Introduction

This website, available at stockaza.com, is operated by FinovaTech s.r.o., Jičínská 226/17, Žižkov, 130 00 Praha. Anyone viewing or using this website should be familiar with the following provisions.

By accessing this website and/or using any information contained herein, you agree to these terms and conditions. These terms constitute a binding agreement between you ("you," "your," "client," "users") and Viral Media spol. s r.o. ("Company," "we," "us," or "our"). By continuing to use our website, you confirm that you have had the opportunity to review this Privacy Statement and that you agree with it. This means that you also agree to the use of your data and the manner in which it is made available, as described in this Privacy Statement. If you do not agree with these terms and conditions, you should not access this website.

Viral Media spol. s r.o. reserves the right to change or update these provisions at any time without prior notice, and such revised provisions shall have the same binding effect. Our personal data protection practices for the activities listed below are described in this privacy statement ("Privacy Statement"). We provide you with information about how we collect, store, disclose, and otherwise use individuals' personal data in accordance with your rights. In this statement, the term "personal data" refers to any information that, alone or in combination with other information, can identify a specific person.The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("General Data Protection Regulation" or "GDPR").

I. Processing of personal data

Details about the use of our website

When you visit our website, we may track, collect, and combine data about your visit, including information about which pages were viewed, when they were visited, in what order, and which links were clicked. We also record data from the URL addresses through which you accessed our website. For these purposes, it may be necessary to record the user's IP address, operating system, and browser. The IP address can be used to determine the Internet service provider and the location of the connection.

We may also use cookies and web beacons to improve the user experience. Details on the use of these tools can be found in our Cookie Policy.

Contact forms

If you inquire about our products and services, we will use the contact information you provide, primarily through the contact form: first name, last name, email address, phone number, and country.

• Purpose: We will contact you for further arrangements regarding services.
• Legal basis: Processing based on Article 6(1)(b) of the GDPR - negotiation of a contract or implementation of measures taken prior to the conclusion of a contract.
• Processing period: If no further cooperation is established, we will process your data for a maximum of 5 years from the last communication.

Processing of personal data during registration and purchase

If you register with us, create a customer account, or make a purchase, we will process the data you provide to us. This data includes:

• First name, last name, address, email address, date of birth, username, and password.
• For businesses: Company ID number, VAT number, payment details (e.g., bank details), and other data such as records of communication between you and our company.

• Purpose: Performance of a contract - provision of services, communication regarding orders, complaints, or inquiries.
• Legal basis: Processing based on Article 6(1)(b) of the GDPR - performance of a contract, and Article 6(1)(c) of the GDPR - compliance with a legal obligation.
• Processing period: For the duration of the provision of services and then for a maximum of 10 years from the last provision of services.

Sending regular information and marketing communications about our services and events (commercial communications)

If you are our customer, we will use your email address and identification data to send you newsletters about our services. Each email will be marked as a commercial communication and will contain a link through which you can unsubscribe from these emails at any time.

Legal basis: This is permitted by Section 7(3) of Act No. 480/2004 Coll., on certain information society services, unless you have prohibited us from doing so.

Processing period: A maximum of 5 years from your last purchase. You can unsubscribe from the newsletter at any time by email or by contacting us at: support@stockaza.com.

II. Who has access to the data?

Your data will remain with us. However, some companies or individuals working with us may have access to the data because they help us operate our services. These are:

• Company operating the trading platform (PurpleTrading - AXSE Brokerage Ltd.)
• Companies mediating payments and issuing invoices (Stripe, Inc., Fapi Business s.r.o.)
• E-mailing service provider (SmartSelling a.s.)
• Accounting firm (Reyna s.r.o.)

We process personal data within the European Union and in third countries.

III. Further information

We do not have a designated data protection officer in our company.

Security and confidentiality of personally identifiable information

Unless otherwise specified in this Privacy Statement or unless such disclosure is required under special circumstances, such as a physical threat to you or others, as permitted by applicable law, we protect your personal information using physical, technical, and administrative security measures that meet industry standards. We will also not disclose your personal data to third parties without your consent, unless otherwise specified in this Privacy Statement.

We cannot guarantee the security of personal data, as there is a small chance that an unauthorized third party may circumvent our security measures or that your information may be intercepted during transmission over the Internet, as it is not a completely secure environment. It is your responsibility to keep your login details secure. Please note that emails are not usually encrypted and should not be considered secure.

In the event of a breach of the security of your personal data, you will be informed within a reasonable time frame, but no later than two weeks, and we will comply with all applicable laws relating to such a breach.

IV. Use of cookies

Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. These files ensure, for example, efficient navigation between pages, remember your preferences, and improve the user experience. They can also enable the display of advertisements tailored to your interests.

Types of cookies we use:

• Essential cookies: Necessary for the operation of the website, e.g. they enable you to log in to secure areas of the site. They cannot be disabled.
• Analytical/statistical cookies: These allow us to monitor and evaluate traffic and behavior on the site. We only use them with your prior consent.
• Advertising cookies: These track preferences for displaying targeted advertising. We only use them with your consent.
• Third-party cookies:
External providers may use cookies on our site.

Please note that third parties (including external service providers) may also use cookies and/or access data collected through cookies on the website.

Cookies used:

Further information about cookies:

More information about cookies and their current list can be found through individual web browsers, most often under Developer Tools.

Consent can be expressed by checking the box in the cookie bar. You can then refuse cookies in your web browser settings or allow only some of them.

For more information about managing cookies in individual browsers, please visit the following links:

• Internet Explorer: Managing cookies
• Google Chrome: Managing cookies
• Firefox: Enabling and disabling cookies
• Safari:Cookie management
• Opera:Security and privacy
• Microsoft Edge: Managing browser profiles

V. Your rights in relation to the processing of personal data

The GDPR grants you a number of rights in relation to your personal data. You have access to your personal data and can verify that it is still accurate and up to date. You can also decide whether you want to receive information from us or from some of our partners, and you can ask us to delete or provide a copy of your personal data.

If you need further information about your rights or wish to exercise any of them, you can contact us by email. These rights include:

• Right of access. You have the right to obtain a copy of the personal data we currently process about you.
• Right to rectification. You have the right to request that any incomplete or inaccurate personal data we process about you be corrected.
• Right to be forgotten (right to erasure). You have the right to request that we erase all personal data we hold about you. However, we may not be able to comply with this request if we are required to retain the data to comply with legal requirements, conduct legal proceedings, or defend against legal claims.
• Right to restriction of processing. You have the right to restrict our processing of your personal data if you believe it is inaccurate, if our processing is unlawful, or if we no longer need to process the data for a specific purpose, unless we are unable to erase it due to legal or other obligations or unless you yourself wish to do so.
• Right to portability If you have provided us with personal data and we process that data based on your consent or to fulfill a contract with you or a third party using our services, you have the right to receive that data in a structured electronic format and have it transferred to another data controller.
• Right to object. You have the right to object to our use of your personal data if it is necessary to protect our legitimate interests, depending on the specific situation. We will comply with your request unless we have compelling legitimate grounds for processing that override your interests and rights, or unless we need to further process the data for the establishment, exercise, or defense of legal claims.
• Right to protection from discrimination. You are not entitled to be denied services or have your user experience changed because you have exercised any of your rights.

Please note that in certain circumstances, such as when we need to retain your personal data to comply with a legal obligation, your personal data may be excluded from such requests. If you contact us with a request, we may require certain details to verify your identity.

Protection of children

Children under the age of 13 are not permitted to use the platform. If we discover that we have obtained personal data from a child without the consent of their parent or legal guardian, we will delete that data.

Complaints

If you have a complaint about this policy or the way we process your data, please contact us at support@stockaza.com. You also have the right to lodge a complaint with the Office for Personal Data Protection or to take legal action.