Privacy Policy of DEX Innovation Centre, z. s.

The controller and processor of personal data is:

DEX Innovation Centre, z. s. Rumjancevova 696/3 460 01 Liberec I – Staré Město Czech Republic

Company ID (IČ): 01112589

(hereinafter referred to as "DEX Innovation Centre", "we", "our" or "us").

We process personal data only for the period necessary to fulfil the purpose for which the data was collected, unless a longer retention period is required by law. Personal data is generally retained for no longer than five (5) years unless another legal basis requires otherwise.

We process personal data based on:

• a) your consent provided through our website;
• b) your communication with us via email or other communication channels;
• c) your consent provided when registering for or attending our events;
• d) your written consent;
• e) the negotiation, conclusion and performance of a contract between you and DEX Innovation Centre;
• f) publicly available information obtained for legitimate business purposes.

According to the legal basis described above, personal data is processed for the following purposes:

• a) to provide requested services, organise activities or perform contractual obligations and, where consent has been provided, to send commercial communications;
• b) to fulfil obligations arising from contracts concluded with third parties;
• c) to perform employment-related or other contractual obligations between you and DEX Innovation Centre;
• d) to provide relevant information about programmes, projects, events or services that may be of interest to you based on our legitimate interest or your consent.

We implement appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data and to protect it against unauthorised access, disclosure, alteration, loss or destruction.

Access to personal data is restricted only to authorised persons who require such access for the performance of their duties.

We do not disclose personal data to third parties unless:

• it is necessary for the provision of our services;
• it is required by applicable law;
• it is necessary to protect our legitimate interests;
• or you have provided your consent.

Where external service providers process personal data on our behalf (such as website hosting, analytics or communication services), they do so under appropriate contractual agreements and only for the purposes specified by DEX Innovation Centre.

You have the right to request information regarding:

• what personal data we process,
• the purpose of processing,
• the legal basis for processing,
• the categories of personal data concerned,
• and the recipients of your personal data.

We will provide this information free of charge within 30 days of receiving your request. In exceptional circumstances, this period may be extended to 90 days, and you will be informed accordingly.

For security reasons, we may verify your identity before providing the requested information.

You also have the right to request correction or deletion of personal data processed under Section 3 (a), (b), (c), (d) and (f), where applicable.

If you believe that your personal data is being processed in violation of applicable legislation of the Czech Republic or the European Union, you have the right to object to such processing. We will investigate every objection and respond in accordance with applicable law.

If you believe your rights have been violated, you have the right to lodge a complaint with the competent supervisory authority:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)

Pplk. Sochora 27 170 00 Prague 7 Czech Republic

You may withdraw your consent to the processing of personal data at any time and request the deletion of your personal data where processing is based on consent.

The right to erasure does not apply where processing is necessary for the performance of a contract, compliance with legal obligations or the protection of legitimate interests.

Where data is stored in backup systems used for disaster recovery and system resilience, immediate deletion may not be technically possible. Such data will not be actively processed and will be permanently removed according to the applicable backup retention schedule.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:

Email: info@dex-ic.com

or by post at the address stated in Section 1.

When you visit our website, we may automatically collect technical information necessary for the operation, security and improvement of the website.

This information may include:

• IP address;
• date and time of access;
• pages visited;
• HTTP response codes;
• browser type and version;
• operating system;
• device type;
• screen resolution;
• referring website;
• language settings;
• approximate geographic location derived from the IP address.

This information is processed for the purposes of:

• ensuring the security and availability of the website;
• improving website functionality and user experience;
• analysing website performance;
• detecting misuse or malicious activity;
• protecting our legitimate interests.

Where analytics cookies have been accepted, website usage statistics may also be processed using Google Analytics 4.

Our website uses cookies and similar technologies to ensure the proper functioning of the website, improve user experience, analyse website traffic and maintain website security.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They enable the website to recognise your browser, remember your preferences and collect information about how visitors use the website.

Types of cookies we use

Strictly Necessary Cookies

These cookies are essential for the operation, security and accessibility of the website. They cannot be disabled because the website would not function properly without them.

Analytics Cookies

With your consent, we use analytics cookies to understand how visitors interact with our website and to improve its content and performance.

Currently, analytics services may include:

• Google Analytics 4 (Google LLC)

Analytics cookies are activated only after you have provided your consent through the cookie banner.

Information collected through analytics cookies

Analytics cookies may collect information such as:

• anonymised IP address where applicable;
• browser type;
• operating system;
• device information;
• pages visited;
• session duration;
• interactions with website content;
• referring website.

Third-party providers

Where analytics cookies are accepted, information may be processed by:

• Google Ireland Limited (European Union);
• Google LLC (United States), where applicable.

Cookie Retention

Retention periods depend on the individual cookie.

Typical retention periods are:

• Strictly Necessary Cookies: duration of the browsing session or up to 12 months;
• Google Analytics cookies: up to 26 months, depending on Google's configuration.

Managing Cookie Preferences

When you first visit our website, you may choose whether to accept analytics cookies.

You may change or withdraw your consent at any time by opening the Cookie Settings available on every page of our website.

You may also delete or block cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

For more information about Google's privacy practices, please visit: https://policies.google.com/privacy

Some of the service providers used on this website may process personal data outside the European Economic Area (EEA), including the United States.

Where such transfers occur, DEX Innovation Centre ensures that they are carried out in accordance with the General Data Protection Regulation (GDPR).

Transfers are based on appropriate safeguards, including adequacy decisions adopted by the European Commission or the European Commission's Standard Contractual Clauses (SCCs), where applicable.

Where Google Analytics is used, certain technical data may be processed by Google LLC in the United States in accordance with Google's applicable legal commitments and data protection safeguards.

If photographic or video recordings are made during our events, participants are informed during the registration process.

Such recordings may be used for:

• internal documentation;
• reporting obligations towards project funding authorities;
• promotion of DEX Innovation Centre on our website;
• social media channels;
• other communication and promotional materials.

Our activities are not intended for children under the age of 15.

We do not knowingly collect personal data from children under this age without an appropriate legal basis.

If you are a parent or legal guardian and believe that your child has provided us with personal data, please contact us immediately.

If we become aware that personal data has been collected without the required parental consent where applicable, we will promptly take reasonable steps to delete such information.

Where consent is required by applicable law, we may request parental or guardian consent before processing personal data relating to minors.