5.4

The Personal Data Controller is Duda Development Sp. z o.o. SKA with its registered office in Poznań, at 144 Macieja Palacza Street, 60-278 Poznań, tel. 61 646 84 44. Inquiries regarding the rules of personal data processing should be directed to the e-mail address: rodo@dudadevelopment.pl . Personal data will be processed on the basis of separately expressed consent, i.e. Article 6(1)(a) of the General Data Protection Regulation of 27 April 2016 (GDPR), i.e. for the purpose of sending commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2024, item 1513 as amended), including direct marketing – in connection with Article 398(1) and Article 400 of the Act of 12 July 2024 – Electronic Communications Law (Journal of Laws of 2024, item 1221 as amended). Personal data may be transferred to recipients – i.e. entities appointed to carry out investments by the Personal Data Controller. The data controller does not make data available to nor transfer it to a third country/international organization. Personal data processed for marketing purposes covered by the consent statement will be processed until its withdrawal. The data subject has the right to access their personal data and the right to rectify, delete, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the supervisory authority – the Personal Data Protection Office. Providing personal data is voluntary.

The Personal Data Controller is Duda Development Sp. z o.o. SKA with its registered office in Poznań, at 144 Macieja Palacza Street, 60-278 Poznań, tel. 61 646 84 44. Inquiries regarding the rules of personal data processing should be directed to the e-mail address: rodo@dudadevelopment.pl . Personal data will be processed on the basis of separately expressed consent, i.e. Article 6(1)(a) of the General Data Protection Regulation of 27 April 2016 (GDPR), i.e. for the purpose of sending commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2024, item 1513 as amended), including direct marketing – in connection with Article 398(1) and Article 400 of the Act of 12 July 2024 – Electronic Communications Law (Journal of Laws of 2024, item 1221 as amended). Personal data may be transferred to recipients – i.e. entities appointed to carry out investments by the Personal Data Controller. The data controller does not make data available to nor transfer it to a third country/international organization. Personal data processed for marketing purposes covered by the consent statement will be processed until its withdrawal. The data subject has the right to access their personal data and the right to rectify, delete, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the supervisory authority – the Personal Data Protection Office. Providing personal data is voluntary.

The Personal Data Controller is Duda Development Sp. z o.o. SKA with its registered office in Poznań, at 144 Macieja Palacza Street, 60-278 Poznań, tel. 61 646 84 44. Inquiries regarding the rules of personal data processing should be directed to the e-mail address: rodo@dudadevelopment.pl . Personal data will be processed on the basis of separately expressed consent, i.e. Article 6(1)(a) of the General Data Protection Regulation of 27 April 2016 (GDPR), i.e. for the purpose of sending commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2024, item 1513 as amended), including direct marketing – in connection with Article 398(1) and Article 400 of the Act of 12 July 2024 – Electronic Communications Law (Journal of Laws of 2024, item 1221 as amended). Personal data may be transferred to recipients – i.e. entities appointed to carry out investments by the Personal Data Controller. The data controller does not make data available to nor transfer it to a third country/international organization. Personal data processed for marketing purposes covered by the consent statement will be processed until its withdrawal. The data subject has the right to access their personal data and the right to rectify, delete, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the supervisory authority – the Personal Data Protection Office. Providing personal data is voluntary.