Information about the processing of personal data

SafeTalk Technology Ltd.

With this document, as the data subject, we provide you with information and instructions regarding your rights associated with the processing of your personal data according to Regulation (EU) No. 679/2016 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the 'General Data Protection Regulation', abbreviated as 'GDPR'.

This document is regularly updated.

We assure you that we treat your personal data with due care and in accordance with applicable law. We protect your personal data to the maximum extent possible, which corresponds to the technical level of the available means. The company has strict rules that determine which specific employee and under what conditions can access your personal data and what personal data they can process.

We encourage you to read the information carefully. We have done everything possible to make them as understandable as possible. If something is not clear to you, we will be happy to explain to you any concept or passage.

Information about the rights you have as a data subject

Controller of your personal data:

The controller of your personal data is the company:

SafeTalk Technology Ltd.

Kozí 853/19, Prague 1, 110 00

ID NUMBER: 17746175

SafeTalk Technology s.r.o. does not have a Data Protection Officer (DPO) appointed.

The personal data we process is listed in the following internal register of personal data. Within this internal register of personal data, the following information is provided:

- Purpose of processing

- Categories of data subjects for each processing purpose

- Categories of personal data for each data subject

- Categories of recipients of personal data (if any)

- Legal basis for processing personal data

- Scheduled processing time

- Categories of sources of personal data

The processing of personal data of external data subjects is carried out for the following purposes:

1) The SafeTalk web application by SafeTalk Technology s.r.o.

a. The range of categories of data subjects is determined by the possible types of customers — legal persons

b. The scope of personal data is determined by the minimum extent necessary for their identification necessary for the operation and use of the SafeTalk application

c. The categories of recipients of such personal data are statutory control authorities

d. The legal basis for processing is the conclusion and performance of the contract and the fulfillment of a legal obligation

e. The planned period of processing of personal data is determined by the duration of the contractual relationship

f. The source of personal data is directly the data subjects

2) Suppliers of SafeTalk Technology s.r.o.

a. The scope of categories of data subjects is given by the possible types of suppliers – legal entities (representatives), self-employed individuals

b. The scope of personal data is determined by the minimum scope necessary for their identification necessary for the conclusion and performance of the contract

c. The categories of recipients of such personal data are statutory control authorities

d. The legal basis for processing is the conclusion and performance of the contract and the fulfillment of a legal obligation.

e. The planned processing time is determined by the time of the individual business cases, respectively the relevant accounting entries and the statutory period of their archiving.

The source of personal data is directly the data subjects

3) Management of accounting and archiving SafeTalk Technology s.r.o.

a. The scope of categories of data subjects is determined by the Accounting Act, the Tax Laws and the Archiving Act

b. The scope of personal data is determined by the minimum scope specified in the individual accounting cases and is based on the aforementioned laws

c. The categories of recipients of such personal data are statutory control authorities

d. The legal basis for processing is the fulfilment of a legal obligation.

e. The planned processing time is determined by the time of storage of accounting documents by law The source of personal data is directly the data subjects through other processing purposes;

a. Communication and marketing

a. The scope of categories of data subjects is limited to customers and users of the application, respectively entities to whom the “newsletters” are sent

b. The scope of personal data is determined by the minimum scope necessary to fulfill this purpose

c. The categories of recipients of such personal data are statutory control authorities

d. The legal basis for processing is the consent of the data subject to the processing of personal data

e. The planned processing time is determined by the duration of the consent granted or the annual updating of the relevant lists.

b. Cookies

a. Cookies are short text files that the website sends to your browser. They allow the website to record information about your visit, such as your chosen language and the like, so that the next visit to the site can be easier and more enjoyable for you. Cookies are important because without them browsing the Internet would be much more complicated. Cookies allow you to make better use of our website and adapt its content to your needs; they are used by almost every website in the world. Cookies are useful because they increase the user-friendliness of a website visited repeatedly.

b. The administrator may use the following types of cookies on the website:

Relational (i.e., temporary) cookies allow us to link your individual activities during the time you browse these websites. These files are activated the moment you open your browser window and are deactivated upon closing your browser window. Relational cookies are temporary and all these files are deleted after you close the browser.

ii. Persistent cookies help us identify your computer when you visit our website again. Another advantage of persistent cookies is that they allow us to adapt our website to your needs.

c. In accordance with the provisions of § 89 para. 3 of Act No. 127/2005 Coll., on electronic communications, as amended, we hereby wish to inform you that our website uses cookies for its activity, that is, we process your cookies, including permanent ones.

d. Internet browsers usually contain cookie management. As part of your browser settings, you may be able to manually delete, block or disable the use of individual cookies. For more information, use the help of your Internet browser. If you do not allow the use of cookies, some features and pages may not work as they should.

e. We use cookies to personalize content and ads, provide social media features and analyze our traffic. We share information about how you use our website with our social media, advertising and analytics partners. By using the website, you consent to the following services:

i. Google

ii. Facebook

iii. Twitter

iv. Slick

v. LinkedIn

f. In order to display targeted advertising within advertising and social networks on other websites, we transmit to these advertising and social networks data about your behavior on the site; however, we do not pass on your identification data to them.

The processing of personal data of internal data subjects is described in the Internal Data Protection Directive.

The transfer of personal data to any third country or international organization does not take place and we do not plan to transfer such data to any third country or international organization.

As a data subject, you have the following rights:

- request access to the personal data we process about you as a controller within the meaning of Article 13, Article 14 and Article 15 of the GDPR,

- request rectification or erasure of personal data within the meaning of Articles 16 and 17 of the GDPR,

- request restrictions on the processing of personal data within the meaning of Article 18 of the GDPR,

- object to the processing of personal data in Article 21 of the GDPR,

- the right to the portability of your personal data within the meaning of Article 20 of the GDPR,

- the right not to be subject to automated decision-making, including profiling within the meaning of Article 22 GDPR

- withdraw your consent to the processing at any time

- to the report of a personal data breach pursuant to Article 34 of the GDPR regulation

- the right to lodge a complaint with the supervisory authority of Article 13, Article 14 and Article 15 of the GDPR, which is the Office for Personal Data Protection, Prague, Pplk. Sochora 27, 170 00 Prague 7

Exercising any of your rights set out in GDPR:

The exercise of the right must be submitted in writing at the registered office of the company, with your demonstrable identification and its authentication by an authorized officer. The information to which you are entitled as a data subject will be provided to you upon your request, also at the registered office of the company after proving your identity and authenticating it.

Withdrawal of consent to the processing of personal data:

As a data subject, you have the right to withdraw your consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing based on the consent to the processing of personal data prior to its withdrawal. You can withdraw your consent to the processing of personal data in writing in the same way as when exercising any other right of yours under the GDPR regulation.