Privacy Policy

Data Controller

Pursuant to the current data protection legislation, the data controller is:

SMC Selfstorage Management SA

Via Cantonale 24

CH 6900 Lugano (Switzerland) Phone: + 41 91 8800808

SMC Selfstorage Management SA undertakes to adequately inform the data subject about the collection of personal data, and the processing carried out by the Data Controller will be based on the principles of lawfulness, fairness, transparency, limitation of purposes and retention, minimization of data, accuracy, integrity, and confidentiality.

We process your personal data solely for the purpose of complying with applicable laws and regulations. We use your personal data in order to carry out the contract and update our records. Additional consent is required for any other uses.

Type of data processed and processing procedures

We use the data collected for the management and leasing of commercial spaces and spaces for storage and warehousing.

In order to carry out our business, we collect the following personal data from data subjects on our website:

Personal details: first name and surname
Postal address
Email address
Role
Company
Landline and/or mobile number
Other data provided by the data subjects through the CV and the website.

Data provided voluntarily by the data subject

If you use certain services on the website, Personal Data about third parties that you have provided to our organization may be processed.

In this case, the user assumes the role of independent data controller and takes on all the relevant legal obligations and responsibilities.

To this effect, at this point you grant the company the broadest possible indemnity with respect to any objection, claim, demand for compensation for damages resulting from data processing, etc. that may be asserted by third parties whose Personal Data has been processed due to your use of the website’s functions in violation of applicable regulations on the protection of personal data.

In any case, should you provide or otherwise process the personal data of Third Parties while using the Website, you guarantee, from that point on and assuming all related responsibilities, that this specific instance of processing is based on an appropriate legal basis that legitimizes the processing of the information in question.

Legal basis for the processing

The Data Controller processes Personal Data relating to the User if one of the following conditions is satisfied:

the User has given their consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be authorized to process Personal Data without the User’s consent or without another of the legal bases specified below being present, as long as the User does not object to (“opt-out” of) this processing. However, this does not apply in cases where the processing of the Personal Data is governed by European legislation on the protection of Personal Data;
the processing is necessary for the performance of a contract with the User and/or the performance of pre-contractual measures;
the processing is necessary for the fulfilment of a legal obligation to which the Data Controller is subject;
the processing is necessary for the performance of a task carried out in the public interest or for the exercise of public powers vested in the Data Controller;
the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.
It is, however, always possible to ask the Data Controller to clarify the specific legal basis for each processing operation and in particular to specify whether the processing is based on the law, covered by a contract, or necessary to conclude a contract.

Access to data and place of processing

The data collected are processed in accordance with the current legislation only at the Data Controller’s headquarters by:

Internal personnel
External partners and specialists
Other parties in order to comply with legal requirements in Switzerland and possibly abroad.

Transfer of data abroad

The Data Controller does not transmit data abroad; should this happen, the Data Controller will request the specific consent of the data subjects.

Use of data via the web

For users of the website, we process technical data (such as data on the time of access to our website, the duration of the visit, the pages accessed, and data on the terminal device used) in order to be able to provide the website, for cybersecurity reasons, and to make the website easier to use for the end user.

In addition, we use technical “cookies” that are necessary for the functionality of the website and are automatically deleted after the visit.

Cookies and tracking tools

This Website uses Tracking Tools to enable simple interactions and activate features that allow Users to access certain resources of the Service and simplify communication with the Data Controller.

Cookies are Tracking Tools that consist of small pieces of data stored on the User’s browser.

A “Tracking Tool” means any technology that makes it possible to track Users, for example by collecting or saving information on the User’s device.

This Website uses Cookies that are commonly referred to as “technical” Cookies or other similar Tracking Tools to perform activities that are strictly necessary to guarantee the functioning or provision of the Service.

This Website uses Tracking Tools to measure traffic and analyze Users’ behavior in order to improve the Service.

Duration

We retain your personal data only for as long as is necessary in accordance with the purposes of the processing. In the case of analysis, we store your personal data until the analysis has been completed. In the event that we store personal data by virtue of a contractual relationship with you, we will store such data for at least as long as the contractual relationship persists and at most as long as we still have a legitimate interest in retaining it.

Automated processing of data

The data is not currently processed by automated means; if automated decision-making processes were to be used, all data subjects would be informed in a timely and specific manner.

Data retention

We retain personal data for as long as is necessary to achieve the purpose for which we collected it, when we have a legitimate interest in retaining it, and for as long as it is subject to a legal data retention obligation.

Data protection measures

The Data Controller implements appropriate security measures to prevent unauthorized access to and disclosure, modification, or destruction of the Personal Data.

The processing is carried out using computerized and/or digital tools, with organizational procedures and principles strictly related to the purposes indicated.

In addition to the Data Controller, other parties involved in the organization of this Website (administrative, commercial, marketing, legal, and system administration personnel) or external parties (such as third-party technical service providers, couriers, hosting providers, IT companies, and communication agencies) may also have access to the Data and may be designated as Data Protection Officers by the Data Controller where necessary.

An up-to-date list of Data Protection Officers can always be obtained from the Data Controller.

However, security risks cannot be completely excluded, as certain residual risks are for the most part unavoidable.

Rights of the data subjects

The data subjects have the following rights:

access
correction
erasure of the data
restriction of processing
objection to the processing of data by the Association

Data subjects also have the right to obtain the personal data provided free of charge and in a readable format.

They additionally have the right to revoke their consent without thereby affecting the lawfulness of the data processing carried out up to the time of revocation.

Finally, they also have the right to lodge an appeal with the competent data protection authority.

Protection of the personal data of minors

Protecting the personal data of minors is of the utmost importance.

SMC Selfstorage Management SA is aware of its obligation to protect the privacy of minors and refuses to collect data from minors under the age of 18.

Parents and other guardians are encouraged to browse the internet and send emails with their children and to use the internet responsibly.

If a minor under the age of 18 tries to submit their data via a form, it will be rejected, and a notification will be shown that such requests are not accepted from minors under the age of 18.

For this reason, we request that parents and other guardians check and monitor minors’ use of the internet for their safety.

Amendments to the Privacy Policy

The version of the Policy currently in force is published on the website and is available from our organization at the request of the data subject.

The Data Controller reserves the right to modify or simply update the content of this privacy policy, in whole or in part, including as a result of changes in the applicable legislation.

You will be informed of such changes as soon as they are introduced and they will be binding as soon as they are published on the Website.

The company therefore invites you to visit this section regularly so that you are aware of the most recent and updated version of the Privacy Policy, in order to always stay up-to-date on the data collected and its use by the Data Controller.

Last updated: December, 2023