THE IRONWORKS, SANDYFORD ROAD, DUNDRUM, DUBLIN 16 – RESIDENTIAL TENANCY PRIVACY NOTICE

Introduction.

The Ironworks (as defined below) is committed to protecting your personal data. This privacy notice (the “Notice”) details how we use personal information about our tenants (including guarantors and occupiers, prospective and former residential tenants) and keep it secure when administering and managing tenancies at The Ironworks, Sandyford Road, Dundrum, Dublin 16 (the “property”).

About us and how to contact us.

This Notice explains how Dundrum Retail Limited Partnership incorporated and registered in the Republic of Ireland with limited partnership number 560101, acting by its general partner Dundrum Retail GP DAC with company number 572168 whose registered office is at Riverside One, Sir John Rogerson’s Quay, Dublin 2 (“the Ironworks”) collects, uses, and manages your personal data in compliance with applicable data protection law.

If you have any questions relating to this Notice or would like to exercise your legal rights set out in this Notice, please contact our data protection officer by email to dataprotectionofficer@hammerson.com.

Your personal information and how we use it.

We may collect and use all or any of the following personal information about you:

· Contact details when you register your interest in the property: Home/work landline phone number, personal/work mobile, home/work postal address, personal/work email address.

· Any information you include in correspondence you send to us or in forms you submit to us.

· Information relating to your tenancy: occupier information, emergency details, key holder details, reasons for moving, incident reports, registration details, car ownership and car park details, household pet details, details related to maintenance or defects, any details required for registration with the Residential Tenancy Board (RTB).

· Identification information: such as national identification, passport or driver’s licence, nationality, immigration or visa status, social security number, PPS number, national insurance number.

· Background check information: character or employer reference, prior residential addresses, previous landlord reference, prior leasing/ financial history.

· Financial information: salary or income details, bank account details, rental amounts owing, paid or in arrears, tenancy deposits, services charges.

· Additional information you may provide us with: notification and package delivery preferences or instructions and survey responses, your marketing preferences etc.

· Footage of you on CCTV.

We use your personal information to:

· Administer and manage our relationship with you, including the performance of a contract (such as a lease or tenancy agreement).

· If you are a prospective tenant, but at the time of your enquiry we do not have a property available that meets your needs, we may contact you if such a property becomes available within 12 months of your inquiry. You can opt out of these communications at any time.

· To communicate with utility companies, suppliers and other contractors to arrange access to the property for repairs and/or maintenance and in order to facilitate background checks or payments due, for example, with credit or reference providers and other charges and in the legitimate interest of third parties who supply services to you (e.g. utility companies).

· To fulfil our legal and regulatory obligations, including administering anti-money laundering checks and sanctions screenings, establishing, exercising or defending legal claims or providing information as required by a court order.

· To protect the safety and security of our staff, systems, property or any person, including to investigate, prevent and minimise the effects of fraud or otherwise to protect our vital interests or the vital interests of the tenant or of others.

· For our legitimate business interests such as to provide you with Services as part of your tenancy such as ongoing works at the property, building access or window cleaning; provide you with access to resources which provide services such as deliveries, bookings, enquiries, social clubs or forums, events, announcements, concierge services and various amenities in relation to your tenancy; communicate with you about any changes to our properties or Services, or new Service offerings; to enhance and improve our overall Service offering.

· If you have consented to receiving marketing from us (you can opt-out of receiving them at any time). We do not share your personal information with companies that would send their marketing to you.

How we collect your personal information.

We either collect information from you directly for example, when you enquire, from your interactions with us or when you enter into a tenancy agreement with us. Where we do not receive information from you directly, we may either generate it ourselves, or collect it from other sources, such as local authorities, utility suppliers or from maintenance contractors or service providers to the property. We only collect personal information which we need and that is relevant for the purposes for which we intend to use it.

Lawful basis for processing personal information.

In order to collect, process and share personal data for the purposes described in this Notice, we rely on a number of separate and overlapping legal bases, including where:

· necessary to perform a contract we have with you, for example under a lease or tenancy agreement;

· consistent with obtained consent, for example, where you have opted-in to receive our marketing information, we may use your information to send you news, newsletters, promotions or information we think may interest you;

· necessary for the legitimate interests of us or of a third party, subject to such interests not being overridden by your interests or rights

· necessary to comply with our legal obligations;

· necessary to protect the vital interests of tenants, prospective tenants or of others;

We may process personal information on more than one lawful ground depending on the specific purpose for which we are using that information. We only use personal information for the purposes for which we collected it, unless we believe that we need to use that personal data for another reason that is compatible with the original purpose or as applicable law permits.

How long will we hold your information.

We retain the personal information we collect for as long as necessary for the purposes described in this Notice.

To determine the appropriate period for holding your personal data, we consider the applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes we process your personal data for, and whether we can achieve those purposes through other means.

Sharing your personal data.

We share your personal data with carefully selected third party partners, which include Savills Commercial (Ireland Limited) who are our property manager suppliers, contractors, and professional advisors, who help us to administer and manage our tenancy with you and any digital platforms from which we operate them.

We also share your personal data with our group companies and affiliates who may process data on our behalf to enable us to conduct our usual business practices.

We may share your personal data, where necessary, with prospective purchaser(s) or purchaser of any part of our business, on the basis of our legitimate interests and the interests of our purchaser, so that they can appropriately value the business and assess any risks and continue doing business with you after the acquisition.

We may also disclose your personal data, where disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with the law, including valid legal requests from the Police, or other government agencies or departments.

Where your personal data is held.

We may store or process your personal data outside the United Kingdom (UK) or European Economic Area (EEA). Whenever we transfer your personal data out of the UK or EEA to countries which have laws that do not provide the same level of data protection as UK and EU law, we always ensure that a similar degree of protection is afforded to it by ensuring that appropriate safeguards are implemented, such as the use of standard contractual terms approved for use in the UK and EU respectively, which give the transferred personal data the same protection as it has in the UK and EU.

Your data protection rights.

Under data protection law, you have the following rights in relation to the personal data we are processing about you. The rights available to you depend on our reason for processing your information.

Right to be informed: You have the right to be provided with concise, transparent and easily understandable information about how we collect and process your personal data. This Notice sets out this information.

Right of access: You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

Right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Right to erasure: You have the right to ask us to erase your personal information in certain circumstances, for example where you request erasure and there is no other legal justification for the use of your information.

Right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances, for example where you have requested an update to your personal data.

Right to data portability: This only applies to personal data you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

Right to object and/or to withdraw consent: You have the right to ask us to stop processing your personal data, and we will do so, unless we can demonstrate compelling legitimate grounds for the processing; or the need to use your personal data in connection with any legal claims. If you have provided your consent to process your personal data and that is our legal basis for processing, you have the right to withdraw that consent at any time.

Right to not be subject to a decision based solely on automated processing: You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you. This right is not applicable if profiling is necessary for the performance of a contract between you and us.

If you wish to make a request, please email dataprotectionofficer@hammerson.com. We may require additional information to either confirm your identity before we can process your request and/or to assist us in responding to your request.

Right to complain to a data protection supervisory authority.

If you have a concern about any aspect of our data protection practices, including the way we are processing your personal data, you have the right to report it to the Data Protection Commissioner. Further information on how to lodge a complaint or exercise your rights under data protection law can be found on the Data Protection Commissioner’s website: https://www.dataprotection.ie/en

Modifications of this policy.

We may revise this Notice from time to time. If we make any changes to this Notice that may materially impact you or our processing of your personal data, we will notify you by email (sent to the email address specified in your correspondence with us) or by means of a notice on our website prior to the change becoming effective.

Date issued: 20 May 2025