1. INTRODUCTORY PROVISIONS
Through this Privacy Policy, the Controller of your personal data fulfils its information obligation towards data subjects, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (“GDPR”).

The primary purpose of this personal data processing policy (hereinafter referred to as the “Policy”) is to provide data subjects with information on how their personal data provided to PERFECT STORAGE s.r.o. is collected and processed in connection with the performance of a Sublease Agreement for non-residential premises for storage, for the fulfilment of the controller’s legal obligations, or on the basis of a legitimate interest of the controller or third parties, for what purpose the provided personal data is processed, and what the rights of data subjects are and the options for their exercise.

Personal data means any information relating to an identified or identifiable natural person (data subject). The controller of the personal data is the company PERFECT STORAGE s.r.o. (hereinafter referred to as the “Data Controller”).
This Policy is issued primarily in connection with the processing of personal data provided on the basis of consent to the processing of personal data; however, it shall also apply mutatis mutandis to personal data provided to the Data Controller on the basis of a contractual relationship with individual subjects or other legal grounds.

2. DATA CONTROLLER
Identification and contact details of the Data Controller:
PERFECT STORAGE s.r.o.
ID No: 044 84 797, VAT No: CZ04484797
Registered office: Ovocný trh 573/12, 110 00 Prague 1
E-mail: info@perfectstorage.cz
Website: www.perfectstorage.cz
Telephone: 800 777 007
Vysočany Branch: Kolbenova 997/5g, 190 00 Prague 9, tel. 228 226 707, email: vysocany@perfectstorage.cz
Holešovice Branch: Bubenské nábř. 306/13, 170 04 Prague 7, tel. 228 226 407, email: holesovice@perfectstorage.cz
Žižkov Branch: Pod Kapličkou 3155/20, 130 00 Prague 3, tel. 228 224 271, email: zizkov@perfectstorage.cz

3. SCOPE AND PURPOSE OF PROCESSING
3.1 SCOPE OF PERSONAL DATA PROCESSING
In particular, basic identification and contact details of individual subjects are collected and processed (name and surname/business name, date of birth, ID number, residential address/registered office address, email address, telephone number, etc.), or any other personal data provided to the data controller.
3.2 PURPOSE OF PERSONAL DATA PROCESSING
The Data Controller is entitled to use the provided personal data for the purposes of performance based on the Sublease Agreement for non-residential premises for storage, for the fulfilment of the controller’s legal obligations, or on the basis of a legitimate interest of the controller or third parties. Personal data is also processed for the purpose of fulfilling the Controller’s contractual obligations and fulfilling the obligations imposed on the Controller by law.
3.3 DATA SECURITY
The Data Controller has taken appropriate security measures (in particular technical and organisational) to protect the personal data of subjects against any accidental loss, destruction, misuse, damage and unauthorised or unlawful access. In this context, however, it should be noted that no transmission of data over the internet or data storage technology can be guaranteed to be 100% secure.

4. DATA RETENTION PERIOD
The period for which the provided personal data is stored and processed is ten (10) years from the date of its provision, unless otherwise specified in a particular case.

5. RIGHTS OF DATA SUBJECTS
To exercise the rights of data subjects listed below, or any other rights of data subjects related to the protection of their personal data provided to the Data Controller, you may contact the following contacts:
In writing to the address of the Data Controller: PERFECT STORAGE s.r.o., Ovocný trh 573/12, 110 00 Prague 1. By e-mail to the address: info@perfecttorage.cz.
The provision of certain identification data may be required to verify identity. The provision of such data is necessary to verify whether the relevant request has been made by an authorised applicant. The Data Controller shall respond within 30 days of receipt of the request.

5.1 INDIVIDUAL RIGHTS
Each data subject has, in accordance with the applicable legal regulations and with regard to the scope of the personal data provided and the purpose of its processing, primarily the right to request access to their personal data, the right to its rectification and completion, the right to request restriction of the processing of personal data, the right to the erasure of their personal data and the right to withdraw consent to the processing of personal data at any time (if the personal data is processed on the basis of consent).

5.2 ACCESS TO AND RECTIFICATION OF PERSONAL DATA
Each data subject has the right to access all of his or her personal data stored with the Data Controller and to information on the scope and form of such personal data and the manner in which it is processed by the Data Controller.
Furthermore, each data subject has the right to the correction of errors and inaccuracies concerning his/her personal data, as well as to its updating and completion.

5.3 WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA
Consent to the processing of personal data may be withdrawn at any time without giving any reason. In such a case, the personal data will be blocked from any further processing.
However, the withdrawal of consent to the processing of personal data is only effective for the future, and the lawfulness of the previous processing of personal data based on such consent remains unaffected by its withdrawal.
The withdrawal of consent to the processing of personal data can be made by letter or e-mail sent to the address of the Data Controller mentioned in this article of the Policy.

5.4 ERASURE OF PERSONAL DATA
Any data subject may at any time request the Data Controller to erase his or her personal data. In such a case, the Data Controller shall, without undue delay, erase all personal data of the data subject that it holds, unless it no longer needs such personal data (e.g. for the provision of services, performance of a contract or enforcement of its claims).
Similarly, the Data Controller will proceed in the event of withdrawal of consent to the processing of personal data (if the personal data is processed on the basis of consent).

5.5 RESTRICTION OF PROCESSING OF PERSONAL DATA
In the case of a request for restriction of the processing of personal data, e.g. where the data subject disputes the accuracy, lawfulness or necessity for the Data Controller to process the personal data of the data subject, the Data Controller shall restrict the processing of the personal data of the data subject to the necessary minimum (storage), and shall process it, where appropriate, only for the establishment, exercise or defence of its legal claims, or for the protection of the rights of another natural or legal person or for other reasons prescribed by applicable law.
In the event that the restriction on the processing of personal data is terminated and the processing is continued, the data subject concerned shall be informed of this fact without undue delay.

5.6 COMPLAINT TO THE OFFICE FOR PERSONAL DATA PROTECTION
Any complaint concerning the processing of personal data may be lodged with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
5.7 Where personal data are processed for the purposes of the legitimate interests of the Data Controller or of another person, the data subject shall have the right to object to such processing at any time. An objection may be raised via the contact details mentioned above. If the data subject raises such an objection, the Data Controller is entitled to continue such processing only if it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, and further where the processing is necessary for the establishment, exercise or defence of legal claims. Where the Data Controller processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to such processing. The objection may be raised via the contact details mentioned above. If the data subject raises such an objection, the Data Controller will no longer process the personal data for direct marketing purposes.
5.8 The data subject is entitled to request that the Data Controller provide him/her with his/her personal data for the purpose of transferring it to another data controller, or that he/she transfer it himself/herself to another data controller. However, the data subject is only entitled to this right in respect of data which the Data Controller processes by automated means on the basis of the data subject’s consent or on the basis of a contract concluded.

6. PROVISION OF PERSONAL DATA, AUTOMATED DECISION-MAKING
All personal data of individual subjects are collected and processed in accordance with the applicable legal regulations and on the basis of their voluntary provision to the Data Controller, whether through consent to the processing of personal data, within a contractual relationship or for another legal reason.
In connection with the personal data provided, there is no automated decision-making or profiling that would have legal effects for data subjects or significantly affect them in any way.
7. DISCLOSURE OF PERSONAL DATA TO OTHER PERSONS
Personal data may be further disclosed to entities authorised under special legal regulations (e.g. law enforcement authorities, etc.) and to persons in the position of personal data processors active for PERFECT STORAGE s.r.o., with whom PERFECT STORAGE s.r.o. will cooperate in providing support. PERFECT STORAGE has the right to entrust the processing of personal data to a processor who provides sufficient guarantees for the protection of personal data, on the basis of a concluded processing agreement.
8. UPDATE OF THE PRIVACY POLICY
The Privacy Policy may be amended or updated from time to time by the Data Controller. Any changes to this Policy will become effective upon their posting on the website www.perfectstorage.cz.
The current valid version of the Privacy Policy is always published on www.perfectstorage.cz.