Principles of personal data processing

Policy for working with your data

We are a company 3NanoMasks s.r.o., Záhřebská 562/41, 120 00 Praha 2 – Vinohrady, IČ: 178 84 322 We operate an e-shop on the website www.3nanomasks.eu. We process some personal data for the sale of goods and the operation of our website. The processing of personal data is regulated in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation personal data) (“GDPR”)

I. Processing of personal data

A. Processing of personal data when using the contact form If you inquire about our products and services, we will work with your contact information that you provide us, mainly through the inquiry form. These are: first name, last name, contact email or phone number. For what reason? We will contact you through them for further arrangements regarding the goods. On what legal basis?This is processing on the basis of Article 6 paragraph 1 letter b) GDPR – contract negotiation, or implementation of pre-contractual measures at your request. How long will we process personal data?If we do not establish further cooperation, we will process your data for a maximum of 2 years from our last communication. B. Processing of personal data in case of purchase If you buy from us, we will work with the data you fill in for us. These are mainly invoicing data: name, surname, address, contact email and telephone number. For what reason?We need to process personal data to fulfill our contract – to deliver our goods to you. We will also communicate with you via the contact details regarding the status of your order, possibly regarding complaints or your questions. We will continue to process personal data to fulfill our obligations arising from the law (mainly for accounting and tax purposes, possibly for handling complaints and others). On what legal basis do we process personal data?This is processing on the basis of Article 6 paragraph 1 letter b) GDPR – fulfillment of the contract and Article 6 paragraph 1 letter c) GDPR – fulfillment of our legal obligation. How long will we process personal data?For the period of performance of our service and then for a period of 2 years from the last provision of such service or delivery of goods.      C. Newsletters (commercial communications) If you are a shopping customer and you did not opt us out at the time of purchase, we will use your email address to send our newsletters. On what legal basis?We are allowed to do so by the Constitution § 7 paragraph 3 of Act No. 480/2004 Coll., on certain services of the information society, if you did not prohibit us during the purchase. How long will we process personal data? 2 years from your last purchase. You can unsubscribe from the newsletter at any time by e-mail or contact us by e-mail: info@3nanomasks.eu.

II. Who gets access to the data?

Your data will remain with us. We process personal data only on the territory of the European Union.

III. What else should you know?

We do not have a designated personal data protection officer in our company. Our company does not make decisions based on automatic processing or profiling. If you have any questions about personal data, please contact us at info@3nanomasks.eu or call +420 775 779 846.

IV. Use of cookies

Cookies are text files containing a small amount of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognizes them on each subsequent visit. Cookies perform various tasks, for example enabling efficient navigation between web pages, remembering your preferences and overall improving the user experience. They can also ensure that the advertisements displayed online are better tailored to you and your interests. We use the following cookies on the website: • Necessary cookies: they are required for the operation of the website, for example, they allow you to log in to secure parts of the site and other basic functionality of the site. This category of cookies cannot be disabled. • Analytical/statistical cookies: for example, they allow us to recognize and determine the number of visitors and track how our visitors use the website. They help us improve the way the site works, for example by making it easier for users to find what they’re looking for. We only run these files with your prior consent. • Advertising cookies: they are used to track preferences and allow you to display advertising and other content that best matches your interest and online behavior. We only run these files with your prior consent. Please note that third parties (including e.g. external service providers) may also use cookies and/or access data collected by cookies on the website. Cookies list You can find more information about cookies and their current list via individual internet browsers, most often in the Developer Tools item. Consent can be expressed through a check box contained in the so-called cookie bar. You can subsequently refuse cookies in the settings of your Internet browser, or set the use of only some of them. You can find more information about managing cookies in individual browsers at the following links: • Internet Explorer – https://support.microsoft.com/cs-cz/help/17442/windows-internet-explorer-delete-manage-cookies • Google Chrome – https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=cs • Firefox – https://support.mozilla.org/cs/kb/povoleni-zakazani-cookies • Safari – https://support.apple.com/cs-cz/guide/safari/sfri11471/mac • Opera – https://help.opera.com/cs/latest/security-and-privacy/ • Microsoft Edge – https://docs.microsoft.com/cs-cz/sccm/compliance/deploy-use/browser-profiles

V. Your rights in connection with the processing of personal data

The GDPR regulation gives you, among other things, the right to contact us and ask for information about how we process your personal data, to request access to this data from us and have it updated or corrected, or to request a restriction of processing, you can request a copy of the processed personal data, request us in certain situations erasure of personal data and in certain cases you have the right to their portability. You can object to processing based on legitimate interest. If you think that we are not handling the data correctly, you have the right to file a complaint with the Office for Personal Data Protection, or take your claims to court. These conditions are effective from 19.2.2023