INFORMATION MEMORANDUM

Privacy Policy – Processing of Personal Data (GDPR)

Company AMI exim s.r.o.,
with its registered office at Masarykovo náb. 30, 110 00 Prague 1,
Company ID: 279 45 570,
registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 128437
(hereinafter referred to as the “Controller” or “AMI exim s.r.o.”),

hereby provides information, in accordance with Regulation (EU) 2016/679 (GDPR), on the processing of personal data of natural persons.

1. Purpose of this document

The purpose of this Privacy Policy is to inform customers, potential customers and visitors of the website www.ami-exim.com

about:

• what personal data we process,

• for what purposes and on what legal basis,

• how long the data are stored,

• to whom the data may be disclosed,

• what rights data subjects have.

2. Data Controller

The controller of personal data is:

AMI exim s.r.o.
E-mail: info@ami-exim.com

The Controller has not appointed a separate Data Protection Officer. All inquiries regarding personal data processing may be addressed to the above e-mail address.

3. What personal data we process

We process only personal data necessary for contract performance, compliance with legal obligations, or based on consent.

3.1 Identification and contact data

• first name and last name

• e-mail address

• telephone number

• billing and delivery address

• Company ID / VAT ID (for B2B customers)

3.2 Account and order data

• login details (passwords are stored exclusively in encrypted form)

• order history

• purchased products

• payment method (no payment card details are stored by the Controller)

3.3 Technical and online data

• IP address

• cookies and similar technologies

• data about behaviour on the website (if cookies are enabled)

4. Purposes and legal bases of processing

Personal data are processed for the following purposes:

a) Performance of a contract (order processing, delivery of goods, complaints)
b) Compliance with legal obligations (accounting, tax obligations)
c) Legitimate interests of the Controller (protection of rights, debt recovery, website security)
d) Marketing purposes (only on the basis of consent or in accordance with applicable law)

5. Marketing communication

5.1. Marketing communications (newsletters, promotional offers) are sent:

• on the basis of consent, or

• based on the Controller’s legitimate interest towards existing customers, in accordance with applicable law.

5.2. Unsubscribing from marketing communications is possible:

• via the unsubscribe link in the e-mail, or

• by sending an e-mail to info@ami-exim.com

• .

6. Cookies

6.1. The website uses cookies for the purpose of:

• ensuring proper website functionality,

• analysing website traffic,

• marketing activities (only with consent).

6.2. We use:

• essential cookies,

• analytical cookies (e.g. Google Analytics),

• marketing cookies (only with consent).

Detailed information is provided in a separate document Cookies Policy.

7. Recipients of personal data

Personal data may be disclosed only to the extent necessary to the following categories of recipients:

• carriers (Zásilkovna, GLS, DHL)

• payment gateway providers

• IT and hosting service providers

• accounting and tax advisors

• marketing and analytics service providers

• debt collection agencies (in case of unpaid receivables)

All processors are contractually bound to confidentiality and GDPR compliance.

8. Data retention period

• for the duration of the contractual relationship,

• subsequently for the period required by law (especially accounting and tax regulations),

• marketing data for a maximum of 24 months or until consent is withdrawn.

9. Processing without consent

Personal data may be processed without consent if necessary for:

• performance of a contract,

• compliance with a legal obligation,

• protection of the legitimate interests of the Controller.

10. Data security

We apply appropriate technical and organisational measures corresponding to the current state of technology, including:

• encryption,

• secure servers,

• restricted access,

• regular security updates.

11. Rights of data subjects

You have the right to:

• access your personal data,

• rectification of inaccurate data,

• erasure (“right to be forgotten”),

• restriction of processing,

• data portability,

• object to processing,

• lodge a complaint with the supervisory authority (Czech Data Protection Authority – ÚOOÚ).

12. How to contact us

E-mail: info@ami-exim.com

For security reasons, we may request verification of your identity when handling your request.

13. Final provisions

This Privacy Policy is valid and effective as of 1 January 2026 and may be updated from time to time.