European Industrial Property Association
Legal

How we handle your data

Last updated 4 October 2026

This notice explains how EIREA handles personal data. EIREA is the data controller for the personal data described below.

1. What we hold

  • Register entries — the professional details of agents compiled into the register: name, firm, role, market, specialisms and a business contact route.
  • Account data — your name, email, firm and password, if you register.
  • Membership and billing data — your grade, billing history and payment references. Card details are handled by our payment processor and never touch our systems.
  • Usage records — searches, views and contact reveals, retained as evidence of how the register was used.
  • Correspondence — messages you send us.

2. Why we hold it, and on what basis

Under UK GDPR we must have a lawful basis for each purpose.

  • Compiling and publishing the register — our legitimate interests in maintaining a professional register, balanced against your rights. Business contact details are widely published in this sector, and you may object or ask to be removed at any time.
  • Providing membership — performance of our contract with you.
  • Verifying who you are — our legitimate interests in maintaining the integrity of the register.
  • Security and audit of the register — our legitimate interests in protecting a database we hold rights in, and in detecting extraction.
  • Sending you membership, course and industry updates — your consent, given freely when you confirm a listing or join, and withdrawable at any time.
  • Legal and accounting obligations — compliance with the law.

3. Where we get it

Register entries are compiled from national business registries, company websites, published professional sources and national associations, and are then confirmed or corrected by the firm itself.

4. Who we share it with

We do not sell or rent personal data. We share it only with service providers who process it on our instructions — hosting, email delivery and payments — and where the law requires it. Where an advertiser sponsors a communication, the message is sent by EIREA to members who have consented; the advertiser never receives the data.

5. How long we keep it

Register entries are kept while the register is maintained, and are removed on request. Account and membership data are kept for the life of the membership and for six years afterwards for accounting purposes. Usage records are kept for two years. Consent records are kept for as long as consent may need to be demonstrated.

6. Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office. Contact us at privacy@europeanindustrial.org and we will respond within one month.

7. Transfers outside the UK

Our service providers may process data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement or an adequacy decision.

8. Cookies

This site sets no advertising or tracking cookies. A session cookie is used only to keep you signed in.