Privacy Policy

CONSORTO
Privacy Policy
Commercial Real Estate Marketplace

Version date: 14 June 2026

This Privacy Policy explains how Consorto Global OÜ processes personal data when you visit www.consorto.com, register for an account, use the Consorto commercial real estate marketplace, submit listings or wanted requests, communicate with us, or otherwise use our services.

Consorto is primarily intended for professional and business users. The GDPR does not generally apply to information about legal entities as such, but it does apply to information relating to identifiable individuals, including business contact details of brokers, investors, owners, representatives and other professional users.

1. WHO WE ARE

The data controller is Consorto Global OÜ, a private limited company (osaühing) established under the laws of the Republic of Estonia, registry code 14096759, VAT (KMKR) number EE101996660, with registered office at Rotermanni tn 2-3b, 10111 Tallinn, Estonia.

Contact email for privacy matters: info@consorto.com.

2. WHAT PERSONAL DATA WE COLLECT

Depending on how you use Consorto, we may collect and process the following categories of personal data:

Account and contact data: name, surname, business email address, telephone number, password or authentication credentials, company name, job title, country, language and communication preferences.

Professional profile data: information about your role in commercial real estate, investor or broker profile, areas of interest, market coverage, asset preferences, investment criteria and user status.

Listing, wanted request and transaction data: information you submit about commercial real estate assets, wanted requests, leads, introductions, transaction discussions, fee agreements, electronic acceptance records and related correspondence.

Communications data: emails, messages, support requests, feedback, call notes and other communications exchanged with Consorto or with other users through the platform.

Verification and admission data: information used to assess whether a user can be admitted to the platform, including professional background, authority to represent a company, property or client, and information needed to prevent fraud or misuse.

Billing and payment data: invoicing details, billing contact information, payment status, subscription or fee information and accounting records. Payment card or bank details may be processed by third-party payment providers where applicable.

Technical and usage data: IP address, browser type and version, device information, operating system, pages visited, referring URLs, time and duration of visits, log files, security events and similar usage information.

Cookie and tracking data: data collected through cookies and similar technologies, as described in section 9 below.

Third-party login data: if you choose to register or sign in using a third-party authentication provider such as Google or LinkedIn, we may receive basic profile information and email address from that provider, depending on your settings and permissions.

Marketing data: newsletter subscription status, marketing preferences and information about whether and how you interact with Consorto communications.

3. HOW WE COLLECT PERSONAL DATA

We collect personal data directly from you when you complete forms, register, upload information, submit listings or wanted requests, sign fee agreements, contact us, or communicate through the Service.

We also collect some data automatically when you use the Site, for example through server logs and cookies.

In some cases, we may receive information from third parties, such as another Consorto user, a service provider, a public business register, a professional network, a payment provider, or an authentication provider.

4. WHY WE PROCESS PERSONAL DATA AND LEGAL BASES

We process personal data only where we have a lawful basis under applicable data-protection law.

Account registration and platform access

We process account and contact data to create and manage accounts, user profiles, login, account security and administration.

Main legal basis: performance of a contract and legitimate interests.

Admission and verification

We process verification and professional profile data to review professional status, assess whether a user may access the marketplace, prevent fake accounts and prevent misuse.

Main legal basis: legitimate interests, performance of a contract and legal obligation where applicable.

Marketplace operation

We process profile, listing, wanted request and communication data to publish or share listings and wanted requests, enable search, matching, introductions, communication and user support.

Main legal basis: performance of a contract and legitimate interests.

Introductions, fees and transactions

We process transaction, fee, billing and correspondence data to manage introductions, fee agreements, billing, evidence of acceptance, transaction-related correspondence and enforcement of rights.

Main legal basis: performance of a contract, legitimate interests and legal obligation.

Security and fraud prevention

We process technical, usage, account and transaction data to detect suspicious activity, protect accounts, prevent circumvention, misuse, spam, fraud and illegal activity.

Main legal basis: legitimate interests and legal obligation.

Customer support and communications

We process communication data to respond to enquiries, support requests, complaints and legal notices.

Main legal basis: performance of a contract, legitimate interests and legal obligation where applicable.

Marketing and newsletters

We process marketing data to send updates, newsletters, platform news, offers or relevant commercial real estate information.

Main legal basis: consent where required, and legitimate interests for B2B communications where permitted, with an opt-out.

Analytics and improvement

We process technical, usage and cookie data to understand how users interact with the Site, improve functionality, improve the user journey, improve matching and improve content.

Main legal basis: legitimate interests for basic aggregated analytics, and consent where required for non-essential cookies or similar technologies.

Legal and compliance

We process relevant data for accounting, tax, audit, legal claims, regulatory requests and compliance with applicable laws.

Main legal basis: legal obligation, legitimate interests and establishment, exercise or defence of legal claims.

5. WHEN PROVIDING DATA IS NECESSARY

Some personal data is necessary to create an account, assess admission, provide the Service, make introductions, issue invoices, comply with legal obligations, and protect the platform from misuse.

If you do not provide required information, we may be unable to register you, approve your profile, provide access to certain functions, make an introduction, process a payment, or comply with a legal or contractual requirement.

6. HOW WE USE AND SHARE INFORMATION WITHIN THE MARKETPLACE

Consorto is a business-to-business commercial real estate marketplace.

To provide the Service, we may display or share certain business profile, listing, wanted request and contact information with other users or potential transaction counterparties, where this is necessary for the marketplace, a requested introduction, a transaction discussion, or another feature you use.

You should not upload or share personal data of another person unless you have the right and authority to do so and, where required, have informed that person.

You are responsible for ensuring that information you upload is accurate, not misleading, and that you have the right to upload, publish, market, represent, introduce or otherwise share the relevant property, company or client information.

7. SERVICE PROVIDERS AND OTHER RECIPIENTS

We may share personal data with the following categories of recipients, only where necessary and subject to appropriate safeguards:

- hosting, cloud infrastructure, database, security and IT service providers;
- email delivery, newsletter, CRM, customer-support and communication tools;
- analytics, product-improvement and monitoring providers;
- payment, invoicing, accounting and banking providers;
- electronic signature, document storage and contract-management providers;
- professional advisers, auditors, insurers, legal advisers and debt collection or enforcement providers;
- public authorities, regulators, courts or law-enforcement bodies where required by law or necessary to protect rights;
- potential buyers, sellers, brokers, owners, investors, tenants, lenders or other professional users where this is necessary for an introduction or transaction-related purpose;
- a successor or potential successor in the event of a merger, acquisition, restructuring, investment, sale of assets or similar corporate transaction.

We do not sell personal data.

8. INTERNATIONAL TRANSFERS

Consorto is established in Estonia and may use service providers or business partners located in the European Economic Area or in other countries.

Where personal data is transferred outside the European Economic Area to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards where required, such as the European Commission Standard Contractual Clauses or another lawful transfer mechanism.

9. COOKIES AND SIMILAR TECHNOLOGIES

This section is intended to serve as Consorto’s cookie information within this Privacy Policy.

The Site may use cookies, pixels, tags, local storage and similar technologies. Cookies are small text files placed on your device that help the Site work, remember preferences, understand usage and, where applicable, support marketing or measurement.

We may use the following types of cookies and similar technologies:

Strictly necessary cookies: required for login, security, session management, load balancing and core website functionality.

Preference cookies: used to remember settings such as language, region, currency or display preferences.

Analytics cookies: used to understand website traffic, user journeys and platform performance, usually in aggregated form.

Marketing or remarketing cookies: used, where applicable, to measure campaigns, personalise communications or show relevant advertising on third-party platforms.

Strictly necessary cookies may be used without consent where they are required to provide the Site or Service.

For non-essential cookies or similar technologies, we will seek consent where required by applicable law.

You can control cookies through your browser settings, and you may block or delete cookies at any time. Blocking some cookies may affect the functionality of the Site.

10. MARKETING COMMUNICATIONS

We may send newsletters, platform updates, commercial real estate opportunities, product information or other B2B communications to users and business contacts.

Where consent is required, we will rely on consent. In other cases, we may rely on our legitimate interests in communicating with professional users about relevant services, subject to applicable direct marketing rules and your right to object or unsubscribe.

You can opt out of marketing emails by using the unsubscribe link in the email or by contacting us at info@consorto.com.

Service, security, legal and transactional messages may still be sent where necessary.

11. RETENTION OF PERSONAL DATA

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain business records, resolve disputes, enforce agreements, protect the platform, comply with legal obligations and establish, exercise or defend legal claims.

In general, account and profile data is kept while your account is active and for a reasonable period after closure where necessary for legal, security, audit, dispute or legitimate business purposes.

Transaction, fee, billing and accounting records may be kept for the periods required under applicable accounting, tax or commercial laws.

Communications, support records, logs and security records are kept for periods appropriate to their purpose.

Where we process data based on consent, we retain it until consent is withdrawn or until the data is no longer needed, unless another lawful basis applies.

12. SECURITY

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, authentication, logging, backups, encryption where appropriate, staff access limitations and security monitoring.

No online service can be guaranteed to be completely secure, and you are responsible for keeping your login credentials confidential.

13. YOUR DATA-PROTECTION RIGHTS

Subject to the conditions and limits in applicable law, you may have the right to:

- access your personal data and receive information about how it is processed;
- request correction of inaccurate or incomplete personal data;
- request deletion of personal data;
- request restriction of processing;
- object to processing based on legitimate interests, including certain direct marketing;
- receive certain personal data in a portable format;
- withdraw consent at any time, where processing is based on consent;
- lodge a complaint with a supervisory authority.

To exercise your rights, contact us at info@consorto.com. We may need to verify your identity before responding.

You may also contact the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, or your local EU/EEA data-protection supervisory authority.

14. AUTOMATED MATCHING AND RECOMMENDATIONS

Consorto may use profile information, listing data, wanted requests, preferences and platform activity to support search, filtering, alerts, matching, ranking, recommendations and introductions.

These features are intended to improve the relevance of marketplace results and do not by themselves produce legal or similarly significant effects for users.

You may contact us if you want more information about how these features relate to your account.

15. CHILDREN

The Site and Service are intended for users aged 18 or over and for professional and business use.

We do not knowingly collect personal data from children.

If you believe a child has provided personal data to us, please contact us so that we can take appropriate action.

16. LINKS TO THIRD-PARTY WEBSITES AND SERVICES

The Site may contain links to third-party websites, platforms, social networks, payment providers, authentication providers or other services.

Those third parties process personal data according to their own privacy notices.

Consorto is not responsible for the privacy practices of third parties that are not acting as our processors.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

The updated version will be published on the Site and will state the date of the latest update.

Where changes are material, we may provide additional notice, for example by email or through the platform.

Continued use of the Site or Service after an update means that the updated Privacy Policy applies from the date stated.

18. CONTACT

Questions about this Privacy Policy or the processing of personal data may be sent to:

Consorto Global OÜ
Rotermanni tn 2-3b
10111 Tallinn
Estonia

Estonian Commercial Register code: 14096759
VAT (KMKR) number: EE101996660
Email: info@consorto.com