If you are our customer, newsletter subscriber, or website visitor, you entrust us with your personal data. We are responsible for its protection and security. Please familiarize yourself with the personal data protection, principles, and rights you have in connection with the GDPR (General Data Protection Regulation).

Who is the controller?

URBANO PRODUCTION s.r.o., Company ID: 28967992, with registered office at Kolbenova 616/34 190 00, Prague 9-Vysočany We operate the urbano.cz website. We process your personal data as a controller, i.e. we determine how the personal data will be processed and for what purpose, for how long, and we select any other processors who will assist us with the processing.

Contact details

If you would like to contact us during the processing, you can contact us by e-mail: info@urbano.cz

Scope of personal data and purposes of processing

We process personal data that you entrust to us for the following reasons (to fulfill these purposes):

• Provision of services, performance of the contract Your personal data in the scope: e-mail, name, surname, telephone, which we absolutely need to fulfill the contract (e.g. sending access to the application, sending online, course, etc., delivery of goods).

• Accounting If you are a customer, we absolutely need your personal data (invoicing details) to comply with the legal obligation to issue and record tax returns. documents.

• Marketing – sending newsletters We use your personal data (email and name), gender, what you click on in the email and when you open it most often for the purpose of direct marketing – sending commercial communications. If you are our customer, we do so out of legitimate interest, as we reasonably assume that you are interested in our news, for a period of 10 years from your last order. If you are not our customer, we send you newsletters only on the basis of your consent, for a period of 10 years from the date of granting. In both cases, you can revoke this consent by using the unsubscribe link in each email sent.

• Advanced marketing based on consent Only on the basis of your consent can we also send you inspiring third-party offers or use the email address, for example, for remarketing and advertising targeting on Facebook, for a period of 5 years from the date of consent. This can of course be revoked at any time via our contact details.

• Photographic documentation and video recordings Live events, references, interviews, quotes or photographs. If you would not like to be included in the recordings, please let us know via the contact details.

We retain your personal data after the statute of limitations has expired, unless the law stipulates a longer retention period or we have stated otherwise in specific cases.

IP, Cookies and other online identifiers

When browsing our website, we record your IP address, how long you stay on the website and which page you come from. We consider the use of cookies to measure website traffic and customize the display of websites as our legitimate interest as the administrator, because we believe that this allows us to offer you even better services. Cookies for advertising targeting will only be processed on the basis of your consent. Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer. We use cookies for the following purposes:

• functioning of the website,
• measuring website traffic and creating statistics regarding traffic and visitor behavior on the website,
• targeting advertising so that we do not bother you with posts that do not interest you.

Consent via browser settings The user determines in the settings of his PC or in the browser settings whether the browser should allow the website to store cookies on the end device. This setting can be considered as consent to the processing of personal data. The browser is instrument for mediating consent. However, consent cannot cure other deficiencies or illegality of the processing of personal data. Consent meets the definitional characteristics of consent according to Article 4, point 11 of the GDPR: It is free, specific, informed and unambiguous. Consent is interpreted in relation to the purpose, means and manner of processing personal data, not to the product or web application. How to block the storage of cookies? You can limit or block the use of cookies in your web browser settings. Information about the settings of a specific browser can be found at the following addresses:

• Internet Explorer: windows.microsoft.com
• Google Chrome: support.google.com
• Mozilla Firefox: support.mozilla.org
• Opera: help.opera.com
• Safari: support.apple.com

Cookies are further processed according to purpose by the following processors: Google Analytics Servicesics, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies collected are then processed by Google Inc. in accordance with the Privacy Policy. Facebook Pixel Services, operated by Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. The cookies collected are then processed by Facebook Inc. in accordance with the Privacy Policy.

Security and protection of personal data

We protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We protect them as if they were our own. We have adopted and maintain all possible (currently known) technical and organizational measures to prevent the misuse, damage or destruction of your personal data.

Transfer of personal data to third parties

Our employees have access to your personal data. To ensure specific processing operations that we cannot ensure ourselves, we use the services and applications of processors who can protect data even better than us and specialize in the given processing. They are the providers of the following platforms:

• ECOMAIL.CZ, s.r.o.
• Active24.cz (webhosting)
• Facebook
• Google
• Sklik (Senam.cz)
• accounting firm

It is possible that in the future we may decide to use other applications or processors, for facilitating and improving the quality of processing. However, we promise you that in such a case, when selecting, we will place at least the same demands on the processor for security and quality of processing as on ourselves.

Data transfer outside the European Union

I process data exclusively in the European Union or in countries that ensure an adequate level of protection based on a decision of the European Commission.

Your rights in connection with the protection of personal data

You have a number of rights in connection with the protection of personal data. If you would like to exercise any of these rights, please contact us by e-mail: info@urbano.cz You have the right to information, which is already fulfilled by this information page with the principles of personal data processing. Thanks to the right of access, you can call us at any time and we will provide you with evidence within 30 days of what personal data we are processing and why. If something changes about you or you find your personal data outdated or incomplete, you have the right to supplement and change your personal data. You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, you believe that we are processing it unlawfully, but you do not want to delete all the data, or if you have objected to the processing. You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.) Right to object If you believe that we are processing your personal data unlawfully. Right to portability If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right to access – with the only difference that we will provide/send the information to you in a machine-readable format. Here we need at least 30 days. Right to erasure (to be forgotten) Your other right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish, you have the right to do so. In such a case, we will delete all your personal data from our system and from the system of all sub-processors and back-ups. We need 30 days to ensure the right to erasure. In some cases, we are bound by a legal obligation, and for example, we must register issued tax documents for a period specified by law. In this case, we will delete all such personal data that are not bound by another law. We will inform you by e-mail when the deletion is complete. Complaint to the Personal Data Protection Office If you feel that we are not handling your data in accordance with the law, you have the right to contact the Personal Data Protection Office with your complaint at any time. We would be very happy if you first inform us of this suspicion so that we can do something about it and correct any errors. Unsubscribe from newsletters and commercial communications We send you emails with inspiration, articles or products and services if you are our customer on the basis of our legitimate interest. Ifyou are not yet a customer, we only send them to you based on your consent. In both cases, you can unsubscribe from our emails by clicking the unsubscribe link in each email sent.

Confidentiality

We would like to assure you that our employees who will process your personal data are obliged to maintain confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of the contractual relationship with us. Your personal data will not be disclosed to any other third party without your consent. These personal data processing principles are valid from 1.1.2025