Cookies Policy

I. Introductory provisions

The purpose of this document - “Cookies Policy” - is to inform you about the way cookies work and Personal Data are processed in connection with the use of the mobile application Alive App in accordance with Act No. 127/2005 Coll., on Electronic communications, and in accordance with Regulation No. 2016/679, the General Data Protection Regulation. In case a User of the application grants their consent to the use of cookies, this Cookies Policy serves to provide all the terms and conditions of the given consent and to fulfill the information obligation regarding the processing of Personal Data. In the Cookies Policy, the User will also find information on how to disable cookies and obtain information on the processing of Personal Data within the meaning of the GDPR for technical cookies.

The Alive App is operated by GTS ALIVE Group s.r.o., ID No. (IČ): 09296727, with its registered office at Na Maninách 1092/20, Holešovice, 170 00 Prague 7, registered in the Commercial Register maintained by the Municipal Court in Prague, section C, entry no. 334013; the aforementioned company also acts as the data controller.

Each User is required to read this Cookies Policy and, if they do not understand any information or have any other request, they may contact GTS Group at the contacts listed here.

Any and all processing of Personal Data by GTS Group is also governed by the Privacy Policy that is available here. The Privacy Policy contains detailed information about your rights, how to exercise them, as well as the relevant contacts.

The use of the Alive App is governed by the Alive App Terms of Use that are available here.

II. Contents

I) Introductory provisions

II) Contents

III) Definitions

IV) Collecting data during visits to the Website

V) Specific types of cookies used

5.1. Technical cookies

5.2. Analytical cookies

5.3. Marketing cookies

VI) Changing settings, information about rights and how to exercise such rights

VII) Final provisions

III. Definitions

GTS Group shall mean GTS ALIVE Group s.r.o., ID No. (IČ): 09296727, with its registered office at Na Maninách 1092/20, Holešovice, 170 00 Prague 7, registered in the Commercial Register maintained by the Municipal Court in Prague, section C, entry no. 334013, which operates the Alive App and also acts as the data controller, unless specified otherwise in this Cookies Policy.

Cookies Policy shall mean this Cookies Policy.

Privacy Policy shall mean the Alive App Privacy Policy that is available here.

User shall mean a person who has downloaded the Alive App and uses it.

Cookies shall mean short text files that enable information about your use of the Alive App to be recorded.

Alive App shall mean the mobile application Alive App.

Website shall mean https://www.gtsalive.com.

ID shall mean any ISIC, ISIC Scholar, IYTC, ITIC ID, as well as IDs with an AliveID / Alive license that may be issued by a university or school.

Card shall mean any card with an AliveID / Alive license.

Holder shall mean a User of any ID or Card; a Holder is also an Alive App User as well as a data subject.

GDPR shall mean Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

Personal Data shall mean any information relating to an identified or identifiable data subject; a data subject shall be identified or identifiable in case they can be identified, directly or indirectly, in particular by reference to a number, code or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity; for example, Personal Data include your email address and mobile phone number, and Personal Data may also include information about your shopping preferences in connection with your surname. It is necessary to process your Personal Data in order to use the Alive App.

Processing of Personal Data shall mean any operation or set of operations which is systematically performed by a controller or processor on Personal Data, whether by automated means or otherwise. The Processing of Personal Data shall mean, in particular, collection, recording on data carriers, disclosure, adaptation or alteration, retrieval, use, transmission, dissemination or otherwise making available, storage, exchange, alignment or combination, blocking, and destruction thereof; collection of Personal Data shall mean a systematic procedure or set of procedures aimed at obtaining Personal Data for the purpose of storing them on a data carrier for immediate or later processing; storage of Personal Data shall mean maintaining data in a form that allows them to be further processed; blocking of Personal Data shall mean an operation or set of operations which limits the manner or means of processing of Personal Data for a specified period of time, with the exception of necessary interventions; destruction of Personal Data shall mean the physical destruction of their carrier, their physical erasure or their permanent exclusion from further processing.

Purpose of processing shall mean the reason why GTS Group processes Personal Data.

Category shall mean specific types of Personal Data we need for Processing, such as identification data (such as name and surname).

IV. Collecting data in connection with the use of the Alive App

Data, cookies (small text files), and web beacons (small images that have a similar function to cookies and that are also known as “tracking pixels”) are stored on the User’s device in connection with the use of the Alive App. Unlike cookies, which are stored on the User’s device, web beacons are an integral part of the Alive App. When cookies are used, the User is not specifically identified by means of identification data; however, due to the use of network identifiers, IP addresses or cookies, the processing within the meaning of the GDPR takes place. For the sake of clarity within this Cookies Policy, cookies shall also mean any similar tools that work with data from the User’s device or obtain data about the User, device, pages viewed, etc.

Cookies are stored by the Alive App on the User’s device for the following purposes:

Technical cookies = without these cookies, it is not possible to launch and use the Alive App; these cookies cannot be disabled;

Analytical cookies = cookies that ensure the functionality of the Alive App; however, the application is functional without the use thereof; these cookies offer improved functionality when using the Alive App (e.g. content selection) and also provide GTS Group with information about subpage traffic and supporting data for further analysis; these cookies are only used with consent and can be disabled at any time;

Marketing cookies = cookies that enable GTS Group and third parties to display preferred content, advertising, including cross-website advertising, and to use User behavior data for anonymous analyses; these cookies are only used with consent and can be disabled at any time.

V. Specific types of cookies used

5.1. Technical cookies

5.1.1 Cookiebot

Purpose of processing: Managing consents to cookies in the Alive App in accordance with the applicable legislation, ensuring transparency and control over the use of cookies for Users.

Legal basis for the processing of personal data: Legitimate interest, which may be objected to.

Categories of personal data concerned: Information about the user’s consent to cookies, IP address in an anonymized form, browser, device, and geographic location data, network identifiers, data related to the use of the service.

Recipients: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Period for which personal data will be stored: 12 months.

Legitimate interests: Selected important tasks, legal acts, and communications of the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User.

Link to third-party terms of service: Cookiebot Privacy Policy.

5.1.2 Google Cloud Vision

Purpose of processing: Analysis and recognition of content in images using machine learning. The tool is used for identity verification through photographs. More information is also available here.

Legal basis for the processing of personal data: Performance of a contract, in cases where the user utilizes the photograph verification service when ordering the services.

Categories of personal data concerned: Photographs uploaded for analysis and metadata information about these photographs, network identifiers, data related to the use of the service.

Recipients: Google Ireland Ltd, Ireland; Google LLC, Mountain View, California, USA.

Transfers of personal data to third countries: Based on the performance of the contract, personal data may be transferred to third countries. As an appropriate safeguard, we have concluded standard contractual clauses in accordance with Article 46 of the GDPR. If a third country is subject to an adequacy decision, such decisions shall also apply. More information on this topic is available here.

Period for which personal data will be stored: Data are stored for the time necessary to perform the analysis (no more than a few seconds).

Legitimate interests: Selected important tasks, legal acts, and communications of the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User.

Link to third-party terms of service: Google Cloud Terms of Service + https://business.safety.google/privacy

5.1.3 Sentry.io

Purpose of processing: Real-time error monitoring and reporting, providing an overview of application performance and helping to quickly resolve issues.

Legal basis for the processing of personal data: Performance of a contract; without this tool, it is not possible to display and use the Alive App.

Categories of personal data concerned: Information about errors, exceptions, application performance, device data, and user interactions leading to errors, network identifiers, data related to the use of the service.

Recipients: Sentry (Functional Software, Inc.), San Francisco, California, USA.

Transfers of personal data to third countries: Personal data may be transferred to third countries. As an appropriate safeguard, we have concluded standard contractual clauses in accordance with Article 46 of the GDPR. If a third country is subject to an adequacy decision, such decisions shall also apply. More information on this topic is available here.

Period for which personal data will be stored: 90 days.

Legitimate interests: Selected important tasks, legal acts, and communications of the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://sentry.io/terms

5.1.4 Google RECAPTCHA

Purpose of processing: The tool makes it possible to distinguish between humans and robots; this is important for the proper functioning of forms. The tool also protects against automated access and possible attacks by robots. More information is also available here.

Legal basis for the processing of personal data: Performance of a contract.

Categories of personal data concerned: Data relating to the use of the Alive App, network identifiers, data related to the use of the service.

Recipients: Google Ireland Ltd, Ireland; Google LLC, Mountain View, California, USA.

Period for which personal data will be stored: Data are stored for the time necessary to perform the check.

Legitimate interests: Selected important tasks, legal acts, and communications of the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User or user’s device, as appropriate.

Link to third-party terms of service: https://business.safety.google/compliance + https://business.safety.google/privacy

5.2. Analytical cookies

5.2.1 Google Analytics

Purpose of processing: Analysis of the Alive App usage and user behavior for the purpose of optimizing content and user experience.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Information about the use of the Alive App, demographic information, device information, geographic location, and interactions with content, network identifiers, data related to the use of the service.

Recipients: Google Ireland Ltd, Ireland; Google LLC, Mountain View, California, USA.

Transfers of personal data to third countries: Based on your consent, data may be transferred to third countries. As an appropriate safeguard, we have concluded standard contractual clauses in accordance with Article 46 of the GDPR. If a third country is subject to an adequacy decision, such decisions shall also apply. More information on this topic is available here.

Period for which personal data will be stored: 14 months.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: Google Analytics Terms of Service + https://business.safety.google/privacy

5.2.2 Microsoft Clarity

Purpose of processing: Analysis of user behavior in the Alive App through session recordings and heat maps, which helps understand user interactions and optimize the user experience.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Information about user sessions, such as clicks, page scrolling, mouse movements, device, browser, and geographic location data, network identifiers, data related to the use of the service.

Recipients: Microsoft Corporation, Redmond, Washington, USA.

Period for which personal data will be stored: Session data: 30 days; Tagged or favorite sessions: 13 months; Heat map data: 13 months.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://learn.microsoft.com/en-us/clarity/faq#privacy

5.3. Marketing cookies

5.3.1 Google Ads

Purpose of processing: It is used to display ads within search and content networks. The tool makes it possible to display ads that are tailored to the user’s interests and to determine the success of individual campaigns.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Data relating to the use of the Alive App and clicks on subpages, network identifiers, data related to the use of the service.

Recipients: Google Ireland Ltd, Ireland; Google LLC, Mountain View, California, USA.

Period for which personal data will be stored: No more than 400 days.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://business.safety.google/compliance

5.3.2 Facebook

Purpose of processing: It is used to display personalized (tailored) ads within this social network.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Data relating to the use of the Alive App and clicks on links, network identifiers, data related to the use of the service.

Recipients: Meta Platforms Ireland Limited, 6 Serpentine Avenue, Dublin, D04 H0C9, Ireland.

Period for which personal data will be stored: 90 days.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://transparency.meta.com

5.3.3 Sklik

Purpose of processing: It is used to display personalized (tailored) ads within the advertising network Sklik.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Data relating to the use of the Alive App and clicks on links, network identifiers, data related to the use of the service.

Recipients: Seznam.cz, a.s., Radlická 3294/10, 150 00 Prague 5, Czech Republic.

Period for which personal data will be stored: 30 days.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://o-seznam.cz/pravni-informace/ochrana-udaju

5.3.4 TikTok

Purpose of processing: It is used to measure and improve the performance of personalized (tailored) ads within this social network.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Account information, User content, Messages, Your contacts and other connections, Purchase information, Surveys, polls, and promotions, Information when you contact us, Information from forms and features you use, network identifiers, data related to the use of the service.

Recipients: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

Period for which personal data will be stored: 13 months.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://www.tiktok.com/legal/page/eea/privacy-policy/cs

5.3.5 Spotify

Purpose of processing: It is used to track user interaction with the Spotify player, such as playback, pause, or listening duration. It can be used for analytical or marketing purposes.

Legal basis for the processing of personal data: Consent, which is given voluntarily and can be withdrawn at any time via cookie settings.

Categories of personal data concerned: Device identifiers, IP address, behavioral information, browser type and operating system, possible connection to Spotify account if the user is logged in, network identifiers, data related to the use of the service.

Recipients: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.

Period for which personal data will be stored: Period necessary for the specified purpose.

Legitimate interests: Consent, its withdrawal, and any other actions taken by the user will be stored for inspection purposes. More information is available here.

Source from which personal data originate: User’s device.

Link to third-party terms of service: https://www.spotify.com/legal/privacy-policy

VI. Changing settings, information about rights and how to exercise such rights

Cookie settings can be updated at any time here.

Consent given by the User to the controller can be withdrawn at any time. Consent can be withdrawn by updating the settings – see the link above. Where the legal basis is the performance of a contract, it is not possible to continue using the service or the Alive App (as appropriate), if cookies are disabled – it is not possible to refuse these services through cookie settings.

All information about the processing of personal data and the User’s rights under the GDPR (e.g. the right of access, erasure, etc.), including an explanation of these rights and how to exercise them, is described in detail in the Privacy Policy that is available here.

VII. Final provisions

This Cookies Policy shall take effect on 1 May 2025.

GTS Group is entitled to update this Cookies Policy. Any changes shall take effect upon publication of the Cookies Policy. The User is required to monitor changes to this Cookies Policy. The current version of the Cookies Policy is always available in the Alive App, published on the Website, and may be archived and reproduced by the User.