Personal data protection and privacy of our customers is crucial to us. We exert due care, that contacts are protected and controlled in compliance with respective regulations. Below we are stating information on the processing of personal data within the meaning of respective regulations, especially the Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Who controls personal data? The controller of personal data disclosed by you is the company CRESTYL real estate, s.r.o., with the seat at Voctářova 2449/5, Libeň, 180 00 Prague 8, ID.no.: 25053175, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Entry 45417 (hereinafter only "CRESTYL"), as well as other companies belonging to the CRESTYL entrepreneurial group carrying on business in the area of real estate in the CR and focusing on individual CRESTYL projects (hereinafter only the "SPV") (CRESTYL and the SPV hereinafter collectively only the "Controller").

Purposes and legal basis for the processing of personal data The processing of personal data will be carried out in compliance with the principles laid down by valid legal regulations, especially pursuant to Articles 5, 6, 25 and 32 of the General Data Protection Regulation. The Controller has taken appropriate technical and other measures to ensure protection of personal data being processed.

Purpose of the processing of disclosed data is performance of activities to which our clients will potentially give their consent, or performance of a potential contract with a client, or implementation of a measure before conclusion of this contract on the basis of a request.

The provision of personal data is necessary for performance of activities, to which our client gives his/her consent, or for conclusion and performance of a contract, or implementation of a measure before its conclusion and these acts cannot be made without their disclosure.

Duration of the processing In the event that a legal basis for the processing is the client's consent, the processing of personal data will be carried out until such consent is withdrawn, for a maximum period of 3 years since the date of giving consent. In the event that the processing is carried out for the purpose of performance of a contract, it will take place within the periods stated in the Controller's Document Management and Destruction Rules.

Other information on the processing of personal data

Processors of personal data

The processing of personal data is carried out by a controller. The controller has the right to entrust a processor in the Czech Republic, who provides sufficient and credible guarantees in terms of technical and organizational measures to secure personal data. The processing of personal data is carried out in technically and physically secured electronic information systems.

Transfer of personal data to third countries

The controller does not intend to transfer personal data to the third country or to an international organization.

Automated decision-making

We hereby inform that personal data will not be used for the decision-making based purely on automated processing.

Contact details of the controller

In case of any suggestions, queries, or confusion with respect to the processing of personal data including complaints, it is possible to contact the Controller's representative for the area of personal data at the postal address Voctářova 2449/5, Libeň, 180 00 Prague 8, by e-mail at the address psp@crestyl.com, by fax on the no. +420 226 202 827 or by phone on the no. +420 226 202 800.

Contact details of the Supervisory Authority

In case of doubts on compliance with the obligations associated with the processing of personal data, it is also possible to lodged a complaint at the Office for Data Protection, with the seat at Pplk. Sochora 27, 170 00 Praha 7, e-mail: posta@uoou.cz, www.uoou.cz.

Advice of your rights What rights do you have in connection with the processing of personal data?

Right to withdraw consent means that you have the right to withdraw your consent to the processing of your personal details, provided that the processing is based upon such consent. You can do this any time, in writing, at the following contacts: at the postal address Voctářova 2449/5, Libeň, 180 00 Prague 8, by e-mail at the address psp@crestyl.com, by fax on the no. +420 226 202 827, this being without any additional costs and consequences for existing, or future contractual relationships between you and the Controller. In this case the Controller shall discontinue all processing activities. However, withdrawal of this consent does not mean that the Controller would need to delete personal data, which the Controller processes for the purpose of performance of a contract concluded with you. Withdrawal of your consent does not affect the processing of personal data before its withdrawal.

Right of access to personal data means your right to request information (confirmation) from the Controller, whether your personal data are being processed, or not. In the event that the Controller processes personal data, you have the right to obtain them from him/her along with other information on their processing.

Right to rectification means that you have the right that the Controller will rectify without undue delay inaccurate personal data which relate to you. With regard to purposes of the processing, you also have the right for completion of incomplete personal data.

Right to erasure means an obligation of the Controller to delete personal data, which he/she processes about you, if at least one condition is met:

• personal data are no longer needed for the purposes, for which they were collected, or otherwise processed

• you withdrew your consent to the processing of personal data and no legal basis for their processing exists on the side of the Controller

• you have raised an objection to the processing of your personal data an no overriding legitimate reasons for the processing exist on the side of the Controller

• personal data have been unlawfully processed

• personal data must be erased for compliance with a legal obligation of the Controller

• personal data have been collected in relation to the offer of information society services.

The aforementioned conditions shall not apply, if the processing of personal data is necessary:

• for exercising the right of freedom of expression and information

• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller

• for reasons of public interest in the area of public health

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in, if it is likely to render impossible or seriously impair the achievement of the objectives of the said processing

• for the establishment, exercise or defense of legal claims.

Right to restriction of processing means your right to obtain from the controller restriction of the processing of your personal data, provided that:

• you contest the accuracy of personal data, which the Controller processes about you, for a period enabling the Controller to verify the accuracy of the personal data

• the processing of personal data is unlawful, but the Controller opposes their erasure and you request the restriction of their use instead

• the controller no longer needs the personal data for the purposes of the processing, but you request them for the establishment, exercise or defense of your claims

• you have raised an objection to the processing on the ground of decision-making merely on the basis of automated processing, unless it is verified that legitimate grounds of the Controller override your legitimate grounds.

If the processing has been restricted under some of the aforementioned grounds, the personal data in question shall, with the exception of their storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. The Controller is obliged to inform you in advance that the restriction of the processing of personal data has been lifted.

Right to data portability means your right to receive your personal data, which you provided to a Controller, in a structured commonly used and machine readable format and the right to transmit those data to another controller, in the event that:

• the processing of personal data is based on consent or on a contract; and

• the processing is carried out by automated means.

In exercising your right to data portability you have the right to have the personal data transmitted directly from the Controller to another Controller. This does not apply, when the transmission is not technically feasible. Right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest, or in the exercise of public authority.

Right to object against the processing of personal data, including profiling, means, that if you exercise this right, the Controller shall no longer process your personal data, unless the Controller demonstrates compelling and legitimate grounds, which must override your rights and interests. The Controller can further process such personal data, provided that this is necessary for performance and defense of legal claims. In the event that an objection is raised against processing for direct marketing purposes, the legitimate grounds of the Controller are no longer examined.

How can you exercise your rights? You can exercise your rights following from the processing of personal data at any time as the personal data subject by contacting the Controller at the postal address Voctářova 2449/5, Libeň, 180 00 Praha 8, by e-mail at the address psp@crestyl.com, by fax on the no. +420 226 202 827, or by phone on the no. +420 226 202 800. The Controller can charge a fee for disposing of the application only if this is permitted by appropriate legal regulations.

List of SPVs within the Crestyl group AV - HD partneři s.r.o., Id.no.: 27177262

Beroun Hills, s.r.o., Id.no.: 27911764

Brno New Town Square, s.r.o., Id.no.: 05443571

CASCADE management, s.r.o., Id.no.: 28400747

Crestyl CP s.r.o., Id.no.: 04529529

CRESTYL properties s.r.o., Id.no.: 27621588

CRESTYL real estate, s.r.o., Id.no.: 25053175

CT CRESTYL s.r.o., Id.no.: 28467132

DOCK 02, s.r.o., Id.no.: 04598369

DOCK 03, s.r.o., Id.no.: 05801087

DOCK boat, s.r.o., Id.no.: 06095704

DOCK V1, s.r.o., Id.no.: 28467108

Docks Commercial s.r.o., Id.no.: 28198883

DR BC4, s.r.o., Id.no.: 27912914

FACILITY PRO s.r.o., Id.no.: 28166990

Grafická 1 s.r.o., Id.no.: 05779871

HUTS real estate s.r.o., Id.no.: 27402401

CHATHAM s.r.o., Id.no.: 26184605

KCC Development s.r.o., Id.no.: 06143849

Marina Boulevard s.r.o., Id.no.: 06143849

NR7 s.r.o., Id.no.: 06095755

Projekt Barrandov s.r.o., Id.no.: 28510968

PZ IV, s.r.o., Id.no.: 27911705

Rezidence Vinohradská s.r.o., Id.no.: 04529847

Rezidence Vokovice s.r.o., Id.no.: 28887760

Rezidence Vršovice s.r.o., Id.no.: 27912931

River edge s.r.o., Id.no.: 03047695

River Watch 1 s.r.o., Id.no.: 02580209

River Watch 2 s.r.o., Id.no.: 02581191

River Watch 3 s.r.o., Id.no.: 02580993

Sarka Valley s.r.o., Id.no.: 06095623

STYLCREST, s.r.o., Id.no.: 27606228

Tulipa Vokovice s.r.o., Id.no.: 26151995

VUJEZD, s.r.o., Id.no.: 27914402

WELWYN COMPANY, a.s., Id.no.: 26310554

ZAMECKE ZAHRADY CENTRUM, s.r.o., Id.no.: 05340420

ZAMECKE ZAHRADY I., s.r.o., Id.no.: 02607212

ZAMECKÉ ZAHRADY II., s.r.o., Id.no.: 04669436

Apartments

Penthouse

Terrace apartments

Apartments with front gardens