Privacy and Cookies Policy

1. INTRODUCTION

KKCG (hereinafter referred to as "we" or "our") respects the privacy of its website users (hereinafter referred to as "user", "you" or "your") and handles their personal data in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

These Privacy and Cookies Policy (hereinafter referred to as the “Policy”) explains how we collect, use, share, and protect your personal data when you visit our website https://kkcg.com/, including any other domain, mobile version of our website, or any of our websites that refer to this Policy (collectively referred to as the “Site”), or when you contact us.

2. CONTROLLER AND CONTACT DETAILS OF THE CONTROLLER

The operator of the Site and the controller of personal data under the GDPR is KKCG Services a.s., with registered office at Evropská 866/71, 160 00 Prague 6, Czech Republic, ID No.: 27107744.

We reserve the right to change this Policy at any time and for any reason. We will notify you of any changes by updating the "Last Updated" date in this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site.

If you have, or in the future have, any questions about the processing of your personal data or this policy, please do not hesitate to contact us at [email protected].

3. PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR PROCESSING

3.1 Personal data

According to the GDPR, personal data is any information that identifies or relates to a identifiable natural person.

We do not actively collect personal data of users of the Site except for so-called technical cookies (see below). We only process your personal data for as long as is necessary for the purpose for which we collected your personal data. If we have obtained your personal data on the basis of your voluntary consent, we will process it for the duration of your consent.

3.1.1 Personal data directly from you

We may collect personal data directly from you based on your free choice, for example by contacting us. In this way, we may process your email address or name, telephone number and other information about you that you choose to provide to us.

3.1.2 Automatically collected information, so-called "technical cookies"

KKCG uses so-called technical cookies, small data files that are stored on your device via your browser, for the proper functioning of the Site based on its legitimate interest. These files may collect information about the device used, the operating system, the type and language of the browser used, etc. Technical cookies enable us to display the Site correctly on your device and to maintain its security. Technical cookies can also help us detect risk scenarios, bugs on devices or websites. As these cookies are necessary for the functioning of the Site, consent under the GDPR does not apply to their use and cannot be refused. All types of cookies that may be used in the context of browsing the Site can be found in Annex 1 of this Policy.

3.1.3 Preference, Statistical, and Marketing Cookies

Based on your consent, we may also use so-called preference, statistical, and marketing cookies. Preference cookies enable our Site to remember information that changes the way the Site behaves or looks – for example, your preferred language or region.

Statistical cookies help us understand how visitors interact with our Site. They collect and report information anonymously so that we can continue to improve our Site. Marketing cookies are used to track visitors across websites. Their purpose is to display ads that are relevant and engaging for you and therefore more valuable for third-party advertisers.

You can withdraw or change your consent to the use of these cookies at any time in the Cookies setup. For more detailed information, please refer to our Cookies declaration.

4. USE OF YOUR PERSONAL DATA

Accurate information about you enables us to provide you with a seamless, efficient and individually tailored service. Specifically, we may use information collected about you through the Site to:

• Compilation of anonymous statistical data and analyses for internal use;
• Increasing efficiency and site traffic;
• Tracking and analyzing usage and trends to improve your experience on this site;
• Answering your questions and suggestions that you send us.

5. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

In certain situations, we may share information we have collected about you. Your information may be disclosed as follows:

5.1 Our processors, suppliers of technical solutions

We may share your information with third parties who provide services for us or on our behalf, in particular data analytics and hosting services. We only select as processors those suppliers who provide us with maximum guarantees about the technical and organisational security of the protection of your processed personal data. We contractually bind our processors to these guarantees and ensure that they comply with their obligations.

We use Google Analytics for some of the above purposes. For more information about Google's use of information, please visit https://www.google.com/policies/privacy/partners/ and see Google's privacy policy. At https://policies.google.com/privacy. The relevant cookies are: ga and JSESSIONID.

We use the Usercentrics Web CMP service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Federal Republic of Germany, to manage cookie consents.

Hosting services are provided by FLO Group s.r.o., Rohanské nábřeží 678/27, 186 00 Prague 8, Czech Republic.

5.2 Government authorities and bodies or law enforcement agencies, third parties

If we believe that sharing your personal information is necessary to respond to legal process, to investigate or remedy a potential violation of our policies, or to protect the rights, property, or safety of others, we may share your personal information as permitted or required by any applicable law, rule, or regulation. This also includes exchanging information with others to protect against fraud and reduce risk. The scope of personal information provided is always limited to that which is necessary in that case.

5.3 Partners

We may share your information with our affiliates, in which case we will require those affiliates to comply with this Policy. Affiliates include our parent company and any of its subsidiaries, joint venture partners or other companies under common control with us.

6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

We do not generally transfer personal data to third countries. An exception applies when using certain analytical and marketing tools (e.g., Google Analytics), where data may be processed by service providers located in the United States or other third countries. In such cases, we ensure that an adequate level of protection is provided in accordance with EU legislation, for example through the use of binding contractual clauses or by involving service providers in the EU–US Data Privacy Framework.

7. SECURITY OF YOUR PERSONAL DATA

To protect your personal data, we use administrative, technical and physical security measures to provide your data with the maximum possible protection against unauthorised access or transfer, against loss or destruction, and against other possible misuse.

8. YOUR DATA PROTECTION RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)

You have the following rights under the GDPR:

(a) Right of access to information - you have the right to obtain confirmation from us as to whether personal data relating to you is being processed and, if so, the right to access that personal data and other information under the GDPR.

(b) Right to rectification - you have the right to have your data corrected if it is inaccurate or incomplete.

(c) Right to erasure of personal data (Right to be forgotten) - you have the right to ask us to erase your personal data. If we assess your request as legitimate in accordance with the GDPR, we will ensure the destruction of your personal data to the extent necessary. The destruction of data will not be carried out if the processing is necessary for the establishment, exercise or defence of legal claims by KKCG or if its retention is required by law.

(d) Right to restriction - you have the right to request that we restrict the processing of your personal data if your data processed by us is inaccurate, the processing is unlawful, and you do not request erasure or if you have objected to the processing.

(e) Right to data portability - you have the right to be provided with a copy of the information we hold about you in a structured, machine-readable, and commonly used format where the processing of your personal data is based on contract or consent and is carried out by automated means.

(f) Right to object - you have the right to object to the processing of your personal data, in particular where the processing is based on a legitimate interest of us as the controller.

(g) Right to withdraw consent - you also have the right to withdraw your consent at any time if it is based on the processing of your personal data.

Please note that we may ask you to verify your identity before responding to requests related to the above rights. Your request will be processed within 30 days of submission. The time limit may be extended by twice 30 days in certain circumstances.

You also have the right to lodge a complaint regarding our collection and use of your personal data, primarily with us, via the contact below or, alternatively, with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, tel.: 234 665 111 (switchboard. You can obtain further information through your local data protection authority in the European Economic Area (EEA).

9. CONTACT US / DATA CONTROLLER

If you have questions or comments about this Privacy Policy, please contact us at:

KKCG Services a.s. Evropska 866/71 Prague 6 - Vokovice, 160 00, Czech Republic +420 225 010 612 [email protected]

Last update: October 20, 2025

ANNEX 1 OVERVIEW OF COOKIES USED ON KKCG.COM