Product Solutions About CoStar Contact Login Add a Listing Global Privacy Notice Last Modified: June 30 2021 As the leading provider of information, analytics, and online marketplaces to the commercial real estate industry, CoStar Realty Information, Inc. and our affiliates (collectively, “CoStar,” “we,” or “us”) respect your privacy and are committed to protecting your Personal Information. This Global Privacy Notice describes the types of Personal Information we collect and our practices for using, maintaining, sharing, and protecting it. It also describes the rights and choices you may have with respect to your Personal Information and how you may contact us about our privacy practices. Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements, and specific privacy practices may apply to some of our products and services. This Global Privacy Notice applies to the following websites and any associated CoStar websites, products, services, and mobile applications (the “Services”): CoStar.com (CoStar Information and Analytics, CoStar Portfolio Strategy, CoStar Risk Analytics, CoStar Real Estate Manager, CoStar Private Sale Network, CoStar Investment Analysis, and CoStar Brokerage Applications), CoStarGroup.com, CoStar.co.uk, Thomas-daily.de, Emporis.com and Grecam.com. It does not apply to the collection and use of certain employment-related information. If you are a current or former CoStar job applicant, employee, owner, director, officer, or contractor, please Contact Us for the appropriate policy. When using our websites, you may choose to interact with features from third parties that operate independently from CoStar, such as social media widgets and links to third-party websites. CoStar has no control over and is not responsible for the privacy practices of such third parties. This Global Privacy Notice does not apply to the extent CoStar does not own or control any linked websites or features you visit or use. We recommend that you familiarize yourself with the privacy practices of these third parties. Table of Contents Types of Personal Information Collection of Personal Information Use of Personal Information Disclosure of Personal Information International Transfer of Personal Information Security of Personal Information Retention of Personal Information Manage Your Personal Information Global Policy Notice Changes Contact Us 1. Types of Personal Information “Personal Information” means any information relating to an identified or identifiable individual. Examples of Personal Information CoStar may collect include: Payment information (credit card and other payment card information) Personal contact information (name, nickname, gender, mailing address, email address, phone number) Business information (office location, business contact information, department, job title/description, professional bio) Log-in credentials (username, password) Photographs and biometric data (facial geometry) Usage details (log-on activity, search terms, views, clicks, downloads,-CoStar-related preferences) Technical details (IP address, geolocation information, cookie/session IDs, authentication information, browser type/version, operating system/platform) Any other information you or other CoStar customers may upload or enter into to the Services Service-Specific CoStar Information and Analytics Through our CoStar information services (CoStar Property Professional®, CoStar COMPS Professional®, CoStar Tenant®, CoStar Suite® with Market Analytics, CoStar News, CoStar Connect®, Professional Directory™, CoStar Marketing Center™, CoStar Mobile™, CoStar Go®, CoStar Lease Analysis®, CoStar Lease Comps™, CoStar Property and CoStar For Sale™, Metropolis™) and analytics services (CoStar Portfolio Strategy™ and Investment Analysis™), we may additionally collect: Country code, location name, and contact ID for CoStar News recipients Business history, investor type, prior companies, credentials, and phone call recordings related to agents that list properties for lease or sale through CoStar Suite® (“Listing Brokers”) Phone call and video conference recordings CoStar Brokerage Applications Through CoStar Brokerage Applications, we may additionally collect information about deal commissions, compensation, and broker performance. Thomas Daily Through Thomas Daily, we may additionally collect contact history, company change, and conversation notes in connection with the TD Premium database service. Emporis Through Emporis, we may additionally collect bank account information from Community Members so that we may pay revenue shares and/or other earnings to such Community Members for content they provide to Emporis. California Residents We collect Personal Information as defined by the California Consumer Privacy Act, which is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include de-identified or aggregate information, publicly-available information that is lawfully made available from federal, state, or local government records, and information covered by certain sector-specific privacy laws. CoStar has collected the following categories of Personal Information about consumers in the 12 months preceding the date this Global Privacy Notice was last modified: Identifiers (e.g., real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers) Categories of personal information described in California Civil Code §1798.80(e) (e.g., signature, telephone number, bank account number, credit card number, debit card number, or other financial information) Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies) Biometric information Internet or other electronic network activity information Geolocation data Professional or employment-related information Inferences drawn from other Personal Information (e.g., profile reflecting your preferences, characteristics, and behavior) 2. Collection of Personal Information CoStar may collect Personal Information using the following methods: Directly from you when you provide it to us (information you enter into web forms, participation in phone calls or video conferences, subscription agreements, and contracts or submit to the Services) Through your participation in surveys, promotions, and contests CoStar’s internal customer relationship management system and databases From third parties, such as analytics and email marketing service providers Researching or scraping public websites where permitted by the Terms of Use (company websites, search engines, social media) Automatically through tracking technologies (cookies, web beacons, log files), including over time and across third-party websites or other online services For more information about how we use Personal Information collected through tracking technologies and the ways you may be able to manage it, see Use of Personal Information, our Cookie Policy, and Manage Your Personal Information. Service-Specific CoStar Email Advertising Products Auction Marketing, First Rate, Investment Development and Third Party Advertising: We collect Personal Information from individuals whose details are on our Propex and Shopproperty database and who are most likely to be either a commercial or private investor. Secondary Corporate Marketing: We collect Personal Information from individuals whose details are on our Shopproperty or Propex databases. Weekly Property Marketing: We collect Personal Information from individuals whose details are on our Propex database and who are most likely to be either a commercial or private investor. Retail: We collect Personal Information from individuals whose details are on our Shopproperty database and who will be either commercial or private individuals. Privacy practices related to the Shopproperty marketplace are detailed in the Marketplace Global Privacy Notice. CoStar Information and Analytics We may additionally collect Personal Information in the following ways specific to CoStar Information and Analytics: Extracting information from past registrations to CoStar News For Personal Information about a Listing Broker, through agents, owners, property managers, developers, asset managers and architects; from clients or other contacts (including, among others, admins, colleagues, joint agent's brochures) with updated contact information; search engine searches; or from a listing Broker’s website For Personal Information about corporate tenants and landlords, from corporate tenants, landlords, building managers, front desk/concierge, and neighboring tenants; LinkedIn or other social media (business Facebook page, Twitter); paid third-party providers; public and freely accessible databases such as state websites; published agent investment brochures and tenancy schedules; search engine searches; or from a corporate tenant’s or landlord’s website Thomas Daily We may additionally collect Personal Information in the following ways specific to Thomas Daily: Directories in cities affected by market surveys From our field-hosted database, TD Base, from lists in our email marketing software MAILEON, Salesforce, and CMS WordPress Through the tracking tool PIWIK to get more information about the user behavior in connection with TD Premium Our third-party email marketing service will provide email address, opening rate, clicks, click through rate, bounce rate, user agent, browser, IP address, timestamp, and desired download for email marketing detected Biometric and Geolocation Information Some areas of CoStar Services may require you to opt-in to CoStar collecting photos, facial geometry, and geolocation information from you when you log in to certain CoStar Services. This information is used to authenticate you as the user of such Services, maintain a secure session, and detect potential abuse and fraudulent use of the Services. For example, CoStar may scan and analyze a photo you submit to the Services to confirm your identity for security purposes each time you access the Services by using facial recognition technology to compare your photo to the most recent photo uploaded to your account. CoStar will securely store this information on servers located in the United States, and this information will only be accessed by authorized CoStar employees. We will retain biometric information until the initial purpose for collecting or obtaining such information has been satisfied or within three years, whichever occurs first. If you have questions regarding CoStar’s use of biometric or geolocation information, please Contact Us. Children Under 13 CoStar websites are not intended for children under 13 years of age, and we do not knowingly collect Personal Information from children under 13. If you are under 13, do not use or provide any information on this website or through any of its features, register, or make any purchases. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete it. If you believe we might have any Personal Information from or about a child under 13, please Contact Us. California Residents CoStar collects Personal Information from the following categories of sources: Directly and indirectly from you Other CoStar customers Service providers Consumer reporting agencies Companies with public websites Government entities European Economic Area (EEA) and United Kingdom Residents Where we need to collect Personal Information by law or under the terms of a contract we have with you and you fail to provide that information when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a product or service you have with us but will notify you first. 3. Use of Personal Information We may use your Personal Information for the following purposes: Communicating with you Providing you with the Services Authenticating use, detecting potential fraudulent use, and otherwise maintaining the security of the Services Developing, testing, improving, and demonstrating the Services Creating and maintaining a customer relationship management system, member directories, and invitation lists for CoStar events Carrying out our legal and contractual obligations and enforcing our rights, including billing and payment processing Anonymizing and aggregating information for analytics and reporting Advertising, marketing, and selling the Services, including linking together or merging Personal Information with other Personal Information so that we may better understand your needs and inform you about our Services and those of our partners Short-term transient use Any other purpose with your consent Service-Specific CoStar Information and Analytics We may use Personal Information for the following additional purposes in connection with Costar Information and Analytics products: Populating and updating email lists for CoStar News Advising clients of CoStar product enhancements and improvements Contacting Listing Brokers to collect listing, deal and other industry data on a monthly basis Entering details into CoStar® where those details can be viewed by our subscriber base and used for marketing purposes (Personal Information may appear in the Professional Directory™, appear in the DealMakers™ section, or be attached to specific and relevant building and transactional records in CoStar®) Identifying trends, aggregating statistics, optimizing your use of the Services and providing a safer environment for purchasing in connection with your use of CoStar Property Professional®, CoStar COMPS Professional®, CoStar Tenant®, CoStar Suite® with Market Analytics, CoStar Go®, CoStar Lease Analysis®, CoStar Lease Comps™ through Google Analytics Training and quality assurance CoStar Brokerage Applications/CoStar Private Sale Network Through CoStar Brokerage Applications and CoStar Private Sale Network, CoStar stores information uploaded and entered into the applications by CoStar customers for their own purposes (property records, tax documents, property and prospect contacts, listings, deal/lease information, free form notes, etc.) on behalf of CoStar’s customers as a data processor. We do not use this information in any way for our own purposes. CoStar Real Estate Manager CoStar does not use Personal Information of CoStar’s customers’ own customers collected within the CoStar Real Estate Manager application. However, CoStar collects business contact information through an agreement with service providers that resell, implement, support, and perform managed services, such as lease administration, for the Services. We use this information for the purpose of interacting with current and prospective clients, tracking engagement, and for customer support activities. Thomas Daily We may also use Personal Information to create and expand investor profiles in TD Premium. Online Advertising When you use the Services, we and third parties may use cookies and other tracking technologies to collect information, including Personal Information, to help us target content to you on the Services or elsewhere. This information may be associated with other information or combined with information from other sources, including information these third parties might track about your online activities over time and across the Internet. Third parties use this information to provide interest-based display advertising and retargeting on our behalf, which may include placing our advertisements on other websites you visit, including your social media accounts, or matching a cookie or device ID to your email address so we can send you promotional emails that may be of interest to you. To make informed choices about targeted advertising, see our Cookie Policy and Manage Your Personal Information. European Economic Area (EEA) and United Kingdom Residents We rely on the following lawful bases to process your Personal Information for these non-exhaustive purposes: Consent We may obtain your consent to process your Personal Information in certain circumstances, which may include when we send you relevant marketing, you elect to receive information from us, or you contact us to register an interest in our Services or company. We may also rely upon our legitimate interest in developing our business as a basis for sending you marketing information and information about our Services (see below). Performance of a Contract We rely on this lawful processing ground when we process your Personal Information to perform a contract which we have with you, or when we take steps in anticipation of entering into a contract with you, for example in connection with the provision of our Services to you and the management of our relationships with third parties. Compliance with a Legal Obligation We rely on this lawful processing ground when we process your Personal Information to meet legal and regulatory obligations which apply to us. Legitimate Interests We rely on this lawful processing ground when we process your Personal Information to provide our Services, to respond to specific requests, to manage our business operations, to manage our relationships with you and with third parties in connection with our business, and when we provide you with marketing information or other information in relation to our Services which we believe may interest you. If you wish to have more information regarding the legitimate interests assessments we have conducted in order to reach these conclusions, please Contact Us. 4. Disclosure of Personal Information We may disclose Personal Information: To affiliates and other entities within CoStar’s group of companies, distribution partners, other CoStar customers, and service providers To third parties when you use a third party feature in our Services To enforce or apply our Terms of Use and other agreements or comply with any court order, law, or legal process, including government or regulatory requests To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CoStar’s assets If we believe it is necessary to protect the rights, property, or safety of CoStar or others For any other purpose disclosed by us when you provide Personal Information With your consent, such as when you choose to provide your information to third parties We may also disclose de-identified information without restriction. Note that if you make any Personal Information publicly available on the Services, anyone may see and use such information. Service-Specific Emporis If a third party purchases an image provided by a Community Member, we may pass the relevant Community Member’s name to that purchaser, so that the purchaser can properly attribute the Community Member when using the image. Service Providers CoStar retains third party service providers to assist us in our business. For example, we use service providers to assist with analytics, email marketing, payment processing, customer relationship management, and IT infrastructure and support. CoStar may permit these affiliates and service providers to access your Personal Information in order to assist us in providing services; however, we contractually require these third parties to keep Personal Information confidential and use it only for the purposes for which we disclose it to them. California Residents CoStar shares Personal Information with the following categories of third parties and has disclosed the following categories of Personal Information for a business or commercial purpose in the 12 months preceding the date this Global Privacy notice was last modified: Personal Information Third Parties Identifiers Service providers, including data analytics and advertising providers, operating systems and platforms, social networks, other CoStar customers Categories of personal information described in California Civil Code §1798.80(e) Service providers, other CoStar customers Commercial information Affiliates, distribution partners, other CoStar customers Biometric information Facial recognition software provider Internet or other electronic network activity information Service providers, including data analytics and advertising providers Geolocation data Service providers Professional or employment-related information Service providers, other CoStar customers Inferences Service providers, including data analytics and advertising providers CoStar may also sell certain Personal Information. In the 12 months preceding the date this Global Privacy Notice was last modified, CoStar sold: Identifiers (e.g., IP address and other online identifiers) and Internet or other electronic network activity information to advertising providers for the purpose of advertising its Services Identifiers (e.g., name, email address), categories of personal information described in California Civil Code §1798.80(e) (phone number), and professional information (e.g., name, title, email address, business address) to other CoStar customers for the purpose of making business contact information available through the Professional Directory feature 5. International Transfer of Personal Information CoStar is a global business. We may transfer your Personal Information to the United States, where we are headquartered, and to other countries which may not have the same privacy laws as the country in which you initially provided the information, but we will protect your Personal Information in accordance with this Global Privacy Notice, or as otherwise disclosed to you. European Economic Area (EEA) and United Kingdom Residents If you live in the EEA or the United Kingdom, we may transfer Personal Information to countries for which adequacy decisions have been issued, use contractual protections for the transfer of Personal Information to third parties, such as an intra-company agreement or the European Commission’s Standard Contractual Clauses or their equivalent under applicable law. You may Contact Us to obtain a copy of the safeguards we use to transfer Personal Information outside of the EEA or the United Kingdom. 6. Security of Personal Information CoStar implements security safeguards to protect your Personal Information. We take steps to secure Personal Information through administrative, technical and physical safeguards designed to protect against the risk of accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. For example, we encrypt payment card information in accordance with the Payment Card Industry Data Security Standard (PCI DSS) and store sensitive information such as biometric and geolocation data on CoStar servers located in the United States with access limited to authorized CoStar employees. Unfortunately, we cannot guarantee the security of information transmitted through the Internet, and where we have given you (or where you have chosen) a password, you are responsible for keeping this password confidential. 7. Retention of Personal Information CoStar generally retains records only as long as necessary and as required for our business operations, for archival purposes, and/or to satisfy legal requirements. When determining the appropriate retention period for Personal Information, we take into account various criteria, such as the amount, nature and sensitivity of the Personal Information; potential risk of harm from unauthorized use or disclosure; purposes for which we process your Personal Information; whether we can achieve those purposes through other means; and business operations and legal requirements. Because we maintain our applications and websites to protect from accidental or malicious loss and destruction, residual copies of your Personal Information may be retained in our backup and archival systems for a limited period of time, after which the information will be automatically deleted or put beyond use where deletion is not possible. 8. Manage Your Personal Information You may manage your Personal Information by making certain choices. If you believe that any Personal Information you have provided to us is out-of-date or inaccurate, you may review and correct such information if it is within your online account by logging in at any time or Contact Us. You may also have additional rights detailed below depending on where you live. As a security precaution, we may need to request information from you to help us confirm your identity when exercising a right related to your Personal Information. Direct Marketing Opt-Out If you no longer wish to receive direct marketing emails from CoStar, you may click the “Unsubscribe” link in an email at any time. Depending on the Services, you may also be able to manage notification preferences in your account. Note that CoStar may still contact you in connection with providing you Services you have requested from us. Tracking/Online Advertising Opt-Out You may disable or delete browser cookies through your browser settings. Cookies are generally easy to disable or delete, but the method varies between browsers. To learn how you can manage Flash cookies, visit Adobe’s Flash player settings page. Flash player settings page. If you disable or delete cookies, or if you are running third-party software that intercepts or deletes cookies, please note that some parts of our websites may not work properly. You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative’s (NAI) opt-out page and the Digital Advertising Alliance’s (DAA) opt-out page and in the EEA and United Kingdom by visiting The Programme’s opt-out page. California Residents If you live in California, you have the right to: (1) request that CoStar disclose what Personal Information we collect, use, disclose, and sell; (2) request deletion of Personal Information; (3) opt-out of the sale of Personal Information; and (4) not receive discriminatory treatment by CoStar for exercising these rights. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. To make a request on your behalf, an authorized agent may Contact Us by email with proof of your written and signed permission to do so. Note that CoStar may also require you to verify your identity and confirm that you gave permission. Requests to Know You have the right to request that we disclose the following information: Specific pieces of Personal Information CoStar has collected about you; Categories of Personal Information CoStar has collected about you, disclosed about you for a business purpose, or sold; Categories of sources from which the Personal Information is collected; Categories of third parties with whom CoStar shares or to whom CoStar sells Personal Information; and The business or commercial purpose for collecting and selling Personal Information. To make such a request, please Contact Us by email, call us toll-free at (800) 204-5960, or submit the request through your CoStar account or our applicable web form. In order to verify your request, CoStar may require you to provide additional information to confirm the identity of the consumer. Requests to Delete You have the right to request that we delete Personal Information about you that we collected and maintain, subject to certain exceptions. To make such a request, please Contact Us by email, call us toll-free at (800) 204-5960, or submit the request through your CoStar account or our applicable web form. In order to verify your request, CoStar may require to provide additional information to confirm the identity of the consumer. Once we verify your request, we will delete and direct our service providers to delete your Personal Information, unless an exception applies. Opt-Out of the Sale of Personal Information You have the right to opt-out of the sale of your Personal Information. To make such a request, please Contact Us by email or visit Do Not Sell My Personal Information. To opt-out of CoStar sharing your Personal Information with third parties to advertise our Services, please additionally manage Tracking/Online Advertising Opt-Out privacy controls. Please click here for statistics relating to California Consumer Privacy Act requests received by CoStar brands under this Global Privacy Notice in the prior calendar year. “Shine the Light” Request California residents may also have the right to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please Contact Us. Nevada Residents Nevada residents may have the right to opt-out of the sale of Personal Information we have collected or will collect. To make such a request, please Contact Us. European Economic Area (EEA) and United Kingdom Residents If you live in the EEA or the United Kingdom, you may have the right to (1) request access to, rectification, or erasure of your Personal Information or restrict the processing of your Personal Information; (2) object to processing; (3) data portability (receive and transfer your Personal Information); (4) lodge a complaint with a supervisory authority; and, (5) where processing of your Personal Information is based on consent, withdraw your consent at any time without affecting the lawfulness of the processing of Personal Information that occurred before you withdraw consent. To make such a request, please Contact Us. 9. Global Policy Changes This Global Privacy Notice may be updated periodically to reflect changes in our privacy practices. We will post changes on this page and identify the date the privacy notice was last revised at the top of the page. If we make material changes to our privacy practices, we will notify you through a notice on the home page of the websites covered by this Global Privacy Notice. If a material change will apply to Personal Information we have already collected, we will additionally seek your affirmative consent. 10. Contact Us We have appointed a Privacy Officer and Data Protection Officer to investigate and respond to privacy issues and to be accountable for our compliance with this Global Privacy Notice. Please submit questions, concerns, or requests to exercise your applicable rights to CoStar by email to CoStarPrivacy1@costar.com. If you live in the EEA or the United Kingdom, CoStar UK Limited is the entity responsible for the processing of your Personal Information. Please submit questions, concerns, or requests to exercise your applicable rights by email to CoStarUKPrivacy1@costar.co.uk or write to: CoStar UK Limited 26th Floor, The Shard, 32 London Bridge Street, London SE1 9SG, United Kingdom You may also make a complaint to your local data protection authority. Get In Touch sales@costar.com 888-226-7404 Request a Demo Company About CoStar CoStarGroup.com Careers Press Room Privacy Notice CA: Do Not Sell My Personal Info Term of Use Help Fight Data Theft Accessibility Contact Us Products CoStar CoStar Comps CoStar Tenant CoStar Public Record CoStar Market Analytics CoStar Lease Analytics CoStar Mobile CoStar Investment Analysis CoStar Real Estate Manager CoStar Lease Accounting CoStar Private Sale Network CoStar Advisory Services CoStar Brokerage Applications CoStar Risk Analytics Social © 2021 CoStar Group