In accordance with the Federal Law on Protection of Personal Data Held by Private Parties (“LFPD”), its Regulations and other applicable and current provisions, we inform you of the following:
The operator City Storage S. de R.L. de C.V. (“City Storage”), with address for receiving notices located at Av. Paseo de las Palmas 555, int. 501, Lomas de Chapultepec, Miguel Hidalgo, Mexico City, Mexico, CP 11000, is the “Controller” of the processing of your personal data.
This Privacy Notice is directed to the users of our website (“Data Subject”).
The term “Personal Data” in this Privacy Notice refers to information relating to an identified or identifiable natural person. The purpose of this Privacy Notice is to inform you what Personal Data we collect, how we use it, and how to exercise certain rights you have.
Personal data we collect and process
The “Personal Data” that we collect and process are as follows:
a)
b)
c)
Identification and contact information: full name, address, date and place of birth, nationality, marital status, signature, phone number, email address, Unique Population Registry Code (CURP), Federal Taxpayer Registry (RFC), and identification details on an official ID.
Digital identifiers: account authentication data for the company's portals or applications, user identifiers, IP address, date and time of connection, cookies, and similar technologies to improve experience and security.
Correspondence: communications sent through customer service channels, including requests, complaints, or clarifications.
Purposes of processing
Primary purposes:
The Personal Data we collect from you will be used for the following purposes, which are necessary, as applicable, to (i) comply with our obligations arising from a legal or contractual relationship (between the Controller and the Data Subject), (ii) comply with applicable legal provisions, or (iii) exercise our rights, so your consent will not be required:
Verify and confirm the identity of the data subject, as well as the authenticity of the information provided.
Attention to and response to requests, complaints, comments, or clarifications, including verification of the requester’s identity.
Management of benefits, loyalty, promotions, and discounts programs linked to the contracted service, when applicable.
Retention of records for compliance with legal, tax, security, and audit obligations.
Secondary purposes:
Additionally, by accepting this Privacy Notice, you grant us your consent; we will use your Personal Data for the following secondary purposes:
To send you personalized advertising, promotional and/or informational and commercial prospecting information;
Conducting satisfaction surveys, internal market studies, segmentation, and statistical analyses to improve our service offerings.
If you do not want your Personal Data to be processed for some or all of the secondary purposes, from this moment you may let us know by following the procedure described in the section “ARCO Rights” of this Privacy Notice. Objection may not be grounds for terminating the relationship established with us.
In the event that we obtain your Personal Data indirectly, you have a period of 5 (five) business days, starting from the moment we make the first contact with you, to express your refusal to the processing of your Personal Data for secondary purposes, through the email address set out in the “ARCO Rights” section.
ARCO Rights
You have the right to access, rectify, cancel, or object to the use of your Personal Data to the extent permitted by law (hereinafter, the “ARCO Rights”). You may, at any time, request the exercise of the ARCO Rights, as well as revoke your consent and limit the use or disclosure of the Personal Data provided, by means of our email address privacidad@citystorage.mx.
The request referred to in the preceding paragraph must include:
The name of the Data Subject and the means by which we will communicate the response to their request;
Documents proving their identity or that of their legal representative;
A clear and precise description of the Personal Data and/or sensitive Personal Data with respect to which you seek to exercise any of the ARCO Rights, as well as the ARCO Rights to be exercised; and
Any other element that facilitates the location of the Personal Data with respect to which you seek to exercise the ARCO Rights.
Once the ARCO Rights request has been received:
The Controller will have a period of 20 (twenty) business days to respond regarding whether the request is valid or invalid.
If it is deemed valid, the Controller will have an additional period of 15 (fifteen) business days to grant the requested action.
The period previously mentioned may be extended for an equal period when justified and you are informed of it.
Even if the exercise of the requested right is not valid, the Controller must respond to your request, explaining the reasons for the respective invalidity, within the previously stated 20 business days.
All ARCO Rights requests, as well as any questions or concerns related to the protection of your Personal Data, must be submitted through the email address indicated in this Privacy Notice.
Data transfer
Your Personal Data will be transferred for the following necessary purposes, as applicable, which, in accordance with the exceptions provided for by the LFPD, do not require your consent:
To maintain or fulfill a legal relationship between the data controller and the data subject; the evaluation of compliance with applicable laws, rules and regulations, and internal policies and procedures throughout our company; the administration and maintenance of databases that store Personal Data relating to our customers.
For the performance of contractual obligations with third parties in the interest of the Data Subject (including, when necessary, as part of a corporate transaction, share purchase, an acquisition or merger with another company; and to exercise or defend our legal rights)
To the extent required to comply with a law or treaty to which Mexico is a party;
For the safeguarding of a public interest or for the administration of justice;
For the recognition, exercise or defense of a right in a judicial proceeding;
For emergency reasons;
When the transfer is made to parent companies, subsidiaries or affiliates under common control of the controller, or to a parent company or any company in the same group as the controller that operates under the same internal processes and policies (“Group Companies”);
The third parties to whom we transfer your Personal Data may be located in Mexico or abroad, and include the Group Companies, competent authorities, business partners, external agents; financial institutions and contractors (including security and video surveillance services, access control, technology support, hosting and safekeeping of information, payment processing, courier and notification services, maintenance, billing and auditing; law firms; and accountants and other professional services to comply with our legal or contractual obligations.)
In addition, if you do not object, we transfer your personal data to advertising and marketing companies for commercial purposes. If you do not want your personal data to be processed for some or all of the secondary purposes, you may choose to object by following the procedure described in the section “ARCO Rights” of this Privacy Notice.
Use of cookies and analytics technologies
If you use our website, please note that we use cookies, web beacons, and other technologies through which it is possible to monitor your behavior as an Internet user, providing you with a better user experience while browsing the site.
By using cookies and similar technology, we may collect the following Personal Data and browsing data: (i) the pages and sections of our website you visit; (ii) the links, interactions, clicks, and navigation patterns you carry out within the site; (iii) the IP address; (iv) the type of browser, operating system, device, and screen resolution from which you access it; (v) the date and time of access; (vi) the time spent on the site; and (vii) the website or medium from which you accessed our page (including the site you visited before entering ours).
Furthermore, we may use digital identifiers and pseudonyms, such as analytics cookies and unique browser or device identifiers (for example, GUID, MUID, or others similar), which allow us to recognize the same visitor in subsequent visits, generate website usage statistics and, where applicable, associate prior browsing with the voluntary submission of forms, without directly identifying the data subject.
The information collected through cookies and similar technologies is used for analytical and statistical purposes, to improve the user experience, for site operation and security, and is not used to directly identify the user unless the user voluntarily provides their personal data through the mechanisms enabled on the site.
These cookies and other technologies can be disabled. To learn how to do so, please consult your browser's help menu. Please note that if you disable cookies, you may not be able to access certain personalized features on our websites.
Changes to the Privacy Notice
This Privacy Notice may be updated and/or modified at any time. Such updates will be available on our website www.citystorage.mx, or when necessary, it will be communicated through other available channels such as email.
Last updated: January 2026.