1. Data Controller

The controller of personal data is:

Venix Concierge Sp. z o.o.
Registered address: Aleja Jana Pawła II 27, 00-867 Warszawa, Poland
VAT (NIP): 5253021727
Email: inquiry@venixconcierge.com
Phone: +48 577 531 108

The Controller processes personal data in accordance with applicable data protection laws, including Regulation (EU) 2016/679
of the European Parliament and of the Council (GDPR).

2. Scope of the Privacy Policy

This Privacy Policy applies to:

• Users of the Venix Concierge website
• Clients using Venix Concierge services
• Persons contacting Venix Concierge via electronic means

It describes the principles of collecting, processing, and protecting personal data.

3. Purposes and Legal Basis of Data Processing

Personal data is processed for the following purposes:

a) Performance of a Contract / Service Delivery

Including reservations, transport services, concierge services, and customer communication.

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

b) Payments and Accounting

Including processing online payments, issuing invoices, and fulfilling tax obligations.

Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.

c) Customer Communication and Support

Including responding to inquiries, complaints, and service-related communication.

Legal basis: Article 6(1)(f) GDPR – legitimate interest of the Controller.

d) Marketing Activities (Optional)

Including sending service updates or offers, only where the user has given explicit consent.

Legal basis: Article 6(1)(a) GDPR – consent.

4. Types of Personal Data Processed

The Controller may process the following categories of data:

• First and last name
• Email address
• Phone number
• Billing and invoicing details
• Reservation and service-related data
• Payment-related technical data (processed by payment operators)

Venix Concierge does not store full payment card data.

5. Payment Processing and Payment Operators

To process payments, Venix Concierge uses external payment service providers.

The online payment operator is PayPro SA with its registered office at
ul. Pastelowa 8, 60-198 Poznań, entered into the Register of Entrepreneurs of the National Court Register
maintained by the District Court of Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register
under KRS number 0000347935, NIP 7792369887, REGON 301345068.

In the case of payment by payment card, the payment card operator is PayPro SA – Settlement Agent.

Personal data necessary to process payments is transferred directly to the payment operator and processed in accordance with its
privacy policy and applicable data protection regulations.

6. Data Recipients

Personal data may be disclosed only to:

• Payment service providers (e.g. PayPro SA / Przelewy24)
• Accounting and legal service providers
• IT and hosting service providers
• Authorized employees and contractors of Venix Concierge

All recipients process data under confidentiality obligations and GDPR-compliant agreements.

7. Data Storage Period

Personal data is stored:

• For the duration of the contractual relationship
• As required by accounting and tax regulations (generally 5 years)
• Until consent is withdrawn (for marketing purposes)

After the retention period, data is deleted or anonymized.

8. Rights of Data Subjects

Under GDPR, data subjects have the right to:

• Access their personal data
• Rectify inaccurate or incomplete data
• Request erasure of data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

Requests may be submitted to: inquiry@venixconcierge.com

9. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access,
loss, alteration, or misuse.

10. Cookies

The website may use cookies to ensure proper operation, improve functionality, and enhance user experience. Detailed information
may be provided in a separate Cookies Policy.

11. Complaints

If a data subject believes their data is processed unlawfully, they have the right to lodge a complaint with the
President of the Personal Data Protection Office (UODO) in Poland.

12. Changes to the Privacy Policy

Venix Concierge reserves the right to amend this Privacy Policy. Any changes will be published on the website and become
effective upon publication.