Privacy Notice

Colony Capital S.A.S firmly believes that trust is key for developing successful and lasting relationships. In this respect, the protection of your personal data and privacy is no exception.

Colony Capital S.A.S. puts great emphasis on collecting and processing your personal data with utmost care and in compliance with the General Data protection regulation (GDPR).

In order to inform you in the most transparent manner, Colony Capital S.A.S. has prepared the privacy policy below, which explains in detail why and how your personal data is processed when you browse this website.

Scope and Purpose of this Privacy Policy

This privacy policy (hereinafter the “Privacy Policy”) is intended to inform you, as a user of the Colony website www.colony-im.com (hereinafter the “Website”), about the way Colony Capital S.A.S. (hereinafter “Colony”) processes information enabling us to identify you either directly or indirectly (hereinafter “Personal Data”) in the context of your use of the Website.


Categories of personal data processed and purposes of processing

Colony collects and processes your Personal Data for managing and following up any questions and/or requests you may submit. As such, please note that this processing is only carried out in the event you submit a question and/or request. Otherwise, your Personal Data is not processed for this purpose.

While processing your Personal Data for this purpose, Colony relies on its legitimate interest, which consists in duly managing its relationships with you.

Colony would like to understand how users interact with its Website, it needs to process various browsing information resulting from cookies which qualify as Personal Data. Thus, the second category of processing Colony carries out with your Personal Data is the performance of analytic operations related to any Website traffic and use.

In this respect, the legal basis Colony relies upon is its legitimate interest which consists in: (i) better understanding the way its Website is browsed by users (including you); and (ii) improving the Website where needed.

In any event, and disregarding the processing purpose at stake, please note that Colony will comply with a strict data minimisation principle and will thus only collect and process Personal Data which is necessary for the above purposes.

In order to manage your questions/requests, the provision of your Personal Data is a contractual requirement. In this respect, sharing your Personal Data with Colony is thus mandatory, otherwise Colony will not be able to address your questions/requests.

This Privacy Policy may be updated periodically to reflect changes in our personal information practices. We will post a prominent notice on our website to notify you of any significant changes to our Privacy Policy and indicate at the top of the notice when it was most recently updated.


Data Recipients

To perform the analytic operations regarding your use of the Website, Colony relies on the services of Beam, to access and process your Personal Data resulting from the use of cookies.

To the extent this is necessary, Colony also communicates your Personal Data to other entities of the Colony group (e.g. the question you submitted to Colony actually concerns another entity of the Colony group and the latter will thus contact you directly to answer your question if relevant).

In any event, Colony communicates your Personal Data to the above recipients on a strict need-to-know basis and only as necessary for fulfilling duly identified processing purposes.


Record-keeping

The data retention period implemented by Colony depends upon the processing purpose as detailed below and any regulatory obligations.

With respect to the management of your questions and/or requests, Colony will not retain your Personal Data for more than five (5) years following Your last contact .

The Personal Data processed by Colony or on its behalf for performing analytic operations shall not be retained by Colony after the analytic operations are finalized and the corresponding reports/summaries are completed.

When the applicable retention period expires, Colony deletes your Personal data..


Your choices

Under the data protection laws, you benefit from various rights regarding the processing of your Personal Data. These are as follows:

  • Right to request from Colony restriction of the processing concerning you;
  • Right to object to the processing of your Personal Data;
  • Right to portability of your Personal Data;
  • Right to specify guidelines regarding the use of your Personal Data after your death;
  • Right to lodge a complaint with the French Data Protection Authority (CNIL, www.cnil.fr).

In addition, in the event you would provide Colony with information enabling  us to identify directly or indirectly any other natural persons (e.g. you sent a request to Colony with the contact email address available on the Website and share personal data concerning another natural personal in your email), you represent and warrant that, prior to sharing this information with Colony, such other natural persons have been provided with this Privacy Policy and, to the extent applicable, have consented to the processing of their data.


Contact Us

Should you have any questions or requests regarding the processing of your Personal Data by Colony, including the exercise of your rights specified in Your Choices section above, please feel free to contact Colony by using the following contact details: Colony Capital, Data Protection, 6 Rue Christophe Colomb, 75008 Paris - communication@colony-im.com