Supplemental Statement for California Consumers

Introduction

This Supplemental Statement for California Consumers (hereinafter referred to as the "Statement") is a supplement to the Privacy Policy issued by the data administrator, which is Prusa Research Inc, ID No.: 06649114, with registered office at Partyzánská 188/7a, Holešovice, 170 00, Prague 7, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, Insert 23056, established under the laws of the Czech Republic (hereinafter referred to as the "Administrator") in connection with the operation of Prusa3D websites: prusa3d.com, printables.com, prusalab.cz and prusament.com (hereinafter referred to as the "PRUSA websites"), including the use of the PRUSA websites by non-registered users when purchasing goods or services from the online shop at prusa3d.com (hereinafter referred to as "PRUSA E-SHOP"), when exercising the rights and obligations arising from the contractual relationship between you and the Administrator, when using your PRUSA ACCOUNT (hereinafter referred to as "PRUSA ACCOUNT"), or when using other services (hereinafter referred to as "PRUSA SERVICES") and websites operated by the Administrator or by any company related to the Administrator by property or personnel.

Contact details of the Administrator:

Postal delivery address:
Partyzánská 188/7a
170 00 Prague 7 - Holešovice
Czech Republic

E-mail address: [email protected]

Telephone: +420 222 263 718

This statement applies solely to consumers who are residents of California and applies to all personal information collected by the Data Administrator about such individuals and their households ("Consumers" and "Personal Information").

The Statement incorporates the relevant provisions of the California Consumer Privacy Act ("CCPA"). The Administrator notes that certain terms used in this Statement have the meaning given to them by the CCPA and that the categorization of Personal Information used is consistent with that law.

Further details about the Administrator, other PRUSA group companies and also the policies that the Administrator applies in its online and offline activities in relation to the collection, use, disclosure, transfer and sale of personal information can be found in the Privacy Policy, of which this statement is a supplement.

Notice of Privacy Practices for California Consumers

The Administrator has collected the following categories of personal information in the twelve months prior to the issuance of this notice:

A. Identifiers - identifying information (e.g., first name, last name), contact information (e.g., delivery address, email address), login information (e.g., username, secure password), descriptive information (e.g., order number, device identifier), online identifiers (cookies or other technical means stored on the end device);

B. Business information - data on orders for goods and services, data on contracts concluded, data on the use of customer support services;

C. Online activity records - data related to visits to PRUSA websites, data on purchases of goods and services in PRUSA E-SHOP, data on the use of PRUSA ACCOUNT, data on the use of PRUSA SERVICES, data on the user's end device;

D. Location data.

In the past twelve months prior to the issuance of this statement, the Administrator collected the above categories of personal data from the following sources:

Identifiers - Consumer;

Commercial information - consumer;

Records of online activity - consumer;

Location data - consumer.

The Administrator has used the above categories of personal data for the following business and commercial purposes in the twelve months prior to the issuance of this statement:

1. Operation of the PRUSA websites, the performance of the Administrator's contractual rights and obligations under the General Terms and Conditions of Use of the PRUSA website (hereinafter referred to as the "General Terms and Conditions");

2. Maintenance of the PRUSA ACCOUNT customer account, the performance of the contractual rights and obligations of the Administrator under the General Terms and Conditions;

3. Operation of the PRUSA E-SHOP, processing of orders for goods or services and performance of the rights and obligations of the Administrator under the General Terms and Conditions (hereinafter referred to as the "General Terms and Conditions"), performance of related legal obligations of the Administrator;

4. The provision of other PRUSA SERVICES, the performance of the contractual rights and obligations of the Administrator arising from the terms and conditions applicable to the relevant PRUSA SERVICE (e.g. services available through PRINTABLES.COM under the PRINTABLES.COM Terms of Service);

5. The provision of customer support services;

6. Sending newsletters and other commercial communications;

7. Analyzing user traffic and behavior on PRUSA's website; personalizing advertising; making social media features available; making third-party content available;

8. Compliance with financial, tax, and other legal obligations to which the Administrator is subject and the establishment, exercise, or defense of legal claims.

The Administrator has disclosed the following categories of personal data to other PRUSA group companies and contracted service providers for the above business and commercial purposes in the twelve months prior to the issuance of this statement:

A. Identifiers - identification data (e.g. first name, last name), contact data (e.g. delivery address, email address), login data (e.g. username), descriptive data (e.g. order number, device identifier), online identifiers (e.g. cookies or other technical means stored on the end device);

B. Business information - data on orders for goods and services, data on contracts concluded, data on the use of customer support services;

C. Online activity records - data related to visits to PRUSA websites, data on purchases of goods and services in PRUSA E-SHOP, data on the use of PRUSA ACCOUNT, data on the use of PRUSA SERVICES, data on the user's end device;

D. Location data.

The Administrator has transferred the following categories of personal data to the contracted service providers in the twelve months prior to the issuance of this statement:

A. Identifiers - contact details (e.g. email address), online identifiers (e.g. cookies or other technical means stored on the end device);

Business information - data about the purchase of goods and services in the PRUSA E-SHOP.

These contractual service providers are mainly providers of the following marketing and support tools:

• Google Analytics - records cookies and website usage
• Google Adwords - records cookies and website usage
• Facebook - records cookies and website usage
• Pinterest - records cookies and website usage
• Reddit - records cookies and website usage
• Livechat.com - records cookies and website usage
• Luckyorange.com - records cookies and website usage
• Mailchimp - records cookies and website usage
• Appzi.com - records cookies and website usage
• Smartlook.com - records cookies and website usage
• Heureka.com - records purchase conversions and email addresses for the "Verified by Customers" service
• Trustpilot.com - records purchase conversions and email addresses for the "Verified by Customers" service

The Administrator has not sold personal data in the twelve months prior to this statement.

Individual privacy rights and how to exercise them

Right of access to personal data - The consumer has the right to request the Administrator to disclose personal data relating to their person or household that the Administrator has collected, used, disclosed or sold in the last 12 months at any time, but no more than twice in any consecutive 12-month period.

Right to erasure of personal data - the consumer has the right to requiest the Administrator to erase certain personal data relating to them or their household which the Administrator has obtained directly from that consumer. However, the Administrator declares that, following the exercise of your right to the erasure of personal data, the Administrator will also subsequently process those personal data which are necessary for the fulfillment of financial, tax, and other legal obligations to which the Administrator is subject and for the establishment, exercise or defense of legal claims.

Right to refuse the sale of personal data (opt-out "do not sell my personal data") - the consumer has the right to refuse the sale of personal data relating to them or their household.

Right not to be discriminated against for exercising rights - the consumer has the right not to be discriminated against by the Administrator for exercising privacy rights.

How to exercise privacy rights - to exercise privacy rights, you can use the Administrator's telephone number +420 222 263 718, email address: [email protected] or this contact form on the website.

The Administrator declares that, in order to protect the privacy and ensure security, it will take all necessary steps to verify the identity of the consumer before granting the request. The Administrator also points out that in some specific cases, the Administrator is not able to identify the consumer without further authorization and is not obliged to obtain additional personal data for this purpose.

The Administrator further declares that, following the exercise of your right to the erasure of personal data, the Administrator still subsequently processes those personal data which are necessary for the fulfillment of financial, tax, and other legal obligations to which the Administrator is subject and for the establishment, exercise or defense of legal claims.

Final declaration

This statement is valid and effective as of 1st March 2023 and supersedes all previous versions of this statement.

The Administrator states that it is closely monitoring developments in the area of consumer privacy in the United States of America and, as of the date of this Statement, is preparing for the upcoming implementation of its obligations under the California Privacy Rights Act (CPRA), Virginia's Consumer Data Protection Act (CDPA), and Colorado's Privacy Act (CPA).