The operator (administrator) of your personal data according to Article 4 point 7 of the Regulation of the European Parliament and the Council (EU) 2016/679 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR) is the company: Aspf, s.r.o. , Široké 740, 082 37 Široké, ID number: 51 189 496 The contact details of the operator are: • Tel. no.: +421 907 958 297 • E-mail: jan.sofranko@aspf.sk (hereinafter referred to as "Operator") What is personal data? Personal data are data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, especially on the basis of a generally applicable identifier, another identifier such as a name, surname, identification number, location data, or an online identifier, or on based on one or more characteristics or signs that make up its physical identity, genetic identity, mental identity, economic identity, cultural identity or social identity. What is personal data processing? The processing of personal data is a processing operation or a set of processing operations with personal data or sets of personal data, in particular obtaining, recording, organizing, structuring, storing, changing, searching, viewing, using, providing by transmission, dissemination or in any other way, rearranging or combining, limiting , erasure, whether by automated means or non-automated means. The operator (Administrator) has no obligation to appoint/designate a Responsible Person. Sources and categories of personal data: The operator processes personal data (directly from you) that you have provided to him, or personal data that he has obtained based on the fulfillment of your order. Your identification and contact data and data necessary for the performance of the contract.

Legal reason and purpose of processing: The legal reason for processing is: • performance of the contract between you and the operator according to article 6 paragraph 1 letter b) GDPR • legitimate interest of the operator in providing direct marketing according to article 6 paragraph 1 letter f) GDPR • The purpose of personal data processing is: • processing your order and exercising rights and obligations arising from the contractual relationship between you and the operator. When placing an order, the required personal data is necessary for the successful processing of the order. (name, address, contact), according to art. 6 par. 1 letter b) Regulations (this also relates to the subsequent payment, delivery of goods or services, processing of complaints, etc.), the processing of the customer's personal data takes place without the customer's consent, since the legal basis for the processing of his personal data for the purpose of fulfilling the contract is a specific contract concluded between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and fulfillment of the contract, without the provision of personal data it is not possible to conclude the contract or fulfill its conditions on the part of the operator. • sending marketing offers and doing other marketing activities. There is no automated individual decision-making on the part of the operator in accordance with Article 22 of the GDPR. * Camera system: the operator uses a camera system to prevent and protect its customers, its own and their property. The operator declares that he does not work with the records in any way and does not provide them to third parties or entities.

Retention period: The operator stores personal data • for the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the operator and the exercise of the claim arising from these contractual relationships. • until consent to the processing of personal data for marketing purposes is revoked • after the expiration of the personal data retention period, which results from Act no. 395/2002 Coll. The Act on Archives and Registries and on Supplementing Certain Acts, the operator deletes personal data. Recipients of personal data Who is the recipient? The recipient is anyone to whom personal data is provided, regardless of whether it is a third party. A public authority that processes personal data on the basis of a special regulation is not considered a recipient. • There are persons who participate in the delivery of goods, services, and the realization of payments based on the contract • The operator does not provide, publish or make available personal data to third countries Terms of personal data security The operator declares that it has taken appropriate personnel, technical and organizational measures to ensure the protection of personal data. The operator has taken technical measures to secure data storage and storage of personal data in file form. The operator declares that only persons authorized by him have access to personal data. Your rights: Under the conditions set out in the GDPR, you have: • The right to access your personal data according to Art. 15 GDPR • The right to correct personal data according to Art. 16 GDPR • Right to restriction of processing • The right to erasure according to Art. 17 GDPR • The right to object according to Art. 21 GDPR • The right to transfer personal data according to Art. 21 GDPR • The right to withdraw consent (electronically or to a correspondence address) • The right to file a complaint with the Office for the Protection of Personal Data if you believe that your rights to the protection of personal data have been violated. 

You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your personal data protection rights have been violated. How can you fulfill your rights? Right of access to data You have the right to know whether we are processing your personal data. If we process them, you can ask us to access them. Based on your request, we will issue a confirmation with information about the processing of your personal data. You can submit the application electronically to the email address jan.sofranko@aspf.sk or by mail to the correspondence address: Aspf, s.r.o., Široké 740, 082 37 Široké, ID number: 51 189 496 Right to rectification You have the right to have your personal data that we process correct, complete and up-to-date. If your personal data is incorrect or out of date, you can ask us to correct or supplement it electronically to the e-mail address emo.matusik@gmail.com or by mail to the address: Aspf, s.r.o., Široké 740, 082 37 Široké. Right to erasure

You have the right to object to us processing your personal data. If we process your personal data in the following cases: • due to our legitimate interest • creating our customer profile • you can object to their processing if you have personal reasons for doing so. How can you exercise these rights? You can contact us with your request in one of the following ways: in writing by email: jan.sofranko@aspf.sk or by post to the correspondence address: Aspf, s.r.o., Široké, 082 37 Široké, ID number: 51 189 496 Business address: Široké, area of ​​the former agricultural cooperative If you believe that your rights to the protection of personal data have been violated, you have the right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data at the address: Hraničná 12 820 07 Bratislava 27 Slovak republic Identification data: ID: 36064220 VAT number: 2021685985 Secretariat of the office: +421/2 3231 3214 • E-mail: statny.dozor@pdp.gov.sk • Registration office: Monday - Thursday: 8:00 - 15:00

Policy for the use of cookies What are cookies? As is common practice on almost all professional websites, this site uses cookies, which are small files downloaded to your computer in order to improve the services provided. This page describes what information we collect, how we use it and why we sometimes need to save these files. We will also provide information on how you can prevent the storage of cookies, which may impair or "break" certain elements of the functionality of this website. For more general information about cookies, see the Wikipedia article on HTTP cookies. How do we use cookies? We use cookies for various reasons, which are listed below. In most cases, unfortunately, there are no standardized options to disable cookies without completely blocking the functionality and features they provide to this site. It is recommended that you leave all cookies enabled if you are not sure whether you need them or not, in case they are used to provide the service you are using. Disabling cookies You can prevent the setting of cookies by adjusting the settings in your browser (see the Help section of your browser to find out how to do this). Please note that disabling cookies will affect the functionality of this and many other websites you visit. Disabling cookies usually also results in disabling certain functions and features of this site. Therefore, it is recommended that you do not disable cookies.

Cookies that we set

When you enter data through forms, such as those found on contact pages or comment forms, cookies may be set to remember information about the user for future correspondence. Third-party cookies In certain special cases, we also use cookies provided by trusted third parties. The following section describes which cookies you may encounter through this website. This site uses Google Analytics, which is one of the most widely used web solutions to identify how you use the site and ways we can improve your experience. These cookies can track, for example, how long you spend on the site and what pages you visit, so that we can continue to offer you interesting content. For more information about Google Analytics cookies, visit the official Google Analytics website. Third-party analytics are used to track and measure the use of this site so that we can continue to offer you interesting content.

In some cases, we may provide you with customized content based on what you have told us about yourself either directly or indirectly through a link to a social media account. These types of cookies simply allow us to provide you with content that might be of interest to you. We also use social media buttons and/or plugins that allow you to connect in different ways with your social network. In order for these buttons and plugins to work, the following social media, including Facebook, Youtube, will set cookies for you through our website, which can be used to enhance your profile on their website or to provide data that they hold for various purposes listed in their privacy policy. More information We hope this clears things up for you, and as mentioned before, if there's something you're not sure if you need it or not, it's usually safer to leave cookies enabled in case they interact with some feature of our website. If you are still interested in more information, you can contact us through one of our preferred methods.