1. Global Web Privacy and Cookie Policy

    Last updated: February 20, 2020

    Please Read Carefully.

    CBRE Group, Inc., together with its subsidiaries (collectively, “CBRE”, “we”, “us” or “our”), recognize the importance of protecting your privacy. Our Global Web Privacy and Cookie Policy (“Policy”) applies to your use of our global public websites (collectively, the “Site”), as well as your professional interactions with CBRE employees. This Policy is designed to assist you in understanding how we collect, use, safeguard and disclose your personal information and your choices in making informed decisions when using the Site. We also describe how you can contact us about our privacy practices.

    1. Global Web Privacy Policy

      1. Your Acceptance Through Use

      2. The Types of Information We Collect

      3. How We Use Your Information

      4. Information Provided to Us About You by Third Parties

      5. Third Parties with Whom We Share Your Personal Information

      6. International Data Transfers

      7. Security

      8. How Long We Keep Your Personal Information

      9. Your Privacy Rights

      10. Changes to this Policy

      11. Data Protection Officer

    2. Cookie Policy – Automatic Data Collection

      1. Cookie Use by Us

      2. Performance Tracking

      3. Managing Your Cookie Preferences

    3. Contact Us

    1. Global Web Privacy Policy

      1. Your Acceptance Through Use

        This Global Web Privacy Policy describes how CBRE collects, uses and discloses certain personal information obtained through this Site. Please note that, to the extent permitted by applicable law, your use of this Site signifies your understanding and acceptance of the terms of this Global Web Privacy Policy. This Global Web Privacy Policy is incorporated into, and is part of, the Terms and Conditions, which govern your use of the Site in general.

      2. The Types of Information We Collect

        The types of personal information we may collect from you, or you may choose to provide include:

        • Contact information (such as your name, postal or e-mail address, and phone number)

        • In relation to our recruitment activities, your professional information (such as your name, business email, business phone, business address, country in which you do business, your industry, job title or role)

        • Account information (such as username or password)

        • Client Relationship data (such as business contact information, country in which you do business, your industry, job title or role, professional interactions and relationship data, including your primary CBRE contacts and your record of interactions with CBRE, your contact preferences, and information you provide to us which assist us in serving the business relationship, such as the types of investments you are interested in)

        • Online identifiers (such as your mobile device advertising identifier and geo-location data)

        • Information about your use of our websites. For more information, see our Cookie Policy

        In addition, we collect the following information about you from third parties:

        • Your social media interactions with us (for example, when you “like” a post on social media platforms)

        • Technical information from advertisements we place on third party websites (such as your IP address, browser type and version, device identifiers, location and time zone setting)

      3. How We Use Your Information

        Communications With You – Offerings and Services In Which You Expressed Interest:

        When you visit or transact business on this Site, you may be required to register with us or be requested to provide us with personal and account information. When you provide us with this information, we may use it to contact you about the offerings or services in which you have expressed an interest. CBRE has a legitimate business interest to use the personal information we collect from you to provide such requested services. Where we have relied on your consent, however, if you tell us that you do not want us to use this information as a basis for further contact with you (by accessing our opt-out procedure described below), we will respect your wishes.

        Communications With You – Newsletters and Marketing Purposes:

        In order to keep our users and clients informed about our latest news, products and services, we may send e-mails and marketing communications to the email address provided to us while registering on our Site or requesting information from us. CBRE complies with applicable laws when using your personal information for this purpose, and where applicable (such as in the EU) relies on your consent. Please be aware that we do sometimes partner with third parties to send marketing communications that promote a third party’s products and services (for example, those of our business partners) as well as our own. If you elected to opt–in to any of our email lists, newsletters or other promotional offerings and later decide that you no longer wish to receive such newsletters or promotional e-mail from us, you may unsubscribe by following the instructions contained in each email we send to you (or use the opt-out procedure described below).

        Professional Interactions With You – Customer Relationship Management:

        We may use your client relationship data (collected via a business card with a CBRE employee or when you communicate with a CBRE employee via phone or email, for example) to provide you with services you request and manage our relationship with you. We may also use certain de-identified and aggregated data about our clients for our internal data analytics purposes. CBRE has a legitimate business interest to use the personal information we collect from you to provide such requested services and in order to be able to service our clients better. With your consent, we may send you information or services or a promotional nature that we consider may be relevant to you.

        Other Uses:

        We may also use the personal information we obtain about you for the following purposes:

        • Operating, evaluating and improving our business (including developing new products and services; managing our communications; determining the effectiveness of and optimizing our advertising; analyzing our products, services, websites, mobile applications and any other digital assets; facilitating the functionality of our websites, and mobile applications and any other digital assets)

        • Preparing and furnishing aggregated data reports, which may include anonymized information

        • Enforcing our Terms and Conditions or other legal rights

        We also may use the information in other ways for which we provide specific notice at the time of collection. If you object to us using information in other ways you can email [email protected].

      4. Information Provided to Us About You by Third Parties

        Third-Party Content:

        We may present or embed content on our Site, such as property listings, that is provided by our third-party vendors. This content may contain links to other sites not operated by CBRE or may request personal information. For example, this content may ask for an email address to subscribe to alerts or share a listing with a friend. This information is collected by our vendors and not by us. In some cases, these vendors may share the personal information they collect from you with us. We are not responsible for the privacy practices of our vendors. We encourage you to review their privacy policies to understand how they will use and share the personal information you provide to them.

        Third Party Usage:

        You may also separately share your information with other Web sites or entities, such as those that create professional marketing lists, to receive special offers and promotions from their affiliates. These Web sites or entities may share your information with us. CBRE is not responsible for and assumes no liability if a partner or other Web site or entity collects, uses or shares, any information about you in violation of its own privacy policy, or applicable law.

        Marketing Data:

        Where applicable law allows, we will purchase marketing data from third parties and add it to our existing user database to better target our advertising and to provide pertinent offers in which we think you would be interested. We may also associate this marketing data to the personally identifiable information that you provide to us.

      5. Third Parties with Whom We Share Your Personal Information

        Third Parties for Retargeting Advertising:

        We will, in some cases, share information about how you use our Site with third-party vendors to present you with more relevant advertising. For example, our vendors may track your browsing activity on our Site using cookies to show you ads based on your interests when you browse the Web or use social media. Our vendors will, in some cases, also share information about your browsing activity on our Site with us for analytics purposes. CBRE relies on your consent for such processing of your personal information. More information on these cookies, including how to provide or revoke your consent, may be found in our Cookie Policy below.

        Service Providers:

        We may share your personal information with companies acting as our authorized agents in providing our services, including the following categories of service provider:

        • infrastructure and IT service providers, including cloud service providers

        • marketing, advertising and communications agencies

        • external auditors and advisors

        • cookie analytics providers

        • online advertisers

        • providers of website testing / analytics services

        Each service provider must agree to implement and maintain reasonable security procedures and practices appropriate to the nature of your information in order to protect your personal information from unauthorized access, destruction, use, modification or disclosure. Because we operate globally, we may transfer your information to countries or jurisdictions that do not provide the same level of data protection as the country in which you are based. If we make such a transfer, we will, or our vendors will, as applicable, provide for the proper safeguards required by applicable law to ensure that your information is protected. More information on International Data Transfers of your personal information is below.

        Where we share your personal information for our legitimate interests you can object to this disclosure. Please be aware that when you object to disclosure of your personal information for CBRE’s legitimate interests it may affect the services we provide to you. More information on Your Rights are below.

        Legally Affiliated Entities:

        In the event that CBRE is merged, or in the event of a transfer of our assets, Site or operations, CBRE may disclose or transfer your personal information in connection with such transaction. In the event of such a transfer, CBRE will notify you via email or by posting a prominent notice on our Site for 30 days of any such change in ownership of CBRE resulting in a change of control of your personal information. We may also share your personal information with CBRE affiliates in order to provide or offer services to you.

        Legally Compelled Disclosure:

        We will also disclose your personal information when required to do so by law, for example, in response to a court order or a subpoena or other legal obligation, in response to lawful requests by public authorities, including to meet national security or law enforcement agency's requirements, or in special cases when we have reason to believe that disclosing your personal information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (whether intentionally or unintentionally) our rights or property.

      6. International Data Transfers

        Processing In the US and Elsewhere by Registration on This Site

        CBRE is a global business. We may transfer the personal information we collect about you to recipients, and your personal information may be stored and processed, in countries other than the country in which the information was originally collected, including the United States and elsewhere that may have less stringent data protection laws than the country in which you initially provided the information.

        When we transfer your information to countries other than the country in which the information was originally collected, we will protect your information as described in this Policy or as otherwise disclosed to you at the time the data is collected (e.g. via program specific privacy notice) and will comply with all applicable data protection laws in making such transfers.

        If you are located in a non-US jurisdiction, the transfer of personal information is necessary to provide you with the requested information and/or to perform any requested service. To the extent permitted by law, such submission also constitutes your consent for the cross-border transfer.

        With respect to transfers originating from the European Economic Area to the United States and other non-EEA jurisdictions:

        • CBRE US affiliates are EU-US and Swiss-US Privacy Shield certified, and

        • CBRE has executed EU Standard Contractual Clauses with respect to personal information collected in the European Economic Area and transferred to CBRE in the United States and elsewhere.

        Where allowed by applicable law, you may ask for further information on the safeguards that we have put in place to safeguard the transfer of your data to outside of the EEA by contacting us as indicated below.

        Privacy Shield Certification:

        CBRE complies with the EU-U.S. Privacy Shield Framework and the Swiss – U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding personal information that is collected by CBRE affiliates or corporate customers located in the European Economic Area and/or United Kingdom and/or Switzerland and transferred to CBRE, Inc. and its wholly owned US-based affiliates, which include CBRE Global Investors LLC, CBRE GWS Puerto Rico Inc., CBRE Clarion Securities LLC, CBRE Security Services, Inc., CBRE Heery Inc., CBRE HMF, Inc., CBRE Multifamily Capital, Inc., CBRE Capital Markets, Inc., CBRE Technical Services, LLC, CBRE Hana Operations, LLC, Forum Analytics, LLC and Trammell Crow Company LLC in the United States (“CBRE US”). This Policy supplements the data protection notices that Clients and Client contacts may have received. CBRE has certified to the Department of Commerce that it adheres to the Privacy Shield Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, recourse, enforcement and liability. If there is any conflict between the terms in this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/. CBRE is subject to investigatory enforcement powers of the Federal Trade Commission as it relates to conformation with Privacy Shield requirements.

        Disclosure and Liability for Onward Transfer:

        CBRE is required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. CBRE may, as disclosed above in Third Parties with Whom We Share Your Personal Information, transfer personal information onward to third parties. CBRE remains liable under the Privacy Shield Principles if a third party processes such personal information in a manner inconsistent with the Principles, unless we prove we are not responsible for the event giving rise to the damage.

        Independent Recourse of Privacy Shield Complaints:

        In compliance with the EU-US and Swiss-US Privacy Shield Principles, CBRE commits to resolve complaints about our collection or use of your personal information. EU, United Kingdom and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact CBRE at: Privacy.Office@cbre.com.

        CBRE has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of JAMS are provided at no cost to you. You have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by JAMS. For additional information on binding arbitration, visit: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.

      7. Security

        CBRE endeavors to protect the security of your personal information and your choices for its intended use. We use Secure Socket Layers or SSL technology to protect the transmission of sensitive personal information such as your credit card number. We store your personal information on a secure server, and use procedures designed to protect the personal information we collect from unauthorized access, destruction, use, modification or disclosure.

        Although we will take (and require our third-party providers to take) commercially reasonable security precautions regarding your personal information collected from and stored on the Site, due to the open nature of the Internet, we cannot guarantee that any of your personal information stored on our servers, or transmitted to or from a user, will be free from unauthorized access, and we disclaim any liability for any theft or loss of, unauthorized access or damage to, or interception of any data or communications. By using the Site, you acknowledge that you understand and agree to assume these risks.

      8. How Long We Keep Your Personal Information

        We will only retain the personal information we collect about you for as long as necessary for the purpose for which that information was collected, and to the extent permitted by applicable laws. We take steps to ensure that when we no longer need to use your personal information, we remove it from our systems and records and/or take steps to anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).

      9. Your Privacy Rights

        Marketing Communications:

        When you register on this Site, we may ask you to select whether you would like to receive email and electronic communications from us such as offers, news, reports and other promotional communications. You may withdraw your consent or opt-out of receiving such communications at any time by contacting us as described below.

        Additionally, where we process your personal information for our legitimate interests you will have the right to object to such processing. Please be aware that where you object to this sort of processing it may affect our ability to carry out tasks as listed in this policy.

        You may contact us:

        (a) by telephone, at +1 877 227 3330 or by facsimile, at +1 212 618 7085

        (b) by following the Opt-Out or unsubscribe instruction contained in the body of any marketing e-mail from us

        (c) by sending us an e-mail at [email protected], including a copy of the e-mail you have received and by typing “Remove” in the subject line of your e-mail

        • If you are located in Europe, the Middle East or Africa, you may also e-mail us at [email protected], including a copy of the e-mail you have received and by typing “Remove” in the subject line of your e-mail

        • If you are located in Asia or the Pacific, you may also e-mail us at [email protected], including a copy of the e-mail you have received and by typing “Remove” in the subject line of your e-mail

        (d) by mail: CBRE, Inc., 321 North Clark Street, Suite 3400, Chicago, Illinois 60654, Attention: Global Director, Data Privacy

        Your election not to receive newsletters or promotional and marketing correspondence from us will not: (i) preclude us from corresponding with you, by email or otherwise, regarding your existing or past relationship with us, and (ii) preclude us, including our employees, contractors, agents and other representatives, from accessing and viewing your personal information in the course of maintaining and improving the Site.

        Requesting Access to Your Personal Information and Other Rights:

        You may also have rights under applicable law to request to review, access, correct, delete, port or object to our processing your personal information processed by us, and lodge a complaint with a supervisory authority. If so, you may do so by making a request on CBRE’s data subject rights portal or submitting your request to [email protected].

        Independent Recourse for Privacy Shield Complaints:

        Information about independent recourse for Privacy Shield complaints can be found above.

      10. Changes to this Policy

        We are a rapidly evolving, global business. We will continue to assess this Policy against new technologies and services, business practices as well as our clients’ needs, and make changes to this Policy from time to time as required. If we make any material changes to this Policy, we will make changes here and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Policy changes).

      11. Data Protection Officer

        We have appointed, in accordance with local law, data protection officers (“DPOs”) for our subsidiaries in Germany. We have also appointed a DPO in France. If you have any questions or concerns about our personal data policies or practices, you may contact the appropriate DPO using the following contact details:

        CBRE GmbH, CBRE PREUSS VALTEQ GmbH, and CBRE Capital Advisors GmbH

        [email protected]

        CBRE Global Investors Germany GmbH

        [email protected]

        CBRE GWS Industrial Services GmbH

        CBRE GWS IFM Industrie GmbH

        [email protected]

        France

        [email protected]

    2. Cookie Policy – Automatic Data Collection

      By browsing on our Site, you are agreeing to our use of cookies.

      What is a Cookie:

      A cookie is a small text file that a website stores on your personal computer, telephone or any other device, with information about your navigation on that website. Cookies facilitate browsing and to make it more user-friendly. A cookie contains the name of the server it came from, the expiry of the cookie, and a value – usually a randomly generated unique number. Cookies do not give access to nor damage your computer.

      1. Cookie Use by Us

        How we use Cookies:

        We use browser session cookies, which are temporary cookies that are erased from your device’s memory when you close your Internet browser or turn your computer off, and persistent cookies, which are stored on your device until they expire, unless you delete them before that time. We group browser cookies on our site into three categories, which you can manage through our Cookie Preference Manager:

        • Required cookies: These cookies are necessary to enable the basic features of this site to function, such as identifying you as a valid user, ensuring that no one else can sign on simultaneously with your account from another computer and helping us serve you better based on your registration preferences. These cookies also allow you to select your cookie preferences.

        • Functional cookies: These cookies allow us to analyze your use of the site to evaluate and improve our performance. They may also be used to provide a better customer experience on this site. For example, providing us information about how our site is used and helping us facilitate any promotions or surveys that we provide.

        • Advertising cookies: These cookies may be used to share data with advertisers so that the ads you see are more relevant to you, allow you to share certain pages with social networks, or allow you to post comments on our site.

        Cookies Are Not Used to Store Sensitive Data:

        The cookies we use do not store sensitive personal information, such as your address, your password, or your credit card data.

      2. Performance Tracking

        We sometimes use cookies, as well as tracking technology, such as web beacons, within the promotional emails that we send to our subscribers or advertisements for our Site. These performance tracking devices help us to track whether an e-mail recipient has completed an event, such as signing up for a free trial for example. Such information is non-personally identifying and collected on an aggregate level. We sometimes utilize third party service providers to help us track the activity within our Site. These third parties may use temporary cookies and/or web beaconing technology to facilitate such tracking but the data would not be tracked in a personally identifiable way. Third parties whose products or services are accessible on our Site may also use cookies, and we advise you to check their privacy policies for information about their cookies and other privacy practices.

        If you would like more information about the third party cookies on our website and to find out more about your choice to not have your information used by third parties, please contact us at [email protected]

      3. Managing Your Cookie Preferences

        Cookie Preference Manager:

        Our preference manager allows you to restrict our use of cookies other than Required Cookies. If you use our preference manager on a mobile device, we process your device’s Advertising Identifier. When you access our preference manager, persistent cookies will be set by the ad networks listed in our preference manager to honor your preferences if you choose not to receive interest-based advertising. If you clear your browser cookies, this will remove all cookies including the opt-out cookies set by the companies. You will need to re-access the opt-out tool to reset your preferences. Our cookie only knows your last set of preferences and does not reflect the current state of cookies on your browser.

        Do Not Track:

        We currently do not respond to “Do Not Track” signals from your browser. Our use of tracking technologies may instead be controlled through our Cookie Preference Manager.

        Avoiding Use of Cookies on this Site:

        If you prefer to completely prevent us from using cookies on your devices, before navigating on this Site, you must first disable the use of cookies in your browser and then delete the cookies saved in your browser associated with this Site.

        Disabling and Preventing Further Use of Cookies:

        You may restrict, block or delete the cookies from this Site at any time by changing the configuration of your browser. You can find out how to do this, and find more information on cookies, at https://www.allaboutcookies.org/. In addition, while each browser has different settings and configurations, cookies settings can typically be adjusted in the "Preferences" or "Tools" menu. Your browser’s "Help" menu may provide additional information.

    3. Contact Us

      You are always free to contact us if you have questions or concerns regarding this Policy, have a question or problem related to your use of the Site, or wish to exclude your personal information from our direct marketing purposes. Our standard business practice is to retain any communications from our Site visitors to help us to serve each of you better.

      You may contact us by emailing Privacy.Office@cbre.com or by writing to us at 321 North Clark Street, Suite 3400, Chicago, Illinois 60654, Attention: Global Director, Data Privacy.

      Visitors in Europe, the Middle East or Africa:

      If you are located in Europe, the Middle East or Africa, you may also e-mail us at EMEAPrivacyDirector@cbre.com or write to us at St. Martins Court, 10 Paternoster Row, London EC4M 7HP, United Kingdom, Attention: EMEA Director, Data Privacy.

      Visitors in Asia or the Pacific:

      If you are located in Asia or the Pacific, you may also e-mail us at APACPrivacyHelpline@cbre.com or write to us at 15/F M1 Tower, 141 H.V. Dela Costa Street, Salcedo Village, Makati City, Philippines 1227, Attention: APAC Senior Manager, Data Privacy.

California Consumer Privacy Policy

In the United States, CBRE’s collection, use and disclosure of certain personal information through CBRE’s public websites and professional interactions with CBRE employees is governed by the CBRE Global Privacy Policy, as well as the following state-specific policies, as applicable:

California Consumer Privacy Policy

Effective Date: January 1, 2020

Last Updated: January 1, 2021

This California Consumer Privacy Policy (“Policy”) supplements the information provided in a CBRE Privacy Notice. This Policy applies solely to individuals who are residents of the State of California (“consumers”). We adopt this Policy to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws.

We reserve the right to update this Policy at any time. We may also notify consumers in other ways from time to time about the processing of their Personal Information (as defined in the CCPA).

Contents

  1. Consumer Rights under the CCPA

    1. CCPA Rights

    2. Process for verifying your request

    3. How to exercise your rights

    4. Authorized Agent

  2. Identification of Personal Information Collected from California Residents, Disclosed, or Sold

    1. Categories of Personal Information We Collect about California Consumers

    2. Sources of Collection

    3. Purposes for Which We Collect this Personal Information

    4. Disclosure of Personal Information

    5. Third Parties to Whom We Have Sold Personal Information

    6. Consumers Under the Age of 16

  3. How to Contact Us

Consumer Rights under the CCPA

If you are a consumer, you have the following rights under the CCPA. In the event you chose to exercise your rights, we will handle your request in accordance with this section.

CCPA Rights

  • Right to Know - You have the right to request to know what Personal Information CBRE collects, uses, discloses and (if applicable) sells about you.

  • Right to Delete - Subject to certain exceptions, you have the right to request that we delete any Personal Information about you that we may hold. We may have grounds to deny your deletion request as provided for in the CCPA.

  • Right to Opt Out of Sale of Personal Information - You have a right to opt out of the sale of Personal Information. However, CBRE does not sell your Personal Information.

  • Right to Non-Discriminatory Treatment - You have a right not to be discriminated against because you exercised any of your rights to know, access, delete or opt-out of the sale of your Personal Information.

Process for verifying your request

If you are a consumer and make a rights request under the CCPA, in order to protect you and your Personal Information from unauthorized disclosure, upon receipt of your we will need to reasonably verify that you are the person about whom we collected Personal Information. We may do so by asking for additional information (“Verifiable Information”) to compare against the information we hold about you, or if you have an account with us, by asking you to log in to that account. We will only use Verifiable Information to verify your identity or authority to make the request. We may also ask you to provide additional detail or clarify your request to allow us to properly understand, evaluate and respond to it.

Types of Verifiable Information we may ask for depend on the context of your relationship with CBRE, but may include:

  • Name of a CBRE employee with whom you interacted

  • Date or other details of a transaction you had with CBRE

  • Email address, phone number, or other contact information we may have on file for you

How to exercise your rights

You may exercise your rights to know, access, delete or opt out by completing the form in our Data Subject Rights Portal or by calling us at +1 (866) 428 4722. We will ask for your name, email address, and your relationship to us in order to begin processing your request.

Authorized Agent

You may authorize someone to submit a rights request on your behalf. You may do this by providing that person with power of attorney pursuant to the California Probate Code. Alternatively, you may provide that person with signed, written permission to submit requests on your behalf, but we will still require you to verify your identity with us directly by one of the methods listed above. In either case, we will also require that person to verify their personal identity via one of the above methods, or, in the case of a business entity, by response to communications directed at a well-known internet domain associated with that business or to contacts provided in that entity’s official filings with the California Secretary of State.

Identification of Personal Information Collected from California Residents, Disclosed, or Sold

In addition to the personal information categories collected, which are covered in the relevant privacy notice, below is a comprehensive description of CBRE’s online and offline data collection practices regarding the collection, use, and disclosure of personal information.

Categories of Personal Information We Collect about California Consumers

In the preceding 12 months, depending on a consumer’s interactions with CBRE, CBRE has collected the following categories of information for the purposes outlined below under the heading “Purposes for Which we Collect this Information”:

  1. Identifiers, such as name, email address, and account name

  2. Customer records information, such as address or telephone number

  3. Characteristics of protected classifications under California or federal law, such as race, religion, or disability

  4. Commercial information, such as products or services purchased, obtained, or inquired about

  5. Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement

  6. Geolocation data, such as device location or Internet Protocol (IP) location

  7. Visual information, such a photo or moving images

  8. Professional or employment-related information, such as current or past work history

  9. Education information that is not “publicly available personally identifiable information” as defined in the California Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99)

  10. Inferences reflecting your preferences, predispositions, behavior, and attitudes drawn from the information we collect when you visit the Website, use our apps, or interact with our tools

Sources of Collection

We collect the categories of personal information set out above from the following categories of sources:

  • From consumers directly or indirectly

  • Publicly available websites

  • A consumer’s employer with respect to certain services we offer

  • Third parties who may share personal information they collect with us for research or marketing purposes

Purposes for Which We Collect this Personal Information

We collect the personal information set out above, for the following business and commercial purposes:

To operate and maintain our business and digital properties as well as to provide services to our clients:
  • To communicate with clients, prospective clients, and others with whom we have or are inquiring about establishing a business relationship

  • To provide offerings and services in which a consumer expressed interest

  • For business and marketing purposes

  • To administer and facilitate a consumer’s attendance at any of our events

  • To create an account to access certain information offerings or services

  • To administer surveys and generate aggregated and de-identified data analytics to improve and better manage our client relationships

  • To operate, evaluate and improve our online business offerings, including developing new products and services

  • To determine the effectiveness of and optimize our advertising to better target our advertising and to provide pertinent offers in which we think a consumer will be interested

  • To analyze and facilitate the functionality of our products, services, websites, mobile applications and any other digital assets

To maintain and operate our corporate offices and other corporate spaces for which we are responsible:
  • To ensure safety and security of CBRE employees at our offices

To provide our emerging digital products and services, for example Hana and Host:
  • To create and manage a consumer’s Hana Member account

  • To provide consumers with the Hana and Host Work services and to manage our relationship with them

  • To provide a personalized experience on our platform

  • For security, to be able to identify a consumer at check in

  • To maintain a consumer’s Hana member profile

  • To analyze the use of, and help us continually refine and improve our services, our apps and better serve our customers

  • To address requests for additional information about CBRE Hana and our services

  • To market and advertise our services

  • To gather information about our website for analytics purposes

  • To allow a consumer access to our Host workplace

  • To the extent we provide payment facilities, to allow for a consumer to make purchases through Host Work

  • To customize our services for a consumer, including providing recommendations

To recruit job applicants:
  • To assess a consumer’s suitability for the position to which the consumer applied or other available positions, which includes: interviews, terms of employment, verification of information, carrying out pre-employment screening checks, determining the consumer’s ability to legally work for us in the United States including, as applicable, verifying the consumer’s visa status), and for onboarding the consumer as a CBRE employee once hired

To carry out the responsibilities included in the CBRE EthicsPoint Helpline:
  • To investigate possible violations of the law or of company policy and to take appropriate corrective action, such as employee discipline or legal proceedings

  • To compile statistical information on reports of misconduct

  • To investigate possible violations of the law or of company policy and to take appropriate corrective action, such as employee discipline or legal proceedings

Disclosure of Personal Information

In the preceding 12 months, depending on a consumer’s interactions with CBRE, CBRE has disclosed for a business purpose, the following categories of information (for additional examples please refer to the section above titled Categories of Personal Information We Collect about California Consumers):

  1. Identifiers

  2. Customer records information

  3. Characteristics of protected classifications under California or federal law

  4. Commercial information

  5. Internet or other electronic network activity information

  6. Geolocation data

  7. Visual information

  8. Professional or employment-related information

  9. Education information that is not “publicly available personally identifiable information” as defined in the California Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99)

  10. Inferences

For each of the categories listed above, we may have disclosed Personal Information to the following categories of third parties for a business purpose:

  • Third parties, including third party vendors

  • Service providers, who help us manage or provide our products and services, including but not limited to marketing, advertising and communications agencies, external auditors and advisors, and our vendors who provide data processing, IT, software, information security or other related services

  • Legally affiliated entities and affiliates

  • Professional advisors

  • Enforcement or regulatory authority, if required

Third Parties to Whom We Have Sold Personal Information

CBRE does not sell Personal Information and has not sold Personal Information in the preceding 12 months.

Consumers Under the Age of 16

As above, CBRE does not sell Personal Information. CBRE does not have actual knowledge that it sells the Personal Information of consumers under 16 years of age.

How to Contact Us

We may be contacted with questions or concerns regarding our privacy policies or practices by emailing [email protected] or by writing to us at 321 North Clark Street, Suite 3400, Chicago, Illinois 60654, Attention: Global Director, Data Privacy.