GDPR Policy

General Data Privacy Regulation Scope
This document applies if you are an individual located within the European Union, if your Personal Data is collected through engaging with the Urban Land Institute (ULI) within the European Union, or if Personal Data is processed in connection with ULI’s activities within the European Union.

Data Controller
ULI is the data controller for the processing of your Personal Data.  ULI can be contacted regarding the processing of your Personal Data by sending an e-mail to or by calling 1-800-321-5011.

Purpose and Legal Basis for Data Processing
ULI collects personal data such as your name, address, email address, and geolocation.  Financial information may be collected by our payment processor as necessary to process payments.  Ethnic origin information may be voluntarily provided by you to assist ULI in advancing global diversity objectives.

You voluntarily provide and the Urban Land Institute collects your Personal Data as part of your membership agreement with the organization.  Your information allows ULI to ensure that you receive the member benefits to which you are entitled in exchange for paying dues and acting in accordance with ULI membership policies in exchange for paying dues and acting in accordance with ULI membership policies.  In order to gain the benefits of membership, we may require you to provide us with certain information.  This information is noted as “required” on your membership application.  If you choose to withhold certain personal data requested by us, it may not be possible for you to gain access to certain aspects of membership.

The collection of your Personal Data is necessary to support ULI’s legitimate interests as a nonprofit organization.  “Legitimate interests” means the interest of ULI in conducting and managing our organization and fulfilling our charitable and educational mission. For example, we have a legitimate interest in processing your Personal Data when you become a member of ULI or register to attend a ULI event.  When we process your Personal Data for our legitimate interests, we ensure adequate protection of your Personal Data and consider your rights under data protection laws.

Ethnic origin data is considered to be a “special category of personal data” and is collected by ULI in order to carry out our legitimate charitable and educational activities as a nonprofit entity.  Ethnic origin data will not be disclosed outside of ULI without your consent.

If ULI collects your Personal Data for reasons beyond the performance of our obligations to our members or the pursuit of ULI’s legitimate interests, ULI will ask for your consent to collect such data.

If ULI intends to use your information in a way that is different from the reasons for which it was collected, we will notify you before doing so and, if necessary, ask your permission before collecting any additional data or using it in this way.

Recipients of Personal Data

District Council and Product Council chairs have access to listings of members of their groups via the Internet.  ULI members can access a limited amount of contact information about other members via the online Member Directory. Certain ULI staff can access member records via our member management system to manage our membership programs.

ULI will exchange mailing lists with carefully screened organizations to assure that members have the widest knowledge of available opportunities for continuing education, conferences, conventions, meetings, publications, technical services, and other topics likely to be of interest and value. To that end, ULI will exchange our associate member mailing list, on a name for name basis, with organizations publishing information or sponsoring events that are related primarily to real estate development and land use planning.

Processing and Storage of Personal Data
ULI uses an industry leading member management system to securely store and process your Personal Data.  Data Processing of Personal Data is also performed in systems which integrate with the member management system such as email marketing systems, event technology systems, member engagement systems, customer service systems, and data analytics systems.

Any data that is no longer needed for the purposes for which it was collected will be deleted.

Your Rights
Subject to applicable law, you have the following rights in relation to your Personal Data:

  • Right of access: You can request an electronic copy of your personal data contained within our member management system.  Requests should be emailed to  In order to comply with your request, we may ask you to verify your identity.
  • Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to have it rectified or completed. Updates to your Personal Data can be completed at or via email to
  • Right to erasure: You may ask us to delete or remove your Personal Data and we will anonymize your Personal Data so that activities within our member management system will no longer be relatable back to you.  Requests should be emailed to  In some situations, deletion of certain personal data may mean that it may no longer be possible for you to gain access to certain parts of the site or retain access to membership activities.
  • Right to restrict or object to processing: You may ask us to restrict or block the processing of your Personal Data in certain circumstances or to request no contact from ULI.  This includes requesting that your information not be included in the online Member Directory.  Email opt-out requests can be managed in your profile at or via email to
  • Right to data portability: You have the right to obtain your Personal Data from us that is contained within our member management system.  Requests for your data should be emailed to
  • Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on your prior consent. Requests to withdraw consent should be e-mailed to

Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we have handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns.  The relevant authority is the data protection authority in your country of residence, the country where you work, or the country in which the alleged unlawful use of your Personal Data occurred.