PERSONAL DATA PROCESSING AND PRIVACY POLICY

1. Who we are and who this policy applies to

The controller of your personal data is Cityspace24 s.r.o., with its registered office at Kaprova 42/14, 110 00 Prague 1, ID No. (IČO): 23955619, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 435836 (hereinafter referred to as the "Controller" or "Operator"). We specialize in providing automated self-storage containers and parking spaces, as well as related services for natural and legal persons (hereinafter referred to as the "Lessee"). In case of any questions regarding data processing, you can contact us at the email office@cityspace24.cz.

2. What information we collect and for what purpose

In order to provide you with our storage capacities and ensure the smooth operation of our services, we process the data you provide to us during registration and contract conclusion.

• Natural persons: We primarily record your first name, last name, date of birth (or birth number), and residential contact address.
• Entrepreneurs and companies: Additionally, we process your business name, ID No. (IČO), any distinguishing additions, and the address of your registered office or place of business.

We use this information primarily to fulfill the lease agreement itself, maintain your client file, manage your user account on our website, and for marketing activities. From a legal perspective, we rely on Article 6(1)(b) and (f) of the GDPR regulation (processing necessary for the performance of a contract and the legitimate interest of the Controller).

3. Property protection using a camera system

The security of your belongings is crucial to us. The premises of our storage containers are therefore continuously monitored by a camera system.

• Purpose and legal basis: Prevention of vandalism, protection of property, health, and life (legitimate interest under the GDPR).
• Operating rules: All monitored zones are clearly marked with information signs. Standard recordings are automatically deleted after a maximum of 14 days.
• Exceptions: If we record a security incident, we will retain the recording and hand it over to the police, courts, or other law enforcement authorities.

4. Data retention period and data transfer to third parties

We protect and retain your personal data only for the duration of our contractual relationship, or for the period strictly required by law.

• Data transfer: Under no circumstances do we sell your data or transfer it to countries outside the EU. The only exception is the sharing of the necessary minimum of information with the operator of our payment gateway for the purpose of matching and processing your payments for the duration of the contract.
• Profiling: We do not engage in any automated decision-making or profiling of our clients.

5. Commercial communications and marketing

As our client, you may occasionally receive an email from us with news or offers regarding our storage services. This right arises from Section 7, Paragraph 3 of Act No. 480/2004 Coll. If you are not interested in these messages, you can easily and completely free of charge unsubscribe from them at any time.

6. Overview of your rights (GDPR)

As a data subject, you have full control over your information. At any time, you have the right to:

• Request an extract and access to the data we keep about you.
• Request the correction of inaccuracies or the complete erasure of your personal data.
• Restrict their processing or raise an objection.
• Request data portability to another provider.
• File a complaint directly with the Office for Personal Data Protection if you believe we have erred.

7. Communication rules and General Terms and Conditions (GTC)

For maximum flexibility, we have agreed that all official contractual communication (including terminations and modifications of conditions) does not require a paper format, and an electronic format via email is fully sufficient.

• Email communication: Communication must take place via the email address paired with your user account, which must be kept active. Please report any email changes to us in advance or immediately after implementing them. Each of your emails must include a signature so that we can clearly identify you.
• GTC changes: We may update the wording of the terms and conditions in the future. We will always inform you of any changes on the website. The new conditions will apply to you from the effective date if you accept them – even de facto by continuing to use the container. If you do not agree with the changes, you have the right to reject them and terminate the contract in writing with a 30-day notice period.

8. Final provisions

All our legal relations, regardless of where you are from, are governed exclusively by the laws of the Czech Republic. Any disputes will be resolved at the competent general court of the Operator.

Should any point of these rules become invalid, it has no effect on the validity and effectiveness of the remaining provisions.

This policy enters into force on June 1, 2026.