Data Services Processing Notice

This Processing Notice applies to certain services of the LNRS Data Services division of LexisNexis Risk Solutions ("we" or "us"), part of the RELX Group™ of companies.

The services covered by this processing notice are:

• Cirium
• EG

This notice explains how some of our products, services or apps listed below, allow our customers to look-up information about individuals:

• Cirium Dashboard
• Cirium Fleets Analyzer
• Cirium Values Analyzer
• Cirium Fleets Data & other Datafeeds
• Cirium FlightStats website and applications
• Estates Gazette Radius

LexisNexis Risk Solutions also has a Privacy Policy describing how we collect and treat personal information when you provide data directly to LNRS Data Services.

The services covered by this notice process the following categories of personal information:

• Company Name,
• Individual Name,
• Job Title,
• Email Address,
• Phone Number,
• Other Electronic Address,
• Company Address, and/or
• Details of planning application.

The EG services obtain information about planning applications from local authority planning departments (which make this information publicly available); we use a third party to license this data for us. Information about business contacts at real estate companies is obtained:

• From those companies themselves when they send us a press release or a deal-sheet;
• From their websites;
• From the media;
• From suppliers of business contact databases.

The Cirium Services contain directory information about business contacts at companies within the aviation sector. We obtain this information from:

• Companies within the aviation sector who provide information about their employees.
• The public domain – for example, the information is listed on a company’s website, or is included in press releases and media reports, or is available from public registers such as Companies House, or FAA.
• We may use third parties to supply such public domain information to us.

We include this personal information in the above-mentioned services, so that organisations who want to do business with companies in these industries can make contact with the relevant person to discuss opportunities.

Where your personal information is included, we process your personal information for our and our licensees’ legitimate business purposes, which are to access up-to-date information about business contacts within the relevant industries so they can reach out about business opportunities.

Where we use personal data for a business or other interest, data protection law says that we have to make sure this interest is legitimate, and we must make sure we can justify any impact on individuals. To help us do this, we regularly update our databases to ensure they are accurate; we only collect necessary information and provide it to subscribers for their own legitimate interests. 

If your information is included in the above-mentioned services, then this will be available to subscribers to Data Services. For Cirium, these are primarily organisations in the aviation sector such as airlines, airports, travel agencies, public bodies in the aviation sector, maintenance, overhaul and repair companies, and other businesses who want to do business with aviation, anywhere in the world. For Estates Gazette, they are primarily organizations in the real estate sector such as developers, real estate agents, financial services institutions, and other businesses who want to do business with real estate companies, anywhere in the world.

We are also using service providers, suppliers, agents and representatives, including but not limited to, editors, customer support, IT service providers to process the information for us based on our instructions and in compliance with our privacy policy and any other appropriate confidentiality and security measures.

Your personal information may be stored and processed in your region or another country where LexisNexis Risk Solutions affiliates and our service providers maintain servers and facilities, including but not limited to, Australia, Brazil, France, Germany, Hong Kong, Iceland, India, Italy, Ireland, Japan, the Netherlands, the Philippines, Singapore, South Africa, United Arab Emirates – Dubai, the United Kingdom, and the United States. We take steps, including through contracts, intended to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.

Certain U.S. entities within the LexisNexis Risk Solutions group of companies have certified certain of their services to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce. Please view these entities’ Data Privacy Framework Notice here. To learn more about the Data Privacy Framework program, and to view these entities’ certification, please visit https://www.dataprivacyframework.gov.

Legal reasons

We also disclose your personal information if we have a good faith belief that such disclosure is necessary to:

• meet any applicable law, regulation, legal process or other legal obligation;
• detect, investigate and help prevent security, fraud or technical issues;
• protect the rights, property or safety of Lexis Nexis Risk Solutions, our users, employees and others;
• or as part of a corporate transaction, such as a transfer of assets to or an acquisition by or merger with another company.

We keep information of individuals associated with planning applications for five years.

We keep business contact information for as long as you have a relevant role in the aviation or real estate company. We regularly undertake checks to ensure that our data is accurate and up to date.

The criteria used to determine the storage period will include the legal limitation of liability period, agreed contractual provisions, applicable regulatory requirements, and industry standards.

In accordance with European and certain other privacy and data protection laws, as may be applicable, we provide you with the ability to exercise your rights in relation to your personal data in the following ways:

• access to and correction or deletion of other personal information about you that we hold,
• that we cease using your personal information,
• a copy or portability of your personal information,
• object at any time to processing of personal information concerning you for direct marketing.

If you wish to exercise any of the rights described in this Processing Notice, please contact us using the links below:

For U.S. Privacy requests, click here to submit online.
For non-U.S. Privacy requests, click here to submit online.

 

If you have any questions, please contact our Data Protection Officer whom we have appointed to respond to enquiries regarding any of the products connected to this Notice:

For U.S. Privacy requests, click here to submit online.
For non-U.S. Privacy requests, click here to submit online.

Data Protection Officer
LexisNexis Risk Solutions
Global Reach
Dunleavy Drive
Cardiff CF11 0SN 

LNRS Data Services Limited is registered with the Information Commissioners Office as a Data Controller. Registration number Z6286758.

If you have unresolved concerns, you have the right to complain to a data protection authority in the country where you live, work, or where you feel your rights were infringed.

Last updated: October 10, 2023