CoStar Privacy Statement
1. Our Commitment to Privacy
Your privacy is important to us. To better protect your privacy we provide this notice explaining our online information practices and the choices you can make about the way your information is collected, used and stored.
We respect your right to privacy and will only process personal information, if applicable, that you provide to us in accordance with applicable data protection laws and regulations, including the General Data Protection Regulation (“GDPR”).
3. The Information We Collect
We may monitor your website usage in order to, among other things, identify trends, aggregate statistics, optimize your use of the website, detect fraud and abuse, and provide a safer and more secure environment for purchasing. Examples of the data we may collect and analyze include the Internet protocol (IP) address used to connect your computer to the Internet, your login credentials, your computer connection information such as browser type and version, your operating system and platform, the full Uniform Resource Locators (URL) click stream to, through and from our websites (including date and time), your CoStar related preferences and the terms you searched for. As is true of most websites, certain of this information may be stored in log files.
b) Direct Collection
In a few areas on our Site, we ask you to provide information that will enable us to verify whether you are entitled to access and use certain information, materials and services available from our Site, to enable us to enhance your site visit, to assist you with customer service or technical support issues, to follow up with you after your visit, or to otherwise support your customer relationship with CoStar.
Providing such information is completely optional. However, failure to provide it may mean that you cannot access and use certain information, materials and services.
For example, we request information from you when you logon to certain areas of our Site, where you may be prompted to provide us with your Passcode information as a condition to gaining access to certain information, materials or services.
Further personal information will be collected and used by CoStar when you choose to take certain actions through our Site, including, among others:
subscribe to a product information newsletter;
ask to be added to our mailing lists to receive information about our products or services;
register for a conference or webinar or notify us of a change of address;
place an order;
participate in a sweepstakes or other promotional offer; and
provide feedback in an online survey.
In each of these instances, we typically ask for your name, e-mail address, phone number, address, employment information, product preference information, as well as other similar information that is needed to register or subscribe you to services or offers. On occasion, we may ask for additional information to enable us to provide you with access to and use of certain information, materials and services. In the case of product information newsletters or direct or electronic mailing lists, you will be able to “unsubscribe” to these mailings at any time.
c) Phone calls
CoStar conducts product research using professional researchers conducting phone interviews of commercial real estate market participants and their agents. Where permissible by law, CoStar records telephone or other communications with CoStar representatives, including research, customer service and sales personnel, for training, quality assurance and archival purposes.
d) Payment Details
You may choose to provide valid payment information to make a purchase via our Site. Any transactional information provided by you will be used by us to process a transaction and may be used to process future transactions at your request. Your credit or debit card number, card holder name, address, start date, expiration date, issue number and related transaction information (such as delivery address) will be stored securely by CoStar and/or its agents and will be retained in order to facilitate and personalize future transactions with you.
f) Biometric and Geolocation Information
Some areas of the Site may require you to provide facial images, facial geometry, finger prints and geolocation information at the time you log in to use certain CoStar products. CoStar will securely store this information on CoStar servers located in the United States and this information will only be accessed by certain authorized CoStar employees. Your biometric and geolocation information is used to authenticate you as the user of certain CoStar products, maintain a secure session and detect potential abuse and fraudulent use of such products.
4. How We Use Personal Information
CoStar uses your personal information only for specific purposes, many of which are described above under “The Information We Collect.” The personal information you provide to us when using the Site, such as your name, postal or e-mail address or telephone number will be kept confidential and used to better understand your needs in order to improve our products and service offerings. Additionally, your personal information will be used to support your customer relationship with CoStar, and to notify you of special offers, updated information and new products and services from CoStar, to conduct research, or to provide offers from third parties that we think may be of interest to you. Agents or contractors of CoStar that are given access to your personal information are required to keep the information confidential and not use it for any other purpose than to carry out the services they are performing for CoStar.
CoStar may combine personal information collected at its Site with data provided by third-parties for the purposes of offering you products and services that CoStar believes would be of interest to you. If CoStar obtains information from third parties other than public sources, CoStar requires those third parties to confirm that they have complied with applicable law in the collection and use of that information.
5. Where We Store Your Information
We store your personal information on CoStar’s servers located in data centers in the United States (on production, development, test, backup and training servers).
6. Data Processing
CoStar’s global corporate affiliates assist us in supplying and providing services to our customers. In addition, CoStar retains subcontractors, agents, advisors and suppliers to assist us in our business for certain products. CoStar may permit its affiliates and third parties to access your personal information in order to assist us; however, these parties must keep your personal information confidential and must not use it for any purpose other than to carry out the services they are performing for CoStar.
Depending on the product you use, CoStar may process and store your personal information in the United States of America. In addition, some of our service providers, agents and suppliers are located outside of Canada. Your personal information will also be subject to the laws of those jurisdictions, which may not provide the same level of protection as Canadian law.
CoStar will, as necessary, keep information accurate and complete based on the information provided to it. However, information contained in files that are dormant or have been closed will not be actively updated or maintained by CoStar.
If an individual believes that any of his or her personal information held by CoStar is not correct, that individual may request an update of that information by sending a written request to CoStar’s Data Protection Officer at firstname.lastname@example.org or via mail at 1331 L Street NW, Washington, DC 20005
CoStar obtains your consent for the collection, use and disclosure of personal information for the purposes of providing you with products and services by you giving us your personal information for those purposes. We use an opt-out standard for communications with you about our products and services and other products or services that may be of interest to you. If you do not wish to receive such mailings, please contact us by e-mail to email@example.com. In addition, you can select unsubscribe on any of our electronic email marketing communications to you. If you opt-out of marketing communications, CoStar will still contact you in connection with providing you with the products and services you have requested from us.
CoStar retains personal information as long as necessary to fulfill the purposes for which it was collected and as required to comply with business and legal requirements. The length of time CoStar retains personal information varies and may extend beyond the end of the individual’s relationship with CoStar.
CoStar takes steps to protect the security of the personally identifiable information we collect, including, for example, physical, electronic, and procedural safeguards.
11. No Data Regarding Children
Although the Site can technically be viewed by children, we do not knowingly request personally identifiable information from them nor does the Site publish content that is targeted to children. No information should be submitted to, or posted at, the Site by visitors under the age of 18.
12. Accessing Your Personal Information
You may request access and corrections to your personal information. If you would like to access and make changes to information that you have provided to us in connection with your online account, please log-into your account and review and correct the information that you provided. If you would like assistance in accessing or correcting other information, please contact us at firstname.lastname@example.org.
13. Global Privacy Considerations
Personal information collected by CoStar, where applicable, may be stored and processed in the United States or in any other country where CoStar or its affiliates, subsidiaries, or third-party service providers maintain facilities. When you provide personal information to CoStar, you consent to the processing and transfer of your information within the United States and around the world. We follow applicable data protection laws when transferring personal information.
European Privacy Rights
CoStar will process your personal information for the legitimate interests of CoStar, or, when needed, with your explicit consent. If you have provided consent for the processing of your personal information, you have the right to withdraw consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn. You have the right to request access to and rectification or erasure of your personal information, as well as the right to restrict processing, object to processing, and under certain circumstances the right to data portability. You may do so by contacting CoStar’s Data Protection Officer at email@example.com. You have the right to lodge a complaint with a data protection supervisory authority if you believe that we have not complied with the requirements of GDPR with regard to your personal information.
14. Amendment of CoStar’s Practices and This Policy
Last Updated: May 23, 2018