INTRODUCTORY INFORMATION

Respecting the right to privacy and the protection of Users' personal data, Choicer makes the utmost effort to ensure adequate security of the personal data entrusted to it, i.e. confidentiality, availability, integrity and accountability of the activities carried out. In order to make the processing processes at Choicer transparent for Users, we present this privacy policy which sets out the most important information concerning the Controller’s processing of personal data on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: 'GDPR').

CONTROLLER

Choicer Sp. z o. o. with its registered office in Zabierzów (32-080), ul. Radosna 1, entered in the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 12th Economic Division of the National Court Register, under KRS number: 0000930386, NIP 5130274980 (hereinafter: 'Choicer').

ACQUISITION OF DATA AND THE PURPOSE OF ITS PROCESSING

Choicer collects and processes Users' personal data for the proper performance of the Services. The data is collected through the Mobile Application and therefore the User, when deciding to use the Services, provides Choicer with certain information, dependent on the relationship between Choicer and the User:

I. Users of the Choicer app

Type of personal data:

• When registering an Account, the User enters his/her telephone number and e-mail address in the form, as well as basic information necessary for the operation of the service, such as gender. • During Account Registration, and at a later stage, the User may provide additional information such as his/her location, interests and other details, as well as his/her photos and video.

Purpose of processing and legal basis:

1. in order to register an Account in the Choicer Application at the request of an individual and to be able to use the Services that Choicer offers (Article 6(1)(a) of the GDPR), 2. for the purposes of advertising and marketing campaigns indicated in the consents for the processing of personal data - where such consents have been given (Article 6(1)(a) of the GDPR), using the following forms of communication: - display of advertisements in the Mobile Application, - newsletter (information mailing), - sending commercial information (e-mails), 3. for the purposes of accounting, bookkeeping and financial reporting (Article 6(1)(b) of the GDPR), 4. in order to comply with legal obligations (Art. 6(1)(c) of the GDPR), 5. also in connection with the fulfilment of the Controller's other legitimate interests (Article 6(1)(f) of the GDPR): - for the establishment, exercise and defence of legal claims, - for statistical purposes related to improving the efficiency of the work, the quality of the Services provided and adapting them to the Users.

Data retention period – User’s personal data will be processed for the duration of his/her use of the Application, until his/her Account is deactivated, and until he/she withdraws his/her consent or objects. Once the User has stopped using the Application, withdrawn consent or objected, personal data may only be stored for the purpose of demonstrating the correctness of compliance with Choicer's legal obligations and related claims.

II. Users' consumer rights (e.g. complaints, applications).

Type of personal data: • Personal data provided in the application that are required to exercise rights (including first and last name and e-mail address)

Purpose of processing and legal basis: 1. for the purpose of processing, inter alia, an application or a complaint which are necessary for Choicer to carry out an investigation (Art. 6(1)(f) of the GDPR), 2. for the purpose of fulfilling the contract associated with the application (Article 6(1)(b) of the GDPR). 3. in order to comply with other legal obligations (Article 6(1)(c) of the GDPR). 4. for the purposes set out in the content of the consent, if any (Article 6(1)(a) of the GDPR). 5. also in connection with the fulfilment of the Controller's other legitimate interests (Article 6(1)(f) of the GDPR): - for the establishment, exercise and defence of legal claims, - for statistical purposes, related to improving the efficiency of

Data retention period - for the purpose of establishing, exercising or defending against claims - until they are time-barred by the final conclusion of proceedings including enforcement proceedings. Users' personal data are processed with their consent, expressed at the time of Registration on the Application. Although consent for the processing of the User's personal data is completely voluntary, lack of consent prevents the use of the Services that Choicer makes available through the Application.

SHARING AND TRANSFERRING DATA

Choicer hereby informs that in connection with its activities and within the framework of fulfilling the purposes of processing, it may transfer your personal data to the entities it collaborates with, e.g. business partners, providers of hosting or IT services, entities handling electronic payments or payment card payments on the website, companies that service the software, support the Controller in marketing campaigns. These entities will have the right to use the data to the full extent of the consent given to Choicer. Such entities may be, in particular: I. Entities providing Choicer with services for the day-to-day running of its business, such as accounting and legal offices, entities maintaining the technical infrastructure with which Choicer operates. II. Subcontractors for services provided by Choicer; III. Entities participating in Advertising Campaigns implemented by Choicer.

Choicer informs that, based on applicable laws, it may be obliged to release information concerning the User at the request of authorised state authorities for the purposes of their investigations. Your personal data will not be transferred outside the European Union.

DATA PROCESSING RIGHTS

In connection with the processing of personal data, the User has the following rights: I. The right to withdraw consent to the processing of his/her data, II. The right to erasure of his/her personal data, III. The right to object to the processing of his/her personal data - when submitting an objection, the reasons for doing so should be stated, IV. The right to request restrictions on the processing of his/her personal data, V. The right to rectify his/her personal data, VI. The right to transfer his/her personal data to another entity

In addition, each User has the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for the Protection of Personal Data; for more information, go to: https://uodo.gov.pl/pl/p/skargi

STATISTICS

In the course of using the Choicer App, data will be collected on the behaviour of Users. Such data will only be used by Choicer for the purpose of statistical and analytical research, and it will not be possible to identify an individual on their basis, so such data will not constitute personal data within the meaning of the of the GDPR.

PROCESSING OF PERSONAL DATA BY AUTOMATED MEANS

Choicer does not process personal data in an automated manner (including in the form of profiling) in such a way that any decisions could be made as a result of such automated processing, that any other legal effects would be produced or that our Users, contractors and their employees/co-workers would otherwise be materially affected.

CONTACT WITH REGARD TO PERSONAL DATA

You may contact Choicer at any time regarding the Privacy Policy and your personal data. Please address any queries, requests or demands regarding your personal data to the following e-mail address: [email protected]

FINAL PROVISIONS

Choicer reserves the right to amend this Privacy Policy, which may take place, among other things, for the following important reasons: I. changes in the applicable legislation, in particular in the areas of personal data protection, telecommunications law, electronically delivered services and consumer rights, affecting the rights and obligations of the Controllers or the rights and obligations of the data subjects; II. developments in functionality or developments of Electronic Services dictated by advances in Internet technology, including the use/implementation of new technological or technical solutions, affecting the scope of this Privacy Policy.

The amendments may be made at any time; however, Users will be notified in advance to the e-mail address associated with their Account. The amendments will be effective from the time indicated in the given notification and will be deemed accepted by the User from the time of the User's continued use of the Application after the amendments come into effect. This version of the Policy is effective as of 01.12.2022