1. Introduction

This Privacy Policy explains how NeedFirst s.r.o. ("Company", "we", "us", or "our") collects, processes, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR“) and other applicable data protection laws. By using our website, you acknowledge and agree to the terms of this Privacy Policy.

2. Data Controller

The entity responsible for the processing of personal data is:

NeedFirst s.r.o
Dačického 1098/15, Nusle (Praha 4), 140 00 Praha
VAT: CZ21847215
Email: compliance@needfirst.io

3. Categories of Personal Data Collected

We collect and process the following categories of personal data:

• Identity and Contact Information: Name, email address.
• Technical Data: IP address, browser type, operating system, device information.
• Financial Data: Payment details (processed securely by third-party payment providers).

4. Purposes and Legal Basis for Processing

We process personal data under the following legal bases as defined in Article 6(1) of GDPR:

5. Data Transfers Outside the EU

As part of our operations, your personal data may be transferred, stored and/or processed in countries outside the European Economic Area (EEA), including jurisdictions that may not offer the same level of data protection.

In such cases, we ensure compliance with GDPR through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions where applicable.
• Other appropriate safeguards to protect your data.

By submitting your personal data, you agree to this transfer, storing and/or processing.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. After this time, we will delete or anonymize your personal data.

If we process your personal data on the basis of a legitimate interest, the processing lasts for as long as our legitimate interest persists. Against the processing of your personal data, which is based on our legitimate interest, you can dispute at any time.

7. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right of Access (Art. 15 GDPR): Obtain confirmation of whether your data is processed and access a copy.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR): Request deletion of your data under certain conditions.
• Right to Restriction (Art. 18 GDPR): Request restriction of processing under specific circumstances.
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured format and transfer it to another controller.
• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests or direct marketing. If you do not agree with using your personal data for purposes of sending newsletters, you may refuse it using the link in each newsletter, or by sending us an objection by e-mail or letter.
• Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: File a complaint with a supervisory authority in your country.

8. Contact Information

For any questions regarding this Privacy Policy or to exercise your rights, please contact:

Data Protection Contact
Email: compliance@needfirst.io

9. Final Provisions

We process information about you in accordance with this Privacy Policy. By using our page, you consent to such processing, and you warrant that all data provided by you is accurate.

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page.

This Privacy Policy is effective from January 01, 2025.