AIR Communities | Privacy Policy

APARTMENT INCOME REIT CORP.

This Privacy Policy describes how Apartment Income REIT Corp. and its subsidiaries and other affiliates (collectively, “AIR,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information. This Privacy Policy also tells you about your rights and choices with respect to your personal information, and how you can reach us to get answers to your questions.

Information We Collect

We collect information about you in a variety of ways depending on how you interact with us and our websites, mobile applications, properties, and services, including:

Directly from you when you provide it to us, such as when you register for an account that allows you to pay your rent or submit a service request online, use the AIR Online Leasing web application, fill out an online job or rental application, create a profile in the Career Opportunities area of our websites, sign a lease, sign up to receive communications from us (e.g., by submitting a “Request a Call” form), or contact us by phone, email, or otherwise.
Automatically through the use of cookies, server logs, and other similar technologies when you interact with our websites, mobile applications, advertisements, and emails.
From other sources, including, for example, our affiliates, business partners, service providers, online social media networks, and other third parties, or from publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check.

The following provides examples of the type of information that we collect in a variety of contexts and how we use that information.

Context	Types of Information	Primary Purpose for Collection and Use of Information
Account Registration	We collect your name and contact information when you create an account. We also collect information relating to the actions that you perform while logged into your account.	We collect this information to provide account-related functionalities to our users. Accounts can be used to save your preferences and transaction history.
Vendor Information	We may collect information about the employees of companies with whom we do business, including name, email address, and mailing address.	We collect this information to contact our vendors and their employees concerning normal business administration, such as property maintenance, other services, and billing.
Cookies and First-Party Tracking	We use cookies and clear GIFs. Cookies are small pieces of information that a website sends to a computer’s hard drive while a website is viewed.	We use cookies to ensure that our websites operate efficiently, to provide you with more customized offers and information, and to customize our websites to match your personal preferences.
Cookies and Third-Party Tracking	We may place tracking technology on our websites that collects analytics, records how you interact with our websites, or allows us to participate in behavior-based advertising. This means that a third party uses technology (e.g., a cookie) to collect information about your use of our websites so that they can report analytics to us or provide advertising about products and services tailored to your interests. That third party might also collect information over time and across different websites in order to serve advertisements on our website or other websites.	We collect this information to analyze how our websites are being accessed and used, to improve user experience and the overall quality of our websites, and to customize advertising and content.
Demographic Information	We collect personal information, such as the age, gender, date of birth, marital status, or location of our residents, potential residents, and job applicants.	We collect this information to understand our residents, potential residents, and job applicants, to provide tailored services, and to process rental and job applications.
Mobile Hotspot Information	When you connect to one of our publicly provided Wi-Fi hotspots with your mobile device, we collect information about your device.	We collect this information to understand our users and provide Wi-Fi access in our properties to our residents and visitors.
Email Interconnectivity	If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains and make purchases.	We collect this information to understand how you interact with our communications to you.
Job Applicants	If you apply for a job posting, or become an employee, we collect information necessary to process your application or to retain you as an employee. This may include, among other things, your social security number. Providing this information is required for employment.	We collect information from job applicants to make employment-related decisions (e.g., hiring for new positions). If you become an employee, you will receive a separate privacy notice that describes how we collect, use, and share information about our employees.
Inquiries, Comments, Feedback, and Support	If you provide us feedback or contact us for support or for inquiries relating to one of our properties, we will collect your name and email address, as well as any other content that you provide to us, in order to reply.	We collect this information to respond to or follow up on your comments, reviews, inquiries, and other requests. We may also keep a record of the inquiry as part of a resident’s file.
Mailing List	When you sign up for one of our mailing lists, we collect your email address or postal address.	We collect this information to share material about our properties and services or other special offers that may be of interest to you. -
Mobile Devices	We collect information from your mobile device such as unique identifying information broadcast from your device when visiting our website or when visiting one of our properties.	We collect this information to identify unique visitors and understand how users interact with us on their mobile devices.
Rental Applications	When you submit a rental application, we collect rental payment history, job and occupational history, emergency contact information, criminal history, other financial information (e.g., income history, credit and/or debit card number), health information (e.g., whether you smoke cigarettes), vehicle information, government-issued identification number (e.g., social security number, driver’s license number, passport number), information about your pets, history of prior residential addresses, and other credit-related information (such as credit history).	We collect this information to process rental applications and run credit and other background checks in connection with your rental application.
Financial Information	We collect financial information such as credit or debit card information and bank information, including bank account number and routing number, during the lease application process and/or when you make payments to us.	We collect this information to obtain payment for the services that we provide to you, including your rental payments.
Service Requests	We collect your name and information about the type of service requested. If we do not have it on file, we may also collect other contact information.	We use this information to respond to and fulfill your requests for services. We may also keep a record of requests as part of a resident’s file.
Partner Promotion	We collect information that you provide as part of a co-branded promotion with another company.	We collect this information to fulfill our promotions.
Public Health and Safety	In certain situations where a serious public health threat has been identified, we may collect information from tenants and other individuals accessing our properties. This may include medical and health information, such as body temperature, symptoms, and underlying health conditions.	We collect this information to protect the health and safety of our tenants and other visitors. In some jurisdictions, we may be required by law, regulation, or governmental order to collect and retain information related to issues of public health and safety.
Surveys	When you participate in a survey, we collect information that you provide through the survey. If the survey is provided by a third-party service provider, the third party’s privacy policy applies to the collection, use, and disclosure of your information.	We collect this information to understand your opinions and analyze information relevant to our organization.
Sweepstakes or Contests	When you participate in a sweepstakes or contest, we collect information about you, which includes contact information to notify you if you are selected.	We collect this information to operate the sweepstakes. In some contexts, we are also required by law to collect information about those that enter into our sweepstakes.
Website interactions	We use technology to monitor how you interact with our websites. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser.	We collect this information to understand how you interact with our websites, to better improve them, and to understand your preferences and interests in order to select offerings that you might find most useful. We also collect this information to detect and prevent fraud.
Web logs	We collect information, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the internet is used), domain name, click-activity, referring website, and/or a date/time stamp for your visit.	We collect this information to monitor our networks and the visitors to our websites. Among other things, it helps us understand which of our services is the most popular and assess the impact of our marketing and advertising campaigns.

How We Use Information

In addition to the purposes and uses described above, we use information in the following ways:

To identify you when you visit our websites or our properties.
To provide our services, including fulfilling maintenance requests.
To improve our services and property offerings.
To screen potential tenants.
To conduct analytics (e.g., to enhance user experience on our websites).
To communicate with you, such as to respond to and/or follow-up on your requests, inquiries, issues, or feedback, or provide you with notices about your rental application, your lease, or changes to our websites or services.
To send marketing and promotional materials, including information relating to our properties, services, or promotions, or those of our business partners.
To detect and protect against malicious, deceptive, fraudulent, or illegal activity, including violation of our policies and terms and conditions, security incidents, and harm to the rights, property, or safety of our company and our users, employees, or others.
To debug, identify, and repair errors that impair existing intended functionality of our websites.
To comply with our legal or regulatory obligations, to establish or exercise our rights, and to defend against a legal claim.
For internal administrative purposes, as well as to manage our relationships.
For such other purposes as you may consent (from time to time).

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose.

How We Share Information

In addition to the specific situations discussed elsewhere in this Privacy Policy, we may disclose personal information in the following situations:

Affiliates and Acquisitions. We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or plans to acquire, our company, our business, or our assets, we will also share information with that company, including at the negotiation stage.
Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the provision of services by a third-party intermediary.
Public. Some of our websites may provide the opportunity to post comments, or reviews, in a public forum. If you decide to submit information on these pages, that information may be publicly available.
Partner Promotion. We may offer contests, sweepstakes, or other promotions with third-party partners. If you decide to enter a contest, sweepstakes, or promotion that is sponsored by a third-party partner, the information that you provide will be shared with us and with them. Their use of your information is not governed by this Privacy Policy.
Service Providers. We may share your information with service providers. Among other things, service providers may help us to administer our websites, conduct surveys, provide technical support, process payments, provide utilities and cable, and assist in the fulfillment of maintenance requests.
Other Disclosures with Your Consent. We may disclose your information to other third parties when we have your consent or direction to do so.

Your Choices

Some jurisdictions give you a right to make the following choices regarding your personal information:

Access To Your Personal Information. You may request access to your personal information or confirmation that we have and process information about you. In certain limited circumstances, you may also request to receive access to your data in a portable, machine-readable format.
Changes To Your Personal Information. We rely on you to update and correct your personal information. Our resident portals allow you to modify your account profile. If our resident portal does not permit you to update or correct certain information, you can contact us at the address described below in order to request that your information by modified. You may ask us to correct information that is inaccurate or incomplete. Note that we may keep historical information in our backup files as permitted by law.
Deletion Of Your Personal Information. You may request that we delete your personal information. If required by law, we will grant a request to delete information, but you should note that in many situations, we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for other business purposes.
Opt-out Of Sales And/Or Targeted Advertising. Although we do not “sell” your personal information for money, we may use some of your personal information for advertising, which may constitute a “sale” under certain privacy laws.
Objection To Certain Processing. You may object to our use or disclosure of your personal information by contacting us at the address described below.
Online Tracking. We do not currently recognize the “Do Not Track” signal.
Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in emails that you receive. If you decide not to receive promotional emails, we may still send you service-related communications.
Revocation Of Consent. Where we process your personal information based upon consent, you may revoke consent. Please note that if you revoke your consent for the processing of personal information, then we may no longer be able to provide you services.

Please note that not all of the rights described above are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request because the law permits or requires us to do so, or if we are unable to adequately verify your identity. We will not discriminate against individuals who exercise their privacy rights under applicable law.

Submitting Requests

You may exercise the rights described above by contacting us as indicated in the Contact Information section below. If you disagree with our denial of a request, you may appeal our decision by contacting us with the subject line “Appeal.”

Note that, as required by law, we will require you to prove your identity. We may verify your identity by phone call or email. Depending on your request, we will ask for information such as your name, email address, and current or former address. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. If you are an authorized agent submitting a request on behalf of an individual, you must attach a copy of a completed Authorized Agent Designation Form indicating that you are able to act on another person’s behalf.

How We Protect And Retain Information

No method of transmission over the internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our websites permit you to create an account. When you do, you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account. We retain your personal information for only as long as necessary to fulfil the purposes outlined in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements, unless a longer retention period is required or permitted by law. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we obtained the information, and whether we can achieve those purposes through other means, as well as applicable legal requirements.

Third-Party Applications/Websites

For your convenience, we may provide links to websites and other third-party content or services that we do not own or operate. The websites and third-party content to which we link may have separate privacy notices or policies. Please note that we have no control over the privacy practices websites, or services that we do not own. We encourage you to review the privacy policies of any third-party website or application for details about such third party’s privacy practices.

Changes To This Privacy Policy

We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.

Contact Information

If you have any questions, comments, or complaints concerning our privacy practices, or if you need to access this Privacy Policy in an alternative format due to having a disability, please contact us at the appropriate address below. We will attempt to respond to your requests and to provide you with additional privacy-related information.

AIR Communities

4582 S. Ulster St., Suite 1700

Denver, CO 80237

Attn: Privacy Department

Email: PrivacyInfo@aircommunities.com

Toll Free: 888.789.8600 (ask for the Privacy Department)

Additional Information For California Residents

California law requires us to disclose the following additional information related to our privacy practices. If you are a California resident, the following privacy disclosures apply to you in addition to the rest of the Privacy Policy.

California Shine the Light. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing, please submit a written request to us using the information in the Contact Information section above.

Notice of Collection. The table below describes the categories of personal information we collect, disclose for a business purpose, “sell,” and/or “share” (as those terms are defined by California law). Please note that, in addition to the recipients identified below, we may disclose any of the categories of personal information we collect with government entities, as may be needed to comply with law or prevent illegal activity. As mentioned above, we do not “sell” your personal information for money. Nor do we knowingly “sell” the personal information of minors under 16 years of age without affirmative authorization. As discussed elsewhere in the Privacy Policy, we use cookies and similar tracking technologies for purposes of targeted advertising. For details regarding how we use personal information, please see the Information We Collect section of this Privacy Policy. For information regarding how long we retain personal information, please refer to the How We Protect And Retain Information section of this Privacy Policy.

Category of Personal Information	Category of Recipients
Category of Personal Information	Disclosures for a Business Purpose	Sell and/or Share for Cross-Context Behavioral Advertising
Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, or other similar identifiers.	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Business partners Data analytics providers Data brokers Joint marketing partners Screening vendors Other service providers Payment processors and financial institutions Professional services organizations, which may include auditors and law firms Social networks	Advertising networks
Government Issued Identification – this may include social security number, driver’s license number, state issued identification number, or passport number.	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Screening vendors Other service providers Payment processors and financial institutions Professional services organizations, which may include auditors and law firms
Financial Information – this may include bank account number, credit card number, debit card number, and other financial information.	·Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Payment processors and financial institutions Professional services organizations, which may include auditors and law firms
Health Related Information – this may include medical information or mental or physical condition or treatment.	·Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Professional services organizations, which may include auditors and law firms
Characteristics of protected classifications – this may include age and gender.	·Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Screening vendors Professional services organizations, which may include auditors and law firms
Commercial information – this may include information about apartments rented or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Affiliates or subsidiaries Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Payment processors and financial institutions Professional services organizations, this may include auditors and law firms	Advertising networks
Biometric information – this may include voice recordings and imagery of the iris, retina, fingerprint, face, hand, palm, and vein patterns from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted.	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Professional services organizations, which may include auditors and law firms
Internet or other electronic network activity information – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement.	·Affiliates or subsidiaries Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Professional services organizations, which may include auditors and law firms	Advertising networks
Audio, electronic, visual, thermal, olfactory, or similar information	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Professional services organizations, which may include auditors and law firms
Professional or employment-related information	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Screening vendors. Professional services organizations, which may include auditors and law firms
Non-public education information (as defined in the Family Educational Rights and Privacy Act)	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Screening vendors Professional services organizations, which may include auditors and law firms
Inferences drawn from any of the information listed above	Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Professional services organizations, which may include auditors and law firms
Additional categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include signature, physical characteristics, or description, , insurance policy number.	Affiliates or subsidiaries Government entities, as may be needed to comply with law or prevent illegal activity Other service providers Payment processors and financial institutions Professional services organizations, which may include auditors and law firms

California Sensitive Information Disclosure. We collect the following categories of sensitive personal information (as defined under California law): social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; information concerning health; and biometric information. This information is collected in order to process transactions, comply with laws, manage our business, or provide you with services. Note that we do not use such information for any purposes that are not identified within the California Privacy Rights Act Section 1798.121. We do not “sell” or “share” sensitive personal information for purposes of cross-context behavioral advertising.

Effective Date: October 18,2023

Last Update: October 18, 2023