www.neoexpo.pl

I. Definitions The terms used in this Policy shall have the following meanings:

Administrator: The Personal Data Administrator of the users of the website www.neoexpo.pl
– Neoexpo [COMPANY TYPE, e.g., Sp. z o.o.] with its registered office in [CITY], address: [Hagelberger Str. 12, 10965 Berlin, Germany], entered into

the register of entrepreneurs of the National Court Register maintained by the District Court of [COURT CITY], [NUMBER] Commercial Division of the

National Court Register, under KRS number: [KRS NUMBER], Tax Identification Number (NIP): [NIP NUMBER], share capital: [AMOUNT] PLN, e-mail address: [CONTACT EMAIL].

Website: The website located at https://www.neoexpo.pl/ and its subpages.

User: Any person browsing the Website or subscribing to the newsletter (by completing the registration form and expressing consent for the processing of personal data contained in the form

in accordance with the Personal Data Protection Act of August 29, 1997 (Journal of Laws of 2014, item 1182 and item 1662, as amended) and the Act of July 18, 2002 on the Provision of

Electronic Services (Journal of Laws of 2013, item 1422, as amended). The User has the right to access, correct, or delete their personal data. The personal data of Website users contained in

registration forms will be processed by the Administrator solely for the purpose of implementing the services provided on the Website and for commercial and marketing purposes related to the services provided.

UODO: The Personal Data Protection Act of August 29, 1997 (Journal of Laws of the Republic of Poland of 2014, item 1182 and item 1662, with subsequent amendments).

II. Newsletter

The Administrator allows Users to subscribe to the newsletter to receive information about the products and services offered by Neoexpo. The information received through

the newsletter will be of an informational, commercial, and technical nature.

Subscribing to the newsletter is done by providing the User's first and last name, e-mail address, and optionally, phone number in the designated field visible on the Website or its subpages,

confirming that the User has read the Website's Privacy Policy, and submitting the request as indicated. By submitting the request, the User confirms that they:

Have read and accept the Privacy Policy;

Consent to receive electronic communications at the provided e-mail address, particularly commercial offers; and

Consent to the processing of their personal data for the purposes indicated in the Privacy Policy.

Following submission, the User may receive a message at the provided e-mail address containing a link to confirm the newsletter subscription (double opt-in procedure).

III. Processing of Personal Data of Website Users

The data (such as e-mail addresses) of Website Users who have subscribed to the newsletter or contacted the Administrator via forms are processed by

the Administrator, who is the data controller of the Users' personal data within the meaning of the Personal Data Protection Act (UODO).

The processing of Users' personal data is carried out in accordance with the User's consent or other legal bases that legitimize data processing (primarily for the provision of services and for the legally justified purpose of the Administrator: direct marketing of its products or services), in accordance with Polish and European legislation (GDPR).

The set of personal data collected from Users is stored in a separate database on the Administrator's server, in a special security zone that ensures adequate protection.

The Administrator provides every User who has provided their personal data with access to it for verification, modification, or deletion. Providing personal data is fully voluntary.

The Administrator does not transfer, sell, or rent the personal data of Website users to other individuals or institutions without the User's explicit consent. Personal data of Website Users processed by theAdministrator may be made available to authorized state authorities at their request for the purposes of proceedings carried out by them, or to third parties based on decisions of state authorities.

IV. GDPR Clause Data Controller:

The controller of your personal data is Neoexpo [COMPANY TYPE], with its registered office in [CITY], address: [FULL ADDRESS], entered into the Register of Entrepreneursof the National Court Register under KRS number: [NUMBER], Tax Identification Number (NIP): [NUMBER], share capital: [AMOUNT] PLN.

Contact Point: For matters related to the processing and protection of personal data, you can contact us via e-mail at: [EMAIL ADDRESS]. You may also contact us regarding these matters via traditional mailsent to the controller's address with the notation "Personal Data Protection" or in person at our offices.

Purposes of Processing: The personal data you provide will be processed for the following purposes:

Provision of services offered on the website.

Direct marketing – until the termination of the contract or until an objection is raised.

Your Rights: You have the right to access your data, rectify it, erase it, restrict its processing, the right to data portability, and the right to object (e.g., if your data is processed based on your consent or for

marketing purposes); you have the right to withdraw your consent at any time. To withdraw your consent or exercise your rights, you can send an e-mail to [EMAIL ADDRESS] or write to our postal address.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (UODO).

Voluntary Provision of Data: Providing your personal data is entirely voluntary. Failure to do so may mean that Neoexpo will not be able to fully fulfill its service or contact obligations under the agreements or requests made by you.

PRIVACY POLICY