art. 6(1)(e) or (f) GDPR. We will cease the processing of your personal data unless we can substantiate compelling and worthwhile grounds for the protection of the processing that prevail over your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 15
 Art. 18
 Art. 20
 Art. 21
 Art. 6