Personal data processing and protection principles

This Personal Data Processing and Protection Policy ("Policy") represents the basic principles governing the collection and processing of personal data by Art de Suisse s.r.o, Stará Louka 335/48, 360 01 Karlovy Vary, ID No.: 27999106 ("Company"). This Policy implements the Company's rights and obligations arising in particular from the following generally binding legal regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR");
• Act No. 480/2004 Coll., on Certain Information Society Services and on Amendments to Certain Acts (Act on Certain Information Society Services), as amended (the "Act on Certain Information Society Services"); and
• Act No. 127/2005 Coll., on Electronic Communications and on Amendments to Certain Related Acts (Electronic Communications Act), as amended (the "Electronic Communications Act").

This Policy applies to all persons visiting the Art de Suisse s.r.o. website ("Website"), whether or not they are in a contractual relationship with the Company.

What is personal data

Personal data means, in accordance with the GDPR, any information about an identified or identifiable natural person (i.e. not a legal entity). In principle, it is therefore any information that, either alone or in combination with other information, can be used to identify a specific natural person ("Personal Data").

What personal data the company processes

The Company may collect the following Personal Information about you:

Personal data you provide to the Company
Such Personal Data includes, but is not limited to, the information you provide on a completed registration, order or other form or that you provide to the Company by email, telephone, fax or other similar device. You may also provide Personal Data to the Company [for competitions], [by entering a product or service review], [by booking a place on a training course] or [by sending a general enquiry]. This includes, but is not limited to, name, surname, mailing address, email address, telephone number, bank account details, details of payment method chosen, etc.

The Company will process the aforementioned Personal Data for the purpose of:

• to provide you with the service, product or information you have expressed an interest in; if you are an existing customer, also to provide you with information about other services or products similar to those that were the subject of your previous purchase;
• if you are a new customer, the Company will only send you commercial communications and offers of products and services if you have given the Company your express consent to do so;
• assessing and evaluating your application.

Personal data collected about you by the Company itself

When you visit our Website, the Company may collect certain information necessary to ensure the proper and convenient operation of the Website. Such information includes the Internet Protocol (IP) data used to connect your computer to the Internet, your registration details, browser type and version, time zone settings, browser plug-ins, details of your visit, including the applicable Uniform Resource Locator (URL), the path to and from the Websites (including date and time), the products you viewed or searched for, response times, errors during downloads, the length of visits to certain pages, information about your interaction while visiting the site (such as scrolling, clicks, and mouse placement), or how you leave the site.

The Company uses this personal data to administer and improve the Website and for the purposes of internal operations, including troubleshooting, data analysis, testing, research, statistical purposes and to record the frequency of views. This Personal Information may also be used to measure the effectiveness of advertising and to provide relevant advertising.

Provision of personal data

The personal data that the Company obtains about you may be transferred [within the group, i.e. to related parties of the Company;] and to third parties ("Processors") who assist the Company in fulfilling its contractual obligations by arranging certain services (e.g. service delivery). The Company only transfers Personal Data to Processors who provide guarantees of an adequate level of security for your Personal Data and process such Personal Data solely on the basis of a data processing agreement.
Accordingly, the Company may transfer Personal Data to these Processors:

• to external collaborators and suppliers in order to fulfil the Company's contractual obligations;
• payment service providers and payment processors for the purpose of securing the transfer of funds and the execution of payment transactions;
• to postal and delivery service providers for the purpose of delivering products or services offered by the Company;
• Website administrators.

In certain circumstances, the Company may be required to disclose your Personal Data to third parties (e.g. law enforcement authorities) in accordance with generally applicable law.

Means of protection of personal data

In order to protect and minimize the risk of unauthorized access to Personal Data, the Company has taken organizational and technical measures.
These measures include:

• organisational restrictions limiting the range of persons authorised to come into contact with Personal Data; and
• technical security of the Company's servers and Websites against unauthorized manipulation.

Persons coming into contact with Personal Data are instructed on the principles of personal data protection and are bound by confidentiality when processing Personal Data.

Duration of retention of Personal Data

The Company retains Personal Data only for the period of time necessary for the performance of its contractual obligations and for the performance of the Company's obligations under applicable law. Personal data that is processed on the basis of your consent is retained by the Company only for the duration of the purpose for which the consent was given.
Once the lawful basis on which your Personal Data is processed has ceased to exist, the Company will destroy the Personal Data and any existing copies of it.

Cookies

What do you find here?

This website (the "Site") uses cookies and technologies similar to cookies.

In this document you will learn what cookies are and how we use them.

What are cookies?

Cookies are short text files that are sent to your browser by the website you visit. Cookies allow the administrator to distinguish you from other users of the Website and to record information about your visit and behaviour on the Website more effectively. Cookies are not harmful to your device or its software. As a user, you can disable or restrict the use of cookies in your browser.

Cookies can be used for many purposes such as:

• ensuring the functioning of the basic functions of the website
• saving your preferred language
• traffic analysis with the aim of improving the website and
• marketing purposes, in particular the display of advertising on the site

What types of cookies do we use?

Want to change your cookie settings?

If you do not want us to store preference, analytics or marketing cookies on your browser, you can modify these preferences in your browser. This will prevent the collection of data about you. For information about your specific browser settings, please visit the following addresses:

• Internet Explorer: https://support.microsoft.com/
• Google Chrome: https://support.google.com/
• Mozilla Firefox: https://support.mozilla.org/
• Microsoft Edge: https://support.microsoft.com/microsoft-edge
• Opera: https://help.opera.com
• Safari: https://support.apple.com/

Alternatively, change the settings in the site dialog.

Configure cookie settings

If you would like to change your cookie settings and are unsure, you can also contact us at info@artdeuisse.com.

Rights of data subjects

In connection with the processing of your Personal Data by the Company, you are entitled to the following rights guaranteed by the Personal Data Protection Regulations:

• the right to withdraw consent to the processing of Personal Data if the processing is based on it;
• the right to request access to Personal Data and information about which of your Personal Data is processed by the Company;
• the right to rectification of inaccurate Personal Data and, in the case of incomplete Personal Data, to completion of incomplete Personal Data;
• the right to erasure of the Personal Data processed;
• the right to restrict the processing of Personal Data;
• the right to receive the Personal Data you have provided to the Company in a structured, commonly used and machine-readable format and the right to transfer that data to another person;
• the right to be informed of a Personal Data breach;
• the right to object to the processing of Personal Data; and
• the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, or by mailbox to qkbaa2n.

The aforementioned rights and any complaints can be exercised with the Company as the data controller in writing at the address below or by e-mail to info@artdesuisse.com.

Art de Suisse s.r.o.
‍Stará Louka 48, 360 01 Karlovy Vary 1

This Policy is valid and effective from 15 February 2023.