Dear patients,

At the ADELI FOUNDATION, we recognize the importance of personal data protection and therefore give it due attention. It is important to us that your personal data is kept secure. All personal data acquired during your visit to our website is processed in accordance with Act no. 122/2013 Coll. (hereinafter referred to as the „Personal Data Protection Act“). Due to the fact that Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, entered into force on May 25, 2018, it is necessary for us to obtain your consent that complies with the new requirements.

Whenever you provide your personal data through the website, you agree to the collection, use, and disclosure of that data. By voluntarily filling out your personal data, you hereby grant us consent for its processing in accordance with the Personal Data Protection Act.

Through this privacy policy statement, we will clarify how personal data collected from you, as visitors to the website www.nadaciaadeli.sk, operated by ADELI Foundation, is collected and used.

Please read the information below regarding the processing of personal data. If you have any questions or comments regarding the consent you provided, please call us at: +421 33/32 172 30 or send an email to: info@nadaciaadeli.sk.

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The personal data controller is the company that determines the purpose and means of processing personal data - ADELI Foundation.

2A. WHAT PERSONAL DATA DO WE PROCESS UPON CLUB REGISTRATION?

We process the following categories of personal data:

• Basic identification data – patient's first and last name, date of birth, contact person's first and last name, residential address.
• Contact details – phone number, email address.
• Sociodemographic data – statistical data on age, sex.
• Information on the use of project funds – what projects have you been involved in previously, information on the use of provided donations, projects, public collections.
• Geolocation Data - Geolocation data from a web browser.

From what sources do personal data originate?

We obtain the personal data mentioned in the previous point directly from you. You provide this personal data in the registration form, or you have provided it in other forms and documents.

Personal data may also come from publicly accessible sources, registers, and records. Your personal data may also come from third parties who are authorized to process it.

For what purposes did you give your consent?

The information we process may be used for one of the activities listed below:

• automated processing of personal data in order to tailor our offer to your individual needs,
• We regularly improve our website based on the information and feedback you provide us.,
• Your information helps us respond effectively to your requests and needs.,
• Your information will never be passed on to third parties without your consent, with the exception of data necessary for the processing of payment transactions.,
• for the processing of project applications, public collections, etc.
• for processing a financial database,
• for the publication of stories, public patient collections on our website,
• for sending emails – the email address you entered on our website may be used to send newsletters from the foundation, information about current projects, upcoming events, etc.

How long will we process your personal data?

Your consent is granted for the duration of the registration with the foundation and for the next 5 years after the termination of such contractual relationship or until you withdraw your consent. If you are not, and do not become, a client of the foundation, your consent will be valid for 5 years from its granting or until you withdraw it.

After the relevant time has expired, your personal data will be deleted, but only to the extent and for the purposes for which consent is not required by law.

2B. WHAT PERSONAL DATA DO WE PROCESS WHEN YOU REGISTER FOR OUR NEWSLETTER?

We process the following categories of personal data:

• Basic identification data – patient's name and surname, possibly legal representative.
• Contact details - email address.

From what sources do personal data originate?

We obtain the personal data mentioned in the previous point directly from you. You provide this personal data in the registration form, or you have provided it in other forms and documents.

For what purposes did you give your consent?

The information we process may be used for:

• purposes of sending the newsletter – sending news about the foundation, information about current projects, upcoming events, etc.

3. WHO CAN ACCESS YOUR PERSONAL DATA?

Other entities that process personal data may also have access to your data, acting as so-called processors whose task is to provide services to the company. For example, these may be external companies that manage our systems or provide other services ensuring the proper operation of the company. We have concluded a contract for the processing of personal data with these processors, based on which they are also obliged to adhere to strict personal data protection rules.

4. WHAT ARE YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA?

The proper processing of your personal data is important for companies in the Slovak Republic, and their protection is a matter of course. You can exercise the following rights when processing personal data:

• Information about the processing of your personal data
• Right to access personal data
• Right to repair
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• The right to object and automated individual decision-making
• The right to lodge a complaint with the Personal Data Protection Authority

Where can you exercise your rights?

You can exercise your individual rights within the company by calling: +421 33/32 172 30 or by sending an email to: info@nadaciaadeli.sk or by written request sent to the company's registered office or correspondence address: ADELI Foundation, Hlboká 45, 921 01 Piešťany. .

5. HOW CAN YOU WITHDRAW YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?

Consent to the processing of personal data is based on the principle of voluntariness. This means you can withdraw it at any time. If you no longer wish to receive offers about the foundation's activities, projects, and treatment funding opportunities, it is your decision, and we fully respect it.

What should the withdrawal of consent contain?

• Who is filing the appeal? Please provide your first name, last name, home address, and date of birth so we can identify you.
• Information that you do not wish for us to process your personal data. If you would like to receive only selected offers, please specify what kind of offers you are interested in so that we can accommodate you.
• Your signature.

How can I send an appeal?

Withdrawal of consent for the processing of personal data can be sent in writing to the company's correspondence address or by email to info@nadaciaadeli.sk and we will log you out.