INTRODUCTION AND SCOPE OF THE PRIVACY POLICY

We process personal data in accordance with the General Data Protection Regulation (GDPR) and based on its key principles:

a) legality, fairness, and transparency;

b) purpose limitation;

c) data minimization;

d) accuracy;

e) storage limitation;

f) integrity and confidentiality, and we can demonstrate this (accountability). All data is stored only for the necessary period (as defined below). The purpose of this statement is to clarify how we use the personal data you provide. Our commitment is to protect your rights and control over personal data and privacy. Below, we outline which personal data we collect, how we use it, and which third parties we share it with.

Personal data serves various purposes, detailed below.

COLLECTED PERSONAL DATA

The term "personal data" refers to all information related to you and that identifies you, either on its own or together with other information we have available. C&R Developments s.r.o. collects various types of personal data and special categories of personal data (e.g., health and other sensitive information) about you, including the following (as necessary):

PERSONAL DATA ABOUT CUSTOMERS / CITIZENS

We collect your personal data (name, surname, email, phone contact) for communication regarding future rental and store this data for 5 years.

OUR CAMERA SYSTEMS

Our camera systems are used to protect individuals, property, and data. Persons and vehicles are monitored. Data from these systems is stored for 10 days.

OUR WEBSITE

We do not process any personal data on our website.

INSTITUTIONS AND ENFORCEMENT AUTHORITIES

C&R Developments s.r.o. will disclose personal data if required by law or legal process, for the purpose of performing justice, protecting vital interests, for investigations by enforcement and regulatory bodies, protecting company property, defending its legal rights, protecting the personal safety of website users, or by order of a valid court or enforcement authority.

WITH YOUR CONSENT

We will share personal data with other third parties (other than those listed above, e.g., commercial insurance companies). In such cases, if required by law, we will first ask for your consent to share personal data in this way.

PERSONAL DATA PROTECTION

We are committed to protecting your personal data and use appropriate technical and organizational security measures to protect it from unauthorized or unlawful processing and from accidental loss, destruction, or damage.

INTERNATIONAL TRANSFER OF PERSONAL DATA

We store and process personal data in the Czech Republic. However, there may be cases where we need to transfer personal data outside the European Economic Area (EEA), and we will take appropriate measures to ensure your personal data is properly protected. These measures usually involve reviewing the security practices of data recipients.

YOUR RIGHTS REGARDING PERSONAL DATA

Honesty and transparency are important to us. We are open about the personal data we collect and have established a system that allows you to exercise all your rights related to personal data protection.

If you need to exercise your rights, please contact us via the email below.

ACCESS TO PERSONAL DATA AND CORRECTIONS

You can write to us at any time to request access to the personal data we hold about you, correct certain personal data you believe is inaccurate or irrelevant, or request the deletion or other removal of your personal data. We will update or remove your personal data in

accordance with applicable laws.

DELETION OF INFORMATION

You can request the deletion of your personal data at any time. We will consider your request and, if necessary, comply with it in accordance with the applicable legal framework described above.

AMENDMENTS TO THE POLICY

Our organization is committed to adhering to the fundamental principles of privacy and personal data protection. Therefore, we regularly review our privacy policy to ensure it is accurate and visible on our website, includes the necessary information about your rights and data processing, and complies with applicable legislation. From time to time, we may update the privacy policy to reflect new developments related to the internet and to comply with current laws. If there are any significant changes to the privacy policy, we will inform you via notifications on our website, including access to the latest version of this policy.

OUR CONTACT DETAILS

C&R Developments s.r.o.

Address: Českomoravská 2420/15a, 190 00 Praha 9

Company ID: 27187179 (Data Controller)

Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 102931

Contact details of the Data Controller: 266 055 600

Contact details of the DPO: If you have any questions regarding how we use personal data, how to exercise your rights, or about the privacy policy, please contact us at: gdpr.crd@galerieharfa.cz