This Privacy Notice sets out how we obtain, use and protect your personal information when carrying out our business activities. For the purpose of this Privacy Notice, ‘we’, ‘us’ and ‘our’ refers to Grosvenor International Investments Limited (which is the legal name for Grosvenor Diversified Property Investments) and ‘you’ refers to you (the data subject).
We collect information about the employees, representatives and other key personnel, advisers and agents of our business partners (e.g. our co-investors and suppliers).
This information is primarily received directly from you, your organisation or its advisers. This may include: (ii) information provided in correspondence (e.g. by email); (ii) information provided to us prior to or at an event/meeting (e.g. on a business card or when replying to one of our event invitations); and (iii) when you or your organisation provides information for our business partner and supplier onboarding/set up process and due diligence.
We may collect information from background or risk screening companies and public sources when conducting due diligence on executives, shareholders, beneficiaries and other key persons relating to our co-investors, vendors, suppliers and other business partners as part of our due diligence/KYC processes.
We may also access contact information that is in the public domain, such as from an organisation’s website or publications or other resources in which companies choose to publish their business contact information.
Contact details including some or all of the following:
We may share your personal information with:
as may be necessary or desirable for the purposes described above. They will be under an obligation to protect the confidentiality and security of that personal information (unless otherwise required or permitted by law).
In addition, we may also share your personal information with the following recipients:
Your personal data is retained for the duration of our relationship with you as a contact or with your organisation and for up to 6 years following the end of that relationship (unless an alternative date is agreed). However, we may continue to hold your personal information for longer periods in accordance with our IT backup procedures or for legal, accounting or financial reasons.
We (or our third party service providers on our behalf) may process your personal information in order to generate anonymous statistical information and we may use this for any purpose (including strategic business planning or management decisions).
We also generally allow our third party service providers (such as those providing cloud IT services to us) to process your personal information to generate anonymous statistical information to improve their products and services.
We may also receive anonymous reports and analysis from third party service providers that have been prepared using personal information that they or their business partners collect about you (for example, footfall analysis). Those third parties are responsible for providing notice and obtaining consent where required by applicable data protection laws.
European data protection laws provide you with rights concerning your personal information. These may include:
If you wish to exercise any of these rights, or if you have a complaint about how we manage your personal information, please contact us using the details in the Contact section below.
We process personal information if at least one of the following bases applies:
We may ask for your consent to processing personal data as required by law, in relation to direct marketing and in relation to processing sensitive data. If you provide your consent, you can withdraw that consent at any time by contacting us using the details in the Contact section below. In the case of direct marketing, you can also use the unsubscribe link in the footer of the email to opt-out of receiving that communication.
We (or third parties working for us) may store your personal data on systems anywhere in the world, including in particular the UK, Europe and the US. Where your personal data is transferred outside of the UK to a country that the UK does not consider to have laws providing adequate safeguards for your personal information, we (or third parties working for us) will ensure there are adequate safeguards through the data importer’s agreement to transfer terms approved by the Information Commission’s Office (unless an exemption applies under applicable data protection laws).
Please note that messages you send to us by e-mail or via any internet connection may not be secure. If you choose to send any confidential information to us by such means you do so at your own risk with the knowledge that a third party may intercept this information and we do not accept any responsibility for the security or integrity of such information.
Please also take time to consider the legitimacy of any communications purporting to be from us or third parties working on our behalf. Do not respond to requests for payment or click on links unless you know they are not malicious. If in doubt, please contact us via other means.
If you have any questions, comments or requests regarding any aspect of these privacy notices, please contact us by email at: dataprotectionGGL@grosvenor.com or post at: Head of Legal, Grosvenor International Investments Limited, 70 Grosvenor Street, London, W1K 3JP.
Should you not be satisfied with our response and remain concerned your personal data is not being processed in accordance with UK data protection law, you also have the option of raising the matter with the UK Information Commissioner’s Office (https://ico.org.uk).
March 2022