Privacy Notice

pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC

(hereinafter referred to as "GDPR")

In the event that you provide us with your personal data via the website https://spacebrains.tech/ (hereinafter referred to as the "Website"), in connection with the performance of a contract or otherwise, we as the controller - spacebrains s. r. o., registered office: Dúbravská cesta 1793, 841 04 Bratislava - mestská časť Karlova Ves, Slovak Republic, a limited liability company, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No.: 167191/B, ID No.: 55 239 196 (hereinafter referred to as "SB" or "we") would like to inform you about the processing of your personal data and about your rights related to this processing.

1. What personal data do we process?

We process the following personal data:

• name
• surname
• address
• e-mail address
• phone number
• job position
• work experience
• education
• your photo
• your audio-visual representation.

2. Why does SB process your personal data and what is the purpose and legal basis of the processing?

We process your personal data on the following legal bases:

Performance of the contract and performance of pre-contractual measures within the meaning of Article 6(1)(b) of the GDPR. Your personal data is used for the purpose of providing services, including pre-contractual relations and the protection and enforcement of SB's rights and interests arising from our relationship. This purpose includes in particular the following processing operations:

• effective communication in relation to service delivery;
• ensuring that your complaint or claim is resolved;
• ensuring the proper provision of services;
• the performance of our obligations and the exercise of our rights under any contract between you and us, including invoicing;
• sending notifications about changes;
• communicating and verifying your identity via your email address and phone number;
• other matters necessary for the services or in relation with them.

The conclusion and performance of the contract is only possible if we process your personal data. If you do not provide us with your personal data, we cannot conclude a contract with you and therefore we will not provide you with services.

In the event that you provide us with your data via the Website, your personal data will be used primarily for the purpose of prospecting for new business opportunities, including pre-contractual relationships. This purpose includes in particular the following processing operations at the pre-contractual stage:

• assessment of suitable business partners; and
• providing data to business partners.

We process your personal data for the purpose of handling your complaint on the legal basis of fulfilling a legal obligation within the meaning of Article 6(1)(c) of the GDPR. The personal data processed is used for the following processing operations:

• recording the complaint;
• assessment of the complaint;
• verifying whether the person who has made the complaint is entitled to make the complaint;
• notification of the outcome of the assessment of the complaint.

In some cases, we process your personal data on the legal basis of legitimate interests within the meaning of Article 6(1)(f) of the GDPR. We process your personal data for the purpose of creating a database of natural and legal persons in order to establish business relationships in the future and to ensure mutual communication. In this case, our legitimate interest is to ensure efficient, error-free and direct communication with each other.

We also process your personal data for the effective performance of our contractual obligations arising from our contract with you or a third party on whose behalf you act or who has named you as a contact person and our legal obligations to you or the third party under applicable law. Because we have entered into a contract with you or that third party, we need to process your personal data to ensure effective, error-free and direct communication and to ensure compliance with our contractual and legal obligations (tax and accounting) to you or that third party. This processing also relates to legal acts other than contracts, such as powers of attorney.

We process your personal data for the purpose of recording incoming and outgoing mail and emails.

In addition, we process your personal data by sharing or taking photographs and audio-visual recordings and posting photographs (where you may be) and recordings on our social profiles and our Website for the purposes and legitimate interests of promoting our events and services and to promote our brand and reputation.

We obtain your consent under Article 6(1)(a) GDPR if none of the above legal bases apply. SB obtains your voluntary and revocable consent at any time for the following purposes:

• marketing communication, in particular active information (via email, SMS, web services, telephone, social networks and other communication channels) about our activities or services and about the activities and services of third parties or for the processing of certain cookies, where consent is required.

3. How long do we keep your personal data?

Once we no longer need your personal data for the purposes for which we processed it, we will delete your personal data unless we have a legal obligation to retain it. Some details and correspondence may be retained until the end of the claims period, in connection with pre-contractual or contractual relationships, or to comply with legal requirements in relation to the retention of personal data.

4. Who do we share your personal data with?

External service providers: in accordance with legal and contractual obligations, we cooperate with external service providers (intermediaries or independent operators) and share your personal data to the extent necessary for the performance of the services. Our external service providers are mainly our business partners (in order to obtain new business opportunities) and IT providers.

Before we share your personal data with other processors, we will enter into a written contract with those processors to ensure that the processing complies with the principles under the GDPR.

Public Authorities: SB can only comply with certain legal obligations if it provides your personal data to state authorities such as tax authorities, courts or law enforcement authorities.

Other recipients - by consent.

5. From whom do we collect your personal data?

We obtain your personal data from you, or from persons who are expressly authorised to provide your data, or from a third party with whom we have entered into a contract (or other legal transaction) or who has referred you in a mailing, on the Website or in an email.

6. Do we use automatic individual decision making?

No, we do not use automatic individual decision-making, except for cookies. Information about the processing of cookies is provided on the Website.

7. Do we transfer your data to third countries?

Your personal data is processed mainly in the territory of the Slovak Republic and other member states of the European Union. Your personal data may only be processed by a country outside the European Union if that country has been certified by the European Commission as having an adequate level of data protection or if there are other sufficient safeguards for the protection of personal data (for example, binding corporate rules or standard European contractual clauses on data protection).

8.Other information:

Personal data may also, in justified cases, be subject to processing for the purpose of dealing with legal matters, including the performance of the duties of public authorities and monitoring for the purpose of legal protection. Personal data may also be archived in the public interest as well as for scientific, historical or statistical research.

9. What are your rights?

Your rights as a data subject are set out below. You should note that the exact conditions for exercising each right are set out in Chapter III of the GDPR, and not all rights may be applicable in a particular situation. You have the following rights:

• Right of access to the personal data we process about you
• The right to rectification of incorrect and inaccurate personal data and the right to have incomplete data completed
• Right to restriction, i.e. restriction of the processing of your personal data
• The right to erasure of personal data where the purpose is lacking or where they have been unlawfully processed
• The right to object to the processing of personal data if you believe that we have not processed personal data lawfully
• Right to be excluded from automatic individual decision-making
• The right to obtain personal data in a commonly used and machine-readable format and the right to transmit that data to another controller
• Right to withdraw consent to the processing of personal data
• Right to lodge a complaint with the supervisory authority

10. How can you exercise your rights?

We strive to protect your privacy as much as possible and therefore process your personal data in accordance with the GDPR and all other relevant legislation. However, if you disagree with the way we process your personal data or you have any questions, you can exercise your rights or ask any questions through following channels:

• electronically: privacy@spacebrains.tech
• in writing to: Dúbravská cesta 1793, 841 04 Bratislava - mestská časť Karlova Ves, Slovakia
• by phone: +421 948 849 489

Or you can lodge a complaint with a supervisory authority in relation to the processing of your personal data. Your local supervisory authority can be found at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm