NexVio s.r.o.
with its registered office at Plzeňská 3352/156, 150 00 Prague 5
Company ID No.: 29591961
registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 449081/MSPH
e-mail: sales@nexvio.cz
tel.: +420 603 393 500

(hereinafter referred to as “NexVio” or the “Controller”)

This Privacy Policy explains how NexVio s.r.o. processes the personal data of visitors to the nexvio.cz
website, persons who contact us, and our customers and business partners.

When processing personal data, we act in accordance with Regulation (EU) 2016/679 of the European
Parliament and of the Council (“GDPR”) and other applicable legislation.

PRIVACY POLICY

The controller of personal data is:

NexVio s.r.o.
Plzeňská 3352/156
150 00 Prague 5
Company ID No.: 29591961
e-mail: sales@nexvio.cz
tel.: +420 603 393 500

The Controller determines the purposes and means of processing personal data.

Depending on how you communicate with us or use our website, we may process in particular:

• first and last name,
• company name,
• job title or other information provided in business communications,
• e-mail address,
• telephone number,
• information provided in an enquiry or other message,
• data related to the business relationship,
• data related to orders, contracts and invoicing,
• technical data related to the use of the website, if such data is processed as part of its operation,
• data related to the use of cookies and similar technologies, if used.

Please do not send us special categories of personal data through contact forms unless it is necessary.

We obtain personal data primarily:

• directly from you through a contact or enquiry form,
• through e-mail or telephone communication,
• in the course of business negotiations,
• in connection with entering into and performing a contractual relationship,
• from publicly available sources, where relevant to our business activities,
• automatically when using the website, if we process such data, for example through technical cookies or similar technologies.

We process personal data primarily for the following purposes:

4.1 Handling enquiries and communication

If you contact us via a form, e-mail or telephone, we use your contact details and the information
provided in your enquiry for the purpose of:

• responding to your enquiry,
• processing your request,
• preparing an offer,
• communication related to your enquiry,
• potentially establishing a business relationship.

4.2 Entering into and performing a contract

If you enter into a contract with us, we process personal data necessary for:

• entering into and performing the contract,
• communication with the customer or business partner,
• delivery of goods or provision of services,
• issuing and maintaining accounting and tax documents,
• handling any complaints or other requests.

4.3 Compliance with legal obligations

We may process personal data for the purpose of complying with obligations arising from applicable
legislation, particularly in the areas of accounting, taxation and other statutory obligations.

4.4 Protection of our legitimate interests

We may also process personal data for the purpose of protecting our legitimate interests, in particular:

• protecting our rights and property,
• preventing fraudulent or unlawful conduct,
• ensuring the security of information systems,
• handling legal claims and disputes,
• maintaining records of business communications.

4.5 Marketing communications

If you provide us with the appropriate consent or if permitted by applicable legislation, we may also use
your contact details to send commercial communications.

You may unsubscribe from commercial communications at any time using the method specified in the
relevant commercial communication or by contacting us at sales@nexvio.cz.

We process personal data only where there is a legal basis for such processing pursuant to Article 6 of
the GDPR.

Depending on the specific circumstances, this may include in particular:

• performance of a contract or taking steps at your request prior to entering into a contract,
• compliance with a legal obligation to which we are subject,
• our legitimate interest, provided that your interests or fundamental rights and freedoms do not override such interest,
• your consent, where required for the relevant purpose.

The legal basis always corresponds to the specific purpose of processing.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the period required by applicable legislation.

The retention period may therefore vary depending on the specific purpose.

For example:

• data from enquiries is retained for the period necessary to process the enquiry and any subsequent business communication,
• data related to a contractual relationship is retained for the duration of the contractual relationship and subsequently for the period required by applicable legislation,
• accounting and tax documents are retained for the period required by applicable legislation,
• data processed on the basis of consent is retained until consent is withdrawn, unless another legal basis exists for its further processing.

After the relevant retention period has expired, personal data is deleted, anonymised or otherwise
securely disposed of, unless its continued retention is necessary for legal reasons.

We may disclose personal data, to the extent necessary, to:

• our employees and contractors who require it to fulfil their employment or contractual obligations,
• providers of IT and hosting services,
• providers of e-mail and communication services,
• accounting, tax and legal advisers,
• providers of other services that we use for the operation of our company and website,
• public authorities where we are required to do so by law.

Where a third party processes personal data on our behalf, we select providers that offer appropriate
safeguards for the protection of personal data and, where required by the GDPR, enter into data
processing agreements with them.

We seek to process personal data within the European Union and the European Economic Area.

If the use of a particular service results in personal data being transferred to a country outside the
European Economic Area, we will ensure that such transfer takes place only in accordance with the
GDPR, in particular on the basis of an adequacy decision or appropriate safeguards under the GDPR.

Our website may use cookies and other similar technologies.

Cookies may be used in particular for:

• ensuring the proper functioning of the website,
• securing web forms,
• remembering technical settings,
• analysing website traffic or for marketing purposes, where such technologies are used on the website.

Technical cookies that are necessary for the functioning of the website may be used without prior
consent, provided that they meet the conditions established by applicable legislation.

Other cookies for which consent is required will only be activated after the relevant consent has been
provided.

Detailed information about the cookies used and the available settings can be found in the Cookie
Settings section of our website. If you have consented to the use of optional cookies, you may withdraw your consent at any time through the cookie settings. The Czech Office for Personal Data Protection (ÚOOÚ) states that prior consent is required for nontechnical cookies and that refusing consent must be as easy for the user as granting it.

In connection with the processing of your personal data, you have in particular the following rights under the GDPR:

Right of access

You have the right to request confirmation as to whether we process your personal data and, if so, to obtain access to such data and other information specified by the GDPR.

Right to rectification

You have the right to request the correction of inaccurate personal data or the completion of
incomplete personal data.

Right to erasure

Under the conditions set out in the GDPR, you have the right to request the erasure of your personal data.

Right to restriction of processing

Under the conditions set out in the GDPR, you may request restriction of the processing of your
personal data.

Right to data portability

In the cases specified by the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where applicable, to request that it be transmitted to another controller.

Right to object

Where we process personal data on the basis of a legitimate interest, you have the right, under the
conditions set out in the GDPR, to object to such processing.

Right to withdraw consent

Where processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You may exercise your rights in writing or electronically by contacting:

NexVio s.r.o.
Plzeňská 3352/156
150 00 Praha 5
E-mail: sales@nexvio.cz

In your request, please provide in particular your name, contact details and a description of your request.

Where necessary, we have the right to verify your identity in order to prevent unauthorised disclosure
of personal data.

We respond to requests concerning the exercise of rights within the time limits set out in the GDPR.

If you believe that we are processing your personal data in violation of applicable legislation, you have the right to lodge a complaint with the supervisory authority.

In the Czech Republic, the supervisory authority is:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Web: https://uoou.gov.cz/

We take appropriate technical and organisational measures to protect personal data against
unauthorised access, loss, destruction, alteration or other misuse.

The scope of the security measures reflects, in particular, the nature, scope and purposes of processing and the risks to the rights and freedoms of natural persons.

We do not use personal data for automated individual decision-making that would produce legal effects concerning you or similarly significantly affect you, unless we have informed you in advance of such processing and the conditions laid down by the GDPR have been met.

We may update this Privacy Policy from time to time, particularly if there are changes to the way
personal data is processed, the technologies used or applicable legislation.

The current version of this Privacy Policy is always published on the nexvio.cz.

Effective date: 17. 8. 2026