Privacy Notice for California Residents

Section Title

Effective 12/6/2022

This Privacy Policy describes the privacy practices of Prometheus Real Estate Group, Inc. ( “Prometheus,” “we,” “our” or “us” ) with regard to information about you that could reasonably be used to identify you personally ( “Personal Information” ) gathered through this website (the “Website”). This Privacy Policy applies only to Personal Information that we gather or collect via the Website, and does not apply to any Personal Information collected offline or otherwise outside of the Website.

The Website includes certain services, including Active Building and online leasing and employment applications, that are operated by third parties. Any Personal Information you choose to submit through these services will be retained by such third parties pursuant to their own privacy policies. Links to those privacy policies are provided in Section 5 below. We encourage you to familiarize yourself with their terms.

We may need to change this policy from time to time. The updates will be posted online. To make your review more convenient, we will post an effective date at the top of the page. Your continued use of the Website after the effective date of such changes constitutes your acceptance of such changes.

1. Data Collection Notice

Prometheus Real Estate Group, Inc. (“Prometheus”) collects information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household (“Personal Information”). In particular, we collect the categories of personal information specified below. Prometheus may use, share, or disclose these categories of personal information for one or more of the indicated business or commercial purposes.

Serial Number	Categories	Description	Purpose(s)
A	Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, or other similar identifiers.	To fulfill or meet the reason you provided the information, such as responding to your inquiry, processing your lease application, investigating your qualifications and verifying your information. To maintain, customize, and secure your residential leasing and living experience, process your requests, purchases, transactions, and payments and prevent crime To follow up with you on inquiries and tours of properties leases and stays. To provide you with support, respond to your inquiries, investigate and address your concerns and monitoring and improve our responses. To personalize your tenancy experience and to deliver content and product and service offerings relevant to your interests (including targeted offers and ads through our Website, third-party sites, and via email or text message). To help maintain the safety, security, and integrity of our Website, products and services, and properties. To manage and operate our properties, fulfill our legal obligations, and develop our Website, products, and services. To evaluate or conduct any sale or transfer of some or all of Prometheus's assets, in which personal information held by Prometheus about our tenants is among the assets transferred. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. To provide smart and convenient living experiences such as easy access to delivery services, utility services, and technology. As described to you when collecting your personal information.
B	Categories listed in the California Customer Records statute	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, or other similar identifiers.
C	Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military status.
D	Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
E	Biometric information	Biometric information
F	Internet or similar network activity	“Internet browsing activity on our sites” (such as a consumer’s interactions with our website, applications or advertisements).
G	Professional or employment-related information	Current or past job history or performance valuations.
H	Geolocation Data	This includes precise location data derived from use of keycards for access, GAPS coordinates or telemetry data.

2. Right to Know About Personal Information Collected, Disclosed,or Sold

You have the right to request that Prometheus disclose to you: (1) the categories of your personal information collected; (2) the categories of sources from which your personal information was collected; (3) the categories of your personal information that were sold or disclosed for a business purpose, if any; (4) the categories of third parties to whom your personal information was sold, if any; (5) the business or commercial purpose for collecting and/or selling your personal information; and (6) the categories of third parties with whom we share your personal information. You also have the right to request to receive the specific pieces of your personal information collected by Prometheus to the extent such information is maintained by, and available to, Prometheus.

To submit a request, please visit our online request portal:
https://prometheusapartments.com/privacy/online-privacy-policy-portal or call our toll-free number, 1-888-977-1383. In order to verify you are the person about whom we collected personal information, we will need to verify your identity by matching at least two pieces of Personal Information provided by you with Personal Information maintained by Prometheus that we have determined to be reliable.

However, if your request involves receiving specific pieces of Personal Information (rather than categories of Personal Information), we must first verify your identity by matching at least three pieces of Personal Information provided by you with Personal Information maintained by Prometheus that we have determined to be reliable. Then, you must provide a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.

We cannot respond to your request to provide any personal information if we cannot verify your identity using the information provided.

Prometheus has disclosed consumer personal information to service providers for a business purpose. However, we do not disclose the personal information of consumers we actually know are less than 16 years of age without affirmative authorization.

The chart below provides information regarding the categories of personal information Prometheus collected, used, and disclosed in the past 12 months.

Serial Number	Categories Collected	Source of Collection	Third Parties with Whom Shared For A Business Purpose	Purpose(s)
A	Identifiers (including, without limitation, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number)	You (directly) Service providers Third parties Consumer reporting agencies Public records Referral sources	Service Providers Package, mail and delivery service providers Debt-collectors and payment processors Consumer reporting agencies “Smart” property leasing product retailers Rental Screening data providers Management Software Service Providers As directed by you	To fulfill or meet the reason you provided the information, such as responding to your inquiry, processing your lease application, investigating your qualifications and verifying your information. To maintain, customize, and secure your residential leasing and living experience, process your requests, purchases, transactions, and payments and prevent crime To follow up with you on inquiries and tours of properties leases and stays. To provide you with support, respond to your inquiries, investigate and address your concerns and monitoring and improve our responses. To personalize your tenancy experience and to deliver content and product and service offerings relevant to your interests (including targeted offers and ads through our Website, third-party sites, and via email or text message). To help maintain the safety, security, and integrity of our Website, products and services, and properties. To manage and operate our properties, fulfill our legal obligations, and develop our Website, products, and services. To evaluate or conduct any sale or transfer of some or all of Prometheus's assets, in which personal information held by Prometheus about our tenants is among the assets transferred. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. To provide smart and convenient living experiences such as easy access to delivery services, utility services, and technology. As described to you when collecting your personal information.
B	Categories listed in Cal. Civ. Code § 1798.80(e) (including, without limitation, a name, signature, Social Security number, physical characteristics or description, address, telephone number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number)	You (directly) Service providers Third parties Consumer reporting agencies Public records Referral sources	Service Providers Package, mail and delivery service providers Debt-collectors and payment processors Consumer reporting agencies “Smart” property leasing product retailers Rental Screening data providers Management Software Service Providers As directed by you
C	Protected classification characteristics under California or federal law (including, without limitation, age,race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex [including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions], sexual orientation, veteran or military status, genetic information)	You (directly) Service providers Third parties Consumer reporting agencies Public records Referral sources	Service Providers Consumer reporting agencies Rental Screening data providers Management Software Service Providers As directed by you
D	Commercial information including, without limitation, Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)	You (directly) Service providers Third parties Consumer reporting agencies Public records Referral sources	Service Providers Debt-collectors and payment processors Consumer reporting agencies As directed by you
E	Biometric information	Service providers	N/A
F	Internet or similar network activity (such as browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement)	You (directly) Service providers Third parties	Service Providers As directed by you
G	Professional or employment-related information (such as current or past job history or performance evaluations)	You (directly) Service providers Third parties Consumer reporting agencies Public records	Service Providers Debt-collectors and payment processors Consumer reporting agencies Rental Screening data providers As directed by you
H	Geolocation data (including precise location data derived from use of keycards access, GPS coordinates or telemetry data.)	You (directly) Service providers	Service Providers As directed by you

3. Use of Information Obtained by Prometheus

You have the right to request that Prometheus delete personal information that we collected from you and retained, subject to certain exceptions. To submit a request, please log in to your online account and visit our online request portal:
https://prometheusapartments.com/privacy/online-privacy-policy-portal or call our toll-free number, 1-888-977-1383. In order to process your request, you must first verify you are the person about whom we collected personal information. If your request relates to non-sensitive information, we can verify your identity by our online account login information, or if you do not have an account, by matching at least two data points provided by you with two data points already maintained by Prometheus.

However, if your request involves sensitive personal information, we must first verify your identity by matching at least three pieces of Personal Information provided by you with Personal Information maintained by Prometheus that we have determined to be reliable. Then, you must provide a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.

4. Right to Opt-Out of the Sale of Personal Information

You have the right to request a business that sells or shares personal information to third parties not to sell or share your personal information. Prometheus does not sell personal information to third parties for monetary consideration. However, the collection of data on our behalf by certain of our third-party website analytics or digital advertising service providers may be considered a “sale” and is considered “sharing” under the CPRA. For example, we use Google Analytics to help us understand how our website is used. To not have your information shared with such parties, please visit Do Not Sell or Share My Personal Information. If you would like to opt-out from the use of your information by Google Analytics, you may use Google Analytics’ opt-out browser add-on designed for this purpose.

Please note that you may need to manage your cookie preferences as discussed above for each device you use to access our website. If you block certain cookies, some of our website functionality may not work properly. To not have your information shared with such parties, please visit “Do Not Sell or Share My Personal Information”. If you would like to opt-out from the use of your information by Google Analytics, you may use Google Analytics’ opt-out browser add-on designed for this purpose.

Prometheus does not have actual knowledge that it sells or shares personal information about minors under the age of 16.

5. Request Processing and Timing

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Any disclosures we provide in response to data access and/or data portability requests will only cover the 12-month period preceding the receipt of your request. We will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance, which in most cases will involve Adobe PDF and comma delineated data files. We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

6. Right to Non-Discrimination for the Exercise of Privacy Rights

We will not discriminate against you for exercising any of your CCPA rights. This means that, unless permitted by the CCPA, your exercise of these rights will not result in Prometheus: (1) denying you goods or services; (2) charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (3) providing you a different level or quality of goods or services; or (4) suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

7. Designating an Authorized Agent

If you use an authorized agent to submit a request for additional disclosures described in Section II or a request for deletion described in Section III, he or she must provide their name, email address, phone number, and written permission from you that includes your contact information. We will contact you using the information provided and verify your identity directly with us.We cannot respond to your request to provide additional disclosures or delete any personal information if we cannot verify your identity and the authorized agent’s authority to make the request on your behalf lf. Written permission is not required if the agent provides proof of power of attorney pursuant to Probate Code sections 4000 to 4465, or you are submitting the request on behalf of your minor child.

8. Changes to Our Privacy Notice

This privacy notice was last updated on August 23rd, 2022. Prometheus reserves the right to amend this privacy notice at its discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our website and update the notice's effective date.