Introduction
Hibernia Real Estate Group Limited and its wholly owned subsidiaries (“the Company”, “we”, “us”) processes personal data and it is our policy to be open about why and how we manage, share and look after your personal data.
This quick and simple summary provides details of the following:
- Why we collect data about you;
- The types of data we collect about you;
- How we collect it and use it;
- Who we might share it with;
- The steps we’ll take to make sure it stays private and secure; and
- Your rights to your data.
To find out more about our specific processing activities, please go to the relevant section of this statement.
About us
The data controller of the personal data we collect from you or which you submit to us through the websites is Hibernia Real Estate Group Limited, a company registered in Ireland with company number 531267 and whose registered address is 1 Windmill Lane, Dublin D02 F206.
Sharing your Data
We may sometimes share your data with service providers appointed by us, with regulatory bodies and others who work with us in connection with the provision of services to you. When we share data with others, we put contractual arrangements and security measures in place to ensure that your data is safe and secure.
Your data may be transferred and stored in countries outside the European Economic Area (“EEA”) and when we do this, we will ensure the data has the appropriate level of protection.
Unless required to do so by law, we never share, sell or distribute your data with any organisation for any purpose without your consent.
Security
We take the security of all the data we hold very seriously.
Any personal data that you provide to us will be treated with the highest standards of security and confidentiality and handled in accordance with applicable legislation, Data Protection laws and the General Data Protection Regulation (“GDPR”).
The security of your personal data is very important to us. We take all reasonable technical and organisational measures to prevent the loss, misuse, unauthorised access, disclosure, or alteration of your personal data. These measures include:
- Various levels of access control to restrict access to your personal data to employees and contractors who require a level of access as part of their role;
- Policies and procedures in place to monitor the quality and manage the risks in relation to our suppliers;
- Utilisation of experienced IT service providers who manage and run our internal IT systems; and
- Regular reviews of our security and data protection policies and procedures to ensure a high level of security is maintained.
How long we will keep your data
We will keep your data for no longer than is necessary for the purpose for which it was collected and used or as long as is required by law.
Retention periods apply to certain records and this can vary depending on the type of data. Our policies around how long we hold your data are reviewed and updated from time to time in line with any legal requirements and best practice.
Your Rights
You have certain rights over your personal data as follows:
Access to personal data:
You have the right to request a copy of the personal data that we hold about you. There is generally no fee for providing this data. A fee may be charged, or a request may be refused, if it considered to be excessive. We will respond to all such requests as quickly as possible and within 30 calendar days.
Amendment of personal data:
You have the right to ask us to correct and update any personal data held about you.
Withdrawal of Consent:
If we process personal data based on consent, you have a right to withdraw that consent at any time.
Other areas:
You may also have the right to request that we erase any data held about you, to restrict or object to any processing and the right to data portability.
If you wish to exercise any of these rights, please send an email to the Chief Operations Officer at info@hiberniaREG.com or write to us at Hibernia Real Estate Group Limited, 1 Windmill Lane, Dublin D02 F206.
Complaints:
If you ever want to complain about our use of personal data, please send an email with details of your complaint to the Chief Operations Officer as above. We will look into and respond to any complaints we receive.
You also have the right to make a complaint to your local supervisory authority or Hibernia Real Estate Group Limited supervisory authority, the Data Protection Commissioner (DPC) in Ireland. Further details on your rights are available on the DPC website www.dataprotection.ie
Changes to the Privacy Statement
We keep this privacy statement under regular review and it is updated on a timely basis. The last update to this privacy statement was on 29th April 2026.
Contact details
If you have any queries or comments in relation to this Privacy Statement or any other matter, please contact us at the following address:
Chief Operations Officer,
Hibernia Real Estate Group Limited,
1 Windmill Lane,
Dublin D02 F206.
E: info@hiberniaREG.com
T: +353 (0) 1 536 9100
Further information on how we process your data
For further information and details on how we process personal data in specific situations, please see the following sections.
Tenants
The Company has appointed an agent to manage our residential properties and provide a quality letting service for all residential tenants in our properties.
The residential agent (in their role as Data Processor) processes personal data in accordance with the Property Services Regulatory Authority (“PSRA”) agreement with the Company and applicable legislation for the purpose of the services provided.
A written data processing agreement is in place which outlines the agent’s responsibilities and obligations in processing tenants’ personal data.
The personal data provided to us by the agent once the lease is agreed and signed includes the tenants’ and occupiers’ names and contact details. Where we are provided with other personal data and have no ongoing legitimate business to process this personal information, we will either delete or anonymise it.
We hold personal data about our commercial tenants so that we can administer the terms of the lease and manage our relationship with the tenants. The type of personal data collected for our commercial tenants is limited to the contact name, contact email and business contact telephone numbers.
We will retain personal data for the duration of any contract with us and for such a period of time after termination of the contract, as is necessary to comply with our obligations under applicable legal and regulatory obligations.
We also hold personal data in relation to our commercial and residential agents in order to manage our business relationship with them. Typically, the data collected is the name, company name, email address and contact phone numbers as provided to us.
Visitors to our websites / Users of our Apps
The Company has 2 websites; Hibernia Real Estate Group Limited www.hiberniareg.com and Windmill Quarter www.windmillqtr.com (together the “Websites”). The Company has one app: Windmill Qtr (the “app”).
If you register for the Windmill Quarter app, you will need to provide your name, contact number and email address. This data will not be used for any other purpose, and it will be stored securely. By signing into the app, you consent to this use of your name, contact number and email address.
When you visit the Company’s websites or use the app, information about the browser, device and operating system you are using may automatically be collected and some technical data such as your Internet Protocol (IP) address will be processed.
If you use our mobile apps, we may also look at how often you use the app and where you downloaded it.
Visitors to the websites will also be able to send an email to us. Their messages will contain the user’s screen name and email address as well as any additional data you wish to include in the message.
The Company’s websites are managed by third-party service providers. Data processing agreements are put in place to outline the service providers’ responsibilities and obligations in processing personal data.
Information about Cookies
Our websites use cookies to distinguish you from other users of our website. We use cookies to provide you with a good experience when you browse our website and to enable us to monitor and improve our website. By continuing to browse the site you are agreeing to the use of cookies.
Cookies are small text files which are created on your computer or mobile device when you visit a website. We use the following cookies:
- Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
- Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Hibernia Real Estate Group website: Click here for the list of cookies.
Windmill Quarter Website: Click here for the list of cookies.
How to refuse the use of cookies
You may refuse the use of cookies by selecting the appropriate settings in your browser. However, if you do this you may lose some useful functionality and may not be able to access all or part of our site.
How to disable cookies in your browser
Analytics
The Hibernia Real Estate Group Limited website use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help the websites’ operators analyse how users use the site.
The information generated by the cookie about your use of the websites (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the websites, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. By using these websites, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
More information about the ways in which Google Analytics collect and process your Personal Information can be found here: https://www.google.com/policies/privacy/partners.
Links to other Websites
The websites may contain links to other websites which are outside our control and are not covered by this Privacy Statement. We are not responsible or liable for these websites, their privacy policies or their use of your personal data. If you access other sites using the links provided, the operators of these sites may collect data from you which will be used by them in accordance with their privacy policy, which may differ from ours. We strongly recommend that you read the privacy statements of each and every website that collects personally identifiable data from you.
Data Retention
Personal data collected via the Windmill Quarter app will be retained within the app until an individual requests the deletion of personal data from the app. Personal data collected via our websites will be retained by us in line with the expiry timelines as detailed in the list of cookies detailed above.
Tenants, visitors and contractors in our buildings
We store and use your information for the purposes of managing and operating our buildings.
Closed Circuit Television (“CCTV”)
We have CCTV in place at all buildings owned by the Company. The Company installs and uses CCTV systems:
- To monitor the security of the Company’s business premises;
- To enhance employee, visitor, tenant & contractor safety;
- To ensure that health and safety rules are being complied with;
- To assist in the prevention and detection of crime; and
- To facilitate the identification and apprehension of offenders.
Appropriate signs are positioned in all buildings so that employees, contractors, visitors and tenants are aware that they are entering an area where CCTV is in place.
The images that are filmed are recorded centrally in each building and held in a secure location. Access to recorded images is restricted to the operators of the CCTV system and to those people who are authorised to view them in accordance with the purposes of the system.
Recorded material is retained for a period of 30 days unless the images need to be retained in the context of a Garda investigation or other legal requirement.
Visitor management system
We require visitors to our buildings to sign in at reception and data is captured on our visitor management system. The data recorded is the individual’s name, the company they work for and the company they are visiting. The data is collected for the purpose of notifying the relevant company that the visitor has arrived for their meeting, for security reasons and in the event of an emergency.
Our visitor records are securely stored and are deleted within 28 days.
Tenant access to our buildings
We may capture personal data within the system which controls access to our buildings. The data recorded is the personal data of people who work in a building which includes the individual’s name and the company they work for. This data is collected for the purpose of allowing access to the building. This data is provided to us by the tenant. The data is reviewed periodically to ensure it is up to date. The personal data is held on the access system until we are asked to remove it and/or are notified of any changes by the employer.
Parking in our buildings
The Company provides a third-party parking app to enable employees, contractors and tenants to book parking spaces in some of our buildings. The app is only accessible to employees and selected tenants and contractors working on site. Personal data is collected when you register as a user and subscribe for the parking services. The personal data captured within the app is the individual’s name, phone number, car registration details and email address only. This data is retained until the user deletes the app which contains the personal data held.
Contractors in our buildings
We require some contractors working in our buildings to sign in at reception and data is captured on an attendance management system. The data recorded is the individual’s name and the company they work for. The data is collected for the purposes of monitoring attendance in our buildings, for security reasons and in the event of an emergency. The data held on the attendance management system is securely stored and records are held until we are notified of any changes by the contractor. Periodic reviews of the data held within the attendance system are completed to ensure that personal data is removed from the system on a timely basis.
Company apps
The Company provides apps to enable tenants to book conference facilities and to update tenants on events and special offers from local shops and restaurants. The app is only accessible to tenants in selected buildings. The personal data captured within the app is the individual’s name, phone number and email address only. This data is retained until the user requests the Company to disable or delete the personal data held.
Guest Wi-Fi
We may also collect information from your devices if they connect to, or are detected by, the wireless networks at our properties. We might also collect information about how you use our Wi-Fi network and other services, such as the websites you visit while using our Wi-Fi network. You can opt out of the collection of your information by turning off your device’s Wi-Fi and Bluetooth capabilities.
Suppliers and Subcontractors
The Company collects and processes personal data about our suppliers and subcontractors in order to manage these relationships, receive services from our suppliers and meet the terms of the outsourcing agreements in place with these suppliers.
The data collected will be limited only to what is necessary and relevant to the supply of the service and will include personal data about the individuals providing the services.
We retain the suppliers’ personal data processed by us for as long as is considered necessary for the purpose for which it was collected and to ensure compliance with any applicable laws or regulations.
Due Diligence requirements
The Company may collect personal data from individuals and third parties in connection with performing due diligence on our service providers, suppliers, 3rd parties, tenants and business partners. This data may include contact details, information concerning business practices, creditworthiness, reputation and business history and job titles or roles.
The Company will ensure that any information requested is only used for the purposes of completing due diligence and is held safely and securely.
We retain the due diligence personal data for as long as is considered necessary for the purpose for which it was collected and to ensure compliance with any applicable laws or regulations.
Personal Data requests
The Company collects personal data from individuals who make a request for access to their personal data and/or deletion requests. The data we collect may consist of identity verification information from you, such as images of your passport, national ID card, driving licence or other authentication information.
We retain this personal data for identification purposes only and it is deleted in line with the Company’s retention policy once the identification process has been completed.
Recruitment applicants
From time to time, the Company may advertise career vacancies on its website and individuals may send in a Curriculum Vitae (“CV”) to apply for the advertised role. In addition, individuals may send in their CV to express an interest in working with the Company.
We collect personal data from individuals who apply online for a position advertised on our website. The data collected are the details provided on your CV and any other information you have provided.
We only use the data for the sole purpose of the recruitment process. We don’t retain any personal data for candidates who are not being called for an interview. Personal data will be retained for 12 months for candidates who are interviewed but not offered a position.
We don’t retain personal data for candidates who are not being called for an interview nor for candidates who are interviewed but not offered a position and such personal data will be retained for no longer than 12 months.
We do not hold personal data from unsolicited CVs and these CVs will be deleted from our system on a periodic basis.
Any personal data retained for successful candidates will be done so in compliance with all obligations that are required under employment legislation.
Business Contacts
The Company collects personal data about business contacts during the course of running our business. The data collected is generally as a result of meeting people during the course of normal business interaction e.g. receiving a business card at a seminar or conference.
Typically, the data collected is the name, company name, email address and contact phone numbers as provided on an individual’s business card.
We do not use this data for any purpose other than the use for which it was intended.
Business contact personal data is retained on our systems for as long as we retain a relationship with that business contact. We periodically review such data and delete it where there has been no recent contact.
Directors and staff
The Company collects personal data from our employees, consultants, individual contractors, directors and others whose personal data is provided to us in the context of a working relationship.
Information on why and how personal data is collected and processed is contained in the Privacy and Data Protection Notice which is issued to all personnel.
Events
The Company may collect personal data from individuals who attend events in the Windmill Quarter. Typically, the data collected is the name, email address, company name and contact details which are provided by the individual when registering for any event through the Windmill Quarter app. Where payment is required to attend an event, the data collected is typically the name, email address, company details and credit card details which are provided by the individual on the Eventbrite platform or other similar ticket booking platforms that may be in use from time to time. The Eventbrite privacy policy is available to review here.
Photographs may be taken at events hosted in Windmill Quarter. By attending these events, an individual confirms their consent to the use of the photos on the Company’s website and/or social media platforms. Individuals have the right to withdraw their consent for the use of any personal photos.
From time to time, events take place in Windmill Quarter that are managed by 3rd parties. We are not responsible for their privacy policies or their use of your personal data. We recommend that you read the privacy statements of any 3rd party event organisers who may collect personally identifiable data from you.
The Company may collect personal data from individuals who attend seminars organised by the Company. Typically, the data collected is the name and email address which are provided by the individual when registering their attendance for the seminar. Registration for seminars is normally completed through ticketing platforms such as Ticket Tailor or other similar platforms.
Newsletters
The Company may collect personal data to issue periodic notifications to commercial tenants, individuals who attend seminars and other third parties. Personal data collected is limited to the name, company name and email address. We normally use the Intuit Mailchimp platform to issue notifications. The Intuit Mailchimp privacy policy is available to review here.
The Company’s quarterly newsletter is hosted on an online design tool Readymag and published on the Company’s website. Readymag’s privacy policy is available to review here.
Individuals can unsubscribe from mailings at any time using the unsubscribe link provided.
Other people who get in touch with us
The Company collects personal data from individuals who get in touch with us for a query, comment, feedback or a complaint. Typically, the data collected is the name, job title, company name, contact details, email address and any personal data provided in the message.
In such cases the individual is in control of the data shared with us and we use the data for the sole purpose of replying to the query.