PRIVACY POLICY

The protection of your personal data is important to us, and therefore we will always adhere to these principles in our relationship with you. This Privacy Policy explains in particular:

• what personal data of yours we will process,
• for what purposes and in what manner we will process your personal data and the legal basis for their processing,
• to whom your personal data may be transferred,
• for how long we will process your personal data,
• what rights you have in relation to the protection of your personal data.

If you need any part of this text explained, need advice, or wish to discuss further processing of your personal data, you can contact us at any time at the email address gdpr@explicaire.com or at our company's registered office address.

SCOPE OF PERSONAL DATA PROCESSING

If you only visit our websites, we will process the following personal data:

• Cookies

If you contact us (e.g., as a potential customer) (either through the website http://www.explicaire.com/, or by other means), you will be asked to provide certain information about yourself, which we will further process, namely:

• first name and last name,
• email address and phone number.

COOKIES

Our websites use cookies (small text files placed on your device) to provide websites and online services and to collect data. The text in a cookie often consists of a string of numbers and letters that uniquely identifies your computer, but it may contain other information as well.

More information about how we use cookies can be found on the relevant webpage Cookies Policy.

PURPOSE AND LEGAL BASIS OF PROCESSING

If you are a visitor to our website, we process your personal data in the form of cookies as described above, based on our legitimate interest, which consists in monitoring the use of our services and improving them. We will process your personal data only for the aforementioned purpose. Providing the above data is not our requirement, but without providing this data, some functions of our website may be limited. Your personal data will not be used for any solely automated decision-making, including profiling based on such decision-making.

If you are a job applicant with us, we process your personal data based on our legitimate interest, which lies in our interest in filling our vacant positions and in your interest in obtaining employment according to your preferences. The purpose of the processing is therefore to find a suitable candidate for the vacant position we are seeking. We use the data you provide to contact you regarding the status of the selection process. We will process your personal data only for the aforementioned purpose, and if you are interested in a specific job position, we will process the personal data only for the purpose of filling this job position, or for positions similar to the one you are applying for. Providing the above data is our requirement; without providing this data, we cannot include you in the selection process. Your personal data will not be used for any solely automated decision-making, including profiling.

If you are a job applicant with us, you may also give us your consent to the processing of personal data for the purposes of selection procedures.

If you are our customer or supplier, we process your personal data primarily because it is necessary for the performance of a contract or compliance with legal obligations (especially tax and accounting), or based on legitimate interest (which mainly consists in improving our services and contacting you with our offers). The purpose of processing is thus primarily to ensure the smooth execution of our business relationship and the further development of mutual business cooperation. We may use your first name, last name, and email address to send you commercial and marketing communications and invitations to events, trade fairs, and workshops, i.e., to provide you with information that we believe might be interesting and beneficial to you. We may further use your personal data for our internal needs, particularly concerning monitoring your satisfaction, optimizing and improving the quality of provided products and services, developing new products, and reducing risks. Providing personal data for the purposes of contract performance and compliance with legal obligations is our requirement, and failure to provide it may be grounds for not concluding a contract or terminating the business cooperation.

WHO HAS ACCESS TO YOUR PERSONAL DATA

Your Personal Data may be processed by processors or provided to recipients as part of ensuring certain activities for us; these are mainly the following entities:

• Entities providing us with server, web, cloud, or IT services.
• Entities providing us with accounting services.
• Entities providing us with legal services.
• Processors providing us with other services – consultations, audits, and other external services.

PERIOD OF PERSONAL DATA PROCESSING

We will process your personal data for the period during which we provide you with our services or fulfill a mutual contract, for the duration of our legitimate interest, or for the period necessary to fulfill archiving and other obligations according to applicable legal regulations, such as the Accounting Act, the Archiving Act, the Value Added Tax Act, and others.

We will retain your personal data for the period necessary to provide our services and complete requested transactions, or for other necessary purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.

However, if you contact us (for example, via email at gdpr@explicaire.com), we will always inform you about the exact duration of the processing of your personal data.

YOUR RIGHTS ARISING FROM THE PROCESSING OF PERSONAL DATA

In relation to the processing of your personal data carried out by us, you have the following rights:

• The right of access to personal data,
• the right to rectification,
• the right to erasure ("right to be forgotten"),
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing,
• the right not to be subject to a decision based solely on automated processing, including profiling,
• the right to lodge a complaint regarding the processing of personal data.

Your rights are explained below to give you a clearer idea of their content.

The right of access means that you can request our confirmation at any time as to whether or not personal data concerning you are being processed, and if so, for what purposes, to what extent, to whom they are disclosed, how long we will process them, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data, and whether automated decision-making, including profiling, occurs during the processing of your personal data. You also have the right to obtain a copy of your personal data, with the first provision being free of charge; for further provisions, we may charge a reasonable fee based on administrative costs.

The right to rectification means that you can ask us at any time to correct or complete your personal data if it is inaccurate or incomplete.

The right to erasure means that we must delete your personal data if (i) they are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, (iv) we are required to do so by a legal obligation, or (v) you withdraw the consent given for the processing of personal data.

The right to restriction of processing means that until we resolve any disputed issues regarding the processing of your personal data, we must not process your personal data other than by storing them, and we may possibly use them only with your consent or for the establishment, exercise, or defense of legal claims.

The right to data portability means that you have the right to receive personal data concerning you, which are processed automatically and based on consent or a contract, in a structured, commonly used, and machine-readable format, and the right to have this personal data transmitted directly to another controller;

The right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or based on legitimate interest.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. In the case of an objection to processing based on legitimate interest, this objection will be evaluated, and we will subsequently inform you whether we have complied with it and will cease processing your data, or whether the objection was unfounded and processing will continue. In any case, processing will be restricted for the period until the objection is resolved.

The right not to be subject to a decision based solely on automated processing, including profiling means that no decision by our company that produces legal effects concerning you or similarly significantly affects you will be made through automated processing, including profiling. This does not apply if such processing is necessary for entering into, or performance of, a contract between you and our company, or if you give your explicit consent to this type of processing, or if such processing is permitted by law applicable to our company.

If you have comments or complaints regarding the protection of your personal data, or if you have a question for the person responsible for data protection in our company, or if you are exercising any of your rights, please contact us using our email address gdpr@explicaire.com. We will respond to your questions or comments within one month. This period may be extended by another two months where necessary, taking into account the complexity and number of requests.

Our activities are also supervised by the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), where you can lodge a complaint if you are dissatisfied. You can find out more on the office's website (www.uoou.cz).

REPORTING SECURITY INCIDENTS

In the current era, characterized by the expansion of modern technologies, there is, albeit minimal, a possibility that your personal information could be leaked, misused, or lost. Within our operations, we are committed to taking all possible steps to prevent any security breaches. This includes regular training for our employees who handle your personal data on data protection matters. We also implement internal rules to protect your information and ensure the use of the best available technical solutions, such as data encryption, complex passwords, and high-quality security software, to ensure the protection of your data.

Although we strive to prevent any security risks, in the event of a security incident that could pose a risk to your rights and freedoms, we will immediately inform you of the situation via your email address and publish information about the incident on our website along with all relevant details.

CHANGES TO THE POLICY

Our Privacy Policy may be changed from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes).

If you have any questions regarding this privacy statement or the collection and processing of your personal data, please do so via the dedicated email address: gdpr@explicaire.com.

Explicaire s.r.o. Plovární 478/1, Jižní Předměstí, 301 00 Plzeň