Terms of personal data processing

These terms and conditions with the processing of personal data (hereinafter referred to as the Terms) describe the way in which RMS Košice s.r.o., with its registered office at the Entrance Campus of U. S. Steel, 044 54, Košice, ID: 31 650 015

registered in the Commercial Register of the District Court Košice I, Section: Sro. File number: 44721/V (hereinafter referred to as the Company or us) processes your personal data for the purpose of providing our services consisting in the sale and distribution of accessories to goods (hereinafter referred to as the Services) on the www.rms-kosice.sk website (hereinafter referred to as the Website).

WHAT INFORMATION DO WE COLLECT? AND FOR WHAT PURPOSE? We collect the following personal data about you (hereinafter referred to as Personal Data) depending on how and to what extent you use our Website and/or Services:

1. Information necessary for registration and access to the Website In order to register on our Website and then log in to our Website and access our personalized services on the Website, we process the following personal data: (i) your name, (ii) surname and (iii) e-mail. The processing of this data is necessary for the performance of a contract to which you and we are party. The legal basis for processing this information is Article 6 (1) (b) GDPR.B. Information necessary for the provision of Services For the purpose of providing our Services (i.e. [delivery of goods ordered by you / provision of the service purchased by you]), we process the following personal data: (i) your name, (ii) surname, (iii) address, (iv) e-mail, (v) telephone number and (vi) information about your payment card (especially card number,  expiry date and CVV code) . The processing of this data is necessary for the performance of a contract to which you and we are party. The legal basis for processing this information is Article 6 (1) (b) GDPR.C. Information collected for marketing purposesFor the purpose of receiving our newsletters and/or newsletters, information about discounts, updates, improvements and offers and other marketing materials in the form of e-mails, SMS messages or postal mailings and/or notifications, we process your: (i) name, (ii) surname, (iii) e-mail,  (iv) telephone number and (v) address. We process this personal data based on your explicit consent. The legal basis for processing this information is Article 6 (1) (a) GDPR. If you decide that you no longer wish to receive such messages, you have the right to withdraw your consent by clicking on the hyperlink directly in the email communication and/or available here: https://www.rms-kosice.sk/index.php?route=account/login. Withdrawal of consent may result in you not receiving notifications about discounts, updates, improvements and offers. It is not possible to withdraw consent to receive e-mails containing notifications related to the provision of the Services.D. In order to continuously improve our Services, develop your user experience when using our Website, we process information relating to: (i) your computer, (ii) visits to or use of our Website and/or our Services (including your IP address, geographic location, type and version of your browser/operating system, source links, length of visit to viewed pages and movements on our Website or any similar information that the Company may obtain directly or indirectly from third party providers), (iii) generated through your use of our Website and/or Services or generated in the course of using our Services (including the timing, frequency and pattern of use of the Website). We process this personal data based on your explicit consent. The legal basis for processing this information is Article 6 (1) (a) GDPR. E. Information obtained when leaving your comment / rating For the purpose of leaving a review or publishing a comment on our Website, we will process personal data that you leave together with the rating/comment on our Website, we will process your: (i) name, (ii) surname, (iii) alias that you specify to leave a comment / rating and (iv) any other data that you decide to provide in the rating/comment. We process this personal data based on your explicit consent. The legal basis for processing this information is Article 6 (1) (a) GDPR. F. Information collected when communicating with us For the purpose of communicating with us for any reason (e.g. support in using the Website/use of the Services, complaints, solving any problems, etc.), we will process the following personal data: (i) your first name, (ii) surname, (iii) address, (iv) e-mail, (v) telephone number, (vi) communication content, (vii) metadata associated with the communication and (viii) any other necessary data,  which you choose to indicate in the communication. The processing of this data is necessary for the performance of a contract to which you and we are party. The legal basis for processing this information is Article 6(1)(b) GDPR. ON WHAT BASIS CAN WE STILL PROCESS YOUR PERSONAL DATA? In addition to the above, we have the right to process your Personal Data in order to comply with our legal obligations under Article 6 (1) (c) GDPR or to protect our legitimate interests under Article 6 (1) (f) GDPR, for example for fraud prevention, network and information security and direct marketing. We will process your Personal Data in accordance with applicable law and protect your Personal Data against misuse and/or unlawful disclosure. HOW DO WE SHARE YOUR PERSONAL DATA? In order to make our Website and/or Services available (and if necessary due to circumstances), we have the right to provide your Personal Data (and you agree to such disclosure) in accordance with the principle of minimization only to a limited circle of persons, namely our employees, subcontractors, officers, consultants, sales representatives, suppliers or related persons of the Company and Service Providers to the extent that  to what extent it is reasonable and necessary to achieve the purpose stated in these Terms and Conditions, in particular to the following persons:

HOUR, spol. s r. o.So registered office: M. R. Štefánika 836/33, ID: 31 586 163

U.S. Steel Košice, s.r.o.So registered office: Entrance area of U. S. Steel, 044 54 Košice, ID: 36 199 222

U.S. Steel Košice – SBS, s.r.o.So registered office: Entrance area of U. S. Steel, 044 54 Košice, ID: 00 697 745

Compass Group Slovakia s. r. o.So its registered office: Karadžičova 2 Bratislava – Staré mesto 811 09 , ID: 31 342 809

Up Slovakia s.r.o.So registered office: Tomášikova 23/D, 821 01 Bratislava

Hospital Košice – Šaca a.s. 1. private hospitalWith registered office: Lúčna 57, Košice – Šaca 040 15

IRON MOUNTAIN SLOVAKIA, s.r.o.So registered office: Pri Šajbách1, 831 06 Bratislava, ID: 36 232 734

Telegrafia a. s.So registered office: Lomená 7, 040 01 Košice, ID: 17 081 386

TERMOSTAV – MRÁZ, limited liability company, KošiceWith its registered office: Industrialná 3, 042 99 Košice, ID: 31 681 255

And

Furthermore, we may disclose your Personal Data to: (i) to the extent required by applicable law, (ii) in connection with any pending or future legal proceedings, or (iii) to establish, exercise or defend our legal rights (including providing your Personal Data to third parties for fraud prevention and minimizing payment risks).

Information from which you are not identifiable: We have the right to provide your Personal Data from which you cannot be identified (including anonymous data about the use of our Website and/or Services, links/exit pages and URLs, platform types, number of clicks, etc.) to third parties interested in such information, in order for them to understand how to use certain services.

We do not share your Personal Data that identifies or locates you with third parties for direct marketing purposes.

We may allow certain third parties to post advertisements and marketing information on our Website. Such third parties use technology that sends offers or links to offers directly to your browser, which are then displayed as part of the website you are browsing. In this case, they will automatically receive information about your IP address. They may also use other technologies (e.g. cookies, JavaScript or web beacons) that measure the effectiveness of their ads and also personalize the content of the ads shown to you. We do not disclose to such third parties information that would allow them to personalize the data thus obtained. Please note that if an advertiser asks us to publish an ad to a certain group of customers and you respond to that ad, that advertiser or ad server may infer that you belong to the group they are trying to reach. These Terms are not intended to regulate your relationship with any third party that uses the above technologies. For more information, please read the terms and conditions of personal data processing of such advertisers.

DO WE TRANSFER YOUR PERSONAL DATA TO THIRD COUNTRIES? The personal data we collect may be stored or otherwise processed and transferred within the countries in which we conduct our business activities in order to achieve the purpose of processing set out in these Terms. For the same purpose, your data may be transferred between member states of the European Union or the European Economic Area and countries that, according to the European Commission, guarantee a level of protection of personal data, as published from time to time by the Office for Personal Data Protection on its website: https://dataprotection.gov.sk/uoou/sk/content/prenos-do-krajin-zarucujucich-primeranu-uroven- protection

HOW LONG WILL WE PROCESS YOUR PERSONAL DATA? Unless otherwise provided by applicable law, we have the right to process your Personal Data in a form that allows your identification for the time necessary to achieve the purpose for which the Personal Data was provided (this may include the time you visit our Website

or you use our Services and/or for as long as the purpose of processing Personal Data lasts), unless otherwise specified, for the following duration:A. We will process the data necessary for registration and access to the Website from the date of your registration on the Website to 30 days from the date you cancel your registration. We will process the data within this period (i.e. 30 days from the cancellation of registration) only for the purpose of terminating the contractual relationship between us and you that arose from your registration on the site, resolving any disputes arising from this and protecting any of our legitimate interests). delivered and the price will be paid).C. Information obtained for marketing purposesWe will process the data obtained for marketing purposes from the day you give us consent to such processing until the day of (i) withdrawal of your consent or (ii) cancellation of registration on the Website.D. We will process the data obtained for marketing purposes from the day you give us your consent to such processing until the day of (i) withdrawal of your consent or (ii) cancellation of registration on the Website.E. We will process the data obtained for marketing purposes from the day you give us consent to such processing until the day of (i) withdrawal of your consent or (ii) cancellation of registration on the Website.F. We will process the data obtained when communicating with us from the date of its collection until the day when your request resulting from the e-mail communication is not processed.

We have the right to process your personal data for longer than stated above if it is necessary (i) for compliance with our legal obligations, (ii) to establish, exercise or defend our legal rights (including disclosure to third parties to prevent fraud and minimize payment risks).

HOW CAN YOU WITHDRAW YOUR CONSENT? You can withdraw your Consent at any time at your own discretion via e-mail contact, which can be found here: pfekete@rms-kosice.sk  or by phone at +421 905 353 788

WHAT ARE YOUR RIGHTS AND OBLIGATIONS? In particular, you have the right to: (i) the purpose of the processing of Personal Data, (ii) the categories of processed Personal Data, (iii) the recipients to whom Personal Data are provided and (iv) both storage of your Personal Data.

Rectification of Personal Data

If you become aware that we are processing your incorrect Personal Data, please inform us and we will correct such incorrect data without undue delay.

Deletion of Personal Data (Right to be forgotten)We will delete your Personal Data if: (i) the Personal Data are no longer necessary for the purpose for which they were collected, (ii) you withdraw your consent to the processing of Personal Data under the conditions specified in these Terms and Conditions, (iii) you object to the processing of Personal Data, (iv) we have acquired your Personal Data illegally, (v) we have a legal obligation to erase your Personal Data or (vi) the Personal Data was obtained in connection with the offer of information society services.

You have the right to restrict the processing of your Personal Data if: (i) you object to the accuracy of the Personal Data for a period enabling verification of their accuracy, (ii) the processing of your Personal Data is unlawful and you object to the erasure of Personal Data instead of restricting their use, (iii) we no longer need your Personal Data for processing purposes, but you need them to assert a legal claim, or (iv) you object to the processing of Personal Data data until we verify whether the legitimate reasons on our part outweigh your legitimate interests.

You have the right to obtain your Personal Data processed by us in a structured, commonly used and machine-readable format for the purpose of transferring such Personal Data to another controller.

You have the right to object to the processing of Personal Data based on legitimate interest, marketing, and profiling related to direct marketing.

If you suspect that your rights related to the protection of your Personal Data have been violated, you have the right to initiate proceedings before a supervisory authority.

DO WE USE AUTOMATED DECISION-MAKING AND PROFILING? HOW DOES IT WORK? To provide our Services we do not use: (i) automated individual decision-making (i.e. we collect your Personal Data, which are subsequently evaluated by technical means, without any human intervention. Subsequently, based on such an evaluation, we further provide you with our Services) and (ii) profiling (i.e. we collect and evaluate your Personal Data as well as data about your behavior on our Website for the purpose of your inclusion in a certain group of people and subsequent analysis and prediction of your interests, further behavior, etc.).

DO WE PROCESS CHILDREN’S PERSONAL DATA? We consider the protection of your children’s privacy to be particularly important. For this purpose, we do not knowingly collect any personal data of persons under the age of 16. If you are under the age of 16, please do not send us any of your Personal Data, including your name, permanent address, telephone number or email address. No person under the age of 16 is entitled to provide their Personal Data on the Website. If we find out that any Personal Data we process relates to a person whose age has not reached 16 years and at the same time we have not been granted the consent of the legal representative of such person, we will delete such Personal Data without delay. If you suspect that we might process information from or about persons under the age of 16, please contact us at pfekete@rms-kosice.sk or telephone at +421 905 353 788

HOW DO WE PROCESS FINANCIAL OPERATIONS? All financial operations and transactions electronically carried out on our Website or in connection with our Services will be processed through online payment service providers Global Payments s.r.o., organizational unit, Tomášikova 48, 831 04 Bratislava. The terms of processing personal data of such providers can be found here: https://www.globalpaymentsinc.com/sk-sk/gdpr. We will only provide your Personal Data to an online payment service provider to the extent necessary to process payments you make through our Website, to refund such payments and to resolve complaints and queries related to such payments and refunds.

HOW DO WE WORK WITH THIRD-PARTY WEBSITES? Our Website contains hyperlinks and details of third-party websites. We have no control over and assume no responsibility for the processing conditions and privacy practices of third parties.

DO YOU HAVE ANY FURTHER QUESTIONS? If you are interested in contacting us regarding the processing of personal data, including if you want to exercise any of the rights set out in these Terms and Conditions, please contact us by e-mail at: pfekete@rms-kosice.sk   or telephone at +421 905 353 788

HOW DO WE UPDATE OUR TERMS OF PERSONAL DATA PROCESSING? We reserve the right to change these Terms. If we change the Terms or processes, we will post those changes on the Website so that you always have an overview of what information we collect, how we use it and under what circumstances we may disclose it to a third party. It is important that you periodically review these Terms to ensure that you are aware of any changes.

WHAT COOKIES DO WE USE? A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to your web browser and stored by the browser on your mobile device or computer for the purpose of identifying you (usually based on anonymous identifiers). The identifier is then sent back to the server each time the browser requests a page view from the server in order to identify your visit to a particular page, the list of advertisements you have responded to, the type of browser you use and also to remember the data you have entered into or on our Website.

We use cookies to personalize the content and advertisements you see, to enable the use of social media functionalities and to analyze traffic. We provide information about your use of our Website to our social media, advertising and analytics partners, who may combine this data with other information you have provided to them or that they have obtained because of your use of their services.

We use cookies to adapt to your needs, to distinguish you from other users, to prevent the display of advertisements in your browser that are not of interest to you and to prevent you from having to log in to our Website repeatedly. We use either “permanent” or “temporary” cookies: persistent cookies will be stored in your internet browser until their specified expiration date, unless you delete them before that date; Temporary cookies, on the other hand, expire the moment you close your internet browser.

We also use third-party cookies: Third-party cookies are cookies that are set by a site other than our Website. For example, social media “Like” buttons placed on their website. Such a button may withdraw cookies that can be read by the operator of this social media. The purpose of these third-party cookies is usually to collect certain information for the purpose of behavioral research, demographics and, last but not least, for the purpose of carrying out targeted marketing. Cookies usually do not contain information that could identify you, but your Personal Data that we store may be linked to data that is obtained and stored from cookies Technical cookies: to make our online shop work properly (e.g. to create a user profile, log in to it and to purchase goods and services),  We use technical cookies. Without them, our online store could not function at all.

Functional cookies: so that you do not have to log in constantly and so that you do not have to set your preferences over and over again (e.g. setting the language in which our webshop is displayed), functional cookies help you. In this case, your password is always encrypted. The use of these cookies is not necessary, but it will make your visit to our online store much more pleasant and easier.

Analytical cookies: analytical cookies help us to improve our online store, which again benefits you. Analytical cookies on our website are collected by a script of Google Inc., which subsequently anonymizes this data. After anonymization, this is no longer personal data, because anonymized cookies cannot be assigned to a specific user or person. We only work with cookies in anonymized form. Therefore, we cannot find out from cookies how a particular user behaved on our website (what pages he visited, what goods he viewed, etc.). We also use the knowledge from these cookies for advertising purposes, where on the basis of this data we can show you advertising on foreign websites that we consider relevant to you. Please note that blocking and/or deleting cookies may have a negative impact on your ability to use the Website and/or Services.