Privacy Policy

We only process personal data that you provide voluntarily or that arise from your use of our website: a) Data provided directly by you: • first and last name • email address • phone number • property details (address, parameters, photographs — if provided as part of our collaboration) • content of messages sent through the contact form b) Data processed automatically: • anonymised traffic data (no IP address, no cookies — via Vercel Analytics) • selected website language (stored locally in your browser)

a) Property brokerage services When you engage us for the sale, purchase, or rental of real estate, we process your data for the performance of a brokerage agreement or pre-contractual steps. Legal basis: Art. 6(1)(b) GDPR b) Responding to contact form inquiries When you send us a message through the contact form, we process your name, email, phone number, and message content to respond to your inquiry. Legal basis: Art. 6(1)(f) GDPR (legitimate interest — handling a prospective client's inquiry) c) Compliance with legal obligations We retain your data to the extent necessary to fulfil obligations under Slovak law, including: • Act No. 431/2002 Coll. on Accounting • Act No. 595/2003 Coll. on Income Tax • Act No. 297/2008 Coll. on the Prevention of Money Laundering (AML) Legal basis: Art. 6(1)(c) GDPR d) Marketing communications Only with your explicit consent do we send information about new listings and other updates. You may withdraw consent at any time. Legal basis: Art. 6(1)(a) GDPR

We may share your personal data, to the extent necessary, with the following categories of recipients: • Portal Nehnuteľnosti.sk — for property advertising • Legal advisors and notaries — during purchase/sale transactions • Slovak Land Registry (Kataster) — for title transfer submissions • IT service providers — Vercel, Inc. (website hosting), Supabase, Inc. (content management) • Public authorities — only where required by law (tax authorities, courts, etc.) We do not sell your data to third parties for marketing purposes.

Website hosting (Vercel) and content management (Supabase) may involve processing data on servers in the USA. These transfers are safeguarded by: • EU-US Data Privacy Framework (European Commission adequacy decision) • Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR Google Maps is loaded on our site only after your explicit consent — no data is transmitted to Google before you click "Show map".

We retain personal data only for as long as necessary to fulfil the processing purpose: • Contact form data: 12 months from last communication • Contractual data (brokerage): 5 years from the end of the contractual relationship • Accounting and tax documents: 10 years (Act No. 431/2002 Coll.) • AML documentation: 5 years (Act No. 297/2008 Coll.) • Marketing consent: until withdrawn • Analytics data (Vercel Analytics): fully anonymised, no personal data After the retention period expires, data is securely deleted or anonymised.

a) Analytics (Vercel Web Analytics) We use Vercel Web Analytics for traffic measurement. This service does not use cookies, does not collect IP addresses or any other personal data. All data is fully anonymised and aggregated. b) Language storage Your chosen site language is stored in your browser's local storage (localStorage). This is a technically necessary setting that is not transmitted to any server. c) Google Maps The interactive map loads only after your explicit consent by clicking the corresponding button. Before consent, only a static map preview (OpenStreetMap) is shown, which does not set any cookies. After consent, Google may process data according to its own Privacy Policy (policies.google.com/privacy). Your consent is remembered in localStorage so we do not ask repeatedly. d) Typography All fonts used on the site are downloaded and self-hosted on our server. No connection to external services (e.g. Google Fonts) is established. e) Supabase A content management system for property listings. It operates exclusively server-side and does not collect any data from site visitors. This website does not use tracking cookies or advertising technologies.

We do not use your personal data for automated individual decision-making or profiling within the meaning of Art. 22 GDPR.

Under GDPR and Slovak Act No. 18/2018 Coll., you have the following rights: a) Right of access — you have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of such data (Art. 15 GDPR). b) Right to rectification — you have the right to request correction of inaccurate or completion of incomplete personal data (Art. 16 GDPR). c) Right to erasure — you have the right to request erasure of your personal data when the purpose of processing has ceased or when you have withdrawn consent (Art. 17 GDPR). d) Right to restriction — you have the right to request restriction of data processing in cases specified in Art. 18 GDPR. e) Right to data portability — you have the right to receive your personal data in a commonly used, machine-readable format and to transmit it to another controller (Art. 20 GDPR). f) Right to object — you have the right to object to processing based on the controller's legitimate interest (Art. 21 GDPR). g) Right to withdraw consent — where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing. To exercise your rights, contact us at: Email: info@frisco.sk Mail: FRISCO, s.r.o., Námestie Slobody 1185/30, 926 01 Sereď, Slovakia We will respond to your request free of charge within 30 days. In justified cases, this period may be extended by a further two months.

We have implemented appropriate technical and organisational measures to protect your personal data, including: • encryption of data in transit (HTTPS/TLS) • access to personal data restricted to authorised personnel only • secure hosting with automated security patches • regular assessment and update of security measures

This Privacy Policy is valid and effective as of 1 March 2026. We reserve the right to update this policy at any time. Material changes will be communicated on this page with the date of the latest update.