Privacy Notice

We are the Mountpark Group ("Mountpark"). We are a developer of logistics and industrial property, working with customers across the UK and Europe. The entities which are controllers of your personal data are listed in the section "How do you contact us" below. The relevant Mountpark entity which will be a controller of your personal data will be the Mountpark company which you have a relationship with.

We are committed to protecting the privacy of our business customers. We want to provide a safe and secure environment where we deal with your personal information. This means information that identifies individuals within our business customers' organisations as well as individuals who work for or on behalf of our agents, suppliers, consultants, advisors and partners such as your name, photo or contact details or data that can be linked with such information in order to identify you. Please take the time to read this privacy notice as it explains how we collect, use and store your personal information, and the rights you have in relation to the protection of your personal information.

If, at any time, you have any concern about how your personal information is being processed by us, please let us know at info@mountpark.com.

• What personal information do we collect about you?
• How do we use your personal information?
• How long do we keep your personal information for?
• Who do we share your personal information with?
• What happens if you do not provide us with the information we request?
• Do we make automated decisions concerning you?
• Do we transfer your personal information outside the EEA?
• What are your rights?
• How do we contact you?
• How do you contact us?

We collect and use many different kinds of personal information to provide our products and services. The personal information we may collect about you is listed below so you can see what we may know about you.

Business Contact Details: Your name, designation, department, name of organization and how to contact you.

Communications: What we learn about you from communications and conversations between us and your dealings with us on behalf of yourself or our relevant business customer, supplier, partner or agent.

Usage: Usage data about how you use our website and services.

Technical: Details on the devices and technology you use including IP address, number of visits and time spent on the website.

Contractual data: Details about any products or services that we may provide for you.

Generally, we collect and process your information in the following ways:

Information you give us

• When you become a supplier, customer, developer or service provider to us.
• When you respond to any requests for proposals or other tender opportunities.
• When you talk to us on the phone or in person, including recording calls and notes we may make.
• When you use our websites, including completing 'contact us' forms on our website.
• If you complete any of our customer surveys.
• In your correspondence with us.
• If you take part in our competitions and promotions.
• If you sign up to any of our newsletters or mailing lists.

Information we collect automatically when you use our services

• Profile and usage data. This includes:
• your IP address;
• your settings and marketing choices;
• data we gather from devices you use to connect to our online services; and
• data we gather from cookies we use and other internet tracking software whilst you are using our website (including on a mobile device). [For more information please refer to our cookie policy.]

Information we receive from third parties

• Companies that introduce you to us.
• Agents, suppliers, developers, sub-contractors and advisers.
• Public information sources.

We collect and process your personal information for several purposes. The law states that for each purpose we must explain to you what legal grounds we are using to justify our processing. Where we process your personal information we will have one of more of the following reasons:

• To provide a requested service or carry out a contract with you.
• Where we have a legal obligation.
• Where we have a legitimate interest.
• Where we have your consent.

When we have a business or commercial reason of our own to use your personal information, this is called a "legitimate interest". Where we rely on legitimate interest for processing your information, we carry out a 'balancing test' to ensure that our processing is necessary and that your fundamental rights of privacy are not outweighed by our legitimate interests, before we go ahead with such processing.

Here are the legal grounds for processing your personal information that are relevant to us:

To provide a requested service or carry out a contract with you.

• To manage our relationship and communicate with you.
• To authenticate the identity of individuals contacting us by telephone, electronic means or otherwise.
• To administer and manage your contact details and associated services including updating your records.
• To manage how we work with other companies that provide services to us and our business customers.
• To manage fees, charges and interest related to business customers.
• To exercise our rights set out in agreements and contracts.

Where we have a legal obligation

• To comply with laws and regulations that apply to us.
• To establish, defend and enforce our legal rights.
• To deal with requests from you to exercise your rights under data protection laws.

Where we have a legitimate interest

• To manage our relationship with your business.
• For internal training and quality assurance purposes.
• To administer and manage your contact details and other information we hold about you.
• To test the performance of our products, services and internal processes.
• To manage and audit our business operations including accounting.
• To collect and recover money that is owed to us.
• To run our business in an efficient and proper way. This includes managing our financial position, business capability and governance requirements.
• To study how our business customers use services from us and other organisations.

Where we have your consent

• We may also from time to time ask you for your consent for other purposes, which we will explain to you at the time.

We will not collect or use personal information that is considered by the law as special without your consent, unless the law allows us to do so. If we do, it will only be when it is necessary: (1) for reasons of substantial public interest, or (2) to establish, exercise or defend legal claims.

We may use your personal information to send you updates and information (including via our third party service providers who assist with managing our marketing communications) about, for example, organising events, promoting business, informing of new business offerings, purchases of new sites.

We have a legitimate interest in processing your personal information for promotional purposes (see above 'How do we use your personal information'). This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.

You have the right to opt out of receiving promotional communications at any time by contacting us at info@mountpark.com.

We may ask you to confirm or update your marketing preferences if you instruct us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.

We will keep your personal information for a reasonable period after you provide us with it and while we are providing services to you. Thereafter, we will keep your personal information for as long as is necessary:

• to respond to any questions, complaints or claims made by you or on your behalf;
• to show that we treated you fairly;
• to keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this policy.Different retention periods apply for different types of personal information.

When it is no longer necessary to retain your personal information, we will delete or anonymise it.

We may share your personal information with other parties in order to provide you with our services, run our business and comply with rules that apply to us. These include the following:

We may share your personal information within the Mountpark Group primarily for business and operational purposes. As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us your personal information will be disclosed to such entity. Also, if any bankruptcy or reorganisation proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible they will be sold or transferred to third parties.

We may share your personal information with third parties who perform functions on our behalf and who also provide services to us, such as developers, sub-contractors, our service providers, professional advisors and IT consultants. These third parties are required to comply with appropriate privacy and confidentiality obligations.

We may share your personal information to our appointed representatives in connection with a contracted transaction between you and us, including solicitors and accountants. These third parties are required to comply with appropriate privacy and confidentiality obligations.

We may also share your personal information with the following organisations:

• Agents and advisers who we use to help run our business, collect what you owe and explore new ways of doing business.
• Companies that introduce you to us.
• Companies that we introduce you to.
• Companies you ask us to share your data with.

Where required we may also share your personal information with third parties to comply with a legal obligation; when we believe in good faith that an applicable law requires it; at the request of governmental authorities conducting an investigation; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to the our website, our business or the public.

If you do not provide the personal information necessary, or withdraw your consent for the processing of your personal information, where this information is necessary for us to provide services to you, we will not be able to provide these services to you.

No, we do not carry out automated decision making.

To provide better service to you on our websites, we use cookies to collect your personal data when you browse. See our cookie policy here for more details.

We may transfer your personal information between our Mountpark Group companies, which includes USAA Real Estate Co, located in the United States. When we transfer your personal information outside of the EEA, we will make sure that it is protected to the same extent as in the EEA, as we will put in place appropriate safeguards to protect your personal data, which may include standard contractual clauses (for more information, see: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).

If we otherwise transfer your personal information outside the EEA, we'll use one of these safeguards:

• Transfer it to a non-EEA country with privacy laws that give the same protection as the EEA.
• Put in place appropriate safeguards to protect your personal data, which may include standard contractual clauses (for more information, see: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).

By law, you have a number of rights when it comes to your personal information. Please contact us using the contact details below to exercise any of your rights. Further information and advice about your rights can be obtained from the data protection regulator in your country.

1. The right to object to processing
   You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
2. The right to be informed
   You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we're providing you with the information in this privacy notice.
3. The right of access
   You have the right to obtain access to your information (if we're processing it), and certain other information (similar to that provided in this privacy notice). This is so you're aware and can check that we're using your information in accordance with data protection law.
4. The right to rectification
   You are entitled to have your information corrected if it's inaccurate or incomplete.
5. The right to erasure
   This is also known as 'the right to be forgotten' and, in simple terms, enables you to request the deletion or removal of your information where there's no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
6. The right to restrict processing
   You have rights to 'block' or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be 'blocked' to make sure the restriction is respected in future.
7. The right to data portability
   You have rights to obtain and reuse your personal information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
8. The right to lodge a complaint
   You have the right to lodge a complaint about the way we handle or process your personal information with your national data protection regulator.
9. The right to withdraw consent
   If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal information for marketing purposes.

We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:

• baseless or excessive/repeated requests, or
• further copies of the same information.

Alternatively, we may be entitled to refuse to act on the request.

Please consider your request responsibly before submitting it. We'll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we'll come back to you and let you know.

We may contact you by phone or email. If you prefer a particular contact means over another please just let us know.

If you have any questions about this privacy notice, or would like to exercise any of your rights, please contact us by writing to us at the address below:

Mountpark Properties Limited
Vishnu Reddy (General Counsel)
info@mountpark.com
22-23 Old Burlington Street, London, W1S 2JJ

If you are unhappy about any aspect of the way we collect, share or use your personal information, please let us know using the contact details above.

You also have a right to complain to the relevant regulator for data protection.

The "Mountpark Group" comprises of the following Mountpark companies:

Mountpark Realco Cooperatief NL UA, a Dutch Cooperative (cooperatie) registered with the Dutch trade register under number 74132415 and registered office at WTC Amsterdam Tower H, Zuidplein 94, 1077XV Amsterdam NL 1077 XV, The Netherlands;

Mountpark Properties Limited, registered in England with company number 07739703 and registered office at 22-23 Old Burlington Street, London, W1S 2JJ;

Mountpark Properties SAS, registered in France with company number 821659497 and registered office at 12, Avenue de la Grande Armée 75 017 Paris France;

Mountpark Properties Sarl, registered in Luxembourg with company number B231439 and registered office at 18, Rue Robert Stumper L – 2557 Luxembourg;

Mountpark Properties SL, registered in Spain with company number B87673653 and registered office at 42 Cardenal Marcelo Spinola (12th Floor) 28016 Madrid;

Mountpark Properties SP Zoo, registered in Poland with company number 0000401866 and registered office at Burakowska 5/7, Warsaw 01-066;

Mountpark Properties Czech Republic S.r.o, registered in the Czech Republic with company number 8678880 and registered office at Na Porici 1079/3a, Nove Mesto, Praha 1.

Our affiliate, USAA Real Estate Co, registered in Delaware with company number 7824506 and registered office at 9830 Colonnade Blvd, Ste 600, San Antonio, Texas 78230 is also a controller of your personal data and its privacy notice can be found on its website.

We may need to make changes to this privacy notice at any time. If we make any material change to how we collect your personal information, or how we use or share it, we will update the privacy notice on our website.