en

Letterhead

1

SUMMARY OF PROFESSIONAL ACTIVITY

PERSONAL INFORMATION First name Viktor Last name Mravčík

POSITION IN THE EUDA MANAGEMENT BOARD Membership (Member, Member without voting rights, Alternate or Observer) Alternate Country/Organisation represented European Parliament Term of office in the Management Board (from-to, as applicable) 2024-2028

SUMMARY OF PROFESSIONAL EXPERIENCE Current professional activity He is the Head of research at NGO Společnost Podané ruce in Brno. He is a lecturer, researcher and member of the board for doctoral programme in addiction science at the Department for addictology, 1st Medical Faculty of the Charles University. In 2022-06/2026, he was the scientific advisor of the Czech National Drug Coordinator and a member of the core group preparing drug policy reforms including decriminalization and legal regulation of so called psychomodulatory substances or cannabis. He has published number of scientific and policy papers. His main interests are prevalence, patterns and consequences of substance use and addiction policies. See more: https://www.researchgate.net/profile/Viktor-Mravcik https://pubmed.ncbi.nlm.nih.gov/?term=Mravcik&sort=date

Previous positions (summary) He graduated at the Medical Faculty at Palacky University in Olomouc in 1993. In 1997 and 2000 he received specialisations in hygiene and epidemiology and epidemiology. He received his PhD in preventive medicine in 2013 and he has been nominated associate professor in 2018 at the 1st Faculty of Medicine, Charles University. In 1993 - 2002, he held different positions in the public health sector (in the discipline of hygiene and epidemiology). Before he started to work for the Czech National Focal Point, he had been a leader of the Centre of Epidemiology at District Institute of Public Health in Karviná. He was a member of the

2 Impact Analysis Project of New Drugs Legislation in the Czech Republic (PAD) research team in 1999-2001. In 2002-2021, he was the Head of the Czech National Monitoring Centre for Drugs and Addictions at the Office of the Government, he was the main author and editor of the national reports on substance use and addictions. In his position of the Scientific Advisor to National Drug coordinator in 2022 onwards, he led the interministerial and interdisciplinary Working Group on Decriminalisation of drug crimes preparing legislative changes resulting in decriminalisation of drug offenses in the Czech Penal Code in 2024-2025. In 2022- 2025, he invented and endorsed the regulatory framework for psychomodulatory substances – the new category of psychoactive products to be marketed for human consumption. In 2023, he established a concept of Drug Consumption Rooms (DCR) in the Czech Republic and was the leading agent of opening the first DCR in the Czech Republic in the city of Brno.

The reference period for past interests and the summary of the professional activities should cover the five years preceding the date of the declaration. It is up to each member/alternate/observer to indicate the most relevant professional experience linked to their role in the EUDA Management Board.

3 Privacy statement on protection of personal data resulting from the summary of professional activity

The EUDA shall process any personal data resulting from any summary of professional activity delivered in accordance with the EUDA Policy for the prevention and management of conflicts of interest, hereinafter referred to as the ‘Policy’ (EUDA/26/24, as adopted by the EUDA Management Board at its meeting of 4 July 2024 and published on the EUDA website), pursuant to the Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC.

  1. Purpose of this data processing

The purpose of the data processing is to ensure and safeguard the impartial functioning and the independent operations of the EUDA and its bodies, in the public interest and in accordance with the mandate assigned to the latter.

  1. Legal basis

The legal basis for this data processing is provided by the above-mentioned decision of the EUDA Management Board adopting the EUDA Policy for the prevention and management of conflicts of interest, as published on the EUDA website. In particular this Policy provides for the publication of the summary of professional activity on the EUDA website.

  1. Personal data concerned

In this processing operation, the EUDA processes data directly collected from you. Such data may include the following: • First name and last name. • Membership to a specific EUDA entity or body, country/organisation represented and term of office in the MB. • Professional activities. • Information on any other relevant interests, which are, or could be perceived as, related to the EUDA’s activities.

  1. Responsible of the data

The EUDA is ultimately responsible for complying with Regulation (EU) 2018/1725. On behalf of the EUDA, the Executive Director is the ‘data controller’ to ensure the lawful conduct of this processing operation.

  1. Who has access to your information and to whom is it disclosed?

As required by the aforementioned Policy, the summary of professional activity will be published on the EUDA website and for the purpose of the relevant data processing will be disclosed to the recipients identified in the latter, namely the Members of the EUDA Management Board and EUDA Executive Director, as well as, under the authority of the latter and as required by the relevant data processing, the Head of the EUDA ‘Executive Office’, the Head of the EUDA ‘Resources management and administrative services unit’ and the staff

4 members in charge of the assistance to the EUDA Management Board and of the management of the EUDA website. Furthermore, and in line with the pertinent provisions of the relevant EU legislation, the summary of professional activity may be disclosed to bodies and actors in charge of audit, control, inspection or review of the EUDA acts, such as the European Court of Auditors, the EC Internal Audit Service, OLAF, the European Ombudsman and the European Data Protection Supervisor.

  1. How long does the EUDA keep your data?

The EUDA Executive Director, as the responsible data controller, will ensure that any summary of professional activity is duly filed and kept for a maximum retention period which will expire on the date of the decision providing discharge to the EUDA Executive Director, following the termination of the mandate of the concerned person in the relevant EUDA body.

In case the summary of professional activity is not delivered or is not complete, the EUDA Executive Director, as the responsible data controller, will contact the data subject concerned for the purpose of the required delivery or completion of the summary of professional activity.

  1. Data security

The Agency has put appropriate technical and organisational measures in place (security policies and procedures) to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The Agency takes all necessary measures to ensure the maximum safety and security of personal data held both offline and online, in hardcopy and digital form.

  1. Your data protection rights

As a data subject (i.e., an individual whose personal data is processed), you have a number of rights: • Right to be informed – This privacy statement provides information on how the EUDA collects and uses your personal data. • Right to access – You have the right to access your personal data. You have the right to request and obtain a copy of the personal data processed by the EUDA. • Right to rectification – You have the right to obtain - without undue delay - the rectification or completion of your personal data if it is incorrect or incomplete. • Right to withdraw consent – You have the right to withdraw consent in line with Article 7 of Regulation (EU) 2018/1725 where the Agency relies on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before consent is withdrawn. Please note that if you withdraw your consent, this might have consequences on your membership. The EUDA will advise you if this is the case at the time you withdraw your consent. • Right to erasure – You have the right to require the EUDA to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing. In certain cases, your data may be kept to the extent it is necessary, for example, to comply with a legal obligation of the Agency or if it is necessary for reasons of public interest in the area of public health. • Right to restrict processing – In a few, codified cases, you have the right to obtain the restriction of the processing, meaning that your data will only be stored, but not actively processed for a limited period of time. • Right to object – If the Agency processes your data for the performance of a task in the public interest (without your consent or another lawful basis), you have the right to object to this processing on grounds related to your particular situation.

5 • Right to portability - Where the processing is carried out based on your consent and in automated means you have the right to receive your personal data (which was provided to the EUDA by you) in a machine-readable format. You may also ask the EUDA to directly transfer such data to another controller.

  1. Contact information

For the purpose of exercising the above-mentioned rights or should you have any questions regarding the processing of your personal data, or you think that the processing is unlawful or not in compliance with this privacy statement, please contact in writing the EUDA Executive Director, as the responsible data controller.

  1. Recourse

The data subject may address the EUDA data protection officer (DPO@euda.europa.eu) for possible questions concerning the protection of his/her personal data.

Without prejudice to any judicial remedy, the data subject will have the right to lodge a complaint with the European Data Protection Supervisor (edps@europa.eu), if he/she considers that his/her rights to the protection of his/her personal data have been infringed.