1. Data Controller

This Privacy Policy explains how Belvárosi Raktárkezelő Kft. (“City Storage”, “we”, “us”, or the “data controller”) collects, uses, stores, and protects the personal data of natural persons who visit our website, contact us, request an offer, or enter into a business relationship with us.

Company name	Belvárosi Raktárkezelő Kft.
Registered office	1065 Budapest, Bajcsy-Zsilinszky út 31., Hungary
Company registration number	01-09-394447
Tax number	27552366-2-42
EU VAT number	HU27552366
Bank account number	MKB Bank 10300002 13293639 00014908
E-mail	info@citystorage.hu
Phone	+36 30 335 61 08
Managing directors	Arnold Molnár, Ádám Béla Sólyom

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Hungarian laws.

Data Protection Officer (DPO): pursuant to Article 37 GDPR, we are currently not required to appoint a data protection officer. If you have any request or question regarding data protection, you may contact us by post or e-mail using the contact details above; we will respond without undue delay and no later than within 30 days.

Processors: for website hosting, technical operation, consent management, analytics, and marketing activities, we use external service providers.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identification and contact data: name, e-mail address, phone number, provided through the contact or quote request form.
• Quote request data: information voluntarily provided by you, such as preferred location, requested storage size, whether moving assistance is needed, and any additional message.
• Customer and supplier contractual data: personal data required for the conclusion, performance, amendment, termination, and administration of a contract.
• Contact person data for legal entity partners: name, position, phone number, e-mail address, online identifier.
• Traffic and browsing data: IP address, browser type, operating system characteristics, visit time, page / function / service accessed, and clicks, collected via cookies and analytics tools.

3. Purposes and Legal Basis of Processing

Purpose	Legal basis
Responding to enquiries and preparing tailored offers	Pre-contractual steps taken at the request of the data subject – GDPR Article 6(1)(b)
Entering into and performing rental or service contracts, including invoicing	Performance of a contract – GDPR Article 6(1)(b); legal obligation – GDPR Article 6(1)(c)
Compliance with accounting and tax obligations	Legal obligation – GDPR Article 6(1)(c)
Business communication with partners and contact persons	Legitimate interest – GDPR Article 6(1)(f)
Website analytics, campaign measurement, remarketing, and marketing cookies	Consent – GDPR Article 6(1)(a)

4. Recipients of Personal Data

We may disclose personal data, only to the extent necessary, to the following categories of recipients:

• IT service providers, hosting providers, and website maintenance providers.
• Accounting, invoicing, and legal service providers.
• Analytics and online advertising providers, such as Google, Meta, and Hotjar, based on cookie consent.
• Cookiebot / Usercentrics for consent management.
• Public authorities where disclosure is required by law.

Current hosting / technical service provider: Unbounce Germany GmbH, Friedrichstraße 68, 10117 Berlin, Germany, support contact, unbounce.com.

Current consent management service: Cookiebot / Usercentrics, cookiebot.com.

We do not sell or trade personal data. Where a provider is located outside the European Economic Area, or accesses data from outside the EEA, data transfers take place only subject to appropriate safeguards.

5. Retention Periods

• Quote requests that do not result in a contract: generally up to 2 years from the last interaction.
• Customer and supplier contractual data: 5 years from the termination of the contract or business relationship.
• Billing and accounting documents: for the retention period required by applicable law.
• Traffic / log data: generally up to 90 days, mainly for the investigation of security incidents.
• Marketing data and cookies: until consent is withdrawn or until the relevant cookie expires.

6. Data Subject Rights

Under the GDPR, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object where processing is based on legitimate interest;
• right to withdraw consent at any time;
• right to lodge a complaint with a supervisory authority.

To exercise these rights, you may contact us at info@citystorage.hu. We will respond no later than within one month of receipt of your request.

You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11., Hungary, www.naih.hu, e-mail: ugyfelszolgalat@naih.hu.

7. Cookies and Tracking Technologies

A cookie is information stored by your browser on your device that records how you use a website. The website www.citystorage.hu uses cookies and similar technologies to ensure the proper functioning of the site, analyse traffic, measure marketing campaign performance, and improve user experience.

Cookies that are not strictly necessary are used only on the basis of prior consent, which can be given, modified, or withdrawn through the cookie banner.

The website may currently use, among others, the following services: Google Analytics 4, Google Ads remarketing, Meta Pixel, Hotjar, and Cookiebot.

Main cookie categories:

• Strictly necessary session cookies: required for the proper functioning of the website; legal basis: technical necessity and legitimate interest.
• Preference cookies: store user preferences; legal basis: consent.
• Performance and marketing cookies: collect information on user behaviour and support analytics and advertising; legal basis: consent.

8. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or unlawful disclosure.

9. Amendments to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time. The applicable version is always the version published on the website, with the date of the latest update shown at the top of the document.