PRIVACY POLICY

Last updated: 13 August 2026

1. Data controller

The controller of personal data is:

Quantum Hive s.r.o.
Company ID No.: 24460851
Registered office: Rybná 716/24, 110 00 Prague 1 — Staré Město, Czech Republic

Contact for privacy-related questions and requests:

help@quantumhive.cz

2. Who this Privacy Policy applies to

This Privacy Policy applies in particular to individuals who:

• visit the Quantum Hive website;
• contact Quantum Hive regarding data, professional or B2B collaboration;
• communicate with Quantum Hive in connection with research or academic collaboration;
• contact Quantum Hive regarding professional opportunities;
• act as contact persons for a business, research or institutional partner;
• otherwise engage in direct professional or business communication with Quantum Hive.

3. Personal data we process

Depending on the circumstances, we may process in particular:

Contact and identification data

• first and last name;
• professional or academic position;
• organisation or institution;
• email address;
• telephone number, if you provide it;
• other contact details included in the communication.

Communication content

• the content of emails and messages;
• attachments;
• information concerning proposed collaboration;
• information needed to prepare discussions, a pilot or a contractual relationship.

Data relating to professional opportunities

• a CV, if provided;
• employment history and education;
• professional experience and skills;
• links to professional profiles;
• work samples, code, models, analyses, research or other materials that you send to us;
• information generated during any follow-up communication.

Technical and security data

During normal website operation, basic technical data may be generated, for example:

• IP address;
• time of the request;
• requested page;
• device or browser type;
• technical server or security logs.

The scope of such data depends on the hosting and technical infrastructure actually in use.

4. Sources of personal data

Most personal data are obtained directly from you.

Where appropriate, we may also obtain professional contact details:

• from a person who introduces us to you;
• from a publicly available professional source;
• from the organisation for which you work or which you represent.

We use such data only to the extent appropriate for professional, research or business communication.

If we obtain personal data from a source other than you, we will provide the required information about the processing within the legally prescribed period, generally no later than at the time of our first communication with you, unless a statutory exception applies.

5. Purposes and legal bases for processing

5.1 Data, professional and business collaboration

Purpose: responding to an enquiry, assessing potential collaboration, preparing a pilot, discussions, a proposal or contractual relationship, and related follow-up communication.

Legal basis: steps taken at your request prior to entering into a contract and, in other cases, Quantum Hive's legitimate interest in conducting reasonable professional and business communication.

5.2 Research and academic collaboration

Purpose: assessing, preparing and organising research, academic, institutional or other professional collaboration.

Legal basis: steps taken prior to entering into a contract where relevant, and/or Quantum Hive's legitimate interest in developing professional and research collaboration.

5.3 Professional opportunities

Purpose: assessing possible professional collaboration, an internship, employment or another professional opportunity.

Legal basis: steps taken at the individual's request prior to potentially entering into a contract.

If we wish to retain data for future opportunities beyond the original communication, we will request consent where no other appropriate legal basis applies.

5.4 Protection of rights and documentation of communication

Purpose: retaining material business and professional communication, resolving disputes, protecting legal claims and evidencing the existence or content of a relationship.

Legal basis: Quantum Hive's legitimate interest in protecting its rights and legal claims.

5.5 Security and technical operation

Purpose: ensuring secure and stable operation of the website and information systems, preventing misuse and handling security incidents.

Legal basis: Quantum Hive's legitimate interest in the secure operation of its website and systems.

5.6 Compliance with legal obligations

Where processing is required by law, personal data are also processed in order for Quantum Hive to comply with its legal obligations.

6. Direct marketing and commercial communications

Quantum Hive does not operate a public newsletter or marketing profiling of website visitors through this website.

If Quantum Hive sends commercial communications or conducts direct B2B outreach, it does so in accordance with the applicable data-protection and electronic-communications rules.

You may object to the processing of personal data for direct marketing at any time. Once such an objection is made, your personal data will no longer be processed for that purpose.

7. Whether you are required to provide data

Providing data through email or other direct communication is generally voluntary.

Without certain basic contact or substantive information, however, we may not be able to respond to an enquiry, assess a collaboration proposal or continue professional communication.

If a contractual relationship is formed, certain information may be necessary to enter into or perform the contract or comply with legal obligations.

8. Retention periods

We retain personal data only for as long as is reasonably necessary for the relevant purpose.

Professional, business and research communication

We retain data for the duration of active communication and thereafter for the period necessary to follow up on the communication, maintain reasonable internal records and protect legal rights, generally no longer than 3 years from the last material communication, unless a contractual relationship or another reason for longer retention arises.

Contractual relationships

If a contractual relationship is formed, relevant data may be retained for the duration of the relationship and thereafter for as long as necessary to comply with legal obligations and protect legal claims.

Professional opportunities

Data relating to a specific professional opportunity are retained for the duration of the communication and generally for no longer than 6 months thereafter, unless longer retention is justified by the circumstances, a legal claim or your consent.

Technical and security logs

Technical logs are retained only for as long as needed for security and operational purposes under the configuration of the infrastructure in use. In the event of a security incident, relevant data may be retained for longer where necessary to investigate the incident or protect legal rights.

9. Recipients of personal data

Personal data may be accessed, to the extent necessary, in particular by:

• authorised persons working for Quantum Hive;
• providers of hosting, email, IT, security and cloud services;
• providers of tools used for professional communication or document management;
• legal, accounting, tax or other professional advisers where their involvement is necessary;
• public authorities where disclosure is required by law or a binding decision.

Where a recipient acts as a processor, it processes personal data only to the appropriate extent and under the relevant contractual and security conditions.

10. Transfers outside the European Economic Area

Some providers of technical or cloud services may process data outside the European Economic Area.

Where such a transfer takes place, we use an appropriate legal mechanism under the GDPR, in particular an adequacy decision or appropriate safeguards such as Standard Contractual Clauses, where applicable.

11. Automated decision-making

In connection with the public website, we do not carry out decisions based solely on automated processing that produce legal effects or similarly significant effects for visitors or individuals who contact us.

12. Your rights

Subject to the conditions set out in the GDPR, you have in particular the right to:

• receive information about the processing of your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of personal data where the legal conditions are met;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• request data portability where the legal conditions are met;
• withdraw consent where a particular processing activity is based on consent.

Exercising these rights does not affect processing that we are required or permitted to carry out on another legal basis.

Requests may be sent to help@quantumhive.cz.

We will respond without undue delay and within the applicable legal time limits.

13. Complaint to a supervisory authority

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with a supervisory authority.

In the Czech Republic, the supervisory authority is:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Email: posta@uoou.gov.cz

14. Security

Quantum Hive implements appropriate technical and organisational measures proportionate to the nature of the personal data processed and the risks associated with processing.

No method of electronic transmission or storage, however, can be considered absolutely secure.

15. Changes to this Privacy Policy

We may update this Privacy Policy, in particular where our processing activities, website technology or legal requirements change.

The current version will be published on the website together with the date of the latest update.