CONSENT TO PROCESSING PERSONAL DATA

1. By this, you consent to Accredio, a.s., with its registered office in Prague 1 - Malá Strana, Tržiště 366/13, Postal Code 11800, ID: 27095843, registered in the public register maintained by the Municipal Court in Prague, section B, file 8973 (hereinafter referred to as the "Controller"), to process personal data in accordance with Regulation (EU) No. 2016/679 of the European Parliament and Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation").
2. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as a name, identification number, location data, network identifier, or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
3. Personal data may be processed based on your consent and must be processed for the following purposes:
1. To process your order and perform rights and obligations arising from the contractual relationship between you and the Controller; personal data required for the successful processing of an order (name and address, contact) must be provided to complete the contract. Without providing personal data, it is not possible to conclude or fulfill the contract.
2. For sending marketing communications and conducting other marketing activities.
4. The Controller will store personal data for as long as necessary to exercise rights and obligations arising from the contractual relationship between you and the Controller and to assert claims from these relationships (for 15 years after the end of the contractual relationship).
5. For as long as consent to processing personal data for marketing purposes is not revoked, but no longer than 5 years, if personal data is processed based on consent.
6. In the case of cookies: The Controller collects the following cookies on its website:

• Purpose: These cookies are necessary for the basic functionality of Google services. They enable login, maintain user sessions, and allow personalization of the user interface.
• Examples:
• Cookies such as SID, HSID, or SSID are used for secure user authentication.
• AEC protects against fraud during login.

SECURITY COOKIES

• Purpose: This group of cookies protects user data and prevents unauthorized access to accounts or sessions. They protect against attacks such as cross-site scripting (XSS) and cross-site request forgery (CSRF).
• Examples:
• __Secure- cookies (e.g., __Secure-1PSID) contain encrypted session information and ensure security.
• SAPISID and APISID are critical for data transmission protection.

COOKIES FOR PERSONALIZATION AND ADVERTISING

• Purpose: These cookies allow the customization of services, such as displaying personalized ads, tracking campaign effectiveness, or storing user preferences (e.g., language).
• Examples:
• NID stores user preference settings.
• ADS_VISITOR_ID helps measure advertising campaign performance.

GENERAL NOTES:

• Validity period: Some cookies are short-term (until the session ends), others have long-term validity (up to several years).
• Security attributes: Most cookies are protected by attributes such as Secure, HttpOnly, and SameSite to minimize misuse risk.

More at https://business.safety.google/compliance/

FUNCTIONAL COOKIES

• Purpose: These cookies ensure the basic functionality of Seznam.cz services, such as maintaining user login, managing user preferences, or security authentication.
• Examples:
• sid: Contains session information, including time data.
• csrf-token: Protects forms against CSRF (Cross-Site Request Forgery) attacks.

SECURITY COOKIES

• Purpose: Ensure protection of user data, such as encrypting identifiers or tracking unusual behavior.
• Examples:
• udid: A user identifier, encrypted and containing time data.
• ps and ds: Secure user sessions.

ANALYTICAL COOKIES

• Purpose: Used to measure traffic and analyze user behavior on Seznam.cz pages.
• Examples:
• _ga, _ga_8SQNY5WC7K, _ga_P1XKYQC4W3: Google Analytics cookies that track user activities.
• _gcl_au: Stores data on the effectiveness of advertising campaigns.

ADVERTISING AND PERSONALIZATION COOKIES

• Purpose: Allow displaying personalized ads, tracking user preferences, and measuring the effectiveness of advertising campaigns.
• Examples:
• criteo_userid: Stores a user identifier for personalized advertising.
• intCMPCookie-v2 and extCMPCookie-v2: User consent information for processing personal data for advertising.
• KADUSERCOOKIE: User identifier for advertising purposes.

USER SETTINGS COOKIES

• Purpose: Store information about user preferences, such as language settings or links to previously visited pages.
• Examples:
• ftxt_pref, ftxt_a: Information about text content preferences.
• cw_return_url: Stores the URL to return to after an action.

GENERAL NOTES:

• Validity period: Some cookies are temporary (valid only during the session), others have a validity period of up to several years.
• Third-party cookies: Some cookies (e.g., _fbp or __gfp_64b) come from third parties, such as for advertising and analytics purposes.

More at https://o-seznam.cz/pravni-informace/ochrana-soukromi/cookies

FUNCTIONAL COOKIES

• Purpose: Ensure basic functionality of the website, including proper display of content and user settings.
• Examples:
• locale: Stores the user's preferred language (e.g., cs_CZ).
• m_pixel_ratio: Content display settings based on the pixel density of the user's device.
• wd: Information about the user's browser window dimensions, helping to optimize page display.

SECURITY COOKIES

• Purpose: Provide account and session protection, e.g., against unauthorized access.
• Examples:
• datr: Used to identify the browser and provide protection against fraud and unauthorized access.
• xs: Security token associated with the logged-in user's session.
• sb: Another identifier associated with security features.

PERSONALIZATION COOKIES

• Purpose: Store information that allows customization of the user environment and features.
• Examples:
• c_user: Logged-in user identifier.
• presence: Tracks the presence of the user (e.g., activity in chats or on the page).
• usida: Token associated with the user's identity and app version.

ANALYTICS AND TRACKING COOKIES

• Purpose: Analyze user behavior and measure page performance.
• Examples:
• x-referer: Stores information about the previous page that redirected the user.
• ar_debug: Activates debugging mode for troubleshooting features.

ADVERTISING AND CONSENT MANAGEMENT COOKIES

• Purpose: Personalize advertising content and manage user preferences.
• Examples:
• oo: Indicator of opting out of personalized ads.

ADDITIONAL NOTES:

• Session vs. long-term cookies: Some cookies (e.g., presence, ar_debug) are only active during the session, while others (e.g., datr, sb) have a long lifespan.
• Encryption: Values of some cookies are encrypted or encoded for data and function protection.

More at https://transparency.meta.com/

7. By the above processing, you give your explicit consent. Providing personal data is voluntary. Consent can be withdrawn at any time, in case of consent with cookies directly on the website (Otevřít nastavení cookies), or in other cases, for example, by sending an email or letter to the company's contact details:
   Address: Prague 1 - Malá Strana, Tržiště 366/13, ZIP 11800
   Email: info@accredio.cz
   Phone: +420 725 895 570
8. Personal data processing is carried out by the Data Controller, but personal data may also be processed by these processors:
1. Involved in the delivery of goods/services/payment processing based on a contract,
2. Involved in ensuring service operation,
3. Providing marketing services.
9. The Data Controller does not intend to transfer personal data to a third country (outside the EU) or to an international organization. Recipients of personal data in third countries include providers of mailing services/cloud services.
10. Please note that you have the right to:
1. Withdraw consent at any time,
2. Request information on what personal data we process, request a copy of this data,
3. Request access to this data and update or correct it, or request restriction of processing,
4. Request the deletion of this personal data,
5. Data portability,
6. File a complaint with the Office for Personal Data Protection or contact the court.
11. Conditions for securing personal data:
1. The Data Controller declares that they have taken all appropriate technical and organizational measures to secure personal data.
2. The Data Controller has taken technical measures to secure data storage and storage of personal data in paper form.
3. The Data Controller declares that only authorized persons have access to personal data.