Last Updated: Oct 07, 2024

Welcome to the Central Park Boathouse—New York City’s historic lakeside escape in Central Park operated by Legends Boathouse, LLC (“Legends,” “we,” “us,” or “our”). When you visit the Central Park Boathouse or access the Central Park Boathouse website, you may provide personal data to both Legends and the City of New York Department of Parks & Recreation (the “City of NY”). The City of NY may process your personal data in accordance with applicable law.

This Privacy Notice explains how Legends collects, uses, discloses, and otherwise processes personal data in connection with the Central Park Boathouse. We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.

This Privacy Notice does not address Legends’ privacy practices relating to our job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information). It also does not address Legends’ privacy practices relating to our corporate site (Legends.net), nor our privacy practices relating to representatives of our partners (both of which are addressed in the Legends Corporate Privacy Policy). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.

Our Role in Processing Personal Data

Data protection laws sometimes differentiate between “controllers” and “processors” of personal data. A “controller” determines the purposes and means (the why and how) of processing personal data. A “processor,” which is sometimes referred to as a “service provider,” processes personal data on behalf of a controller subject to the controller’s instructions.

This Privacy Notice describes our privacy practices where we are acting as the controller of personal data in connection with the Central Park Boathouse. However, we may at times process personal data on behalf of the City of NY in accordance with their instructions in our capacity as their processor. This Privacy Notice does not cover or address our processing of personal data in our capacity as a processor. In addition, our response to any privacy requests submitted in accordance with the instructions set forth in this Privacy Notice will be limited to the instances where we are acting as a controller of the personal data. Unless otherwise instructed by the City of NY, we cannot address requests relating to personal data processed on behalf of the City of NY in our capacity as a processor.

If you access our services or otherwise interact with us from the European Economic Area, United Kingdom, or Switzerland, please see the Who is Responsible for Your Personal Data section of our Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures for more information about our legal entities operating as the controllers of your personal data.

Our Collection and Use of Personal Data

The categories of personal data we collect depend on how you interact with us and the Central Park Boathouse. For example, you may provide us your personal data directly when you communicate with us (such as by email or phone), report a problem or request support with the Central Park Boathouse website, facilities, or services, buy merchandise from us online or from the Central Park Boathouse Store, rent boats or book gondola rides, dine with us, organize or attend a private event, participate in contests, promotions, sweepstakes, or customer service surveys, or otherwise engage with us or the Central Park Boathouse.

We also collect personal data automatically when you interact with the Central Park Boathouse websites and other services and may also collect personal data from other sources and third parties.

Personal Data Provided by Individuals

We collect the following categories of personal data individuals provide us:

• Contact Information, including first and last name, email address, username, postal address, phone number, your country or region and communication preferences. If you are inquiring about or attending a group booking or private event, we may also collect your business email address and phone number, business address, employer, job title, your area of responsibility, and company name. We use this information primarily to fulfill your request, to communicate with you, and to send you marketing communications in accordance with your preferences.

• Shopping and Purchase Information, including the merchandise you view and interact with, the purhases made at the Central Park Boathouse Store, and any returns requested or facilitated. We use this information primarily to facilitate your transactions, to inform our marketing and advertising activities, to deliver your merchandise and for purchase support purposes.
• Boating Information, including information about your boating reservations, rentals, and rides at the Central Park Boathouse. We use this information primarily to facilitate your rental or ride.
• Dining Information, including information about your dining reservations, dietary restrictions, and amount purchased at our restaurant, café, snack bar, and dock side dining. We use this information primarily to facilitate your dining experience.
• Private Event Information, including information about the private event you are planning or attending, and your relationship to the event organizer. We use this information primarily to facilitate events at the Central Park Boathouse.

• Payment Information, including payment card information. We use third-party payment providers, including [Stripe], to process payments made to us. As such, we do not retain any personally identifiable financial information, such as payment card number, you provide these third-party payment providers in connection with payments. Rather, all such information is provided directly by you to our third-party payment providers. The payment provider’s use of your personal data is governed by their privacy notice. [To view Stripe’s privacy policy, please click here.]
• Event, Contest, Promotion, and Survey Information, including information provided when you sign up for a Central Park Boathouse event, enter a contest or promotion, complete a survey or submit a testimonial. We use this information primarily to administer and facilitate the Central Park Boathouse, respond to your submission, communicate with you, conduct market research, improve and grow our business, and facilitate the related event, content, promotion, or survey.
• Images and Video, including images and video captured while on Central Park Boathouse premises or attending events (such as through the use of CCTV cameras or event photographers / videographers), where permitted by law. We use these images and videos primarily for security, fraud, incident reporting, and loss-prevention purposes, as well as to collect analytics, improve operations, and promote the Central Park Boathouse, where appropriate.
• Feedback Information, including feedback and ratings you provide relating to the Central Park Boathouse and its related products and services. We use this information primarily to communicate with you, conduct market research, and improve and grow our business.
• Inquiry and Communications Information, including information provided in custom messages sent through the forms, email addresses, or other contact information we make available to customers, as well as recordings of calls with us, where permitted by law (including through the use of automated tools provided by us or our third-party providers). We use this information primarily to investigate and respond to your inquiries, to communicate with you, to enhance the services we offer at the Central Park Boathouse, and to manage and grow our organization.

If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal data we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Personal Data Automatically Collected

We and our third-party partners, automatically collect information you provide and information about how you access and use the Central Park Boathouse website. We typically collect this information through the use of a variety of our own and our third-party partners’ automatic data collection technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. Information we collect automatically about you may be combined with other personal data we collect directly from you or receive from other sources.

We and our third-party partners use automatic data collection technologies to automatically collect the following data when you interact with the Central Park Boathouse website or otherwise engage with us in relation to the Central Park Boathouse:

• Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID). We employ third-party technologies designed to allow us to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted) to link information collected from different devices.

• Information About the Way You Use the Central Park Boathouse Website and Interact With Us, including the site from which you came, the site to which you are going when you leave the Central Park Boathouse website, how frequently you access the Central Park Boathouse website, whether you open emails or click the links contained in emails, whether you access the Central Park Boathouse website from multiple devices, and other browsing behavior and actions you take on the Central Park Boathouse website (such as the pages you visit, the content you view, the communications you have through the Central Park Boathouse website, and the content, links and ads you interact with). We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on the Central Park Boathouse website, which may record your mouse movements, scrolling, clicks, and keystroke activity on the Central Park Boathouse website and other browsing, search or purchasing behavior. These third-party technologies may also record information you enter when you interact with the Central Park Boathouse website, or engage in communication features we provide.

• Information About Your Location, including general geographic location that we or our third-party providers may derive from your IP address.

All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve the Central Park Boathouse website, to offer communications features, and to improve the effectiveness of our products, services, offers, communications and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Central Park Boathouse website; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and other patterns on the Central Park Boathouse website; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our products and services.

For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below. For additional details about the cookies we use on the Central Park Boathouse website and to adjust your preferences with regard to those cookies, please visit our “Cookie Preferences” manager linked in the footer of the Central Park Boathouse website.

Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

• The City of NY: We may receive your personal data from the City of NY in order to administer and facilitate the Central Park Boathouse and related events.
• Your Employer or Organization: If you interact with the Central Park Boathouse and our services in connection with your employment or an organization with which you are associated, we may obtain personal data about you from your employer or the organization with which you are associated. For example, we may obtain your contact information from your employer to coordinate your attendance at an event hosted at the Central Park Boathouse.
• Social Media: When you interact with the Central Park Boathouse through other social media networks, such as when you follow us or share our content on other social networks, we may receive some information that you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and may include profile information, profile picture, username, and any other information you permit the social network to share with third parties. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to operate, maintain, and provide to you the features and functionality of our products and services, as well as to communicate directly with you, such as to send you messages about features that may be of interest to you.
• Advertisers, Influencers, and Publishers: We engage in advertising both on our services and through third-party services. Advertisers, influencers, and publishers may share personal data with us in connection with our advertising efforts. For example, we may obtain information about whether an advertisement on a third-pary’s services led to a purchase through the Central Park Boathouse Store.
• Business Partners: We may receive your information from our business partners, such as companies that offer their products and/or services as a part of or in connection with the Central Park Boathouse services.
• Service Providers: Our service providers that perform services on our behalf, such as analytics and survey providers, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers.
• Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.
• Inferences: We may generate inferences or predictions about you and your interests and preferences based on the other personal data we collect and the interactions we have with you.

Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

• Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the services requested, and to process transactions, including providing you with the Central Park Boathouse experience;
• Fulfill the shipment of the goods and services you order;
• Manage the Central Park Boathouse, our organization and their day-to-day operations;
• Request you provide us feedback about the Central Park Boathouseand our product and service offerings;
• Market Central Park Boathouse products and services to you, including through email and social media;
• Administer, improve, and personalize the Central Park Boathouse and our products and services, including by recognizing you and remembering your information when you return to the Central Park Boathouse website;
• Develop, operate, improve, maintain, protect, and provide the features and functionality of the Central Park Boathouse, its website, and our products and services;
• Identify and analyze how you use the Central Park Boathouse and products and services;
• Infer additional information about you from your use of the Central Park Boathouse and our products and services, such as your interests.
• Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Notice;
• Conduct research and analytics on our customer and user base and the Central Park Boathouse and our products and services;
• Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with;
• Test, enhance, update, and monitor the Central Park Boathouse website and our products or services, or diagnose or fix technology problems;
• Help maintain and enhance the safety, security, and integrity of our property, products, services, technology, assets, and business;
• Defend, protect, or enforce our rights or applicable contracts and agreements (including the Central Park Boathouse Terms of Use), as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
• Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Legends, the City of NY and others;
• Facilitate business transactions and reorganizations impacting the structure of our business;
• Comply with contractual and legal obligations and requirements;
• Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

Our Disclosure of Personal Data

We disclose or otherwise make available personal data in the following ways:

• To the City of NY: We share personal data with the City of NY, pursuant to our contract with them. The City of NY will use your personal data for its own legitimate purposes in accordance with applicable law.
• Your Employer or Organization: If you interact with the Central Park Boathouse and our services in connection with your employment or an organization with which you are associated, we may disclose personal data about you to your employer or the organization with which you are associated. For example, we may disclose to your employer that you attend an event hosted by your employer at the Central Park Boathouse.
• To Marketing Providers: We coordinate and share personal data with our marketing providers in order to advertise and communicate with you about the Central Park Boathouse and the related products and services we make available.
• To Ad Networks and Advertising Partners: We work with third-party ad networks and advertising partners to deliver advertising and personalized content on the Central Park Boathouse website, on other websites and services, and across other devices. These parties may collect information automatically from your browser or device when you visit the Central Park Boathouse website and other services through the use of cookies and related technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.
• To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or have access to personal data while performing services on our behalf.
• To Other Businesses as Needed to Provide Services: We may share personal data with third parties you engage with through our services or as needed to fulfill a request or transaction including, for example, payment processing services.
• In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
• To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement:
  • in connection with the establishment, exercise, or defense of legal claims;
  • to comply with laws or to respond to lawful requests and legal process;
  • to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
  • to detect, suppress, or prevent fraud;
  • to reduce credit risk and collect debts owed to us;
  • to protect the health and safety of us, our customers, or any person; or
  • as otherwise required by applicable law.
• With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on the Central Park Boathouse website.

Your Privacy Choices

The following privacy choices are made available to all individuals with whom we interact. You may also have additional choices regarding your personal data depending on your location or residency. Please refer to our Region-Specific Disclosures below for information about additional privacy choices that may be available to you.

Automatic Data Collection Preferences

We provide you the ability to adjust your preferences regarding our use of automatic data collection technologies on the Central Park Boathouse website. Please visit the “Cookie Preferences” manager linked in the footer of the Central Park Boathouse website to adjust your preferences regarding certain automatic data collection technologies on the Central Park Boathouse website for the specific device and browser you are using at that time (which means you will need to change your preferences on each device and browser you use to interact with the Central Park Boathouse website).

You may also be able to utilize third-party tools and features to further restrict the use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using the Central Park Boathouse website, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.

Targeted Advertising Preferences

We engage third parties to help facilitate targeted advertising designed to show you personalized ads based on predictions of your preferences and interests developed using personal data collected through the Central Park Boathouse website and personal data third-party partners obtain from your activity over time and across nonaffiliated websites and other services. The data we and our third-party partners use for purposes of facilitating targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research, are primarily collected through the use of a variety of automatic data collection technologies, including cookies, web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. We may share a common account identifier (such as a hashed email address or user ID) with third-party advertising partners to help link the personal data we and our third-party partners collect to the same person, or otherwise target advertising to an individual on a third-party website or platform.

In addition to taking the steps set forth in the Automatic Data Collection Preferences section above, you may be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising opt-out programs. For example:

• Device-Specific Opt-Out Programs: Certain devices provide individuals the option to turn off targeted advertising for the entire device (such as Apple devices through their App Tracking Transparency framework or Android devices through their opt out of ads personalization feature). Please refer to your device manufacturer’s user guides for additional information about implementing any available device-specific targeted advertising opt-outs.
• Digital Advertising Alliance: The Digital Advertising Alliance allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://optout.aboutads.info/?c=2&lang=EN for browser-based advertising and https://www.youradchoices.com/appchoices for app-based advertising to opt out of targeted advertising carried out by third parties that participate in the Digital Advertising Alliance’s self-regulatory program.
• European Interactive Digital Advertising Alliance: The European Interactive Digital Advertising Alliance similarly allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://www.youronlinechoices.eu to opt out of browser-based targeted advertising carried out by third parties that participate in the European Interactive Digital Advertising Alliance’s program.
• Network Advertising Initiative: The Network Advertising Initiative similarly allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://www.optout.networkadvertising.org/?c=1 to opt out of browser-based targeted advertising carried out by third parties that participate in the Network Advertising Initiative’s self-regulatory program.
• Platform-Specific Opt-Out Programs: Certain third-party platforms provide individuals the option to turn off targeted advertising for the entire platform (such as certain social media platforms). Please refer to your platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

Please note that when you opt out of receiving interest-based advertisements through one of these programs, this does not mean you will no longer see advertisements from us or relating to the Central Park Boathouse. Instead, it means that the online ads you do see from relevant program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, program participants may still use automatic data collection technologies to collect information about your use of the Central Park Boathouse website, including for analytics and fraud prevention as well as any other purpose permitted under the applicable advertising industry program.

Modifying or Deleting Your Personal Data

If you have an online account with us, you have the ability to modify or delete certain information in your account (e.g., your contact information) through the “settings” option provided on the Central Park Boathouse website. If you have any questions about reviewing, modifying, or deleting your personal data, you can contact us directly at dataprivacy@legends.net. We may not be able to modify or delete your personal data in all circumstances.

Partner-Specific Preferences

Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

• Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with the Central Park Boathouse (such as your mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent products and services from accessing certain types of information from your device, and many social media platforms allow you to change your platform permissions to prevent products and services from accessing certain types of information connected with your profile. Please refer to your device or platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.
• Google Analytics: Google Analytics allows us to better understand how Central Park Boathouse customers interact with the Central Park Boathouse website. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google’s website here: www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here: https://tools.google.com/dlpage/gaoptout/. [We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable the Central Park Boathouse website to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Central Park Boathouse website. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://myadcenter.google.com/?ref=help-center.]

Children’s Personal Data

The Central Park Boathouse website and its services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 16 through the Central Park Boathouse website. If an individual is under the age of 16, they should not use the Central Park Boathouse website or its services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 16 has provided personal data to us through the Central Park Boathouse website, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect through the Central Park Boathouse website has been provided by a child under the age of 16, we will promptly delete that personal data.

Retention of Personal Data

We collect, store, and use your personal data as long as you remain a customer and in compliance with our legal obligations to retain certain types of data, such as for tax purposes, and legitimate business interests. We review our retention periods for personal data on a regular basis.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Therefore, we retain personal data for as long as you continue to use the Central Park Boathouse and our services for the purposes explained in the Our Collection and Use of Personal Data section above. When you discontinue the use of the Central Park Boathouse and our services, we will retain your personal data for as long as necessary to comply with our legal obligations, to resolve disputes and defend claims, as well as for any additional internal business purposes. In particular, we will retain any other personal data supplied during the duration of your contract with us in relation to the Central Park Boathouse and our services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Third-Party Websites and Services

The Central Park Boathouse website, newsletters, email updates, and other communications from us may, from time to time, include links to third-party websites, plug-ins, applications and other services. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

• European Economic Area, United Kingdom or Switzerland: If you are located in the European Economic Area (Member States of the European Union together with Iceland, Norway, and Liechtenstein), the United Kingdom, or Switzerland, please click herefor additional European-specific privacy disclosures, including a description of the personal data rights made available to individuals located in those jurisdictions under applicable law.
• United States: If you are a resident of the United States, please click herefor additional U.S.-specific privacy disclosures, including a description of the personal data rights made available to residents of certain states under applicable law.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on the Central Park Boathouse website, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to dataprivacy@legends.net or contact us at:

Legends Boathouse, LLC
Attn: Data Protection Officer
61 Broadway, Suite 2400
New York, NY 10060

ADDITIONAL UNITED STATES PRIVACY DISCLOSURES

These disclosures supplement the information contained in our Privacy Notice by providing additional information about our personal data processing practices relating to individual residents of certain states in the United States. For a detailed description of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Notice.

Nevada Residents

If you are a resident of Nevada, please note Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. To submit such a request, please email dataprivacy@legends.net.

California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia Residents

If you are a resident of the state of California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, or Virginia in the United States the following supplementary disclosures apply to you.

Personal Data Disclosures, Sales and Targeted Advertising

We disclose all of the categories of personal data we collect to the categories of recipients set forth in the Our Disclosure of Personal Data section of our Privacy Notice.

Our disclosure or making available of contact information, commercial information, information about the way in which you use the Central Park Boathouse website and interact with us, and inferences about your interests and preferences to ad networks and advertising partners may qualify as the sale of personal data or the sharing or processing of personal data for the purpose of displaying advertisements that are selected based on personal data obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioral advertising”) under certain privacy laws.

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal data or the processing of personal data for purposes of targeted advertising (as described in the Your Additional U.S. Privacy Choices section below).

Please note we do not sell the personal data of individuals we know to be less than 16 years of age or share such information for targeted advertising purposes.

Sensitive Personal Data

The payment card information you provide directly to our third-party payment providers and the dietary restrictions you may share with us in connection with a dining experience or event may be classified as “sensitive” under certain privacy laws. However, we do not directly collect or process payment card information, nor control the data processed by our third-party payment providers. In addition, we only use or disclose information about dietary restrictions where reasonably necessary and proportionate for the purposes of providing the services you have requested, verifying and improving the services we provide, ensuring the physical safety of you and other persons, performing services on behalf of the business, or short-term transient use. We only collect and process information about dietary restrictions without the purpose of inferring characteristics about you, and we do not sell information about dietary restrictions or process or otherwise share such information for the purpose of targeted advertising. As a result, we do not provide a right to exercise control over sensitive personal data.

Deidentified Information

We may at times receive, or process personal data to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

Automated Decision-Making and Profiling

We do not conduct automated processing of personal data for the purposes of evaluating, analyzing, or predicting an individual’s personal aspects in furtherance of decisions that produce legal or similarly significant effects. As a result, we do not provide a right to exercise control over such forms of automated decision-making and profiling.

Your Additional U.S. Privacy Choices

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

• Right to Know: The right to confirm whether we are processing personal data about you and, for residents of California and Oregon only, to obtain certain personalized details about the personal data we have collected about you, including:

• • • The categories of personal data collected;
    • The categories of sources of the personal data;
    • The purposes for which the personal data were collected;
    • The categories of personal data disclosed to third parties (if any), and the categories of recipients to whom this personal data were disclosed (or, for Oregon residents only, a list of the specific third parties to whom personal data have been disclosed);
    • The categories of personal data shared for targeted advertising purposes (if any), and the categories of recipients to whom the personal data were disclosed for these purposes; and
    • The categories of personal data sold (if any) and the categories of third parties to whom the personal data were sold.

• Right to Access & Portability: The right to obtain access to the personal data we have collected about you and, where required by law, the right to obtain a copy of the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
• Right to Correction: The right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data.
• Right to Opt-Out of Targeted Advertising: The right to direct us not to use or share personal data for certain targeted advertising purposes.
• Right to Opt-Out of Sales: The right to direct us not to sell personal data to third parties, including the right to opt-out of the disclosure of personal data to third parties for the third parties’ direct marketing purposes under California’s “Shine the Light” Law.
• Right to Deletion: The right to have us delete personal data we maintain about you.

Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.

Submitting Privacy Rights Requests

Please submit a request specifying the right you wish to exercise by:

• Completing our online form found here; or
• Calling our toll-free U.S. telephone number: +1 (888) 590-0006.

To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please visit the “Cookie Preferences” manager linked in the footer of the Central Park Boathouse website and adjust your preferences accordingly. If you are visiting the Central Park Boathouse website with the Global Privacy Control enabled, any cookies that constitute sales or are used for targeted advertising should already be turned off automatically in our cookie preference manager. Please note this opt-out tool is website, device, and browser specific, so you will need to change your preferences on each device and browser you use to interact with the Central Park Boathouse website. In addition, you can also opt-out of cookie-based sales by businesses that participate in the Digital Advertising Alliance’s CCPA Opt-Out Tool by visiting https://www.privacyrights.info/. Lastly, you may follow the other steps set forth in the Automatic Data Collection Preferences and Targeted Advertising Preferences sections of the Your Privacy Choices section of our Privacy Notice to further exercise control over automatic data collection technologies.

Before processing your request to exercise certain rights (including the Right to Know, Access & Portability, Correction, and Deletion), we will need to verify your identity and confirm you are a resident of a state that offers the requested right(s). In order to verify your identity, we will generally either require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. As a result, we may require requests to include your order number and/or email address, or a single use 6-digit code.

In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or where you are not a resident of one of the eligible states.

Submitting Authorized Agent Requests

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request or emailing us at dataprivacy@legends.net.

Additional California-Specific Disclosures

The following disclosures only apply to residents of the State of California.

California Categories of Personal Data

California law requires we provide disclosures to you about what personal data we collect by reference to the enumerated categories of personal data set forth within California law. To address this obligation, we have identified the relevant enumerated California personal data category for the personal data described in the Our Collection and Use of Personal Data section of our Privacy Notice below:

• Identifiers, such as name, unique personal identifiers, customer number, or email address. 

• Customer records, such as address or telephone number.

• Commercial information, such as boating information, dining information, private event information, and purchasing and order interests, history, and tendencies.

• Internet / network information, such as information about your device and network and information about the way you use the Central Park Boathouse website and interact with us.

• Geolocation data, such as your approximate location based upon your IP address or your address for order fulfillment purposes.

• Sensory information, such as images taken and video recorded on the Central Park Boathouse premises, and recordings of any phone calls between you and Legends (where permitted by law).

• Professional / employment information, such as business email address and phone number, business address, employer, job title, area of responsibility, and company name.

• Other Personal Data, such as communications preferences, entries to events, sweepstakes, contests, and promotions, comments and content in response to surveys, and any other inquiries, requests, or comments you choose to send us.

• Inferences, such as predictions about interests and preferences and related information.

 

ADDITIONAL EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND PRIVACY DISCLOSURES

The Central Park Boathouse website is available globally and we do not specifically target individuals in the UK, EEA or Switzerland. Our collection and processing of personal data relating to in-person visitors to the Central Park Boathouse also applies only to individuals in the United States.

We do, however, collect and process personal data relating to individuals in the UK, EEA or Switzerland for online advertising and measuring the effectiveness of our advertising campaigns, which involve collecting and processing information about individauls’ behaviour over a period of time (“Behaviour Analysis”).

While the General Data Protection Regulation (EU) 2016/679 and national equivalents in the UK and Switzerland do not apply to most of our uses of personal data, it does apply to how we process personal data relating to individuals in the UK, EEA and Switzerland in connection with Behaviour Analysis.

These additional EEA, UK and Swiss disclosures (the “European Disclosures“) describe how we collect, store, process, transfer, share and use information in connection with performing Behaviour Analysis that identifies or is associated with you (your “personal data“) if you are in the UK, EEA or Switzerland when you visit the Central Park Boathouse website at centralparkboathouse.com (the “Site“), or view or interact with online advertising about the Site.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

Legends Boathouse, LLC is the controller of the personal data we collect and use in connection with performing Behaviour Analysis, as further set out in these European Disclosures. This means that we determine and are responsible for how your personal data is used.

If you have any questions or requests in connection with these European Disclosures or other privacy-related matters, please send an email to dataprivacy@legends.net.

ONLINE ADVERTISING AND MEASUREMENT

We work with online advertising networks, social media companies and advertising partners to tailor the ads played or displayed to you on other websites, apps, or services.

Online Advertising

The ads you see online are tailored to your interests based on information collected about you, including information about your age, demographic, location, as well information about your internet usage over time, such as the websites you visit, the products and pages you view and the links you click on (including links in ads played or displayed to you).

Typically, this information is collected through cookies or similar tracking technologies. When you visit the Site, we will, if you give us your consent to do so, place cookies and similar tracking technologies on your device to identify you and your device, and share this information with the relevant advertising networks, so that:

• we can serve you advertising for the Site;
• we can identify other users with similar demographics and internet usage history to you, and serve them adverts for the Site; and
• we and our advertising partners can measure the effectiveness of our online advertising, by identifying whether you visit the Site by clicking on an advert for the Site or after you have been shown an advert for the Site.

Social Media

We may also display targeted advertising to you through third party social media platforms, such as Facebook. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our products while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics.

Typically the information required to direct this kind of advertising is collected through cookies in a similar way to information collected for online advertising.

Controlling the Ads You See Online and on Social Media

Please see our Cookie Policy for details of the third parties that collect information about your use of the Site for advertising purposes.

We will only collect and share information about your use of the Site for advertising purposes as described above to the extent you have given us your consent to do so. You can also customise your preferences through our Cookie Banner or our Cookie Preference Centre tools.

Withholding or withdrawing consent will mean that information about your use of the Site:

• will not be shared with advertising networks to allow us to target advertising for the Site to you on other websites, or to use your information to build target audiences for our adverts;
• will not be used by us to tailor advertising on social media; and
• will not be used to measure the effectiveness of our advertising by tracking whether you have visited the Site after clicking on, or seeing an advert for the Site.

You will still get ads when you browse the internet or social media, and those ads may still be relevant to your interests. However, this will not be based on your visit to the Site and will, instead, be based on target audiences (i.e. individuals sharing certain characteristics) based on other information held by advertising networks or social media sites about your online activity. As a result, you may see advertising targeted to your location, demographic or other information in your social media profile or the websites you visit even if you reject cookies on the Site.

PERSONAL DATA WE COLLECT WHEN YOU VISIT THE SITE

We collect the following personal data about you, about how you access and use the Site and about your device:

• Device information, including internet protocol (IP) address, operating system, device type and version, browser type and version, browser id and browser window size.
• How you access and use the Site, including the URL entered and the referring page/campaign, date/time of visit, how long you stay on the Site and the pages you visit, the links and other objects you view, click on or otherwise interact with and the time spent on our Site.
• Whether you have previously viewed an advert for the Site or Central Park Boathouse, including the page you viewed it on and the date and time it was shown to you.
• Approximate location. We do not collect your precise location; however, your IP address and information provided by your browser may allow us to determine your approximate location (such as the city or region you are in) and your time zone.

We use the above information as follows:

How we use this personal data	Legal basis we rely on
We use this information to measure the effectiveness of our online advertising campaigns. We also use this information to help us identify target audiences for our online advertising campaigns. Please see the section headed “Online Advertising and Measurement” below for more information.	We will only process your personal data in this way to the extent you have given us your consent to do so.

We may supplement information that we collect about your device and how you use the Site with information you provide when you interact with us through the Site, such as information you submit in an enquiry relating to the Site.

How we use this personal data	Legal basis we rely on
We use information you provide to us when you interact with us to enhance information collected automatically about Site usage to measure the effectiveness of our advertising campaigns and identify potential target audiences for our online advertising campaigns.	The processing is necessary for our legitimate interests, namely informing our marketing strategy.

COOKIES

Information about how you use and access the Site, and information used to inform our online advertising campaigns, is generally collected through cookies and similar tracking technologies, such as pixels and tags. Cookies are pieces of code that we transfer to your computer’s hard disk to store or collect information about your use of the Site and to distinguish you from other users of the Site.

We also use cookies and similar technologies to provide certain functionalities of the Site, such as displaying certain fonts on the Site.

Other than cookies and similar technologies that are required to operate the Site, we will only place cookies on your device or otherwise use these technologies to collect data from your device with your consent.

You can customise your cookie preferences through our Cookie Banner or our Cookie Preference Centre tools.

Please consult the Cookie Policy for more information about the type of cookies and tracking technologies that we use on the Site and why.

DATA RETENTION

We retain the above personal data for the purposes of Behaviour Analysis for the duration of the relevant advertising campaign, after which the personal data will be anonymized and aggregated.

HOW PERSONAL DATA IS SHARED WITH OTHERS

We may share your personal data as follows in connection with the purposes referred to above:

Recipient	Why we share it and how they use it
Service providers, such as web hosting and infrastructure providers.	These recipients will use your personal data as processors on our instructions.
Advertising networks and agencies.	We work with third-party ad networks and advertising partners to deliver advertising on other websites and services, and across other devices, as set out above in the section headed “Online Advertising and Measurement”. We share information with these parties about the device you use to access the Site and how you use the Site, as set out above. We will only share this information with these recipients if you have given us your consent to do so.

INTERNATIONAL TRANSFERS

Our services providers and partners that receive personal data from us are primarily located in the United States. When we share your personal data with these recipients in connection with performing Behaviour Analysis, we rely on standard contractual clauses issued by the European Commission and (for individuals in the UK or Switzerland) supplementary addenda to those standard contractual clauses approved under national data protection laws.

We also continually monitor the circumstances surrounding such transfers in order to ensure that these maintain, in practice, a level of protection that is essentially equivalent to the one guaranteed by the UK GDPR and EU GDPR.

If you wish to enquire further about the safeguards we use, please contact us using the details in the section headed Who is Responsible for Your Personal Data above.

YOUR RIGHTS

In accordance with applicable privacy law you may have the following rights in respect of your personal data that we process for Behaviour Analysis:

• Right of access. The right to obtain:
  • confirmation of whether, and where, we are processing your personal data;
  • information about the categories of personal data we are processing, the purposes for which we process your personal data and information as to how we determine applicable retention periods;
  • information about the categories of recipients with whom we may share your personal data; and
  • a copy of the personal data we hold about you.
• Right of portability. The right, in certain circumstances, to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
• Right to rectification. The right to obtain rectification of any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to erasure. The right, in some circumstances, to require us to erase your personal data without undue delay if the continued processing of that personal data is not justified.
• Right to restriction. The right, in some circumstances, to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
• Right to withdraw consent. If you have given us your consent to process your personal data in a particular way, you have the right to withdraw that consent. Withdrawing consent will not affect the lawfulness of any processing of your personal data prior to that withdrawal.

You have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. 

If you wish to exercise one of these rights, please contact us using the contact details in the section headed Who is Responsible for Your Personal Data above.

You may also have the right to lodge a complaint with your local supervisory authority:

• If you are in the UK, your local supervisory authority is the Information Commissioner’s Office Information about how to contact the ICO is available here.
• If you are in the EEA, further information about your local supervisory authority is available here.
• If you are in Switzerland, information about how to contact the Federal Data Protection and Information Commissioner is available here.