Information on the Processing of Personal Data and Cookies

1. Who is the controller of your personal data?

The controller of your personal data is U PAŘÍŽANA s.r.o., Business ID No. 119 36 169, with its registered office at Milevská 2094/3, Krč, 140 00 Prague 4, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 356666 (the “Company”, “Controller”, “we”, “us” or “our”). The Company owns the Dům U Pařížana building at 28. října 1001/3, 110 00 Prague 1, and leases space in it. The terms “you” and “your” refer to you as the data subject whose personal data we process.

We process personal data in accordance with applicable data protection legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR”), and Act No. 110/2019 Coll., on the processing of personal data, as amended.

2. What is personal data?

Personal data is any information about you as a natural person by which you can be directly or indirectly identified, such as your name, contact details, job title, date of birth or bank account details. The scope of the data processed depends on the purpose of processing.

We do not process special categories of personal data within the meaning of the GDPR (e.g. data concerning health, racial or ethnic origin, religious beliefs or political opinions).

3. To what extent and for what purposes do we process your personal data?

We process personal data only to the extent necessary for the given purpose. We obtain data mainly directly from you, from our letting agent Savills CZ s.r.o., which handles the leasing of the premises for us and passes on to us the details of prospective tenants (see section 5), and from publicly available registers and records (Commercial Register, Register of Beneficial Owners, Trade Register, Insolvency Register, VAT register, etc.).

Our tenants are predominantly companies and other legal entities. We therefore mainly process personal data of their representatives and contact persons.

a) Enquiries and interest in leasing space

• If you contact us via the contact form on the project website, by e-mail or by telephone, we process your name and surname, e-mail address, telephone number, company name, job title and the content of your enquiry or request.
• We use this data to respond to your enquiry, to send you information about the project and available space, to arrange a viewing or personal presentation, and to negotiate a potential lease agreement.

b) Conclusion and performance of a lease agreement

• For representatives and contact persons of a tenant that is a legal entity, we process their name, surname, job title, e-mail, telephone number, details of their authority to act on behalf of the tenant (e.g. power of attorney, position as a statutory body member) and signature.
• Where the tenant or guarantor is a natural person (entrepreneur), we also process their business name, Business ID No., VAT No., registered office or residential address, date of birth and bank account number.
• Before concluding an agreement, we may verify the identity and reliability of the prospective tenant, including its ownership structure and beneficial owner, using public registers and documents you provide to us.
• During the lease term, we process the contact details of persons designated by the tenant for communication, operation and management of the premises (e.g. handover of premises, service charge reconciliation, technical matters).
• We also process data from agreements and tax documents to comply with our legal obligations in the field of taxation and accounting.

c) Suppliers

If you supply goods or services to us, we process your name, surname, business name, registered office, Business ID No., VAT No., telephone number, e-mail, job title and bank account number for the purpose of concluding and performing the agreement and complying with our legal obligations in the field of taxation and accounting. For representatives of legal entities, this includes contact details (name, surname, e-mail, telephone, job title).

d) Visiting the website

When you visit the project website, we process technical data and data obtained through cookies, see section 12.

4. What is the legal basis for processing?

We process personal data on the following legal grounds:

• negotiation, conclusion and performance of a contract (Art. 6(1)(b) GDPR);
• compliance with a legal obligation, in particular in the field of taxation and accounting (Art. 6(1)(c) GDPR);
• our legitimate interest (Art. 6(1)(f) GDPR), in particular:
  • responding to enquiries received via the contact form, by e-mail or by telephone, and presenting the project to prospective tenants;
  • communicating with representatives and contact persons of tenants, suppliers and other business partners that are legal entities;
  • verifying the identity and reliability of a prospective tenant before concluding an agreement;
  • ensuring the security and technical operation of the website;
  • protecting, exercising and defending our legal claims;
• your consent (Art. 6(1)(a) GDPR) for analytics cookies. You may withdraw your consent at any time (see section 12).

5. To whom do we disclose personal data?

Processors

We use service providers who process personal data on behalf of the Controller and in accordance with its instructions, under a data processing agreement:

• the website operator and hosting provider: Cloudflare, Inc.;
• the provider of the service for sending e-mails from the contact form: Plus Five Five, Inc. (the Resend service);
• Google Ireland Limited, provider of Google Analytics (only with your consent);
• providers of IT, e-mail and cloud services, the property manager and external accountants, where they come into contact with personal data in the course of their services.

Other recipients

To the extent necessary, we may also disclose personal data to entities that process it as independent controllers, in particular:

• our letting agent Savills CZ s.r.o., Business ID No. 055 61 281, with its registered office at Na Florenci 2139/2, 110 00 Prague 1, which handles the leasing of the premises for us. We pass on enquiries from prospective tenants to Savills to respond to them, arrange viewings and presentations and negotiate leases. If you contact Savills directly, Savills obtains your data itself. Savills processes personal data as an independent controller in accordance with its own privacy policy published at www.savills.cz and may use IT infrastructure of the Savills plc group in the United Kingdom;
• legal, tax and other professional advisors and auditors;
• banks and other entities financing the project, and potential investors in or purchasers of the property, limited to data contained in lease agreements and only where necessary;
• public authorities and institutions to the extent required by law (e.g. tax authorities, the Land Registry);
• courts, arbitrators, enforcement officers and notaries where necessary to exercise or defend legal claims.

6. What happens if you do not provide the requested data?

Providing personal data is voluntary. However, without your contact details we cannot respond to your enquiry or send you information about the project. Without the data necessary to conclude and perform a lease or other agreement and to comply with our legal obligations, we cannot conclude or perform the agreement.

7. Security of personal data

We use appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, destruction or misuse. We require the same of our processors.

8. How long do we keep personal data?

The retention period depends on the purpose of processing. We may process personal data for several purposes at the same time.

• Enquiries and interest in leasing that do not result in an agreement: no longer than 12 months from the last contact, unless there is another purpose of processing.
• Agreements and related correspondence: for the term of the contractual relationship and up to 10 years after its termination, with regard to the limitation periods for contractual claims.
• Accounting and tax documents: for the period required by law, up to 10 years.
• Cookies: see the table in section 12.

9. Transfers of personal data outside the EU

We process personal data primarily within the European Union and the European Economic Area (EEA). Data may be transferred outside the EU/EEA in the following case:

• when Google Analytics is used, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision.

The website is hosted by Cloudflare, Inc., and e-mails from the contact form are sent via the Resend service of Plus Five Five, Inc. Both companies are based in the USA, so technical data and data from the contact form may also be processed there. Both are certified under the EU-U.S. Data Privacy Framework.

If data were to be transferred to any other third country without an adequate level of protection, we will ensure appropriate safeguards, in particular standard contractual clauses approved by the European Commission.

10. What are your rights?

In relation to the processing of your personal data, you have the following rights:

• the right to information about processing and the right of access to your personal data;
• the right to have inaccurate personal data rectified or incomplete data completed;
• the right to erasure, in particular where the data is no longer necessary for the purpose for which it was collected, where you withdraw your consent and there is no other legal ground for processing, where you raise a justified objection, or where the data is processed unlawfully;
• the right to restriction of processing, e.g. while the accuracy of the data is being verified or your objection is being assessed;
• the right to data portability in respect of data you have provided to us and that we process by automated means on the basis of consent or a contract;
• the right to object to processing based on our legitimate interest. In that case, we will no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;
• the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by e-mail at tereza.pernicova@dli-project.cz or in writing at the registered office address stated in section 1. We retain communications relating to the exercise of your rights in order to demonstrate compliance with our obligations.

11. Contact details and complaints

If you have any questions or comments about the processing of your personal data, please contact us by e-mail at tereza.pernicova@dli-project.cz or in writing at U PAŘÍŽANA s.r.o., Milevská 2094/3, Krč, 140 00 Prague 4.

You also have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz, website: www.uoou.cz.

12. Cookies

When you visit the project website, we process technical data such as your IP address, date and time of access, the page visited, and your browser and operating system type. We process this data on the basis of our legitimate interest in ensuring the technical operation and security of the website.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device, function properly and measure traffic.

Which cookies do we use?

• Technical (strictly necessary) cookies: ensure the basic functions of the website and store your cookie preferences. We use them without consent on the basis of our legitimate interest.
• Analytics cookies (Google Analytics): used to measure traffic and evaluate how the website is used. We only store them with your consent given via the cookie banner. The data is evaluated in aggregate form.

You can withdraw or change your consent at any time in the cookie settings on the website or by deleting cookies in your browser. We keep your consent to analytics cookies for a maximum of 12 months, after which we will ask for it again.

For more information on how Google Analytics processes data, see https://policies.google.com/privacy. You can also disable Google Analytics tracking with the browser add-on available at https://tools.google.com/dlpage/gaoptout.

13. Changes to this information

We may update this information from time to time. The current version is always published on the project website.

Last updated: 4 November 2026