This ERIX Platform Supplementary Privacy (“Notice”) is issued by CBRE, Inc and its subsidiaries (“CBRE”)1 .This Notice will help you understand our data collection and handling practices when you provide CBRE with your Personal Data for these purposes.

This document supplements our CBRE Global Privacy and Cookie Notice and applies where we act as Data Controller (as defined in the General Data Privacy Regulation (EU) 2016/679) for the purposes listed below.

1Personal Data We Collect, Purposes of Collection and Sources

CBRE processes your personal data in order to provide access to the ERIX Platform (the “Platform”) and to administer and maintain functionality of the Platform:

Activity		Information Collected and/or Processed	Specific Purposes
Administration and Facilitation of User Access to the Portal	Name Business Email Address Password Employer		Processing of this data is in our legitimate interest. We use this data to fulfil our contractual obligations to our clients to provide you with access to the Portal.
Maintenance and Administration of the Portal	Username Information about your usage of the Portal		Processing of this data is in our legitimate interest. We use this data to administer the functioning of the Portal and maintain the Portal’s functionality.

2 Sources from Whom We Collect Personal Data

We collect and process Personal Data directly from you.

3Consequences of Not Providing Personal Data

Failure to provide such Personal Data may limit the amount and type of support which CBRE can provide.

4Sharing of Personal Data

We will only share your data in limited circumstances, be this internally within CBRE, or with third party providers. Such transfers will only be to the extent strictly necessary to provide the support you need.

5International Transfers

CBRE is a global organization. Accordingly, CBRE employees and the third parties identified above may be located in a country other than your own. Additionally, data in our systems may be stored or Processed in third countries, on CBRE or third-party platforms. CBRE employs appropriate safeguards to protect your Personal Data when transferred to or accessed from other countries.

6 Retention of Personal Data

We will retain data collected only so long as is legally required, in order to fulfil the purpose it was collected, or as otherwise required by CBRE retention policy. Should you require further information as to the retention period, please do not hesitate to contact us.

7How We Secure Personal Data

We implement appropriate technical and organizational security measures to safeguard the Personal Data we collect and process about you against loss and unauthorized alteration or disclosure.

Where we share your Personal Data with our service providers, we have assessed that their technical and organizational measures provide an appropriate level of security and have also entered into agreements with them requiring the confidentiality and security of your data.

8 Your Data Privacy Rights

You may have certain rights with respect to your Personal Data under applicable law. Please refer to the CBRE Global Privacy and Cookie Notice to learn more about your rights and how to exercise them.

9Contact CBRE

You are always free to contact CBRE’s Global Data Privacy Office (via Privacy.Office@cbre.com).

1 Whenever this Notice refers to “CBRE”, “we”, “us” or “our”, it refers to the applicable responsible CBRE Group entity.