1 Identification and contact details of the personal data controller

• Name of the entity: LUMA klima s.r.o.
• Company ID: 23463970
• Address: Nové Sady 988/2 Staré Brno, 602 00 Brno
• Phone number: +420 777 766 795
• Data box ID: rrepf6z
• Email address: info@lumaklima.com

2 Scope of processing – personal data processed

We only process personal data that we obtain from you by filling in the administrator’s website for the
purpose of
contacting you later. This includes the following personal data:

• first name, last name
• email address
• phone number

3 Purposes of processing

The purposes of processing refer to the reasons why we process your personal data. We process your personal
data for
the following purposes:

• arranging a meeting or responding to an inquiry
• ordering services

We do not process your personal data for any other purposes, nor do we perform any further processing
operations on
it, such as profiling or automated decision-making, etc.

4 Lawfulness of processing – legal grounds

Personal data is always processed on the basis of legal grounds. We do not process your personal data
without legal grounds.

The processing of personal data for the purposes specified above is necessary for negotiations prior to the
conclusion of a contract and subsequently for the possible conclusion of a contract.

5 Recipients of personal data

Your personal data is not transferred outside the controller’s company. In rare cases, it may be transferred
to persons who perform activities for the controller on the basis of a contractual relationship similar to
an employment relationship. In such a case, these persons are prohibited from processing your data for their
own purposes and/or outside the purposes specified here. These persons are bound by confidentiality
obligations.

We do not transfer your personal data to third countries or international organizations.

6 Retention period

We always process your personal data for the time necessary to fulfill the purpose of its processing. This
is the period during which it can be reasonably expected that a contractual relationship will be concluded,
a meeting will be arranged, or the controller will be contacted as requested. Your personal data is thus
processed for a maximum period of 1 year.

7 Your rights

You have several rights related to the protection of personal data, which you can exercise in accordance
with the conditions set out in the GDPR.

7.1 Right of access

You have the right to request confirmation from us as to whether or not your personal data is being
processed. If it is being processed, you have the right to access your personal data and other information
related to its processing, such as the purposes of processing, recipients of personal data, retention
period, etc.

The first copy of the processed personal data will be provided to you free of charge. In the case of
requests for additional copies, we are entitled to charge a reasonable fee corresponding to the
administrative costs incurred.

7.2 Right to rectification

You have the right to request the rectification of inaccurate personal data or the completion of incomplete
personal data.

7.3 Right to erasure

You have the right to erasure of personal data, except where we are prevented from doing so by legal
obligations or where other exceptions apply.

7.4 Right to restriction of processing

You have the right to restriction of processing in the following cases:

• if you contest the accuracy of the personal data; the processing of personal data is then restricted
  for the period necessary to verify the accuracy of the personal data;
• the processing is unlawful and you refuse to have the personal data erased and request instead that
  its use be restricted;
• the personal data is no longer needed for the purposes of the processing, but you require it for the
  establishment, exercise, or defense of legal claims;
• you object to the processing of personal data on the basis of a legitimate interest; the processing
  of personal data is then restricted until it is verified whether our legitimate reasons outweigh
  yours.

7.5 Right to portability

In the case of automated processing of personal data based on consent or the conclusion of a contract, you
have the right to obtain your personal data in a structured, commonly used, and machine-readable format. If
technically feasible, we will send your personal data in the requested format directly to another controller
at your request.

7.6 Right to lodge a complaint

If you believe that the processing of your personal data is in breach of the GDPR, you have the right to
lodge a complaint with a supervisory authority. In the Czech Republic, the supervisory authority is the
Office for Personal Data Protection, with its registered office at Pplk. Sochora 727/27, 170 00 Prague 7 –
Holešovice.

8 How to exercise your rights

You can exercise your rights related to personal data protection by submitting a request to the controller.
The request must always contain at least the applicant’s details listed above (which you filled in on the
controller’s website) and a specification of the rights being exercised.

There are several ways to submit a request. To prevent unauthorized access to your personal data by third
parties, each option involves a specific method of verifying your identity. You can submit your request as
follows:

• In writing – Sign the request with your officially certified signature, place it in an envelope
  marked “Request under the GDPR,” and send it to the administrator’s address.
• By email – Sign the request with your guaranteed electronic signature and send it to
  info@lumaklima.com with the subject line “Request under the GDPR.”
• By data message – Send the request from your data box to the controller’s data box and enter “Request
  under the GDPR” in the subject field.

9 Failure to provide personal data

In general, you are entitled not to provide your personal data. If you do not provide us with your data, we
will not be able to contact you.

10 Cookie policy

Some cookies ensure that certain parts of the website function properly and that your user preferences
remain known. By placing functional cookies, we make it easier for you to visit our website. This way, you
do not have to repeatedly enter the same information when visiting our website. We may place these cookies
without your consent.

Placed cookies: