Code of Personal Data Protection of Double Impact, Gmbh.

This Personal Data Protection Code of Double Impact s.r.o., V Zářezu 902/4, 158 00, Prague 5, C 222747, registered at the Municipal Court in Prague, (hereinafter referred to as the Code), sets out the procedures for the collection, processing and use of personal data by Double Impact s.r.o. (hereinafter referred to as the Company) as the controller of your personal data. We process the collected personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”) and in accordance with Act No. 101/2000 Coll. on the Protection of Personal Data, the Civil Code and other related legislation.

What personal data we process and how we obtain it

The personal data we process about you and the scope of which varies mainly according to the purpose and services provided:

For the purpose of improving our services and offerings: data about visits to our website (cookies, IP address).

For marketing purposes, including sending commercial and informational communications and personalizing advertising: data about your visit to our website (cookies, IP address), contact data (name, surname, email)

We primarily collect personal data directly from you when you fill in the newsletter registration form and on the basis of your visits to our website (see section on cookies below).

How we use your personal data

We mainly use your personal data for the following purposes:

sending you newsletters,

analysing, evaluating and improving our customer service;

to comply with our legal obligations; and

with your consent, to inform you about changes and updates to our services.

We will only retain your personal data for as long as any of the above processing purposes continue and thereafter only for as long as, and subject to the terms of, the relevant legislation.

In the case of consent given for e-mailing purposes, this period is 5 years from the date of consent or its renewal. In other cases, the processing period is based on the purpose of the processing or is determined by legal regulations.

Legal basis for processing your personal data

The legal basis that allows us to process your personal data depends on the purpose for which we process the personal data. Therefore, we may process your personal data without your consent in a particular case because:

it is necessary for the purposes of entering into or performing a contract with you;

it is necessary for compliance with our legal obligations (for example, in the field of accounting and taxation);

it is necessary for the protection of our legitimate interests (for example, in connection with our journalistic activities or in connection with the analysis and improvement of our services).

With your consent, we may process your personal data for marketing purposes, i.e. offering our products, informing you about new products or other commercial communications, by sending them to your email address and using personalised marketing and remarketing. You may withdraw your consent to this use of your personal data at any time by sending your withdrawal of consent to our email address or in writing to the Company at the above address.

Who we provide your personal data to

We may provide your personal information to:

To service providers who provide their services to us in connection with our business, in particular to those who help us process email communications or display web content on the internet;

to service providers processing information about views, visits and popularity within the scope of our legitimate interest;

service providers that allow us to share comments, videos and ratings on their portals;

service providers that help us display banner advertising;

those working on improvements, optimization and functionality of the website;

other persons in accordance with applicable law (e.g. notifying the tax authorities in cases provided for by law, the police in the context of a criminal investigation, etc.).

Your personal data may be transferred to and stored within countries within the European Economic Area (“EEA”) that are considered to have a comparable level of data protection to the Czech Republic as well as to entities based outside the EEA, which include companies from all groups and providers of information or other services. In the case of transfers outside the EEA, we will ensure the protection of your data through the conclusion of appropriate contractual clauses or through other appropriate safeguards in accordance with the GDPR.

What are cookies and how we use them

Cookies are small data files that are necessary for the correct functioning of the website and which we therefore place on your computer, as do most websites. They are text files that websites store on your computer or mobile device when you start using the website.

This way, the website remembers the actions and settings you have made on the website for a certain period of time – for example, to familiarise you with how to use it. Therefore, you do not need to reconfirm it each time you visit the site and move between different sections of the site.

We also use cookies to collect statistical data and personalise advertisements so that we can continue to improve our site and improve the services we offer. We therefore share information about how you use our website with our advertising and analytics partners, specifically Google. You can read more about how Google handles cookies at https://www.google.com/policies/technologies/cookies/.

If you object to the use of cookies and data collected through our website using cookie technology for the purposes set out above, you have the option to:

block the use of cookie technology by adjusting your browser or other computer program accordingly (by opening an anonymous browser window); or

use VPN or other anonymous access to our website; or

You can object to the processing, either by sending an email to [email protected] or by sending a letter to Double Impact s.r.o, V Zářezu 902/4, 158 00, Prague 5.

What are your rights

In particular, you have the following rights in relation to the processing of your personal data:

The right to clear, transparent and understandable information about how we use your personal data and what your rights are;

the right to access your personal data and to be provided with further information relating to its processing by the Company;

the right to rectification of incorrect and incomplete personal data;

the right to have your personal data erased, in particular if (i) it is no longer necessary for further processing; (ii) you have withdrawn your consent to its processing; (iii) you have legitimately objected to its processing; (iv) it has been processed unlawfully; or (v) it must be erased by law;

the right to restrict the processing of your personal data where (i) you challenge the accuracy of the personal data for as long as we have not verified its accuracy; (ii) the processing is unlawful; (iii) we no longer need the data but you need the data for the purposes of pursuing your legal claims; or (iv) you object to the processing of the data for as long as we have not verified that our legitimate grounds outweigh your interests;

the right to object to the processing of your personal data where we process it (i) for direct marketing purposes or (ii) for the purposes of our legitimate interests;

the right to obtain your personal data and transfer it to another service provider;

the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochor 27, 170 00 Prague 7; www.uoou.cz

If you wish to exercise any of the above rights, please contact us using the contact details below.

How we protect your personal data

In order to ensure the security and confidentiality of your personal data, which is important to us, we use technical and organisational measures, in particular to protect against unauthorised access to and misuse of data, to ensure the security of our IT systems and to recover data in the event of an incident. Where appropriate, we use encryption to protect your data. We regularly evaluate and update all measures.

The processing of personal data is carried out manually and in electronic information systems, which are subject to physical, technical and procedural controls. We have a security mechanism in place to protect your data, including technical, organisational and personnel measures, and we require the same level of protection from our processors.

Need more information or want to exercise your rights?

In addition to this page, the full version of the Personal Data Handling and Protection Policy is available at Double Impact s.r.o, V Zářezu 902/4, 158 00, Prague 5, CZ.

You may request a written copy in the manner set out below.

If you have any questions about the processing of your personal data, need any other related assistance or wish to exercise your rights, please contact the person responsible for personal data protection during working hours by telephone at 00420 602 236 557, electronically by e-mail at [email protected] or in writing at the Company’s address above.