1. Who processes my personal data?

The controller of personal data (hereinafter referred to as the "Controller") is SWAGLIFT s.r.o., Company ID: 087 31 756, Korálková 1921/30, 466 01 Jablonec nad Nisou, Czech Republic. All inquiries may be directed to swagliftday@swaglift.com or by phone at +420 703 605 020.

2. What personal data do you process about me?

We process only the personal data that is necessary and that you provide to us when using our services.

Data that you provide to us (actively) via the contact form, enquiry or order:

• Identification data – first name, last name,
• Contact details – e-mail address, phone number

And technical data obtained by using our website (passively):

• IP address,
• cookies,
• other online identifiers (form submission time, browser type).

3. Why do you process my personal data?

We process your data in order to provide you with the services you are interested in and to increase the security of our systems.

Your data is processed for the following purposes:

• responding to your enquiry (legitimate interest / pre-contractual negotiations),
• processing an enquiry or providing a service (performance of a contract, legal obligation),
• sending updates about SWAGLIFT DAY 2026 (consent – newsletter),
• protection of the Controller’s rights (debt recovery – legitimate interest),
• ensuring website security (IP addresses – legitimate interest).

4. What authorizes you to process my data?

We process your personal data only on the basis of lawful grounds:

• Performance of a contract – processing an order or enquiry,
• Legal obligation – accounting and tax records,
• Legitimate interest – remarketing, website security,
• Consent – sending the SWAGLIFT DAY 2026 newsletter.

You may withdraw your consent at any time via the unsubscribe link in each e-mail or by contacting swagliftday@swaglift.com.

5. What rights do I have regarding the protection of personal data?

You have the right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. A complete list can be found on the website of the Office for Personal Data Protection:

• Right of access – contact us and we will inform you what data we hold about you,
• Right to rectification – we will correct inaccurate data,
• Right to erasure – upon request, your data will be deleted,
• Right to object – you may object to processing based on legitimate interest,
• Right to withdraw consent – unsubscribe from the newsletter.

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the Office for Personal Data Protection.

6. Data retention period

We store personal data for a maximum of 15 years from the granting of consent or until the consent is withdrawn, whichever occurs first. Afterwards, the data is securely deleted or anonymized.

7. Recipients of personal data

• E-mailing / CRM platform (e.g. Ecomail) – newsletter distribution,
• Web hosting and IT administration providers – website operation and maintenance,
• Marketing and analytics services (e.g. Google Analytics) – traffic measurement and remarketing,
• Public authorities – only if required by law.

8. Transfers to third countries

If we use tools based outside the EU (e.g. e-mailing services in the USA), data protection is ensured through Standard Contractual Clauses (SCC) or adequacy decisions.

9. Cookies – unified policy

Across all SWAGLIFT domains, we use a unified cookie banner that allows you to manage consent for individual categories:

• Essential cookies – basic website functionality.
• Analytical cookies – traffic measurement and user behavior analysis.
• Marketing cookies – content personalization and campaign measurement.

Cookies are stored for a maximum of 13 months. Detailed settings are available in the “Cookie settings” section in the website footer.

10. Security measures

We use encrypted connections (HTTPS), role-based access control, regular system updates and employee training.

11. Automated decision-making

We do not carry out any automated individual decision-making or profiling within the meaning of Article 22 of the GDPR.

12. How to exercise your rights

Please contact us at swagliftday@swaglift.com or send a letter to the Controller’s registered address. Requests are processed without undue delay, no later than within 30 days.

In Jablonec nad Nisou, on May 25, 2025

SWAGLIFT s.r.o.