PRIVACY STATEMENT

CityLink, located at Weena 730 A in Rotterdam, processes personal data as explained in this privacy statement.

1. Introduction

CityLink Operations B.V., hereinafter: ‘CityLink, ‘we’ or ‘us’ represent owner/landlord who offers warehouse space across Europe. By using the services provided via our website, your personal data will be processed in the manner as described in this privacy notice. Based on applicable data protection and privacy laws such as the General Data Protection Regulation GDPR, we qualify as ‘the data controller’ with respect to the personal data that we process in the context of the operation of this website.

We understand that your privacy is important and that you care about how your personal data is used. We respect and value your privacy and will only collect and use personal data in the manner and for the purposes as described in this document. This use is consistent with our obligations and your rights under the applicable legislation and regulations.

2. Controller

Name: CityLink Operations B.V. Registered in Amsterdam, the Netherlands under company number: 85349798.

Registered address: Weena 730A, 3014 DA, Rotterdam Email address: info@citylink-logistics.com

Telephone number: +31 10 8330111

DPO, Catelijn de Jong, cdejong@citylink-logistics.com

This privacy notice does not cover our activities with respect to our job applicants.

3. What does this privacy notice cover and whose personal data do we process when you visit our website?

This privacy notice covers the collection of personal data from visitors of our website https://citylink-logistics.com/.

We only collect and process personal data that we obtain directly from you (unless someone else makes a request via the website on your behalf).

This privacy notice explains what personal data we process and explains on what legal basis we may process your personal data and:

1. • what personal data we collect;
   • for what purposes and how we may use/process such personal data;
   • how we collect the personal data;
   • how we store the personal data;
   • for what period we store the personal data; and
   • what your rights are under the applicable data protection and privacy legislation.

In view hereof, we encourage you to carefully read this privacy notice. From time to time, we may need to update this privacy notice. This may be necessary, for example, if the law changes or if we change our business in a way that affects the way we process personal data. In the event that the privacy notice will materially and/or substantially change, we will actively inform you of this change and provide you with the new version of the privacy notice. The most recent version of this privacy notice will always be available on our website: https://citylink-logistics.com/privacy-policy/. You may also ask us to send you a copy of the most recent version of this privacy notice.

4. Personal data we collect, purposes for processing and retention period

When you use our website, we will process the following personal data, for the purposes described below and based on the following legal basis:

When you visit our website

• Personal data: Browser type and version, internet service provider, operating system, data and time of access, IP-address.
• Purpose: provide and maintain the website’s functionality.
• Legal Basis: your consent (Art. 6(1) lit. a GDPR) and our legitimate interests (Art. 6(1) lit. f GDPR), such as ensuring the security and proper functioning of our website.

As part of the ‘Enquiries’ option on our website

1. • Personal data: your name, email address and any personal data you provide to us in your message.
   • Purpose: processing of business inquiries, communication, handling of disputes, questions, comments or complaints you share with us, and administration in that respect.
   • Legal Basis: our legitimate interest , such as being able to communicate with you and to answer and administer your questions, remarks or complaints (Art. 6(1) lit. f GDPR) and compliance with a legal obligation, such as responding to legal or regulatory orders (Art. 6(1) lit. c GDPR), and performance of a contract or processing requests prior to entering into a contract (Art. 6(1) lit. b GDPR).

By sending one of our employees an ‘email’ to the email addresses mentioned on the website:

1. • Personal data: email address and personal data that you provide to us in your messages.
   • Purpose: communication, handling of disputes, questions, remarks or complaints that you share with us via the chat and administration in that respect.
   • Legal Basis: our legitimate interest, such as being able to communicate with you and to answer your questions, remarks or complaints (Art. 6(1) lit. f GDPR) and compliance with a legal obligation, such as responding to legal or regulatory orders (Art. 6(1) lit. c GDPR).

For more information about the cookies we use, and the way in which they collect and use (personal) data, we refer to paragraph 9 below.

If any kind of processing is based on your consent, we hereby inform you that you have the right to withdraw your consent at any time by sending an email to info@citylink- logistics.com, without affecting the lawfulness of processing based on consent before its withdrawal.

Further, we seek to ensure that we keep your personal data accurate and up to date. To be able to do this, we kindly request that you inform us of any changes to your personal data (such as a change in your contact details).

5. How long will we keep your personal data?

We will not store or keep your personal data for a longer period than is necessary in light of the purposes for which we process them. Only where we are legally obliged to, or where this is necessary for defending our interests in the context of judicial proceedings, we will store the personal data for longer periods.

More specifically, the following storage periods apply:

1. • Personal data collected when you visit our website: The storage of information collected via cookies when you access the website depends on the type of cookie (see paragraph 11 below):
     • Session cookies are generally deleted at the end of your session, i.e. after you have completed your visit to our website.
     • Other cookies, such as functional cookies, are only deleted if you withdraw your consent or after a specific period of time. You can delete the cookies yourself at any time through the settings in your browser.
   • Personal data collected as part of the ‘Enquiries’ option on our website: 90 days.
   • Personal data collected by sending one of our employees an ‘email’ to the email addresses mentioned on the website: 90 Days.

6. Do we transfer and/or share your personal data?

In the context of the purposes as listed above, we may share your personal data with third parties in the following situations:

1. • In some limited circumstances, we may be legally required to share certain personal data, which might include yours, with official bodies or legal advisors if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of insurers or a government authority such as data protection authorities.
   • We may engage third parties, including IT service providers, to process the personal data on our behalf (for example providers of certain IT applications that we use in the context of our activities). We will enter into the required contractual arrangements with those parties to ensure lawful and fair processing of your personal data on our behalf.

1. • We may also transfer personal data to business partners, advisors or official bodies in the event of the sale or transfer of all or any part of our business if this is required in the context of that transaction.

Where relevant, we will implement safeguards to ensure the protection of your personal data when disclosing your personal data to a third party. For example, we will enter into data processing agreements within the meaning of Art. 28 GDPR with relevant parties (providing for restrictions on the use of your personal data and obligations with respect to the protection and security of your personal data).

As a general rule, we do not share your personal data as set out above with other parties located in countries outside the EU, except as indicated otherwise in this Privacy Policy.

7. Can I access my personal data?

If you want to know what personal data we have of you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a ‘data subject access request’ pursuant to Art. 15 GDPR.

All such requests should be made in writing and sent to the email or postal addresses shown in paragraph 13 below. In principle, there is no charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make unnecessary repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your subject access request within one month after receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months after the date on which we received your request. In this case you will, of course, be kept fully informed of our progress.

8. What are your other rights?

1. • Under certain circumstances you have the right to:
   • access your personal data (Art. 15 GDPR) (see paragraph 7 above);
   • rectify your personal data (Art. 16 GDPR);
   • the erasure of your personal data (Art. 17 GDPR);
   • object to (part of) the processing of your personal data (Art. 21 GDPR);
   • the restriction of (part of) the processing of your personal data (Art. 18 GDPR); and
   • data portability (receive your personal data in a structured, commonly used and machine-readable format and to (have) transmit(ted) your personal data to another organization) (Art. 20 GDPR).

Finally, you also have the right to lodge a complaint with the competent supervisory authority.

9. Cookies

This website uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the website. We use this information to keep track of how you use the website, to compile reports on website activity and to offer other services relating to website activity and internet use.

There are different types of cookies. For example:

Necessary cookies

These are cookies that are needed to make the site work quickly and easily for a visitor. We use necessary cookies to guarantee a good working website. These cookies ensure ease of use.

Functional cookies

These cookies provide insight into the use of the website. Such as, which pages are visited? When do visitors visit the website? These cookies only provide general information and no information about individual visitors. We do not use functional cookies.

Analytical cookies

Analytical cookies are meant to monitor the surfing behavior of visitors, on an individual level. We use these cookies for measuring website usage.

The cookies used by us

Analytical Cookies – Google Analytics powered by Google LLC.

10. Google Analytics

Regarding Google Analytics, we would like to point out the following. We use Google Analytics to recognize visitors to our website, count the number of visitors and determine how they use our website. This helps us to improve our website and make it faster and easier for visitors to find what they need. The maximum retention period of the cookies used through this service is listed above. This means that after this period the data can no longer be read. The processing of your personal data through Google Analytics is based on our legitimate interest in obtaining general statistics about our website visitors.

We use Google Analytics in a privacy-friendly manner, based on the information provided by the Personal Data Authority on its website. This means that we have taken the following steps:

1. • We concluded a processing agreement with Google;
   • Your IP address is masked;
   • The sharing of data (with third parties) is deactivated within Google Analytics;
   • We do not use other Google services in combination with the Google Analytics cookies.

For more information, please read Google’s privacy policy, as well as the specific privacy policy of Google Analytics.

If you want to prevent Google Analytics cookies from being placed on your computer when you visit our website, you can download and install the Google Analytics Opt-out Browser Add-on. Here you can find more information about opting out and how to correctly install the browser add-on.

11. Deleting cookies

Cookies are stored on your computer and can be deleted at any time. Click on one of the links below to find out how to do this.

1. • Chrome
   • Microsoft Edge
   • Internet Explorer
   • Firefox
   • Safari
   • Opera

It is important to know that the use of cookies on our website is safe. Cookies do not result in spam or unwanted emails or phone calls. Our cookies are not used to build a personal profile.

12. Contractual or Legal Obligation to Provide Data

The provision of personal data is not required by law or contract. If you do not provide your personal data, you will not be able to (fully) use the services of our website.

13. Contact details

To contact us about anything related to your personal data and/or data protection, including exercising your data subject rights as discussed above in paragraphs 8 and 9, in particular your right to object, please use the contact details below:

Name:
Email address: cdejong@citylink-logistics.com
Telephone number: +31 10 83 301 11

Postal Address: Weena 730 A, 3014 DA Rotterdam