Dear User!

We care about your privacy and want you to feel comfortable when using our services. Therefore, below we have presented
you with fundamental information about the principles according to which we process your personal data. This information
has been prepared taking into account the General Data Protection Regulation (GDPR).

PERSONAL DATA CONTROLLER

GETWISE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at Aleje Ujazdowskie 22/18 00-478 in Warsaw,
entered into the National Court Register – register of entrepreneurs – by the DISTRICT COURT FOR THE CAPITAL CITY OF
WARSAW, IN WARSAW, 14TH COMMERCIAL DIVISION OF THE NATIONAL COURT REGISTER (KRS) at number: 0000803910, Tax
Identification Number (NIP): 1231449568, National Business Register Number (REGON): 38437297100000, share capital: PLN
12,500.00.

If you would like to contact us regarding our processing of your personal data, please write to us at [email protected]

PERSONAL DATA AND PRIVACY

Your data are processed by us for purposes connected with the functioning of the App and the provision of services
offered in the App. Below you’ll find detailed information about how your personal data are processed
depending on what you do.

1. Using the free services offered in the App

For what purpose?

fulfilment of the agreement on the provision of the services that are offered in the App

On what basis?


agreement on the provision of services (article 6.1.b of the GDPR)

For how long?


for the term of the agreement also, your data will be processed until the end of the period in which claims may be pursued
– by you or by us.
(more information on this subject can be found in the last
table of this section)

2. Using the paid services offered in the App

For what purpose?


fulfilment of the agreement on the provision of the services that are offered in the App

On what basis?


agreement on the provision of services (article 6.1.b of the GDPR) legal obligation connected with accounting, under which we have to process your personal data
(article 6.1.c of the GDPR)

For how long?

for the term of the agreement until the expiry of the legal obligation connected with accounting also, your data will be
processed until the end of the period in which claims may be pursued – by you or by us. (more information on this
subject can be found in the last table of this section)

3. Contacting us (e.g. to ask a question)

For what purpose?


handling your questions or enquiries

On what basis?


the agreement, or actions taken at your request aimed at concluding the agreement (article
6.1.b of the GDPR) – if your question or enquiry concerns an agreement to which we are
or may be a party our legitimate interest, i.e., the processing of your personal data in order to be able to
communicate with you (article 6.1.f of the GDPR) – if your question or request does
not concern the agreement

For how long?

for the term of the agreement that is binding on us, or, if no agreement is concluded, then
for 12 months from the last time you contacted us. for a period of 36 months or until we accept your objection to the processing * also, your data will be processed until the end of the period in which claims may be pursued
– by you or by us.
(more information on this subject can be found in the last
table of this section)

What happens if I do not provide the data?

we will not be able to respond to your question or enquiry. * depending on what is applicable in the given case and what
happens the earliest

4. Setting the device or doing something similar that enables analytical activities via the website (www.monite.app)

For what purpose?


analysis of how you use and navigate the website, in order to adapt the service to

the needs and behaviour of Users (you may read more on this subject in the “Analytical activities” section of the
Privacy Policy)

On what basis?


our legitimate interest, that is, the processing of data for the above-mentioned purpose (article 6.1.f of the GDPR)

For how long?

for a period of 36 months or until we accept your objection to the processing

What happens if I do not provide the data?


when working on improving the website, we won’t take into consideration the way in which you use it. * depending on what
is applicable in the given case and what happens the earliest

5. You giving consent to receiving marketing content from us

For what purpose?

sending marketing information

On what basis?


Your consent to our marketing activities (article 6.1.a of the GDPR)

For how long?


until you revoke your consent – please remember that you may revoke your consent at any time. The processing of data
until you revoke your consent is lawful. also, your data will be processed until the end of the period in which claims
may be pursued – by you or by us. (more information on this subject can be found in the last table of this section)

What happens if I do not provide the data?


you won’t receive our marketing materials

Taking an action or committing an omission which may give rise to claims concerning the
App

6. Taking action or omission that may give rise to claims related to the Application

For what purpose?

determination, pursuance, or defence of any possible claims relating to the concluded
agreement or the performed services

On what basis?

our legitimate interest, that is, the processing of personal data for the above-mentioned
purpose (article 6.1.f of the GDPR)

For how long?


until the end of the period in which claims can be pursued, or until we accept your objection
to the processing *

What happens if I do not provide the data?


inability to determine, pursue, or defend claims

* depending on what is applicable in the given case and what happens the earliest

Analytical activities in the App

As part of the App, we carry out analytical activities aimed at increasing the App’s intuitiveness and ease of use. In
the analysis, we will take into consideration the way in which you navigate the App. Thanks to this, we can adapt the
layout, appearance, and content of the App to Users’ needs.

YOUR RIGHTS

You have the right to request:

  • access to your personal data (article 15 of the GDPR),
  • they be rectified (article 16 of the GDPR),
  • they be erased (article 17 of the GDPR),
  • that the processing be restricted (article 18 of the GDPR),
  • they be transmitted to another controller (article 20 of the GDPR).

As well as the right to:

  • object, at any time, to the processing of your data:
    • for reasons related to your special situation – with regard to the processing of your
      personal data based on article 6.1.f of the GDPR (i.e. based on the legitimate interests pursued
      by us) – article 21.1 of the GDPR;
    • if personal data are processed for the purposes of direct marketing, to the extent to which the
      processing is related to such direct marketing – article 21.2 of the GDPR.

Contact us if you want to exercise your rights.

If you come to a conclusion that your data are processed unlawfully, you may lodge a complaint with the
President of the Personal Data Protection Office.

EXTERNAL SERVICES/RECIPIENTS OF DATA

We use the services of external entities that support us in doing our business. We entrust them with the processing of
your data – those entities process the data only at our documented request. Below you’ll find the recipients of your
data:

GOOGLE ANALITICS, CUX.IO, SMARTLOOK, FACEBOOK, MATOMO.

The following data may be processed by these companies: anonymized IP address, unique numbers of the software and of the
user (or sublicensee) as well as the declared user name, User ID (email, IMSI, MSISDN, MAC, android ID, IMEI, Serial
Number, machine ID – the unique hardware identifier), operating system version, browser version. In addition, the
software may gain access to the Internet, access

to an approximate location using GPS or location services that use network sources such as mobile towers and Wi-Fi
access points, and access to the camera.

COOKIE POLICY

In connection with the User’s use of the website, the so-called “cookies” are created and used, which are files that
contain information stored in the memory of the User’s device. The purpose of using these files is to speed up and make
it easier for Users to use the website, as well as to improve their experience of such use.

The cookies referred to in this section are personalized information that reflects the manner in which the particular
User uses the website. The use of Cookies does not adversely affect the devices through which the User uses the website.

By giving consent while using the website, its Users also give consent to the placement of Cookies on their devices and
to us accessing the device on which they are stored – in order to use the Cookies. To withdraw or restrict the consent
referred to in this section entitled “Cookie Policy”, the User should contact us by sending a message to
[email protected] In the message, the User should describe his/her request in an understandable way, and identify
him-/herself so that his/her request can be fulfilled. In the event where the User’s request cannot be fulfilled due to
failure to provide sufficient information or due to other ambiguities, we will contact him/her in order to supplement or
clarify it.

Although the consent referred to in this section entitled “Cookie Policy” is voluntary, we inform that revocation of the
consent referred to in this section entitled “Cookie Policy” may result in not being able to use some or all of the
services provided by us through the website (www.monite.app).