Privacy Policy High Capital Holding sp. z o.o.

PRIVACY POLICY
CURRENT VERSION: JUNE 2025

Pursuant to Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data (“Personal Data”) and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “GDPR”).

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

This information relates to companies in the High Capital Group (hereinafter: “High Capital Group”), namely:

High Capital Management sp. z o.o. based in Warsaw,
HCM SPV 1 sp. z o.o. based in Warsaw,
HCM SPV 2 sp. z o.o. based in Warsaw,
Renovation Wave SPV 1 sp. z o.o. based in Warsaw,
Renovation Wave SPV 2 sp. z o.o. based in Warsaw,
Value Assets sp. z o.o. based in Warsaw,
High Capital Development sp. z o.o. based in Warsaw,
High Capital Investments sp. z o.o. based in Warsaw,
Renovation Wave SPV 3 sp. z o.o. based in Warsaw,
Vanguard Properties SPV 4 sp. z o.o. based in Warsaw,
HCM SPV 5 sp. z o.o. based in Warsaw,
High Capital Funds sp. z o.o. based in Warsaw,
Renovation Wave sp. z o.o. based in Warsaw,
Vanguard Properties sp. z o.o. based in Warsaw,
High Capital Properties sp. z o.o. based in Warsaw,
Vanguard Properties SPV 1 sp. z o.o. based in Warsaw,
High Capital Properties sp. z o.o. based in Warsaw,
Four Corners sp. z o.o. based in Warsaw,
Viva Park Cieszyn sp. z o.o. based in Warsaw,
Four Corners SPV 1 sp. z o.o. based in Warsaw,

As a rule, each of the companies of the High Capital Group independently decides on the purposes and methods of processing Personal Data which means that each of them is a separate controller (“Administrator”) – depending on which company you contract with, conduct business relations with, as a rule, this company will be the controller of your Personal Data.

The information contained herein applies to each of the companies in the High Capital Group to the extent that these companies are Administrators, with High Capital Management Ltd. being the Administrator for most processes within the High Capital Group.

It may also happen that a particular company performs activities for another High Capital Group company, e.g. related to logistics, marketing – in such a case, however, the company performing this work does not become the Administrator of your Personal Data, but processes it on the basis of the entrustment agreement it has concluded with the Administrator.

HOW TO CONTACT THE ADMINISTRATOR?

Contact with the Administrator is possible through:

mailing address: 19/37 Wilcza St., 00-544 Warsaw,
e-mail address: compliance@highcapital.pl

WHAT ARE THE PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA?

Please find below detailed information about the processing of Personal Data:

Purpose of data processing	legal basis	Scope of data processing	Data storage period
Zawarcie i realizacja umowy rezerwacyjnej, deweloperskiej, końcowej (przeniesienia własności)	Art. 6 ust. 1 lit. b RODO	Imię i nazwisko PESEL adres zamieszkania NIP (jeśli dotyczy) seria i numer dowodu tożsamości dane kontaktowe informacje o nieruchomości	Przez czas trwania umowy oraz 6 lat od jej zakończenia (okres przedawnienia roszczeń)
Obsługa zapytań klientów (infolinia, formularz kontaktowy, e-mail)	Art. 6 ust. 1 lit. f RODO	Imię i nazwisko adres e-mail numer telefonu treść zapytania	Do 12 miesięcy od zakończenia korespondencji lub rozmowy
Przygotowanie oferty i przesłanie informacji handlowych	Art. 6 ust. 1 lit. b RODO	Imię i nazwisko adres e-mail numer telefonu preferencje dotyczące nieruchomości	Do 6 miesięcy od ostatniego kontaktu
Marketing bezpośredni (newsletter, oferty handlowe, kontakt telefoniczny, prezentacje, dni otwarte, eventy)	Art. 6 ust. 1 lit. a RODO Art. 6 ust. 1 lit. f RODO	Imię i nazwisko adres e-mail numer telefonu adres zamieszkania	Do momentu wycofania zgody Do momentu złożenia sprzeciwu
Obsługa reklamacji i roszczeń klientów	Art. 6 ust. 1 lit. c RODO	Imię i nazwisko adres e-mail numer telefonu treść reklamacji dane dotyczące nieruchomości	6 lat od zakończenia sprawy
Realizacja obowiązków prawnych (księgowość, podatki, raportowanie do instytucji publicznych)	Art. 6 ust. 1 lit. c RODO	Imię i nazwisko NIP dane finansowe informacje o nieruchomości	5 lat od zakończenia roku podatkowego
Zabezpieczenie roszczeń i dochodzenie należności (np. w postępowaniach sądowych)	Art. 6 ust. 1 lit. f RODO	Imię i nazwisko PESEL adres zamieszkania dane dotyczące nieruchomości, historia płatności	Do czasu przedawnienia roszczeń (maksymalnie 6 lat)
Monitoring na obszarze inswestycji	Art. 6 ust. 1 lit. f RODO	Wizerunek (nagranie z monitoringu)	Do 3 miesięcy od nagrania (chyba że nagranie jest dowodem w sprawie)
Weryfikacja tożsamości i przeciwdziałanie praniu pieniędzy (AML)	Art. 6 ust. 1 lit. c RODO w zw. z ustawą o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu	imię i nazwisko, PESEL, adres zamieszkania, seria i numer dowodu tożsamości, informacje o transakcji, informacje o źródle pochodzenia środków	5 lat od zakończenia relacji biznesowej (zgodnie z ustawą AML)
Sporządzanie analiz inwestycyjnych, raportów dla inwestorów oraz realizacja procesów due diligence	Art. 6 ust. 1 lit. f RODO	dane identyfikacyjne klienta, informacje o zawartych umowach i nieruchomościach, dane finansowe, historia transakcji	Do momentu zrealizowania celu, nie dłużej niż 6 lat od zakończenia relacji prawnej
Przeprowadzenie rekrutacji i zawarcie umowy o pracę/zlecenie	Art. 6 ust. 1 lit. b i lit. c RODO, art. 22¹ Kodeksu pracy	imię i nazwisko, dane kontaktowe, wykształcenie, doświadczenie zawodowe, numer PESEL, adres zamieszkania, numer konta bankowego, dane z CV i referencji	6 miesięcy od zakończenia rekrutacji (jeśli bez zatrudnienia) lub 10 lat od zakończenia stosunku pracy (obowiązek archiwizacji)
Nawiązanie i realizacja współpracy z kontrahentami, podwykonawcami, freelancerami (B2B)	Art. 6 ust. 1 lit. b i lit. f RODO	imię i nazwisko, dane kontaktowe, NIP, REGON, nr rachunku bankowego, dane z umowy, dane identyfikacyjne przedstawicieli i pełnomocników	Przez czas trwania umowy oraz 6 lat od jej zakończenia (termin przedawnienia roszczeń i obowiązki podatkowe)
Obsługa zgłoszeń nieprawidłowości (whistleblowing)	Art. 6 ust. 1 lit. c RODO w zw. z przepisami o ochronie sygnalistów	imię i nazwisko (jeśli nieanonimowe), dane kontaktowe, treść zgłoszenia, dane osób wskazanych w zgłoszeniu	Do 5 lat od zakończenia postępowania wyjaśniającego

WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

Your personal data may be transferred to the following categories of recipients:

Entities providing accounting, legal and consulting services – on the basis of agreements concluded for the entrustment of personal data processing.
Banks and notaries – to the extent necessary for real estate transactions.
Entities providing IT and hosting services – to ensure proper operation of IT systems.
Public authorities – when required by law.
Accounting and tax service providers – to ensure financial settlements.
Law firms – for the purpose of claim investigation and legal services.
Courier and postal companies – for the purpose of sending documents.
Real estate agents and loan advisors – for the purpose of handling the real estate purchase process;
Other High Capital Group companies and their personnel.
Our authorized personnel, as well as the authorized personnel of our subcontractors.

Your Personal Data is not transferred to third countries (outside the European Economic Area – EEA).

Personal data is not used for profiling or automated decision-making.

PROCESSING OF YOUR / YOUR DATA IN SOCIAL MEDIA

The Administrator maintains profiles in social media. Your / your personal data by visiting these profiles are processed to the extent resulting from the functionality and rules of these sites.

Your personal data may be processed for the following purposes:

communication with users (responding to comments, private messages),
informing about the Administrator’s activities, offered services and products,
conducting statistical analysis and optimizing content.

Your data may be processed both by the Administrator and by owners of social media platforms, who act as separate data controllers. Detailed information on the principles of processing Personal Data by these services can be found in their privacy policies.

The user may stop following the Administrator’s profile or delete his/her content (e.g. comments) at any time, and may exercise his/her rights in relation to data processing by contacting the administrator of the social network directly.

WHAT RIGHTS DO YOU HAVE?

If your data is processed by High Capital Management Ltd, you have the following rights under the RODO:

Right of access (Article 15 RODO) – the ability to obtain information about the data being processed and to receive a copy of the data.
The right to rectification of data (Article 16 RODO) – the possibility to correct inaccurate or incomplete data.
Right to erasure (‘right to be forgotten’, Article 17 RODO) – the possibility to request the erasure of data if it is no longer necessary for the purpose of the processing, consent has been withdrawn or the data is being processed unlawfully.
The right to restrict processing (Article 18 RODO) – the ability to request the temporary suspension of data processing in certain cases.
Right to data portability (Article 20 RODO) – the ability to receive your data in a structured format and send it to another controller (applies to processing on the basis of consent or contract).
Right to object to data processing (Article 21 RODO) – the ability to object to processing based on a legitimate interest of the controller or the use of data for marketing purposes.
Right to withdraw consent (Article 7(3) RODO) – where data is processed on the basis of consent, the ability to withdraw consent at any time.
Right to lodge a complaint with a supervisory authority (Article 77 RODO) – if you consider that the processing of your data violates the law, you can lodge a complaint with the President of the Office for Personal Data Protection (PUODO), 2 Stawki Street, 00-193 Warsaw, kancelaria@uodo.gov.pl.

Exercise of rights: Requests for the exercise of the above rights can be submitted to the e-mail address: compliance@highcapital.pl. The administrator will process the request within 1 month, with the possibility of an extension of up to 2 months in special cases.

IS YOUR DATA SUBJECT TO PROFILING?

Your personal data is not used for profiling or automated decision-making.

This privacy policy may be subject to change. The current version will always be available on the Administrator’s website.

COOKIES FILES

We would also like to inform you about the cookies we use on our website.

Cookies are small text files which are installed on the device of a user browsing the Website. Cookies collect information which facilitates the use of the Website – for example, by remembering your visits to the Website and activities performed.

We collect the following cookies on the Website:

Cookie	Description	Processing time	Type
_ga	google.com	2 years	Analytical
IDE	doubleclick.net	1 year	Marketing
PHPSESSID	highcapital.pl	until the end of the session	Essential
__lang	highcapital.pl	1 month	Functional
_ gat_UA-XXXXX	google.com	1 minute	Analytical

The use of cookies to collect data via them, including accessing data stored on your device, requires your consent. This consent can be withdrawn at any time.

Consent is not required only in the case of cookies, the use of which is necessary for the provision of a telecommunications service (data transmission for the display of content).

Withdrawal of consent for the use of cookies is possible via your browser settings. Detailed information on this can be found at the following links:

You can verify the status of your current privacy settings in your browser at any time using the tool available at the link https://optout.aboutads.info/?c=2&lang=EN.