Privacy

Oxford Properties Group Privacy Statement

OUR COMMITMENT TO YOUR PRIVACY

At Oxford Properties Group, honesty and integrity are at the core of everything we do. We are committed to building and keeping your trust in all aspects of our operations, including how we handle your personal data. Throughout all operations we implement privacy practices designed to help keep your personal data safe, secure and used appropriately. We hope this Privacy Statement will help you to understand our approach to privacy.

This Privacy Statement applies to the collection, use and disclosure of personal data by Oxford Properties Group. This Privacy Statement does not apply to Oxford Employees, prospective Employees or Contractors as they are governed by OMERS Employee Privacy Statement.
This Privacy Statement does not apply to personal data collected by tenants or other third parties operating in our properties. Tenants and other third parties are independently responsible for managing such data in accordance with their own privacy notices.
Click on the Questions below to learn about Oxford privacy practices that are of interest to you. For the full Oxford Privacy Statement click here.

Oxford Properties Group is owned by the Ontario Municipal Employees Retirement System (“OMERS”). Oxford has many lines of business. Oxford owns, invests in and manages shopping centres, apartment buildings, office buildings and other properties. We are property developers and property investors. The types of personal data that we collect and use depend on our lines of business and the purpose of your interaction with us. This Privacy Statement applies to all our lines of business.

To ensure you find the information pertinent to your needs, we encourage you to select the icon that corresponds with your interaction with us, as indicated in the sections below of our Privacy Statement.

When you read this Privacy Statement, please keep in mind that the words to “Oxford”, “we” or “us” means Oxford Properties Group and our affiliates.

Our compliance framework is designed to safeguard personal data and ensure adherence to our Privacy Statement. This framework comprises various elements, including:

Specific rules for personnel on handling personal data
Mandatory training programs
Procedures for addressing incidents
Guidelines on data retention periods
Processes for resolving complaints
Protocols for responding to personal data access requests

Central to our compliance efforts is the Privacy Office, led by our Privacy Officer. The Privacy Office has several key responsibilities:

Educating staff on privacy issues
Providing guidance on handling personal data in new or significantly altered activities
Advising on policies and procedures to protect personal data
Managing complaints related to personal data handling

For further assistance or to address concerns, please contact the Privacy Office using the details in the Contact Us section.

If you reside in Quebec and we collect your personal data, please be aware that we may transmit that data outside of Quebec. This includes sharing data with our head office in Ontario, as well as other sites within Canada, the United States, and various international locations where our service providers or we operate.

If you reside in in the European Economic Area or the United Kingdom and we collect your personal data, please be aware that we may transmit that data to Canada, the United States, and various international locations where our service providers or we operate. Please also review our Special Information for residents of the European Economic Area and/or the United Kingdom.

The types of personal data that we collect and how we use it will depend on the nature of our activities and your interactions with us. We may combine personal data that we collect across your interactions with us and that we collect from third parties into a customer profile for you and use that customer profile for the purposes set out in this Privacy Statement. This Privacy Statement may be supplemented with additional privacy notices for specific services or to comply with local laws where our properties are located. These notices are available where the services are offered or the properties are located, and we encourage you to review them carefully to understand how your personal data is handled in those instances.

As our businesses evolve, we may collect data types or use data for purposes not listed here. In these cases, we will inform you about the data being collected and the reasons for its collection at the time of collection or before using it for a new purpose, unless legal provisions allow or require us to do so without your consent.

Click on the relevant icon below to find out more about the personal data we collect and how we use it.

We want to offer visitors outstanding shopping experiences. When you visit our malls and other retail properties, we collect, combine and use personal data for the following purposes:

Visitor Management and Concierge Services: Enhancing the overall visitor experience by receiving and responding to information and maintenance requests, handling lost and found items, providing mobility aid loan services (such as wheelchairs and scooters), managing special event bookings, providing tourist assistance, and collecting feedback.
Consumer Transactions: Processing credit card, debit card and other payment methods for the purchase of gift cards, special events (such as Santa experiences), and of services such as paid or valet parking or deposits or non-return fees for mobility aid loan services.
Parking Utilization and Enforcement: Analyzing parking usage to optimize space allocation, manage peak times, improve overall visitor convenience, and enforce parking rules.
Visitor Analysis: Assessing the number of visitors, visit duration, visitor flow, and visitor characteristics.
Wi-Fi Usage: Collecting data from Wi-Fi sign in, such as email address/username and postal code and network traffic to understand where visitors are visiting from and to manage and secure our Wi-Fi network.
Communications: Communicating through our newsletters, offers, surveys, and event invitations, and responding to inquiries and requests and collecting consent, if applicable, to send these communications.
Social Media Interactions: Responding to social media messages and interactions and monitoring mall social media mentions to gauge visitor sentiment and preferences.
Contests and Promotions: Managing contest entries, promotions, and prize claims.
Tailored Advertising: Collecting information to help make our advertisements and email communications better based on interests, location, and data provided to social media platforms, mobile applications, or websites.
Innovation: Analyzing data we collect to identify insights to innovate and improve our business, including benchmarking our performance.
Safety and Security: Implementing measures such as security cameras for closed-circuit video surveillance and gift card kiosk cameras, and security personnel patrols to ensure a safe shopping environment, respond to emergency incidents, protect employees, tenants, and visitors, and deter fraud and unauthorized activities.
Risk Management: Conducting regular assessments and monitoring transactions to identify and address potential risks, ensuring the integrity of mall operations and safeguarding against fraud or other illegal activities.
Legal Compliance: Maintaining necessary business records.
Legal Obligations: Complying with legal requirements and directives.
Property and Business Sales: Transferring records to a new property manager if the property is sold or no longer managed by Oxford.
Other Consent-Based Purposes: Addressing other purposes for which you have given consent.

To support the purposes listed above, we collect the following types of personal data:

Contact Information: Name, email address, phone number, and, in limited cases, home address if this contact information is necessary for the purposes listed above.
Transaction Records: Records relating to purchases of gift cards and other paid products or services. In limited situations, this may include recording credit card, payment card or information from other payment methods.
Communication Records: Emails, contact form submissions, chatbot interactions, other correspondence, and call recordings to address inquiries and gauge visitor sentiment.
Special Event Data: Information on participation in mall-hosted events.
Social Media Engagement: Mentions and interactions, including responses to surveys and ads, to understand visitor preferences and improve services.
Wi-Fi Usage Data: Data collected from Wi-Fi log-in and data use, and other information necessary to provide and secure the Wi-Fi service.
Digital Directory and Digital Advertising Interactions: Data from interactions with digital mall directories and in-mall digital advertising to understand search queries, advertising effectiveness and visitor demographics. This data is collected through our service provider, Cineplex Digital Media. For more information on these technologies, please visit: https://www.cdmexperiences.com/information-on-ava
Foot-traffic Data: Data collected from mobile phone signals and from occupancy counters (which may use anonymous video or other sensor technologies) to analyze foot traffic patterns and dwell times in specific areas.
Feedback and Servey Responses: Ratings, comments, suggestions, and information provided in response to our request to assess satisfaction levels and identify areas for service improvements.
Security Monitoring Data: Closed-circuit video monitoring, body-worn cameras, and cameras embedded in gift card kiosks. We may also pilot or use other sensor-based technologies such as thermal imaging. We will post signage where we pilot or use these technologies.
Parking Data: Data from photo and video cameras and license plate readers.
Maintenance Requests: Details of maintenance or repair requests, including nature, date, and resolution status.
Incident Reports Data: Details of incidents at mall properties, including locations and times, and particulars of individuals involved in the incident.
Other Personal Identification Data: In limited cases, we collect other personal identification data, including date of birth and gender as part of health and safety incident response and investigations, and in some cases to screen high-value gift card transactions.
Additional Relevant Information: Other data pertinent to our collection purposes that is collected lawfully.

Oxford owns and manages residential apartments and furnished suites. We collect, combine and use data from applicants, tenants and their visitors for the following purposes:

Concierge and Building Services: Enhancing the overall tenant and visitor experience by responding to information requests, receiving packages, managing amenities and common elements, receiving and responding to maintenance requests, managing equipment rentals, and collecting feedback.
Rental Applications: Assessing eligibility and suitability to rent one of our residential units.
Lease Management: Preparation, execution and management of lease arrangements, including processing rental payments and payments for ancillary services.
Parking Utilization and Enforcement: Analyzing parking usage to optimize space allocation and enforcing parking rules.
Utility Management: Managing billing and related matters, including efficiency improvements, for utilities such as electricity, water consumption, bulk internet, and other similar services.
Communications: Communicating through our newsletters, offers, surveys, and event invitations, and responding to inquiries and requests and collecting consent, if applicable, to send these communications.
Social Media Interactions: Responding to social media messages and interactions and monitoring building social media mentions to gauge sentiment and preferences.
Contests and Promotions: Managing contest entries, promotions, and prize claims.
Innovation: Analyzing data we collect to identify insights to innovate and improve our business, including benchmarking our performance, rents and leases, and identifying and analyzing potential prospects for tenants.
Safety and Security: Implementing measures such as surveillance cameras and security personnel patrols to ensure a safe environment, respond to emergency incidents, protect employees, tenants, and visitors, and deter unauthorized activities.
Risk Management: Conducting regular assessments and monitoring transactions to identify and address potential risks, ensuring the integrity of building operations and safeguarding against fraud or other illegal activities.
Legal Compliance: Maintaining necessary business records.
Legal Obligations: Complying with legal requirements and directives.
Property and Business Sales: Transferring records to a new property manager if the property is sold or no longer managed by Oxford.
Other Consent-Based Purposes: Addressing other purposes for which you have given consent.

To support the purposes listed above, we collect the following types of personal data:

Contact Information: Name, email address, and phone number. For applicants, we may collect home address and, for tenants, emergency contact information.
Lease Data: Lease duration, payment history, rent increases, eligibility to use amenities, and other data related to the administration of your lease.
Background Information: Details from applicants and tenants such as date of birth, government issued identification, current and previous employers, current and former addresses, rental history, income and other financial data, references, and credit scores.
Banking and Payment Data: Bank account number, credit card, debit card or other payment methods information from tenants to process payments, including automatic withdrawals, and to keep records of deposits, rent and other payments and any arrears and collections activity.
Vehicle Information: License plate numbers, vehicle make and model, and parking permit data for managing parking facilities, providing parking services, and enforcing parking regulations.
Key Fob, Pass Card and Smart Locks Data: Access data from key fobs or smart locks to ensure security, manage building access, and, for amenities, analyze usage patterns for operational efficiency.
Communication Records: Emails, contact form submissions, chatbot interactions, other correspondence, and call recordings to address inquiries.
Maintenance Requests: Details of maintenance or repair requests, including nature, date, and resolution status.
Package Delivery Information: Package information for packages received on behalf of residents.
Visitor Logs: Where the tenant is not present to receive a visitor and other limited cases, names, dates, and times of visitors.
Special Event Data: Information on participation in building-hosted events.
Social Media Engagement: Mentions and interactions, including responses to surveys and ads, to understand tenant/ visitor preferences and improve services.
Feedback and Servey Responses: Ratings, comments, suggestions, and information provided in response to our request to assess satisfaction levels and identify areas for service improvements.
Security Monitoring Data: Closed-circuit video monitoring. We may also pilot or use other sensor-based technologies such as thermal imaging. We will post signage where we pilot or use these technologies.
Parking Data: Data from photo and video cameras, tenant and guest names, and guest check-in data.
Incident Reports Data: Details of incidents at properties, including locations and times, and particulars of individuals involved in the incident.
Other Personal Identification Data: In limited cases, we collect other personal identification data, including date of birth and gender as part of health and safety incident response and investigations, and background checks.
Additional Relevant Information: Other data pertinent to our collection purposes that is collected lawfully.

We provide websites, mobile applications, and other digital services to enhance user experience and engagement. We collect, combine and use data from these platforms for the following purposes:

Digital Security: Restricting access to certain websites, apps or digital services for registered users or those meeting age requirements, and identifying and responding to threats to the security of our websites, apps and digital services.
Communications: Communicating through our newsletters, offers, surveys, and event invitations, and responding to inquiries and requests and collecting consent, if applicable, to send these communications.
Contests and Promotions: Managing contest entries, promotions, and prize claims.
Transactions: Processing payments for the purchase of gift cards, special events (such as Santa experiences), and of services such as paid or valet parking.
Tailored Advertising: Collecting information to help make our advertisements and email communications better based on interests, location, and data provided to social media platforms, mobile applications, or websites.
User Experience and Enhancement: Recording activities and custom settings to maintain a personalized experience across sessions and to customize and improve the user interface and overall digital experience.
Accessibility Improvements: Using data to ensure digital offerings are accessible to all users, including those with disabilities.
Community Engagement: Engaging users in forums, feedback sessions, or social media interactions to foster a community around the digital offerings.
Innovation: Analyzing data we collect to identify insights to innovate and improve our business, including benchmarking our performance.
Risk Management: Conducting regular assessments and monitoring transactions to identify and address potential risks, ensuring the integrity of website, mobile app and digital services operations and safeguarding against fraud or other illegal activities.
Legal Compliance: Maintaining necessary business records.
Legal Obligations: Complying with legal requirements and directives.
Business Sales: Transferring records to a new property manager if the website, mobile app, digital service or associated property is sold or no longer managed by Oxford.
Other Consent-Based Purposes: Addressing other purposes for which you have given consent.

You can use many of our digital offerings, such as our property websites, without providing us with your name or other directly identifying information. However, to support these activities listed above, we may collect:

Contact Information: Addresses, emails, and phone numbers when reasonably required for the purposes set out above.
Communication Records: Emails, contact form submissions, and chatbot interactions.
Transaction Records: Records relating to purchases of gift cards and other paid products or services.
Technical Data: Information about your digital connection, including IP address, browser type, access location, navigation history, device type, and visit timestamps.
Usage Data: Details on how you interact with out websites, mobile apps and other digital services, including time spent on certain pages or features used.
Social Media Engagement: Mentions and interactions, including responses to surveys and ads, to understand tenant/ visitor preferences and improve services.
Social Media Login Data: Profile data from your social media account if you use your social media login credentials to register for an account for one of our digital offerings.
Content and advertising Interactions: Engagement data with our content and ads.
Location Information: Inferred location from IP addresses or, with your consent, precise location using GPS.
Accessibility Preferences: Information on the use of accessibility features.
Feedback and Servey Responses: Ratings, comments, suggestions, and information provided in response to our request to assess satisfaction levels and identify areas for service improvements.
Additional Relevant Information: Other data pertinent to our collection purposes that is collected lawfully.

Oxford owns and manages office, retail and industrial properties. We collect, combine and use personal data when managing these properties for the following purposes:

Concierge and Building Services: Enhancing the overall tenant and visitor experience by responding to information requests, receiving packages, managing amenities and common elements, receiving and responding to maintenance requests, managing equipment rentals, and collecting feedback.
Leasing Applications: Assessing eligibility and suitability to lease commercial space.
Lease Management: Preparation, execution and management of lease arrangements, including processing rental payments and payments for ancillary services.
Parking Utilization and Enforcement: Analyzing parking usage to optimize space allocation and enforcing parking rules.
Utility Management: Managing billing and related matters, including efficiency improvements, for utilities such as electricity, water consumption, bulk internet, and other similar services.
Wi-Fi Usage: Collecting data from Wi-Fi sign in, such as email address/username and postal code and network traffic to understand where visitors are visiting from and to manage and secure our Wi-Fi network.
Communications: Communicating through our newsletters, offers, surveys, and event invitations, and responding to inquiries and requests and collecting consent, if applicable, to send these communications.
Social Media Interactions: Responding to social media messages and interactions and monitoring mall social media mentions to gauge visitor sentiment and preferences.
Contests and Promotions: Managing contest entries, promotions, and prize claims.
Tailored Advertising: Collecting information to help make our advertisements and email communications better based on interests, location, and data provided to social media platforms, mobile applications, or websites.
Innovation: Analyzing data we collect to identify insights to innovate and improve our business, including benchmarking our performance.
Safety and Security: Implementing measures such as security cameras for closed-circuit video surveillance and gift card kiosk cameras, and security personnel patrols to ensure a safe shopping environment, respond to emergency incidents, protect employees, tenants, and visitors, and deter fraud and unauthorized activities.
Risk Management: Conducting regular assessments and monitoring transactions to identify and address potential risks, ensuring the integrity of mall operations and safeguarding against fraud or other illegal activities.
Legal Compliance: Maintaining necessary business records.
Legal Obligations: Complying with legal requirements and directives.
Property and Business Sales: Transferring records to a new property manager if the property is sold or no longer managed by Oxford.
Other Consent-Based Purposes: Addressing other purposes for which you have given consent.

To support the purposes listed above, we collect the following types of personal data:

Contact Information: Name, email address, and phone number. For applicants, we may collect home address and, for tenants, emergency contact information.
Background Information: Details from applicants and tenants such as date of birth, government issued identification, current and previous employers, current and former addresses, rental history, income and other financial data, references, and credit scores.
Banking and Payment Data: Bank account number, credit card, debit card or other payment methods information from tenants to process payments, including automatic withdrawals, and to keep records of deposits, rent and other payments and any arrears and collections activity.
Vehicle Information: License plate numbers, vehicle make and model, and parking permit data for managing parking facilities, providing parking services, and enforcing parking regulations.
Key Fob, Pass Card and Smart Locks Data: Access data from key fobs or smart locks to ensure security, manage building access, and, for amenities, analyze usage patterns for operational efficiency.
Biometric Data for Authentication: If applicable and with explicit consent, collecting biometric data such as facial recognition for secure access.
Communication Records: Emails, contact form submissions, chatbot interactions, other correspondence, and call recordings to address inquiries.
Maintenance Requests: Details of maintenance or repair requests, including nature, date, and resolution status.
Package Delivery Information: Package information for packages received on behalf of residents.
Visitor Logs: Where the tenant is not present to receive a visitor and other limited cases, names, dates, and times of visitors.
Special Event Data: Information on participation in building-hosted events.
Social Media Engagement: Mentions and interactions, including responses to surveys and ads, to understand tenant/ visitor preferences and improve services.
Wi-Fi Usage Data: Data collected from Wi-Fi log-in and data use, and other information necessary to provide and secure the Wi-Fi service.
Digital Directory and Digital Advertising Interactions: Data from interactions with digital mall directories and in-mall digital advertising to understand search queries, advertising effectiveness and visitor demographics. This data is collected through our service provider, Cineplex Digital Media. For more information on these technologies, please visit: https://www.cdmexperiences.com/information-on-ava
Foot-traffic Data: Data collected from mobile phone signals and from occupancy counters (which may use anonymous video or other sensor technologies) to analyze foot traffic patterns and dwell times in specific areas.
Feedback and Servey Responses: Ratings, comments, suggestions, and information provided in response to our request to assess satisfaction levels and identify areas for service improvements.
Security Monitoring Data: Closed-circuit video monitoring, body-worn cameras, and cameras embedded in gift card kiosks. We may also pilot or use other sensor-based technologies such as thermal imaging. We will post signage where we pilot or use these technologies.
Parking Data: Data from photo and video cameras and license plate readers.
Incident Reports Data: Details of incidents at mall properties, including locations and times, and particulars of individuals involved in the incident.
Other Personal Identification Data: In limited cases, we collect other personal identification data, including date of birth and gender as part of health and safety incident response and investigations, and in some cases to screen high-value gift card transactions.
Additional Relevant Information: Other data pertinent to our collection purposes that is collected lawfully.

Our development and investment activities involve financing, buying, improving, or constructing, retail, residential and industrial properties to deliver returns to our shareholders. We collect, combine and use personal data for the following purposes:

Communications: Communicating with business partners and prospective business partners. In addition, communicating through our newsletters, offers, surveys, and event invitations, and responding to inquiries and requests and collecting consent, if applicable, to send these communications.
Due Diligence: Conducting evaluations of potential properties, financings, and business acquisitions, including comprehensive due diligence and background checks on management of the entities involved.
Asset Management: Implementing monitoring and strategic management of our companies and investments to optimize performance and value.
Safety and Security: Implementing measures such as security cameras for closed-circuit video surveillance and gift card kiosk cameras, and security personnel patrols to ensure a safe shopping environment, respond to emergency incidents, protect employees, tenants, and visitors, and deter fraud and unauthorized activities.
Risk Management: Conducting regular assessments and monitoring transactions to identify and address potential risks, ensuring the integrity of mall operations and safeguarding against fraud or other illegal activities.
Legal Compliance: Maintaining necessary business records.
Legal Obligations: Complying with legal requirements and directives.
Property and Business Sales: Transferring records to a new property manager if the property is sold or no longer managed by Oxford.
Other Consent-Based Purposes: Addressing other purposes for which you have given consent.

To support the purposes listed above, we collect the following types of personal data:

Contact Information: Addresses, emails, and phone numbers when reasonably required for the purposes set out above.
Diversity and Inclusion Data: Gender and other demographic details pertinent to supporting diversity and inclusion among our professional service providers, development partners, and co-owners.
Background Information: Details such as date of birth, government issued identification (optionally for background checks), current and previous employers, current and former addresses, and other information relevant to background checks.
Communication Records: Emails, contact form submissions, other correspondence, and call recordings to address inquiries.
Employee Data: For acquisitions, lists including job titles, work histories, and salaries.
Diligence Data: For acquisitions, customer or tenant lists, transaction histories, and additional data critical for assessing potential acquisitions or investments.
Business Records: Business records of the business that we acquired or for reporting to us on our investment.
Additional Relevant Information: Other data pertinent to our collection purposes that is collected lawfully.

We collect information that you provide to us directly after we ask for it or when you make a request or inquiry. For example, you may provide us with your contact information when you sign up for a newsletter or event, purchase gift cards or rent a residential, office, commercial or retail space. If we require information for Know Your Client and due diligence purposes, we may ask you to provide your identification and other information. We might also receive information about you from reputation and background check providers, references, publicly available sources, transaction counterparties and legal counsel as part of due diligence or closing processes or from our companies as part of our monitoring and oversight.

We or our service providers also collect some information automatically through technological means, such as technical and usage information of our digital offerings, and, in some of properties, anonymous video analytics and other foot traffic measurement tools.

If you provide us with personal data about another person such as ownership information of the company you work for, you represent that you have all necessary authority and/or have obtained all necessary consents from that individual to enable us to collect, use and disclose that personal data.

We collect and combine data across our different business activities and our different interactions with you.

We share personal data with our affiliates and service providers who assist us with our business operations.

Oxford and its affiliates are part of a corporate family that includes the legal owners of the properties we manage, develop or invest in. Personal data is shared between these entities for any of the purposes listed in this Privacy Statement. Our reasons for sharing this personal data include:

Operational Efficiency: Ensuring the efficient management and operation of properties, including maintenance, tenant services, and security.
Investment Analysis and Decision Making: Collaborating on investment strategies, property acquisitions, and divestitures to optimize our investment portfolio.
Marketing and Customer Service: Developing targeted marketing campaigns and providing personalized tenant services across our properties.
Technology Infrastructure and Support: Collaborating on the development and maintenance of technology infrastructure, including shared services and platforms, to improve operational efficiencies and cybersecurity measures across the group.
Financial Management and Reporting: Coordinating financial operations, including investment performance tracking, financial reporting, and budgeting across the corporate group to ensure financial health and strategic growth.
Innovation and Development: Sharing insights and data to drive innovation in property development, exploring new market opportunities, and enhancing property features to meet evolving tenant needs.
Legal Compliance and Risk Management: Coordinating efforts to adhere to legal obligations, manage risks, and ensure the security of tenant and property data.

In addition, we share personal data with third parties such as the following:

Technology Service Providers: Companies providing the technology infrastructure and services that support our applications, including cloud hosting, software services, and communications tools (such as chatbots) and service providers offering data analytics, machine learning, business intelligence, and AI services.
Payment and Financial Services: Entities processing payments or providing financial services.
Event and Promotional Partners: Collaborators on events and promotional activities.
Marketing and Advertising Agencies: To promote our business activities and properties.
Advertising Networks and Publishers: Digital advertising platforms, including social media platforms where our ads appear.
Customer Relationship Management (CRM) Providers: Providers that manage customer, tenant and prospect data.
Email Marketing Services: Platforms that manage and execute email campaigns, promotions, and communications.
Social Media Management Tools: Services that help manage interactions and content across social media platforms, streamlining engagement and content distribution.
Feedback and Survey Platforms: Tools that collect and analyze tenant feedback, aiding in service improvement and tenant satisfaction strategies.
Background Check Services: Agencies providing credit reporting, reputation, and background verification services.
Analytics Service Providers: Firms offering data analytics services.
Insurance Companies: Providers of insurance coverage related to our operations.
Law Enforcement and Government Agencies: Police and other governmental authorities in compliance with legal obligations.
Professional Advisors: Lawyers, auditors, and management consultants offering legal, financial, or strategic advice.

Click on the tiles to additional examples of third parties with whom we share personal data. With your permission or if we are allowed or required by law, we may also share your personal data with other third parties not listed below.