Special Terms for the Requests Service

Effective from: 1 August 2026

These special terms govern the Requests service on veritra.io, in which a buyer publishes its own contract and suppliers submit bids for it. They supplement the General Terms and Conditions (the "GTC"); matters not covered here are governed by the GTC. In the event of a conflict, these special terms prevail for the Requests service.

The service is intended exclusively for businesses (B2B). The GTC provisions on the contracting parties, liability, personal data protection and dispute resolution apply here as well.

This English version is a translation. In the event of a discrepancy, the Czech version prevails.

1. The provider's position

The provider supplies a technical platform for publishing a request and receiving bids. The provider:

• is not the buyer of the request and not a supplier,
• is not a party to any contract that may be concluded between the buyer and a supplier,
• is not a commercial agent within the meaning of Sections 2445 et seq. of the Czech Civil Code and is not entitled to a commission from any contract concluded,
• is not a contracting authority profile under Section 214 of Act No. 134/2016 Coll., on public procurement (the "PPA"), nor any other electronic tool under the PPA.

Requests published in this service are private contracts outside the scope of the PPA. Publishing a request in the service therefore does not replace any publication duty under the PPA or any other legislation. It is the buyer's sole responsibility to assess whether the contract it awards falls under the PPA or other special rules; if it does, the service must not be used to award it.

2. The buyer and identity verification

A request may be published only by a business that:

• has stated a company identification number traceable in the public register of the country in which it publishes the request,
• has a verified e-mail address and phone number,
• publishes the request in its own name and on its own account.

One identification number corresponds to one buyer profile. The buyer is responsible for being authorised to act on behalf of the stated company.

The buyer is responsible for the content of the specification and all attachments, in particular for being entitled to publish them and for not infringing third-party rights (copyright, trade secrets, personal data protection) by publishing them.

3. Prohibition of sham requests

The buyer undertakes to publish a request solely with a genuine intention to conclude a contract.

In particular, the buyer must not publish a request in order to:

• discover the price level or commercial terms of its competitors,
• obtain suppliers' trade secrets, technical solutions or know-how without intending to conclude a contract with any of them,
• damage the reputation of another person or act under another person's identity.

If the buyer breaches this prohibition, it shall pay the provider a contractual penalty of CZK 100,000 for each such request. The penalty is payable within 14 days of the demand being delivered. Payment of the penalty is without prejudice to the provider's right to full compensation for damage, to the affected suppliers' right to compensation from the buyer, or to the provider's right to block the account immediately under Article 8.

4. Course of the tender procedure

In the specification the buyer sets a bid submission deadline, which must not be shorter than 24 hours from publication of the request. Bids submitted after the deadline are not accepted by the system; the provider's server time is decisive.

The buyer answers questions about the specification through the service. The answer is made available to all participants so that they compete on equal terms; the identity of the asker is not shown to other participants.

The buyer is not obliged to select any of the bids submitted and is entitled to cancel the request at any time before the contract is awarded. Publishing a request is not a public promise nor an offer to conclude a contract within the meaning of Section 1732 of the Czech Civil Code.

Participants have no claim for reimbursement of costs incurred in preparing and submitting a bid, against either the buyer or the provider, including where the request is cancelled.

5. The supplier's bid

A submitted bid is a binding offer to conclude a contract. The supplier is bound by its bid for 30 days from the expiry of the bid submission deadline, unless the buyer sets a different period in the specification; a period set by the buyer must not exceed 90 days.

While the bid submission deadline is still running, the supplier may replace or withdraw its bid at any time. Once the deadline has passed this is no longer possible.

The supplier is responsible for the truthfulness and completeness of the information in its bid and for being qualified to provide the requested performance.

6. Sealed bids and the encryption key

Bids are encrypted in the supplier's browser using the buyer's public key. The provider stores encrypted data only and has no technical means of disclosing the content of a bid — neither to the buyer before the deadline, nor to itself, nor upon request by a third party. The buyer learns the content of the bids only after the deadline, upon opening the envelopes and decrypting them with its key.

The key is held exclusively by the buyer. When publishing a request the buyer chooses a passphrase protecting its private key and downloads a recovery file containing the key. The provider neither knows nor stores the passphrase or the unencrypted private key.

The buyer acknowledges that losing both the passphrase and the recovery file renders the submitted bids permanently unreadable. Recovery is technically impossible — this very fact is the substance of the confidentiality guarantee given to suppliers. The provider is not liable for damage arising from the buyer being unable to open bids due to the loss, disclosure or corruption of the passphrase or recovery file.

Every opening of the envelopes and every download of a bid is recorded in an immutable audit log, which forms part of the request documentation.

7. Confidentiality of bids

The content of a bid is confidential information of the supplier and may constitute its trade secret under Section 504 of the Czech Civil Code.

The buyer is entitled to use the content of a bid solely to evaluate it and to conclude a contract with the selected supplier. In particular, the buyer must not disclose the content of a bid to another participant in the same procedure, use it for the benefit of a third party, or use it in its own business activities outside the given purchase.

If the buyer breaches this duty, it shall pay the provider a contractual penalty of CZK 100,000 for each breach; this is without prejudice to the affected supplier's right to compensation from the buyer.

8. Moderation and blocking

The first request of every new buyer is subject to approval by the provider before publication. Once approved, the buyer publishes further requests without waiting.

The provider is entitled to reject, withhold or take down a request and to block the buyer's account where the request is:

• manifestly fictitious or in breach of Article 3,
• published under another person's identity or with untrue information about the buyer,
• unlawful, misleading, or damaging to the reputation of the provider or a third party,
• manifestly unintelligible or lacking a specification that allows pricing.

The provider shall notify the buyer of a decision not to publish, stating the reason. The provider is not liable for damage arising from the non-publication of a request that was in breach of these terms.

The provider does not verify the truthfulness of specifications, the qualification of suppliers, or their ability to provide the requested performance.

9. Prices

For suppliers the Requests service is free of charge — browsing requests, submitting a bid and participating in a tender procedure do not require a paid subscription. Access to public procurement monitoring under the GTC is unaffected and remains a paid service.

For buyers, publishing requests is free of charge for one year from the creation of the buyer profile. After that period the price list at https://veritra.io/pricing applies. The provider shall notify the buyer of the introduction of charges by e-mail at least 30 days in advance; until then publishing remains free of charge. If the buyer does not take out a paid subscription, requests already published remain in place until they conclude, but no new ones can be published.

10. Liability

In addition to the limitations of liability under Article 7 of the GTC, the provider is not liable:

• for performance of a contract concluded between a buyer and a supplier, for the quality of performance, for meeting deadlines, or for the payment discipline of either party,
• for the truthfulness, completeness and feasibility of a specification, or for the truthfulness of information in bids,
• for the selection of a supplier, for the cancellation of a request by the buyer, or for a request receiving no bids,
• for the inability to open bids for the reasons stated in Article 6,
• for participants' costs of preparing a bid.

Any disputes arising from a contract concluded between a buyer and a supplier shall be resolved between those parties; the provider is not obliged to take part in them or to decide them.

11. Data retention and personal data

The provider retains the request specification, submitted bids (in encrypted form), questions, answers and the audit log for 3 years from the conclusion of the request, in order to evidence the course of the tender procedure to both parties. After that period the data is deleted unless the law provides otherwise.

In relation to personal data contained in bids the buyer is a separate controller and is responsible for further processing after decryption. In this respect the provider acts as a processor; in relation to user data the Privacy Policy applies.

12. Final provisions

These special terms are governed by the laws of the Czech Republic. Articles 9 and 10 of the GTC apply mutatis mutandis to their amendment, the severability of individual provisions, assignment of the contract and dispute resolution.

Version 1.0, effective from 1 August 2026. Operator: RWX, s.r.o., Company ID 14235111, Section C, Insert 49019, Regional Court in Hradec Králové.