Information on the processing of personal data
The company Misterbox, s.r.o., with its registered office in Prague 10, Ke kolodějskému zámku 93/6, ZIP code 107 00, Company ID: 243 00 845, VAT ID: CZ24300845, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 194506, together with the company Blue Space Solutions s.r.o., with its registered office in Prague 10, Ke kolodějskému zámku 93/6, ZIP code 107 00, Company ID: 116 86 821, VAT ID: CZ11686821, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 352893 (hereinafter jointly referred to as the “Controller”), place great emphasis on complying with the principles and rules for the protection of natural persons in connection with the processing of their personal data. All personal data is considered confidential and is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “Regulation”).
The purpose of the above principles regarding the processing of personal data is to provide information on what personal data the Controller collects, stores, and processes about natural persons who are in the position of potential customers, customers and their representatives, including members of statutory and other bodies, and website visitors, for what purposes and for how long such personal data is processed in accordance with applicable legal regulations, to whom and for what reason it may be disclosed, and to inform about the rights of natural persons in connection with the processing of their personal data.
Pursuant to Article 13 of the Regulation, the Controller hereby provides the data subject with the necessary information regarding the processing of personal data provided by them.
Controller contact details
Correspondence address: Prague 10, Ke kolodějskému zámku 93/6, ZIP code 107 00
Phone: +420 725 123 567
E-mail: fakturace@misterbox.cz, info@skladuju.cz
What personal data is processed and for what purpose
Customer data
| Purpose of personal data processing: | implementation of the process leading to the conclusion of a lease agreement for the rental of a specific shipping container and its subsequent conclusion and performance. |
| Legal basis for processing personal data: | processing of personal data is necessary in connection with the conclusion and subsequent performance, amendment or termination of a specific lease agreement to which the data subject is a party, legitimate interest of the Controller – provision of relevant content on the website (automatically processed personal data, cookies) |
| Scope of processed personal data: | first name, last name, academic title, mobile phone number, e-mail address, permanent residence (registered office) address, date of birth, bank account number, ID card number, Company ID and VAT ID, username and password used by the data subject to log in to the online interface operated by the Controller. |
Personal data automatically processed by the Controller:
When visiting the website, the Controller is entitled to collect automatically obtained information such as IP address, date and time of access to the website, information about the internet browser, operating system or language settings. The Controller may also process information about the behavior of specific visitors on its website, i.e. for example which links were visited and which services were viewed by the visitor.
If a visitor accesses the website from a mobile phone or similar device, the Controller may process information about that mobile device (in particular data related to the mobile phone).
Cookies are also processed automatically by the Controller, while any personalization and targeted advertising can be disabled by the customer at any time within the privacy settings section, which is typically part of all internet browsers.
| Legal reason for providing personal data: | conclusion of a specific lease agreement, communication and customer care, management of a user account. |
| Retention period of personal data: | Personal data will be retained by the Controller for the entire duration of the relevant lease agreement and for a period of three years after its termination, primarily for the purposes of potential disputes arising from the lease agreement. |
Camera recordings
| Purpose of processing: | protection of the Controller’s and customers’ property, ensuring security on the Controller’s premises, prevention and possible investigation of unlawful activities. |
| Legal basis for processing: | processing of personal data obtained from camera recordings is necessary due to the legitimate interest of the Controller (protection of property and ensuring security on the premises). |
| Scope of processed personal data: | appearance and behavior of visitors within the Controller’s premises. |
| Retention period: | camera recordings are stored for a period of 14 days. |
Recipients of personal data
The Controller is entitled to provide the personal data (to the extent specified above) to other processors for further processing, namely natural or legal persons providing accounting services, website administration, IT services and software support, who process the relevant personal data on behalf of the Controller and provide adequate guarantees of proper processing and protection of personal data, including protection through appropriate technical or organizational measures against unauthorized or unlawful processing and against accidental loss, destruction or damage. Recipients may also include law enforcement authorities or other public authorities in cases stipulated by law where the Controller is obliged to disclose certain personal data.
The Controller does not have access to payment card details used by customers to pay for services. When paying by card online, customers are redirected to a secure server of the international payment gateway Stripe, operated by Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Payment card details are therefore not transmitted to the Controller but are securely transmitted directly to the payment gateway provider. Full payment card details are accessible only to the secure Stripe payment gateway and the respective banking institution.
Information about personal data protection by Stripe Payments Europe Ltd. is available at: https://stripe.com/en-cz/privacy.
Transfer of personal data to third countries
If your personal data is transferred to other processors for further processing, such processors are located either within the European Union or in countries outside the EU (in this case only the United Kingdom), which ensure an adequate level of data protection equivalent to that within the EU. The equivalence of data protection in the United Kingdom is guaranteed by the European Commission Implementing Decision C (2025) 3928 of 24 June 2025, amending Implementing Decision (EU) 2021/1772 adopted pursuant to Regulation (EU) 2016/679.
Data subject rights
The data subject has the right to access personal data processed about them, to request correction or deletion, to restrict processing, the right to data portability, and the right to object to processing.
These rights can be exercised electronically via e-mail at fakturace@misterbox.cz, info@skladuju.cz, by phone at +420 725 123 567, or in writing at the Controller’s registered address. The data subject also has the right to lodge a complaint with the Office for Personal Data Protection or another competent supervisory authority.