Consent to the Processing of Personal Data

English translation of the original Czech version: „Souhlas se zpracováním osobních údajů“

1. I hereby grant consent to RECUAIR, s.r.o., Company ID (IČO): 06400213, with its registered office at Trojanova 117, 278 01 Kralupy nad Vltavou, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 281520 (hereinafter the “Controller”), to process, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter “GDPR”), the following personal data:

• First name, surname, academic title.

• Postal address.

• E-mail address.

• Telephone number, etc.

1. This personal data needs to be processed for the following purposes:

• Preparation, performance, and record-keeping of concluded contracts.

• Ensuring the quality of services provided to clients.

• Compliance with the Controller’s statutory obligations.

• Tax and accounting purposes.

• Protection of property and persons.

• Direct marketing.

1. The data will be processed by the Controller for the duration of the contractual relationship. After the contractual relationship ends and all obligations arising from or related to the contract have been settled, the personal data will be retained for the period strictly necessary. The retention period is determined primarily by the general and special limitation periods under Act No. 89/2012 Coll., the Civil Code.

2. I grant express consent to the processing described above.

3. Consent may be withdrawn at any time, for example by sending an e-mail to libor.tosovsky@recuair.com or a letter to the Controller’s registered office address.

4. The processing of personal data is carried out by the Controller.

5. Under the GDPR, you have the right to:

• withdraw your consent at any time;

• request information on which of your personal data we process;

• request an explanation regarding the processing of your personal data;

• request access to that data and have it updated or corrected;

• request correction or erasure of personal data (the right to be forgotten), restriction of processing, and object to the processing;

• the right to the portability of personal data;

• in the event of doubts regarding compliance with obligations relating to the processing of personal data, contact the Office for Personal Data Protection.

1. The data subject declares that they have been duly instructed by the Controller regarding the processing and protection of personal data, that the above personal data is accurate and truthful, and that it is provided to the Controller voluntarily.

Prague, 1 January 2021

Notice to the Data Subject

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter the “Regulation”), the Controller hereby informs that:

• the data subject’s personal data will be processed on the basis of their free consent, under the conditions set out above;

• the personal data is provided because of the data subject’s interest in receiving the Controller’s commercial offers and communications, the provision of services and performance under a contract, consent to the processing of personal data, compliance with the Controller’s statutory obligations, and the Controller’s legitimate interests;

• the processing of the data subject’s personal data will not involve automated decision-making or profiling;

• the Controller has not appointed a data protection officer, has not entrusted the processing of personal data to any processor, and has not designated a representative for the fulfilment of obligations within the meaning of the Regulation;

• the Controller does not intend to transfer the data subject’s personal data to a third country, an international organisation, or to any third parties other than those referred to above;

• the data subject has the right to withdraw their consent to the processing of personal data at any time; the right to request from the Controller access to their personal data, its correction or erasure, or restriction of processing, and to object to the processing; the right to the portability of such data to another controller; and the right to lodge a complaint with the Office for Personal Data Protection if they believe the Controller is processing personal data in breach of the Regulation.