At Aktion eCard, one of our top priorities is the protection of our visitors' personal data. This Privacy Policy document outlines the types of information that the Aktion eCard app collects and records and how it is used.

If you have any further questions or require further information about our Privacy Policy, please do not hesitate to contact us.

This Privacy Policy applies only to the activities of the Aktion eCard app and applies to users of the Aktion eCard app with respect to information they share and/or collect on the Aktion eCard app. This policy does not apply to any information collected offline or through channels other than this application, in particular the Aktion system.

Consent

By using our app, you agree to our privacy policy and agree to its terms.

Information we collect

The application itself stores or transmits the following information:

• Stores and transmits the unique identifier assigned by Aktion generated by the device ID.
• Stores the first name, last name and the name of your organisation if this data is transmitted from the Aktion system.

If you contact us directly, we may obtain additional information about you, such as your name, email address, phone number, the content of any messages and/or attachments you may send us, and other information you choose to provide.

How we use your information

We use the information we collect in a variety of ways, including:

• Provision, operation, Aktion eCard application
• Development of new products, services, functions and features
• Log files

What is the Aktion eCard app for?

The Aktion eCard application is operated in accordance with EU and Czech law and enables and facilitates the use of Bluetooth or NFC technology to identify oneself on Aktion sensors equipped with the eCard module. Based on the permissions you have been assigned in the Aktion system, it will evaluate your access permissions on the given sensor and, if necessary, register your passage for the purposes of attendance records of the Aktion system operator.

Aktion readers use Bluetooth or NFC technology to communicate with your device.

Please note that the Aktion eCard application does not have access to or control over data that has been provided to third party Aktion systems.

How does the Aktion eCard app work?

Once installed, the Aktion eCard application generates a unique six-digit device ID that you pass on to your Aktion system administrator. He or she will use it to generate a QR code or link to the app, which he or she will send back to you. After you insert the code or scan the QR code or click the link, the Aktion system ID is stored on your phone. From now on, the phone can be used to identify itself on Aktion sensors equipped with the eCard module.

In basic mode, the Aktion eCard application searches for an Aktion sensor with an eCard module in the vicinity when the button is pressed. If the sensor is close enough (depending on the settings of the app, the sensor and local conditions) the app will pass its identification to the sensor, which will pass it to the Aktion system. After evaluating the authorization, the Aktion system decides to open the door or record attendance.

In automatic mode, the app runs in the background and searches for an Aktion sensor with an eCard module in the vicinity when the display lights up. For automatic mode, you must enable background location access (Enable Always) on Android.

What rights does the Aktion eCard app require from your mobile operating system?

The Aktion eCard app requires Bbuetooth enabled and uses the following permissions to function

• • Access to location when using the app (bluetooth) - required for basic functionality.
  • Always access location (bluetooth) - when automatic mode is enabled.
  • Access to the camera - only for the purpose of scanning QR codes based on the user's request.

Third Party Privacy Policy

The Aktion eCard privacy policy does not apply to third-party Aktion system providers (usually your employer). We therefore recommend that you review the respective privacy policies of these third-party providers for more detailed information. They may contain their procedures and instructions on how to opt out of certain options.

CCPA Privacy Rights (Don't Sell My Personal Information)

Under the CCPA, California consumers have the right to, among other things:

• Require an undertaking that collects personal data from consumers to disclose the categories and specific personal data that the undertaking has collected about consumers.
• require the undertaking to delete all personal data about the consumer that the undertaking has collected.
• Require a business that sells a consumer's personal data not to sell the consumer's personal data.

If you make a request, the company has one month to reply. If you wish to exercise any of these rights, please contact the operator of the relevant Aktion system.

Data protection rights under the GDPR

We would like to make sure that you are fully aware of all your data protection rights. Each user has the following rights:

Right of access - you have the right to request copies of your personal data. You may be charged a small fee for this service.

Right to rectification - You have the right to request the rectification of any data you believe to be inaccurate. You also have the right to request the completion of information that you believe is incomplete.

Right to erasure - You have the right to request that your personal data be erased under certain conditions.

Right to restriction of processing - you have the right to request that the processing of your personal data be restricted under certain conditions.

Right to object to processing - Under certain conditions, you have the right to object to the processing of your personal data.

Right to data portability - You have the right to request that data collected by Aktion be transferred to another organisation or directly to you under certain conditions.

If you make a request to the Aktion system operator, they have one month to respond. If you wish to exercise any of these rights, please contact the relevant Aktion operator.

Information about children

Another part of our priorities is to add the protection of children's privacy. We encourage parents and guardians to monitor, participate in and/or track and guide their use of the app.

Aktion eCard does not knowingly collect any personally identifiable information from children under the age of 13. If you believe that your child has provided this type of information in our application, we strongly encourage you to contact us immediately and we will endeavor to promptly remove such information from our records.