This Privacy Notice aims to help you understand what, why, and how we gather and process your data, alongside your legal rights. We encourage you to read this document thoroughly. We will inform you of any future changes to our data processing practices.
Techspace Group Ltd takes its responsibility for protecting your data very seriously. If you have any questions or concerns about this policy, please contact us using the details provided below.
The legal basis for data processing is Art. 6 para. 1 a) and Art. 7 GDPR for consent, Art. 6 para. 1 b) GDPR for performance of services and performance of contractual obligations, Art. 6 para. 1 c) GDPR for compliance with legal obligations and Art. 6 para. 1 f) GDPR for the purpose of legitimate interests.
Who Are We?
Techspace Group Ltd, a Private Limited Company in England and Wales, located at 25 Luke Street, London EC2A 4DS, Company number 09310488, referred to as “we” in this document, is the responsible entity for your data under Art. 4 Para. 7 GDPR.
Personal Data We Use
Techspace Property Group Ltd will only ever ask for personal data if it is required for a specific purpose; with that in mind we have created a full list of all the kinds of personal data that we may ask you to provide in order to achieve those purposes. The kinds of personal data we may collect are:
Subscribers and prospects
Visitors to our premises
Temporary or agency staff, volunteers and interns
Professional contacts and suppliers
Subcontractors and permit holders
Visitors to our website
Non-members attending events of using facilities
Name, phone, email, usernames, job title, role function, seniority
Name, address, phone, email, usernames, bank details
Name, address, email
Name, address, phone, email
Email (if using the contact form)
In addition, when visiting our website, we collect non-identifiable data like session information (cookies), IP addresses, and accessed content (server log files).
Why We Collect Personal Data
We will use personal data firstly to fulfil any contractual obligations that exist between us and yourself; where we request personal data be provided to meet the terms of any such contract you will be required to provide the relevant personal data or we will not be able to deliver the goods and/or services you want. In such cases the lawful basis of us processing the personal data is that it is necessary for the performance of a contract.
We may also process your personal data in accordance with our legitimate business interests; this is on the considered measure that we need the personal data to achieve the various purposes and that it could be reasonable for an individual to expect their data to be used for those purposes.
Our data processing activities conducted on the lawful basis of ‘legitimate interests’ are:
- To provide you with goods and services you are looking for
- To inform you of other goods and services we provide, or offers that may interest you (direct marketing)
- To send notifications on subjects you have subscribed to, or otherwise asked us to keep you informed of
- To improve the quality of the services we offer, and to better understand our customers’ needs by requesting feedback, or requesting you review the services we have provided, or we may send survey forms that we ask you to complete
- To notify you of any changes to the goods and/or services we provide, or have provided, that may affect you
- To allow us to understand the scale and range of our customer base; for statistical analysis and market research
- To allow us to support and maintain our products in active service
- To enhance the security measures in place that protect data we are responsible for
- To protect the company’s assets
In relation to visitors to our website:
* Server log files and cookies
* Contact form
The contact form allows you to easily contact us. The collection of your email address is essential in order to answer your request. If, in addition, data is processed, such as name, address or the like, processing serves to individualise the respective user and to be able to respond to their request in the best possible way and to prevent any misuse of the contact form.
* Contact us
The processing of your email address is essential in order to answer your request. If, in addition, data is processed, such as name, address or the like, processing serves to individualise the respective user and to be able to respond to their request in the best possible way.
* Members area / User account
The creation of a user account is necessary in order to be able to use of some of the services offered by us.
We may also process your personal data in order for Techspace Group Ltd to comply with our various legal obligations; this might include:
- Providing for financial commitments between us and yourself, or to relevant financial authorities
- Carrying out required business operations and due diligence; e.g. administration, security, reorganisations, investment or corporate/asset sales
- Cooperating with relevant authorities for reporting criminal activity, or to detect and prevent fraud
- To investigate any insurance claims, claims of unfair dismissal, claims of any kind of harassment or of discrimination, or any other claim whereby we may have to defend ourselves.
Other than collecting data directly from you, we source personal data from some publicly accessible sources such as Companies House, LinkedIn and Crunchbase. We may also gather personal data from sources including:
- Technical sources that gather data over time when you visit our online platforms
- From third party organisations, which can mean your personal data has been provided directly by another company for a specific purpose, or where you may have accessed our platforms through a third party online service
Who Your Data Might Be Shared With
We may share your personal data with the other members of our group of companies, which includes any subsidiary or the holding company (each as defined by the Companies Act 2006) of Techspace Group Ltd. In order to achieve the above stated purposes for which we process your personal data, we may need to share your personal data with various third-party service providers who act as data processors.
If we commission third parties to process data on the basis of a so-called "Data Processing Agreement", this is done on the basis of Art. 28 GDPR. For their part, the third parties are obliged to comply with the statutory provisions when handling and processing this data.
We may share your personal data with third party organisations acting as data controllers or with specific individuals, groups or other organisations who act as neither data controllers nor data processors, but only where we are either legally require to do so by law or where doing so is necessary to achieve the intended stated purpose of processing the dataIn the event that we sell or reorganise our business, or if otherwise required by law or by an authorised regulator, we may transfer your personal data as a part of the general business data to the relevant parties.
Personal data will not be passed on outside the scope described here without express consent. Under no circumstances will we sell or rent personal data to third parties.We would like to expressly draw your attention to the following third-party providers whose services we use in the context of operating our website:
- Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google")
- Youtube, LLC, subsidiary of Google Inc., 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube")
- Twitter Inc., 1355 Market Street, San Francisco, CA 94103, USA ("Twitter")
- Newrelic Inc., 188 Spear Street, Suite 1200, San Francisco, CA 94105, USA ("Newrelic")
We expressly point out that we ourselves have no influence on the extent of the data collected by these companies. We must therefore rely on the data use guidelines of the respective companies with regard to data protection, on which the following clarification is based.
Please inform yourself about the purpose and scope of the data collection as well as your related rights and setting options for the protection of your privacy at the companies. We have listed the links to the data protection declarations below.
It is possible that a third party provider is located in a third country, i.e. a country in which the GDPR has no direct legal effect. In this case, data will only be transmitted if you have given your consent, if an appropriate level of data protection prevails or if other legal permission exists.
Google, YouTube, Twitter and Newrelic operate under the Privacy Shield Agreement, which means that the requirements of the Privacy Shield Agreement are equivalent to the level of data protection in the European Union and that the data is treated accordingly. You will find information on possible data protection effects of the buttons below as well as information on further links.
This website uses Google Analytics, a web analysis service of Google. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. Information such as operating system, browser, IP address, referrer URL is stored. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. Google will not associate your IP address with any other data held by Google.
Google Maps / Google Earth
Online Presence / Company Profile in Social Media
We have online presences on various social media and platforms, e.g. Facebook, Twitter, Instagram, LinkedIn. This simplifies the search for our products for interested parties and provides an additional channel of communication.
The purpose of the processing of user data by the respective social media and platforms is usually user-specific advertising, i.e. individualised advertising can be placed which corresponds to the presumed interests of the user or results from his previous usage behaviour. For this purpose, cookies are stored on the user's end devices. These cookies can store the usage behaviour and thus represent the areas of interest.
The headquarters of a social medium or platform may be located in a third country, i.e. a country in which the GDPR has no direct legal effect. In this case, the transmission of data will only take place if your consent is given, if an appropriate level of data protection prevails or if another legal permission exists. US providers may operate under the Privacy Shield Agreement, which means that the requirements of the Privacy Shield Agreement are the same as those of the European Union and that the data will be treated accordingly.
We would like to make it clear that users should contact the respective third party providers directly in the case of requests for information and/or the assertion of other rights of those concerned. They have access rights to the user's data stored and processed there and can provide information and/or take appropriate measures. If you contact us directly, we will try to support your request in the best possible way. However, as we have no access to the data stored by third parties, our scope for action is limited.Please inform yourself about the principles of data processing of the respective companies on the basis of the corresponding data protection declarations.
Where Your Data Is Stored
Techspace Group Ltd will not transfer your personal data to any country outside the European Union (EU) other than those that have been granted an adequacy decision under the General Data Protection Regulation (GDPR).We may be required to transfer your personal data to organisations who intend to transfer the data outside the EU. Where such transfers of data take place, we shall ensure that contracts are in place between the parties involved that ensure the recipient organisation has a suitable standard of data protection in place.
How Long Your Data Is Kept For
We will keep your personal data only for as long as required in order to achieve the purposes for which it was gathered, in line with this privacy notice. For determining when personal data should be erased we shall take into consideration the amount of and sensitivity of the personal data we have, the amount of harm that could be caused by a data breach, the benefits of the purposes the data is being used for and any legal requirements that we are bound to.
You may request that we erase your personal data at any time, though in cases where there is a remaining relevant or legal reason why we are required to keep the data we may opt to restrict the amount of processing being conducted to what is absolute necessary in line with your legal rights in order to minimise the impact the processing will have.
Your Rights, Our Responsibility
There are several rights granted to you immediately upon providing us with your personal information; some of these are mentioned above. We’d like you to know that at Techspace Group Ltd we take your rights as a Natural Person seriously and will always conduct ourselves in a way that is considerate of our responsibility to serve your legal rights.
Right to Revoke The Declaration of Consent (Art. 7 Para. 7 GDPR)
According to Art. 7 para. 3 GDPR you have the right to withdraw your consent to the processing at any time. The lawfulness of the processing carried out on the basis of the consent until withdrawl is not affected. The right of withdrawal may be exercised by means of an informal declaration. A written declaration or alternatively an email to the above contact address is sufficient.
You Have the Right of Access (Art. 15 GDPR)
This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed.If you would like access to the personal data we have about you, we ask that you contact us by using any of the details below.
The Right to Rectification (Art. 16 GDPR)
This one is fairly straight forward; if you notice that the data we have about you is inaccurate or incomplete, you may request we rectify the mistake. We will make every effort to respond to requests of this type immediately.
Right to Erasure (Art. 17 GDPR)
According to Art. 17 GDPR you have the right to demand that we erase your personal data without any delay. We are obliged to erase personal data immediately if one of the provisions of Art. 17 para. 1 GDPR applies. One of these reasons is that the data are no longer necessary for the purposes for which they are collected or otherwise processed.
Right to Restriction of Processing (Art. 18 GDPR)
Pursuant to Art. 18 GDPR, you have the right to demand that we restrict processing if one of the conditions set out in Art. 18 GDPR applies. This includes, for example, that you dispute the accuracy of the personal data. Then we may process the data only to a limited extent as long as it takes to verify the accuracy of the personal data.
The Right to Objection (Art. 21 GDPR)
The right to object is a basic freedom all democracies enjoy. If you wish to object to the way we use, or have used, your personal data you may do so freely.
The Right to Portability (Art. 20 GDPR)
This is a legal right afforded to you that states we must pass on all of the details you have provided to us in a machine-readable format, either to your or to another provider of your choosing.
Right to Automated Individual Decision-Making, Including Profiling (Art. 22 GDPR)
Pursuant to Art. 22 GDPR you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects on you or similarly significantly affects you. Art. 22 para. 1 GDPR provides for exceptions to this rule, whereby Art. 22 para. 4 GDPR in turn contains some exceptions to withdrawal.
The Right to Complain to a Supervisory Authority (Art. 77 GDPR)
We will always try to maintain the highest standards and encourage the confidence our customers have in us as an organisation. In order that we can achieve this we do request that any complaints be first brought to our attention so we can properly investigate matters; if however you would like to complain about Techspace Group Ltd to a supervisory authority you may do so by contacting the Information Commissioners Office on 0303 123 1113, or anyone of the other reporting methods listed on their website.
Our Data Protection Officer
Our Data Protection Officer is:
DataCo International UK Limited
Suite 1, 7th Floor, 50 Broadway
London, SW1H 0BL
Telephone: +44 2035146557
Technical and Organisational Measures
We take technical and organisational measures to ensure that the security and protection requirements of the GDPR are met and that the personal data is protected against loss, destruction, manipulation or access by unauthorised persons. The measures are always adapted to the current state of the art.
Our Contact Details
If you wish to get in touch with Techspace Group Ltd please do so by visiting our contact page.