We use your personal data as follows:

Our Tenants

For the purposes of:

Our Relationship and Billing

Considering whether to enter into a tenancy agreement with you;
Details relating to the identity of tenants for the purposes of fulfilling obligations, ongoing billing and management arrangements under a lease and collecting debts; and
Exercising our legal rights and remedies.

Anti-Money Laundering and other legal requirements

Considering your tenancy application with us, at the outset of our relationship, on an ongoing basis and at the point of renewal for anti-money laundering and financial crime prevention purposes. We will use your personal data to check the identity of relevant individuals for fraud prevention, sanctions compliance anti-money laundering purposes and as otherwise required by applicable law.

Operations, Health and Safety

Providing property and facility management services. We may collect your personal details to register facility issues in connection with services under your lease. This is performed as part of our contract with our tenants and as legitimate interest to review and improve our services to our tenants;
Reporting any injuries or potential insurance claims. These may include special categories of personal data to ensure that we comply with our legal responsibilities in relation to Health and Safety investigation and reporting, and in relation to defending any future legal claims.
Preventing and detecting crime including anti money laundering and financial sanctions compliance, protecting our properties, protecting the vital interests of individuals or shared with third parties such as insurance providers and legal advisors in order to defend a claim, government or other competent organisations who are required to report on incidents by law or the police to investigate a crime; and
Providing business continuity services to allow us to alert tenants and their employees of an incident that may impact their business operations. This is a legitimate interest to effectively respond to incidents at our properties.

Our Shareholders and Potential Investors

For the purposes of:

Considering and processing your investment application, including for anti-money laundering purposes;
Managing our relationship with you after you have invested in us, for example sending you notices of shareholder meetings and information about our activities, and paying you dividends;
To prevent and detect crime including anti money laundering and financial sanctions;
Communicating with insurers, regulators (which in the UK would include the ICO) and law enforcement agencies in order to comply with reporting obligations, deal with their enquiries and co-operate with regulatory and law enforcement;
Communicating with banks and suppliers in order to satisfy their due diligence requirements when asked about our investment/holding structure; and
Exercising our legal rights and remedies.

Our Suppliers or Service Providers

For the purposes of:

Our Relationship

Considering whether to enter into a contract with you;
Managing our relationship with you after you have become a supplier or service provider of ours;
Organising tenders, implementing tasks in preparation of, or performing existing contracts; and
Exercising our legal rights and remedies.

Anti-Money Laundering and other legal requirements

Ensuring we meet our anti-money laundering and other financial crime prevention obligations. We will use your personal data to check the identity of relevant individuals for fraud prevention, sanctions compliance and anti-money laundering purposes. This will include monitoring, carrying out due diligence, name screening, etc.
To prevent and detect crime including anti money laundering and financial sanctions compliance and as otherwise required by applicable laws.

Operations

Monitoring our facilities to ensure compliance with applicable policies and laws;
Granting you access to our facilities and/or certain technologies to allow you to perform services;
Managing our technology resources (e.g., cyber-risk management, infrastructure management and business continuity);
Preserving our economic interests and ensure compliance (e.g., complying with our policies and legal requirements, tax and deductions, managing alleged cases of misconduct or fraud, conducting audits and participating in litigation); and
Defending or bringing legal proceedings.

Our Tenants, Suppliers, Service Providers and Other Corporate Visitors to McArthurGlen properties

Security Systems

As part of our security operations, we also collect CCTV and Body Worn Camera images and audio (where legally permitted) of individuals visiting our properties. This personal data is collected based on the performance of a task carried out in the public interest, to pursue our legitimate interests to protect the property in question, to protect the safety and vital interests of our visitors, employees, tenants and customers, to assist with the prevention and detection of crime and to provide our contracted service to our tenants. CCTV is not used for monitoring of staff or contractual performance;
We may use third party service partners to provide security services. The data we collect may be shared with the police, tenants, local authorities, other sites or local crime reduction partnerships and initiatives for our legitimate interests to run successful businesses in environments that are safe for our staff and customers, and the prevention and detection of crime. These organisations may also share data with us. This data may also be shared with third parties for the purposes of enforcement; and
We may also obtain and share the information with insurance companies where they request data relating to insurance claims to support their legitimate interests, or those of their clients, or to exercise our legal rights and remedies.

Corporate Cark Parking

Within our car parks, we may collect personal images and Vehicle Registration Numbers relating to visitors to our properties from CCTV and ANPR (Automatic Number Plate Recognition) systems.