Addendum to the personal data processing policy

Art Competition — Become a Poster Star | 2026

Controller: AMBI CZ, s.r.o., Company ID: 63984881

This addendum supplements the general https://www.ambi.cz/zasady-zpracovani-osobnich-udaju of AMBI CZ, s.r.o. for the purposes of the Become a Poster Star art competition. In all other respects, the general policy applies without modification.

1. Controller and processor

Controller: AMBI CZ, s.r.o., Maiselova 38/15, Josefov, 110 00 Praha 1, Company ID: 63984881

Processor: Readmanual, s.r.o., Company ID: 17510759 — handles communication and the technical collection of entries under a data processing agreement with the controller.

2. What data we process

Within the competition, we process exclusively the following data:

• Legal guardian: first name, surname, email address — for the purpose of entering the competition and being contacted in the event of winning.

• Child — author of the artwork: first name and age — solely for the purposes of publishing and displaying the artwork (shown alongside the artwork). We do not collect any further personal data about the child.

• Artwork: a photograph or scan of the painting uploaded by the legal guardian.

3. Purpose of processing

• Organisation and evaluation of the art competition.

• Contacting the winner and awarding the prize.

• Publication of the artwork on Ambiente’s website and social media.

• Physical display of the artwork in Ambiente restaurants.

• Promotion of the competition and the Ambiente group.

• Sending the Ambiente newsletter to legal guardians who have given separate consent (consent is voluntary and independent of entering the competition; processing is carried out in accordance with the Newsletter section of the general policy).

4. Legal basis

Processing is carried out on the basis of consent of the legal guardian pursuant to Article 6(1)(a) GDPR. Consent is voluntary and may be withdrawn at any time by emailing info@ambi.cz. Withdrawal of consent does not affect artworks that have already been physically displayed or published.

Consent on behalf of a child under the age of 15 is given by the legal guardian in accordance with Article 8 GDPR.

5. Retention period

• Contact details of the legal guardian: 1 year from the end of the competition, then deleted.

• Child’s name and age alongside the displayed/published artwork: for the duration of the licence — 3 years from the end of the competition.

6. Who has access to the data

In addition to the processor Readmanual, s.r.o. (see section 1), the following may have access to the data:

• Operators of Ambiente restaurants — exclusively in relation to the physically displayed artwork (author’s name and age).

• Online form provider — Readmanual, s.r.o. or Google LLC acting as a processor, bound by EU standard contractual clauses.

No personal data is transferred outside the EU/EEA.

7. Your rights

You have the same rights as set out in the general policy (access, rectification, erasure, restriction of processing, withdrawal of consent, lodging a complaint with the Office for Personal Data Protection). Exercise them at: info@ambi.cz.

This addendum is valid from: 30 April 2026