Data Protection Notice for Residents of Europe
Privacy & Security Policy
This European Data Protection Notice (this “Notice”) describes how Lands’ End Europe Limited, and Lands’ End GmbH (collectively, “Lands' End”, “we”, “us” or “our”) collect, handle, share, use and otherwise process the personal data of data subjects who are both (i) resident in the European Economic Area, Switzerland, or the UK (collectively, “Europe”) and (ii) are a:
- visitor to one of our stores located in Europe;
- visitor to landsend.co.uk, landsend.fr, landsend.de, or www.landsend.at (the “websites”);
- caller to our customer service helplines; and/or
- director, officer, employee or other contact at:
- one of our customers;
- suppliers; and/or
- other business partners,
collectively, the “Data Subjects” or “you”.
We may collect and otherwise process your personal data if you were to:
- visit our websites;
- purchase products from us, whether on the websites, third party marketplaces, by phone, or in one of our stores;
- create an account with us, or otherwise sign up for our services or features;
- complete a survey arranged by us;
- participate in a contest or other promotion arranged by us;
- communicate with us via third-party social media sites;
- sell or provide your products or services to us, or wish to do so; and/or
- contact us or otherwise communicate with us or provide information to us.
Lands’ End complies with the EU General Data Protection Regulation, the UK General Data Protection Regulation, and related data protection and e-privacy laws in Europe (together, the “Data Protection Laws”). This Notice applies to you to the extent that you are a Data Subject and the Data Protection Laws apply to our processing of your personal data. The words “including”, “such as”, or “for example” in this Notice are not limiting.
This Notice explains in detail when and why we collect personal data about you when you interact with us and how we use it. It also explains the conditions under which we may disclose it to others. We hope the following sections will answer any questions you have but if not, please do get in touch with us using the details provided at the end of this Notice.
It’s likely that we’ll need to update this Notice from time to time. We’ll notify you of any significant changes, but you’re welcome to come back and check it here online whenever you wish.
Who is Lands’ End?
Lands’ End is a leading digital retailer of solution-based apparel, swimwear, outerwear, accessories, footwear, home products and uniforms. Lands’ End Europe Limited and Lands’ End GmbH are each controllers of your personal data under Data Protection Laws. Each entity’s contact details are provided towards the end of this Notice in the “Any questions?” section.
What type of personal data is collected from you?
If you are a visitor to one of our stores or our websites, or a caller to our customer service helplines.
The personal data we collect from you and/or otherwise process might include your:
- “Identification and contact information”: such as your name and surname, title, unique personal identifier, online identifier, location, password, postal address, email address, telephone numbers, or other contact details and information you may provide to us when you register or update an account; sign up for email communications; participate in a contest, sweepstakes, promotion or survey; join our mailing list; request a catalog; shop online; or shop by telephone or in our stores in Europe
- “Information you provide about a third party”: name, surname, address, and contact details of recipient for delivery of goods or services (such as sending a gift or virtual gift card), if different from yours
- “Purchase and order information”: billing and shipping addresses, together with purchase details (for example, products, color, size, quantity, and price), methods of payment and/or any communications we have received about your order or purchase
- “Payment card information”: such as name, card issuer and card type, credit or debit card number, expiration date, CVV code, billing addresses, and other financial information shared when making a purchase
- “Other voluntary information”: any information you voluntarily provide us in the course of your interactions with us (such as by sending an email through our website and/or to the addresses indicated in our website or by calling, emailing, texting, or chatting online with our customer service team and/or store staff, posting product and service reviews and ratings, or by responding to surveys or competitions)
- “Information collected from your browser”: your browser type; operating system type or mobile device model, viewed webpages, links that are clicked, sponsored links or third-party advertisements that are clicked, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to our website, the amount of time you spend viewing or using our website, the number of times you return, or other click-stream or website-usage data, and emails we send that you open, forward, or click through to our website
- “Information collected from your device and internet network”: your internet service provider, your internet protocol or IP address domain names of the computers you use to visit our website, your operating system and browser used, and the type of handheld or mobile device used, such as laptop or smart phone, log files, URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical status code of the server reply (successful, error, etc.) and other relevant parameters concerning the device operating system and computer environment, and/or device cookie settings and MAC address
- “Preference information”: such as your account settings, including preferred store, and your wish list, contact channel and types of services/offers that interest you
- “Social media information”: if you interact with us through a social media service or log in using social media credentials, depending on your social media settings, we may have access to your information from that social network such as your ID, name, profile picture, email address, age range, gender, and location
- “Geolocation information”: your country, region or city only (if you permit us to obtain such geolocation). We do not collect your precise geolocation data
- “Inferences drawn from the information identified above”: to create a profile about a consumer reflecting the consumer’s retail preferences and to present the consumer with products of interest
- “Government-issued information”: such as your driver’s license number and state identification card
- “Accident information”: details about any accident or injury on our premises in Europe
- “Legal information”: fraud checks or flags raised about your transactions, the payment card you want to use, payment card refusals, claims and accidents. Legal information may also include data from the other categories of information set out above if we are required to disclose such data under applicable laws.
In some cases, you may provide information to us about another person, such as when you purchase a gift voucher for someone and request that we deliver it to that person or when you share content on our websites through the websites or otherwise, or when you decide to ship products you purchase to someone else. In such cases, you represent that you have the authorization of such person to provide us with such information.
If you are a director, officer, employee or contact at one of our customers, suppliers; and/or other business partners
The personal data we may collect from you and/or otherwise process includes your:
- Identification and contact information
- Information you provide about a third party
- Purchase and order information
- Payment card information
- Other voluntary information
- Government-issued information: such as your driver’s license number and state identification card
- Accident information: details about any accident or injury on our premises; and/or
- Legal information
How Will We Use Your Personal Data?
We use your personal data in several different ways depending on the type of information. The table below sets this out in detail, showing the categories of personal data we collect, where we get it, why we collect it, the lawful basis we rely on for doing so under Data Protection Laws, and to whom we may disclose it:
| Category of Personal Data | Source of Information | Purpose for Processing | Lawful Basis under Data Protection Laws | Categories of Recipients |
|---|---|---|---|---|
| Identification and contact information | From you (online and offline, such as in stores/in the course of using or processing online services or remote order/sales services, including chatting online with or otherwise contacting customer service) |
|
|
|
| Information you provide about a third party | From you |
|
Performance of a contract |
|
| Purchase and order information | From you or from a customer who places an order to be delivered to you |
|
|
|
| Payment card information | From you |
|
|
Our card processor stores all credit card information. It conducts credit card transactions using commercially reasonable security precautions, controls, policies, and procedures consistent with generally accepted data processing standards in the financial services industry. We only store a record that the transaction occurred and the amount you paid in connection with your account information. |
| Other voluntary information | From you, including via recordings made of your calls to us |
|
|
|
| Information collected from your browser | From you and from our website or app technology's interaction with your browser or devices |
|
|
|
| Information collected from your device and internet network | From you and from our website or app technology's interaction with your browser or devices, and from suppliers who support our fraud-detection efforts |
|
|
|
| Preference information | From you and from our website or app technology's interaction with your browser or devices and cookies tracking the pages you visit |
|
|
|
| Social media information | From third parties, including social media platforms and digital advertising partners (such as Meta Platforms/Facebook, TikTok, Pinterest and Google), affiliate networks, and co-branded partners, when you interact with our content, advertisements, or integrations on those platforms, subject to your privacy settings with those third parties.) |
|
|
|
| Government-issued information | From you (online and offline, such as in stores/in the course of using or processing online services or remote order/sales services, including chatting online with us or otherwise contacting customer service). We do not routinely request or collect such data from you. | To protect the security or integrity of the website and our business, such as by protecting against and preventing fraud (including unauthorized transactions or users) | Legitimate interests (i.e., to detect fraud and the security or integrity of our websites and business). |
|
| Geolocation information | From you (online and offline, such as in stores/in the course of using or processing online services or remote order/sales services, including chatting online with or otherwise contacting customer service) |
|
Legitimate interests (i.e., to provide good customer service and for the proper functioning of our website and app technology) |
|
| Inferences drawn from the information identified above to create profiles | From you and the other sources listed above, including your interactions with our website, app, and any marketing you receive |
|
|
|
| Accident information | From you and from witnesses; CCTV |
|
|
|
| Legal information | From you, the police crime and fraud-prevention agencies, payment card providers, the public, governmental agencies, regulators, and your and our professional advisors and representatives |
|
|
|
| Each of the above categories of data | Each of the above sources of data |
|
Legitimate interests (i.e., in managing, selling, growing our business, or reducing our liabilities) |
|
| Each of the above categories of data | Each of the above sources of data |
|
|
|
The authorized third parties which provide specialized services to us (as referred to in the table above) act as our data processors. These services include product fulfilment, processing and delivery; maintaining and managing our customer information; communicating with our customers; servicing our websites and providing other information technology services; conducting promotions or surveys; and/or providing consumer research and analytics services. For the avoidance of doubt, such authorized third parties do not include independent social media or digital advertising platforms, which process personal data for their own purposes and therefore act as data controllers, as described in the table above.
If you fail to provide certain personal data when requested, we may not be able to fulfil the contract we have entered with you, or we may be prevented from complying with our legal obligations. In cases where we rely on consent as our lawful basis, and you withdraw your consent, this will not affect the lawfulness of any processing carried out before you withdrew your consent. If you withdraw your consent, we may also not be able to provide certain products or services to you.
Do We Collect Special Categories of Personal Data?
We do not typically collect or otherwise process special categories of personal data, or criminal convictions and offences data, relating to the data processing activities covered by this Notice.
If, and to the extent that we process such categories of personal data (such as if there were an accident on our premises in Europe), we will do so subject to the applicable lawful basis indicated in the table above and a relevant “condition” set out in Data Protection Laws (article 9 and 10 EU GDPR and UK GDPR along with any additional or relevant conditions under laws of the relevant European country). Relevant conditions under article 9(2) EU GDPR and UK GDPR which we may rely on will include where the processing (i) is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent; (ii) is necessary for the establishment, exercise or defence of legal claims; and (iii) relates to personal data which are manifestly made public by the data subject.
How Long Do We Keep Your Personal Data?
Your personal data is retained by us only for the periods (i) necessary to achieve the purposes for which it was collected; or (ii) for which we are required to retain such data, in each case, as determined in accordance with the Data Protection Laws and our data retention policies. Following the expiry of such period, we will either erasure it from our systems and/or take steps to anonymize it (such that it is no longer regarded as personal data under Data Protection Laws).
Cross-Border Transfers of Data
We do not usually transfer your personal data outside of Europe, except as set out in the paragraphs below.
We may occasionally have our affiliates’ information technology teams access your personal data from their locations in the United States in connection with information technology-related support and maintenance services provided to us. With respect to these limited transfers of your personal data, we have implemented EU/UK/Swiss standard contractual clauses in accordance with Data Protection Laws (article 46(2) EU GDPR; UK GDPR). We are in the process of certifying to the EU-US Data Privacy Framework, the UK-US Data Bridge, and Swiss Extension. Once such certification has been completed, we will no longer rely on such clauses for such data transfers.
Separate from the data transfers set out above, your personal data may be transferred to certain third-party partners or professional advisors (each of whom will act as data controllers), as indicated in the table above in this Notice. With respect to these transfers of your personal data, we will usually rely on a data protection safeguard identified in accordance with Data Protection Laws (article 46(2) EU GDPR; UK GDPR), notably, the EU/UK/Swiss standard contractual clauses, or the data importers’ certification to the EU-US Data Privacy Framework, the UK-US Data Bridge, and Swiss Extension.
Information Security
We take your security seriously and encrypt credit card numbers when you order directly through the website. We transfer such encrypted data over the Internet using secure socket layer (SSL) technology so that your online shopping experience is subject to industry standard security.
We invite you to contact Lands’ End via email, through the Contact Us page. However, email correspondence is free format text and cannot always be encrypted; therefore, it is not a secure means of communication. Please do not send special category personal data or other material categories of personal data, such as payment card information, through email to us.
In general, we use appropriate security measures intended to protect your personal data against personal data breaches. However, as is the case with all information technologies, we cannot guarantee full security of your personal data.
Reviews and Feedback
Lands’ End may contact you via email to invite you to review any services and/or products you received from us. Please note that further to our email invitation for your review, your subsequent access and use of third-party websites will be exclusively managed by those third parties and subject to their terms and conditions and privacy policies. We recommend that you read and review this documentation.
Automated Decision-making, including Profiling
We do not carry out solely automated decision-making or profiling in relation to your personal data that would cause a legal or similarly significant effect on you. We may, however, use artificial intelligence technologies, including automated systems, chatbots and other AI systems, to enhance and improve our interactions with you.
Children
Our websites are not intended for use by, or directed to, children. You must have reached the minimum age as set out under the Data Protection Laws to share your personal data with Lands’ End, or you must have received permission from your parent or guardian to do so.
Social Media Platforms
When you contribute to a social, community or other publicly available area or feature of the websites, the information and content that you post may be made available to the public, depending on your settings. We recommend that you do not submit or post any sensitive personal data, such as your full name, home address, phone number or other personal data in these circumstances.
Content and information that you submit on or through Facebook, Twitter, Instagram, TikTok, and Pinterest, and other third-party platforms may appear on the websites through feeds or interfaces with those platforms. We are not responsible for the information, content and/or privacy practices of any such third-party platforms.
Your choices and data protection rights
You may have the following rights in connection with our processing of your personal data:
- Request access to your personal data
- Request correction of the personal data that we hold about you
- Request erasure of your personal data
- Object to our processing of your personal data
- Request restriction of our processing of your personal data
- Request the transfer of your personal data to you or to a third party (portability)
- Request information regarding if/how we transfer your personal data outside of Europe, including any data protection safeguards or derogations which we rely on
- Withdraw consent at any time where we rely on your consent to process your personal data
However, such rights may be subject to limitations under Data Protection Laws which we may rely on depending on the circumstances.
You also have the right to lodge a complaint with the supervisory authority in your country of residence if you believe that we have not complied with Data Protection Laws. The relevant supervisory authorities in Europe are as set out in the following websites:
- EEA: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
- Switzerland: https://www.edoeb.admin.ch/en
- UK: https://ico.org.uk/make-a-complaint/
Your right to withdraw consent to direct marketing
If you have consented to receiving:
- promotional emails from us and would like to opt out, please contact us or follow the unsubscribe instructions in each email. If you opt out of receiving promotional correspondence from us, we may still contact you in connection with your account, relationship, activities, transactions and communications with us;
- online advertising or third-party marketing communications and would like to opt-out, please contact us or follow the relevant opt-out or unsubscribe feature on the third-party website or on your web browser.
Cookies and Tracking Technologies
Our websites use cookies, which are small data files on your device memory. The use of cookies is standard practice for many websites, including ours. Please refer to our cookie policy for more information regarding our use of cookies and other tracking technologies: Cookies | Lands' End. You will also have certain options with respect to our use of cookies in our cookie banner which you will receive when you visit our websites.
You may also be able to manage the cookies that you allow on your device through the internet browser that you use. Your browser's 'help' function should tell you how to do this. There are also procedures to manually delete your cookies; for example:visit http://www.allaboutcookies.org/manage-cookies/stop-cookies-installed.html to learn more. In addition, this tool networkadvertising.org/managing/opt_out.asp may allow you to opt out of behavioral advertising delivered by its member companies.
Any Questions?
If you have any questions or concerns about the identity of the data controller(s) of your information and/or any questions about this Notice and/or about our privacy policies and practices, please email us or our EU GDPR and UK GDPR data protection officer at dpo@landsend.co.uk, or write to us at:
- EEA and Swiss residents: Lands’ End GmbH, In der Langwiese, 66693 Mettlach, Germany. Attn: Data Protection Officer.
- UK residents: Customer Services, Lands’ End Europe Limited, Lands’ End Way, Oakham, Rutland, LE15 6US, UK. Attn: Data Protection Officer.