UK Addendum

This Addendum supplements the Terms, Privacy Policy and DPA only to the extent UK law applies to the relationship or processing. The Provider remains MAŃSKI AI s.r.o. in the Czech Republic. The Agreement’s Czech governing-law clause remains in place; this Addendum does not create a separate English-law contract. Applicable mandatory UK consumer protections and jurisdiction rights cannot be excluded by that choice.

The relevant personal-data framework is the UK GDPR and Data Protection Act 2018 as amended, including effective changes made by the Data (Use and Access) Act 2025. The latter does not replace the entire framework. Law-enforcement processing under Part 3 of the Data Protection Act requires its own appropriate specification and agreement; a general GDPR schedule is not sufficient.

For processing subject to UK GDPR, the DPA’s controller, processor, instruction, confidentiality, security, subprocessor, rights-assistance, incident, audit and return/deletion duties apply with references interpreted to the equivalent UK requirements and competent authority. Where both EU and UK requirements apply, both must be met; the narrower contractual EU processing boundary remains unchanged.

UK-to-EU transfers may rely on the applicable UK adequacy regulations for EEA countries. An IDTA or UK Addendum to EU standard contractual clauses is not automatically needed for that adequate destination. Any onward restricted transfer requires its own lawful basis and assessment, and does not become permitted merely because it would satisfy transfer law. Our commitment to store and process Customer Data within the EU still applies. A Customer’s own authorised access or retrieval in the UK is distinct from supplier processing-location changes.

You may exercise applicable UK rights through contact@veritasask.com. We provide a clear route to complain about our handling of personal data, acknowledge a data-protection complaint within 30 days, investigate appropriately and communicate progress and the outcome without undue delay. This complaints period does not replace the applicable deadline for a data-subject rights request. You may complain to the Information Commissioner’s Office at https://ico.org.uk/ without surrendering any other remedy.

Where the Provider acts on an institutional controller’s instructions, it refers the request promptly and assists that controller. Applicable UK representative details, where a representative is legally required, must be supplied for the relevant UK offering before it commences. This document does not claim that a named UK representative, UK establishment or regulatory registration has already been appointed or obtained.

UK consumers retain non-excludable rights under the Consumer Rights Act 2015, the Consumer Contracts Regulations 2013 and other applicable mandatory law, including reasonable care and skill, conformity, statutory remedies and any applicable cancellation right. The business liability caps do not apply to them. Starting a continuing online service is not, by itself, a universal waiver of the cooling-off right.

UK cookie and electronic-marketing rules apply where relevant. Optional analytics remain off until consent; this Addendum does not retrospectively opt anyone into tracking. The institution’s UK sector, procurement, confidentiality and security conditions must be assessed before the corresponding deployment. A UK customer does not alter the EU location of the Service’s storage and processing.