Privacy Notice

Protection of your data
When you share information about yourself with us, we understand that you trust us to handle it responsibly. This Privacy Policy explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. 

This applies to personal data we collect through the website in the course of our relationship or potential relationship with you (or your organisation) in your capacity as a supplier, client or business partner.

What do we do?
Cushman & Wakefield is a leading global real estate services firm with 51,000 employees in more than 70 countries helping occupiers and investors optimise the value of their properties. Cushman & Wakefield is one of the world’s largest commercial real estate services firms, offering core services of agency leasing, asset services, capital markets, property management (C&W services), global leasing services, investment and asset management (DTZ investors), project & development services, lessee and tenant representation, and valuation and advisory services. For more information about us, please see the About Us section of our website.

What data do we collect? 
Depending on the nature of your relationship with C&W, we may collect personal data about you which broadly falls into the following categories:

Data that you provide voluntarily

•  Website information. You can visit our website without having to provide any information about yourself. However, in some situations we may ask you to voluntarily provide us with some personal information. This may be the case, for example, if you are interested in receiving emails from us, reading research papers, attending an event or participating in an online forum we occasionally offer, or if you register for an online account we offer or contact us through the website (where we collect information such as your name, email address, organisation, country, postcode, job title, telephone number(s), details of your comments or enquiries and username/password). If we receive personal data from you, we will handle it securely, lawfully and fairly. 

• Job Applicants. If you contact us about an employment opportunity with C&W, we will collect certain data as part of the recruitment process (and, if successful, your employment). For more information on this, please see our separate privacy policy for job applicants.
  Data collected by us if you have a business relationship with us. We may collect and process data about you as an individual (whether as a website user or otherwise) if you are in a business relationship with C&W as a client, potential client, supplier, consultant, advisor or other third party, or in each case on behalf of such ("client, supplier or business partner data"). Examples of client, supplier or business partner data are:
  Contact details of a contact person for C&W clients, vendors or business partners (such as name, business telephone numbers, business address), including for the purpose of attending or participating in promotional events or other C&W events or competitions; 
  Functional data about clients, vendors or business partners or their representatives (such as job title, duties, department, work history, qualifications and experience); 
• Financial data (such as bank account information about individuals associated with a particular business) or real property data relating to those individuals where it is necessary for the purpose of receiving payments or fulfilling contractual obligations or due diligence obligations or related purposes; 
  Surveillance camera footage/access control to premises: we may use surveillance cameras or establish access control procedures to premises on C&W's premises for reasons of security and law enforcement, the exercise, exercise or defence of our legal rights or to protect an individual's vital interests (which includes the processing of footage of visitors recorded by surveillance cameras and/or personal data such as the name, organisation represented and time of access).
• Data we collect automatically
  When you visit our website, we may automatically collect certain data from your device. In some countries, including countries in the European Economic Area, this data may be considered personal data under applicable data protection law. In particular, the data we collect automatically may include your IP address, device type, cookie ID, browser type, geographic location (e.g. country or city level location) and other technical data. We may also collect data about your device's interaction with our website, including pages viewed and links clicked. Collecting this data helps us to better understand visitors to our website, where they come from and what content on our website is of interest to them. We use this data for our internal analysis purposes and to improve the quality, usefulness and experience of our website for our visitors. Some of this data may be collected using cookies and similar tracking technologies, including tracking pixels. For more information about the types of cookies we use, why we use them and how you can control cookies, please see our Cookie Notice.
• Data we receive via external sources
  For the purposes of complying with various regulations or conducting background checks in accordance with our internal requirements (to the extent permitted consistent with applicable law), we may occasionally obtain personal information about you from third party sources, such as credit check databases, politically exposed person databases, government disapproved parties, sanction and watch lists, your employer, other parties in the real estate sector such as real estate agents, buyers, sellers, borrowers, lenders, architects, engineers, appraisers, developers, landlords, tenants and financial institutions, as well as online databases and public registers. We will only collect this information after verifying that these third parties have your consent to do so or are otherwise legally entitled or obliged to share your personal data with us. The types of data we collect about third parties include, for example, information about whether certain administrative actions or legal proceedings have been instigated against you. We use the information we receive to maintain and improve the accuracy of our records about you and to assess risks arising from a relationship or potential relationship with you or your organisation.
• Sensitive personal data
  Some of the data you provide or that we obtain from external sources when conducting due diligence on you or your organisation (to the extent permitted by and consistent with applicable law) may be sensitive data, such as criminal records or details of your political activities or religious affiliation (for example, in connection with determining whether you are a politically exposed person). We need this data to carry out “Know Your Counterparty” checks and otherwise assess risk under applicable law in connection with doing business with you/your organisation as a potential client or supplier. 

You may also share data about health conditions with us so that we can make adjustments to ensure accessibility to premises and/or events.

If you provide us with data about another person, you are confirming that you are authorised by that person, that you have informed that person of our identity and the purposes (as set out in this privacy notice) for which that person's data will be processed, and that you have obtained all necessary consents to process that person's personal data. When we first contact that person, we may inform them where we obtained the data. 

How do we use your personal data?

We use your personal data for the following purposes (or as otherwise set out at the time of collection):

• to create and manage records of your online account (if any), to provide online services to you, including enabling your participation in discussion forums and managing websites and systems;
• to further develop our website(s) and our products and services;
• for due diligence under applicable law, to assess financial, reputational, credit or insurance risks arising from a relationship or potential relationship with you/your organisation and/or to carry out necessary money laundering checks;
• to provide you/your organisation with requested information, products and services and to process invoices and payments;
• to send communications relating to services, in response to communications you send to us and to solicit feedback;
• to enable you to participate in events or competitions for which you have registered or in which you have entered;
• to identify trends in the property sector;
• to ensure that the content, services and promotions we provide are tailored to your (or your organisation's) needs and interests; and for business development purposes;
• to contact you directly or through our agents by post, telephone, fax, email, SMS or other electronic messaging services with offers of goods and services or information that may be of interest to you (including information about goods and services from other organisations). If you do not wish to receive promotional messages from us, please indicate this if you are asked to do so on the registration or contact form, or contact us using the contact details set out at the end of this Privacy Policy. We will seek your consent
• to send you direct marketing material where required by law.

Who do we share your personal data with?
We may share your personal data with the following categories of recipients:

• To our group companies or affiliated organisations, external service providers and partners:
  who provide data processing services to us (e.g. to assist in the provision of our website or other IT infrastructure, functions thereon or to improve related security, to assist in carrying out due diligence, to carry out marketing, analysis or research on our behalf or to assist in the provision of services to our clients generally or pursuant to a specific obligation); 
  with whom we organise joint promotional events (to ensure that you do not receive direct marketing information about the event from multiple sources); or 
• in the case of group companies or affiliated organisations that otherwise process personal data for purposes set out in this Privacy Policy or disclosed to you at the time of collection of your personal data. Further information about our group companies, affiliated organisations and external service providers who may process your personal data (including their location) is available on request by contacting us using the contact details provided under the heading "How to contact us External Link". 
• to our clients and bidders in respect of offers and transactions involving you.
• to relevant law enforcement authorities, regulators, government agencies, courts or other third parties if we believe that disclosure is necessary (i) under applicable laws or regulations, (ii) to exercise, enforce or defend our legal rights, or (iii) to protect your vital interests or those of another person;
• to actual or potential purchasers (and their agents and advisers) in connection with an actual or proposed purchase or merger or acquisition of any part of our business, provided that we inform the purchaser that it may only use your personal data for the purposes set out in this Privacy Policy;
• to any other person, provided that you have consented to the disclosure.

Legal basis for processing personal data
Under European Union data protection law, our legal basis for collecting and using the personal data described above depends on the particular personal data concerned and the specific context in which we collect it.
However, we will usually only collect personal data from you (i) if we need the personal data to implement a contract with you, (ii) if the processing is in our legitimate interests and does not conflict with any overriding rights you may have, or (iii) if we have obtained your consent to do so. In some cases, we may also be legally obliged to collect personal data from you or otherwise need the personal data to protect your vital interests or those of another person.

Insofar as we process sensitive personal data about you, we do so: (i) in connection with Know-Your-Counterparty Checks as required by applicable law; (ii) on the basis that the processing is necessary for reasons of substantial public interest; (iii) on the basis of your explicit consent; or (iv) for the establishment, exercise or defence of legal claims.

You may choose not to provide us with personal data. However, unless otherwise stated, the data we request is necessary for the purposes of entering into and implementing a contract with you or your organisation and/or providing services to you or your organisation and failure to provide it would adversely affect the contract process or the provision of the relevant services.
Where we collect and use personal data from you in reliance on our legitimate interest (or that of a third party), that interest will usually be in providing our services to you, responding to your enquiries, developing our website(s), undertaking marketing or detecting or preventing unlawful activity. 

Given that we process your personal data in your capacity as a corporate client and the safeguards we put in place to protect your personal data (including those set out below under the heading "How do we protect your data? External Link"), our legitimate interest is not overridden by any impairment of your individual rights and freedoms. We may also have other legitimate interests and, where necessary, will make clear to you in due course what those legitimate interests are.
If you have any questions or require additional information about the legal basis on which we collect and use personal data from you, please contact us using the contact details provided under the heading "How to contact us External Link".

How do we protect your data?
We use appropriate technical and organisational measures to protect the personal data we collect and process about you. The measures we use are designed to provide a level of protection appropriate to the risk associated with the processing of your personal data. We take care to provide access to personal data only to those who need it to perform their tasks and duties, and to third parties who provide services to us or who otherwise have a legitimate reason to access it (see above under the heading "With whom do we share your personal data? External Link") . If we allow a third party to access personal data, we will take appropriate steps to ensure that the use of the data is in accordance with this Privacy Policy and that the security and confidentiality of the data is maintained. 

However, we do take steps to protect your personal data in accordance with this Privacy Policy. This includes, for example, the requirement for an external service provider to register with an EU-U.S. Privacy Shield (in accordance with Article 45 of the General Data Protection Regulations). Further details about the protection of your personal data are available on request by contacting us using the contact details provided under the heading "How to contact us External Link".

Data retention
We retain personal data that we collect from you where there is a continuing legitimate business necessity to do so. If you are a client or supplier (or a representative of a client or supplier), the data will be retained for the period required by law to enable us to provide our services, to comply with applicable legal, tax and accounting requirements and, if necessary, to pursue, exercise or defend legal claims. 
If there is no continuing legitimate business necessity for us to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), we will store your personal data in a secure manner and isolate it from any further processing until deletion is possible. 

Your data protection rights
Within the scope of European data protection law, you have the following rights:
If you wish to access, correct, update or delete your personal data, you may do so at any time by contacting us using the contact details provided under the heading "How to contact us External Link". 

In addition, you may object to the processing of your personal data, request us to restrict the processing of your personal data or request the portability of your personal data. Again, you can exercise these rights by contacting us using the contact details provided under the heading "How to contact us External Link".

You have the right to unsubscribe from promotional messages sent by us at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in promotional emails sent by us or by emailing us at web.manager@cushwake.com. If you wish to opt out of other forms of marketing (such as postal or telemarketing), please contact us using the contact details provided under the heading "How to contact us External Link".

Similarly, if we have collected and processed your personal data with your consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing carried out by us up to the point of withdrawal, nor will it affect the processing of your personal data carried out in reliance on a basis for processing other than consent.
You have the right to lodge a complaint with a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
We will respond to all requests from individuals who wish to exercise their data protection rights in accordance with applicable data protection laws.

Links to other websites
We also link to other websites. We are not responsible for the content or privacy policies of those websites or the way in which they treat user data. In particular, unless expressly stated, we are not agents for those websites or advertisers, nor are we authorised to make representations on their behalf. In any case, you should check the privacy practices of these third parties.

Passwords
In order to provide you with more personalised services, we may ask you to set up one or more passwords to access certain services or areas on our website. You are solely responsible for the control and use of any password you create and we advise you not to reuse an old password and to create a strong password.

Revisions to this Privacy Policy
We may update this Privacy Policy from time to time in light of changing legal, technical or business developments. When we make updates to our Privacy Policy, we will take appropriate steps to notify you in accordance with the significance of the changes we have made. We will obtain your consent to any material changes to the Privacy Policy if and to the extent required by applicable data protection law.
The date of the most recent update of this privacy policy can be found at the beginning of this privacy policy under "Last updated". 

How you can contact us
If you have received one or more emails from Cushman & Wakefield that you do not wish to receive in the future, please contact us at web.manager@cushwake.com. If you have any questions or concerns about our use of your personal information, please contact us at privacyemea@cushwake.com. If you are located in Germany, you may contact C&W's data protection officer located in Germany. 
The controller of your personal data is the Cushman & Wakefield group organisation (i) with which you or your organisation deal as a supplier or client, (ii) which is considering entering into a relationship with you or your organisation, and/or (iii) with which you interact as a user of a particular Cushman & Wakefield website.

Supplementary Privacy Notice for our Facebook Fan Page
Our Facebook Fan Page (available at: https://www.facebook.com/CushmanWakefieldGermany/) also provides you with the opportunity to learn about our services and/or to contact and interact with us. Our Facebook fan page is provided on the basis of the agreement reached with Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the joint processing of personal data pursuant to Art. 26 DSGVO ("Page Insights Supplement regarding the Responsible External Link"). In accordance with this, we cannot make or implement decisions regarding the processing of Insights data ourselves. The primary responsibility under the GDPR for the processing of Insights Data and the fulfilment of all obligations under the GDPR with regard to the processing of Insights Data is assumed by Facebook.

We would like to point out that when you visit the Facebook fan page, data about you as a user may be processed outside the EU. Facebook, Inc., which is involved in this process, has committed itself as a Privacy Shield-certified US provider to comply with the EU's data protection standards: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active (as of 02.11.2018).

Your data may be processed for market research and advertising purposes, for example by creating user profiles from the interests resulting from your usage behaviour and using them to place advertisements. Cookies are usually stored on your computer for this purpose.
Through the "Page Insights" function, we can retrieve statistical data from Facebook in various categories in connection with the use of the Facebook fan page, such as the total number of page views, "Like" votes, page activities, post interactions, video views, post reach, comments, shared content, responses, proportion of men and women, origin based on country and city, language, calls and clicks in the shop, clicks on route planners and clicks on telephone numbers. We use this information to make our pages more attractive and tailored to your needs (e.g. by finding the right time to publish a piece of content).

In the context of the Facebook fan page, the processing of users' personal data is carried out to protect our legitimate interests in designing our information offers and communications with users in a way that is tailored to needs and target groups (legal basis: Art. 6 para. 1 lit. f DSGVO). If you are asked by Facebook as the provider of the platform for consent to certain data processing, the processing is carried out in this respect on the legal basis of Art. 6 (1) lit. a DSGVO.

With regard to the exercise of data subject rights and requests for information, we would like to point out that you can most effectively assert these directly with Facebook (see https://www.facebook.com/legal/terms/information_about_page_insights_data).
Further information on the processing and use of the data as well as the related rights and setting options for the protection of your privacy, including the possibility to object (opt-out), can be found in Facebook's data protection information at https://www.facebook.com/about/privacy/ as well as in the "Information on Page Insights Data" at https://www.facebook.com/legal/terms/information_about_page_insights_data.
Opt-out: https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com

Supplementary data protection information on Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de External Link).

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website:
Deactivate Google Analytics

For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html External Link or https://www.google.de/intl/de/policies/ External Link. We would like to point out that the code "anonymizeIp" has been added to Google Analytics on this website to ensure anonymised collection of IP addresses (so-called IP masking).

You can prevent the collection of marketing and tracking pixels integrated with the Google Tag Manager by clicking on the following link. An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website: Disable Google Tag Manager Tags.