PRIVACY NOTICE

Dear Visitor, thank you for visiting and using our website.

This Privacy Notice is your guide to understanding how Hines Living, acting as the Data Controller (“we,” “us,” or “our”), handles your Personal Information when using this website.

Depending on your location, we provide additional details in the annexes to this Notice in compliance with specific regional regulations. We want to ensure you have all the relevant information for your situation.

Capitalized terms used in this Privacy Notice have the same meaning as defined in the applicable Data Protection Laws.

Important Note: this notice pertains to the processing operations carried out when you use this website and does not extend to other processing activities performed by Hines as a building owner or property manager.

1. What Personal Information do we process?
   1. Identifiers and contact information:  when contacting us, we collect your full name and e-mail address, and any further personal information you choose to share with us.
   2. Online identifiers: we collect online identifiers through cookies and other similar technologies that help us to offer you a better browsing experience, enhance site navigation, analyze site usage, and assist in our marketing efforts.
   3. Information you provide us through the app: we collect your personal information to enable specific features within the App. These include: registering visitors, when registering your presence at the office, booking a desk/room, registering a guest, requesting catering, requesting service, reporting facilities-related issues, etc.
   4. Geolocation data: we only collect this information following your permission and only for the activation of certain features within the app (e.g. to find the nearest commute options)

2. How We Use Your Personal Information

Your Personal Information may be stored and processed by us in the following ways and for the following purposes:

• to deal with your question or message sent through our contact forms;
• for ongoing review and improvement of the information provided on the website to ensure it is user friendly and to prevent any potential disruptions or cyber-attacks;
• to conduct the analysis required to detect malicious data and understand how this may affect your IT system;
• for statistical monitoring and analysis of current attacks on devices and systems and for the ongoing adaptation of the solutions provided to secure devices and systems against current attacks;
• to understand feedback on Hines Products and Services and to help provide more information on the use of those products and services quickly and easily;
• for in-depth threat analysis;
• to understand your needs and interests;
• for the management and administration of our business;
• to anonymize personal data and prepare and furnish aggregated data reports showing anonymized information;
• enforcing our terms and conditions or other legal rights;
• to comply with and to assess compliance with applicable laws, rules and regulations, and internal policies and procedures; or
• for the administration and maintenance of databases storing personal data.

Whenever we process Personal Information, we make sure that the usage complies with the applicable laws. We will take necessary steps to ensure that the personal data is accessed only by authorized employees, representatives and service providers of Hines who have a need to access your Personal Information for the purposes described in this Privacy Notice and that, in any case, are subject to confidentiality obligations.

3. Cookies and similar technologies 

‍Cookies are small pieces of data being placed on the hard drive of your device. With the help of cookies, we can store information for a certain period and identify your device for the purposes mentioned below. These periods may vary depending on the type of cookies. Some cookies will be stored only for the time you are visiting our website (session cookie) and are automatically deleted once you close your browser, others cookies will be stored for a longer period than your session (persistent cookies).

On this website, we also use technologies that function similarly to cookies such as local shared objects. These are small data files that enhance your web-browsing experience, for example, by allowing you to personalize the look of a website that you frequently visit.

We transparently inform you about our use of cookies and similar technologies in the sections below. In case you would like to further understand more about these technologies, you can also set your browser settings to inform you about the cookies or similar technologies downloaded to your device.

• Strictly Necessary Cookies:

Strictly necessary cookies maintain website security, facilitate network management, ensure site functionality, and enhance accessibility. You have the option to disable strictly necessary cookies in your browser settings, although this may impact your website experience.

• Functional or Preference Cookies:

Preference cookies allow us to store specific user selections or preferences, leading to a more personalized website experience. These cookies are activated only with your consent. 

• Analytics:
  Statistical analytics gauge website performance and gather aggregated information on your site usage to optimize your digital experience. This method does not collect individual-level behavioral data. On European sites, these cookies are only active upon clicking “Accept.” Non-European sites allow you to opt out.”
• Marketing/Tracking/Profiling Cookies:

Marketing/tracking/profiling cookies, typically placed by advertising networks, deliver relevant content and assess campaign effectiveness. Information regarding website usage and visits may be shared with third-party organizations such as advertisers. These cookies are activated only with your consent.

• Conversational Cookies:

Conversational cookies link conversations and interactions to a specific visitor on our website, particularly when engaging with our chatbot. Accepting these cookies is necessary for interacting with the chatbot on our websites.

The table below sets out the type of cookie used, what its purpose is, and how long it lasts.

Cookie	Domain	Description	Duration	Type
PHPSESSID	www.oneparkcentral.com	This cookie is native to PHP applications. The cookie stores and identifies a user's unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.	session	Necessary
pixelratio	www.oneparkcentral.com	No description available.	session	Other
_gcl_au	.oneparkcentral.com	Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.	3 months	Analytics
_ga_*	.oneparkcentral.com	Google Analytics sets this cookie to store and count page views.	1 year 1 month 4 days	Analytics
_ga	.oneparkcentral.com	Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.	1 year 1 month 4 days	Analytics
_fbp	.oneparkcentral.com	Facebook sets this cookie to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising after visiting the website.	3 months	Analytics
_ga_*	.oneparkcentral.com	Google Analytics sets this cookie to store and count page views.	1 year 1 month 4 days	Analytics
_gid	.oneparkcentral.com	Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously.	1 day	Analytics
_gat_gtag_UA_*	.oneparkcentral.com	Google Analytics sets this cookie to store a unique user ID.	1 minute	Analytics
rc::a	google.com	This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks.	never	Necessary
rc::c	google.com	This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks.	session	Necessary

4. SOCIAL MEDIA PLUG-INS

We place various social media buttons on our website in the form of a plug-in. Following are the social media buttons used:

• Facebook
• Instagram

Please be aware that by visiting a website that integrates social media plugins, certain data (your current IP address, visited sites, the date and time the website etc.) is forwarded to these social media services even if you are not registered with these services. If you are already logged into the social media service when you click on the social media button, the social media service may also use this data to identify your username and possibly even your real name. We have no control over the extent, nature, and purpose of such data processing by the social media service. Please note that the social media service is perfectly capable of using this data to create pseudonymized and even individualized user profiles.

You can find further information about data protection regarding social platforms on the privacy policies provided by the social media platforms.

5. THIRD -PARTY LINKED SITES

Our website contains links to other websites, including social media sites, which may have privacy policies that differ from our own. We are not responsible for the collection, use or disclosure of information collected through third-party websites and expressly disclaim any liability related to such collection, use or disclosure. We are not responsible for any information or content contained on such sites. Links to other websites are provided solely as a convenience. Your browsing, use and interaction on any other websites, including websites which have a link to the Platform, are subject to that website’s own rules and policies. Please review the privacy policy posted on any website that you may access through, or which links to the Platform.

Please note that if you provide information to us via a social media site or participate in a social media site linked to the Platform, you consent to our use of your information for any reason in accordance with this Privacy Policy as if it were submitted to us directly via the Platform.

6. Sources from which we collect your Personal Information

As you interact with the website, we collect Personal Information directly from you, as well as Information that you generate in connection with your use of the website.

7. Purposes and legal bases for processing and disclosing Personal Information
   1. 1. Based on our legitimate interest:

To help us improve the functionality of the App, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity; or

1. 1. 2. With your consent:

When Hines processes your personal requests made through the website, and when processing personal data through cookies you accepted; or

1. 1. 3. Due to legal obligations

When required so to comply with and in order to assess compliance with applicable laws, rules and regulations, and internal policies and procedures.

8. Sharing of Personal Information with third parties

In connection with one or more of the purposes outlined in the “How We Use Your Personal Information” section above, we may disclose your personal information to third parties such as our group members, our professional advisers, our external and internal service providers that provide services to us (such as distribution of newsletters, IT hosting and market research). We are using special platforms to store, unify and process our consumer data with care and certified security.

We may disclose your personal information for the purposes set out above and only for specific purposes according to the relevant data protection laws. Those service providers are bound to process your personal data only on our strict instructions and when they can offer adequate technical and organizational measures to protect your data.

We may also disclose your personal information if it is required or authorized by law, where disclosure is necessary to prevent a threat to life, health or safety, or where we are otherwise permitted by the relevant data protection laws.

9. International data transfers

As a global company, Hines may need to transfer your Personal Information out of the country or jurisdiction in which it was originally collected. You should be aware that these countries may not have similar data protection laws to the country in which your Personal Information was originally collected. In such cases, Hines will ensure that there are adequate safeguards in place to protect your Personal Information with the aim of ensuring that your privacy rights continue to be protected as outlined in this Privacy Notice.

For transfer of Personal Information outside of the original location of collection for any other country or jurisdiction, it will be protected and transferred in a manner consistent with the applicable legal requirements, and Hines will take reasonable steps (for example through a contract with the overseas recipient) to ensure that the overseas recipient does not breach the applicable privacy laws in relation to the data. 

You can obtain more details of the protection given to your Personal Information by contacting us as described in section 15 below.

10. How we protect your Personal Information

At Hines, we take your security seriously. We've put in place strong measures to keep your information safe and secure. This includes special protection for client files, tailored to the sensitivity of the information they contain. We also have controls in our computer systems to restrict access appropriately.

Only authorized Hines employees have physical access to areas where Personal Information is stored or processed. We make sure our team members are trained to follow all laws and regulations, especially when it comes to data protection. Access to sensitive information is limited to employees who really need it for their jobs and who are authorized to see it.

If you want more details about how we protect your Personal Information, just reach out to us as described in Section 15 below. When you contact us about your file, we may ask for some Personal Information to make sure that only you or someone you've authorized can access your information.

11. How long we keep your Personal Information

We will retain your Personal Information for as long as is necessary to fulfill the purpose for which it was collected or to comply with applicable legal, regulatory, or internal policy requirements.

12. Modification of your choices and preferences

If you don't want to get marketing messages from us, no problem! You can opt out anytime by unsubscribing, sending us an email, or writing to us at the contact details listed in Section 15 below. If you receive an email from us about marketing stuff, just reply to that email and ask us not to send you any more marketing messages.

13.  Your rights

Where applicable and under the conditions set forth under applicable data protection laws, you may request the following rights concerning the processing of your personal information:

• access to and/or a copy of the Personal Information we hold in relation to you and be informed about how we process it;
• object to the processing of your Personal Information if:
  • We process it based on legitimate interests or for public interest (including profiling).
  • We process it for direct marketing purposes.
• corrections to your Personal Information where inaccurate or incomplete;
• delete your Personal Information;
• restrict how we process your Personal Information;
• receive your Personal Information in a structured, commonly used electronic format for easy transfer to another controller;
• withdraw your consent easily and at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

In the event that you wish to make a complaint about how we process your Personal Information, please contact us in the first instance as described in Section 15 below and we will endeavor to deal with your request as soon as possible.

14. Changes in the Privacy Notice.

We reserve the right to revise this Privacy Notice at any time. In the event of any changes, we will update this posting. If we decide to use or disclose Personal Information differently from how it was originally collected, we will promptly inform you. If you object to these changes, please reach out to us using the contact methods detailed in the section below titled “Contact Information.”

15. Contact information.

If you have any questions about our Privacy Notice or wish to exercise your rights, please contact us , please contact us at 888.928.6029 and corporate.counsel@hines.com.

505 4 Street SW, Calgary, Alberta..

In order to verify your identity, we request that you provide your name and other data we may hold associated with your name. We may also request a copy of your driver’s license if we are unable to verify your information. In addition, we request that you provide an email address in order to contact you regarding your request. 

Annex A - Additional information under the CCPA.

0. 1. 1. What Personal Information do we process?
1. Identifiers such as a real name, online identifier, Internet Protocol address, email address, and account name;
2. Sensitive personal information: precise geolocation data (only for certain features within the application, e.g. to find the nearest commute options)
   1. 2. Processing operations

We do not use or disclose your sensitive personal information for purposes other than those allowed under the CCPA, including Section 7027, subsection (m).

1. 1. 3. Sharing your Personal Information

We may share the following categories of Personal Information for a business purpose as further elaborated in section 7:

• Category (i): Identifiers.
• Category (ii): Protected classification characteristics under California or federal law.

In the preceding 12 months we have not “sold” (as the term “sale” is defined in the CCPA) or “shared” (as the term “share” is defined in the CCPA) Personal Information.

1. 1. 4. Additional contact information

Additionally, to the information provided in section 15, you can contact us by

• Calling us at 1-833-521-0510
• Emailing us at hinesprivacysupport@hines.com

Annex B - Additional information under the GDPR

1. 1. 1. Lawfulness of processing

As further elaborated in section 6, We process your personal lawfully being given the following applies:

• Art. 6(1)(a) GDPR: with your consent where applicable;
• Art. 6(1)(c) GDPR: to comply with the legal obligations imposed on Us
• Art. 6(1)(f) GDPR: our legitimate interests
  1. 2. Your right to lodge a complaint

You have the right to file a complaint with the competent Supervisory Authority of any EU member state in the event you have concerns about the processing of their Personal Information. An overview of such authorities can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en