LAST UPDATED: 22.12.25

§1. General Provisions

1. This Policy governs the rules for processing the Tenant's personal data by the Landlord in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

§2. Scope of Personal Data Processed

1. The Landlord processes the Tenant's personal data necessary for the performance of the lease agreement, including:
   • First and last name,
   • Residential address,
   • PESEL number or other identification number,
   • ID card number or other identity document number,
   • Phone number and email address.
2. Personal data may also be processed to the extent necessary to protect the Landlord's rights, e.g. in the event of pursuing claims related to the lease agreement.

§3. Purpose of Personal Data Processing

1. The Tenant's personal data will be processed by the Landlord solely for the purposes of:
   • Performance of the lease agreement,
   • Fulfillment of legal obligations incumbent on the Landlord, e.g. in the area of accounting,
   • Pursuing or defending claims related to the lease agreement.
2. The Landlord will not process the Tenant's personal data for other purposes without obtaining the Tenant's separate consent.

§4. Legal Bases for Processing Personal Data

1. The legal basis for processing the Tenant's personal data is:
   • The necessity of processing for the performance of the lease agreement (Art. 6(1)(b) GDPR),
   • A legal obligation incumbent on the Landlord (Art. 6(1)(c) GDPR),
   • The Landlord's legitimate interest in pursuing or defending claims (Art. 6(1)(f) GDPR).

§5. Data Retention Period

1. The Tenant's personal data will be stored for the period necessary to perform the lease agreement and until the expiry of the limitation periods for claims arising from that agreement.
2. After the lease ends, personal data will be stored for the period required by law, e.g. in the area of accounting, or for the period necessary to protect the Landlord's rights.

§6. Recipients of Personal Data

1. The Tenant's personal data may be disclosed to:
   • Entities cooperating with the Landlord in the area of accounting or legal services,
   • Public authorities, where required by legal obligations.
2. The Landlord ensures that the transfer of personal data to recipients is carried out in accordance with the GDPR.

§7. Tenant's Rights

1. The Tenant has the right to:
   • Access their personal data,
   • Rectification of inaccurate data,
   • Request erasure of data in cases specified by law,
   • Request restriction of data processing,
   • Object to the processing of data based on the Landlord's legitimate interest,
   • Data portability to the extent defined by law.
2. In the event of a breach of personal data processing rules, the Tenant has the right to lodge a complaint with the President of the Personal Data Protection Office.

§8. Contact Regarding Personal Data

1. Any questions, requests or applications regarding the processing of personal data may be directed to poznan@htnest.pl or to the Landlord's correspondence address.

§9. Final Provisions

1. This Annex is effective from the date of signing the lease agreement and for its entire duration.
2. Any amendments to this Annex require written form under pain of nullity.

PDATED: 22.12.25

‍
This Privacy Policy explains how HT Nest ("we", "us", or "our") collects, uses, and protects personal data of users who visit and use the website (the "Website"). This policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Polish data protection laws.
‍
1. DATA CONTROLLER
The controller of your personal data is: HT Nest [Registered address]
Email: [contact email address] If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.
‍
2. PERSONAL DATA WE COLLECT
Depending on how you use the Website, we may collect the following categories of personal data:Identification data (e.g. name, surname) – if provided via contact forms or email communication. Contact data (e.g. email address, phone number). Technical data (e.g. IP address, browser type and version, operating system, device type). Usage data (e.g. pages visited, time spent on the Website, referring URLs). Cookies and similar technologies (see Section 7). Providing personal data is voluntary, but in some cases necessary to respond to inquiries or provide services.
‍
3. PURPOSES AND LEGAL BASES OF PROCESSING
We process personal data for the following purposes and on the following legal bases:To respond to inquiries and communicate with users
Legal basis: Article 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract) or Article 6(1)(f) GDPR (legitimate interest)To operate and improve the Website
Legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring proper functioning and security of the Website). To comply with legal obligations
Legal basis: Article 6(1)(c) GDPRFor analytical and statistical purposes (if applicable)
Legal basis: Article 6(1)(f) GDPR or Article 6(1)(a) GDPR (consent), depending on the tools used.
‍
4. RECIPIENTS OF PERSONAL DATA
Your personal data may be shared with: IT and hosting service providers Providers of analytical, marketing, or cookie-related tools (if used). Public authorities or other entities when required by law. All recipients process personal data on the basis of appropriate.