BUCHAREST REAL ESTATE CLUB PRIVACY POLICY

BUCHAREST REAL ESTATE CLUB (“The Club”) is committed to protecting your privacy and ensuring
that you continue to trust us with your personal data. When you interact with us, you may share personal
information with us that allows identification of you as an individual (e.g. name, email address, address,
and telephone number), as “personal data”.
This Privacy Policy applies where the Club is acting as a data controller with respect to the personal data
of you as a visitor to our website and as a user of the Club platforms and/or services, in other words,
where the Club determines the purposes and means of the processing of your personal data.

Scope and acceptance

The Club has developed this Privacy Policy to describe how and what type of personal data will be
collected from users of www.bucharestrealestateclub.com and www.brec.ro for which the Club may
collect, share or disclose the personal data.
By using www.bucharestrealestateclub.com and www.brec.ro , our mobile apps, or applications on third-
party social networks (e.g. Facebook) – communication platforms – or by giving us your personal data
when registering for events or other services, you accept the collecting and processing of your personal
data as described in this Privacy Policy.If you do not agree to this Privacy Policy, please do not use
our communication platforms or provide us any personal data.
This Privacy Policy applies to any information obtained by the Club through your use of our platforms. It is
not applicable to any websites controlled by third parties not affiliated with the Club that our
communication platforms may link to (“Third Party Sites”). Please review the privacy statements of each
of these Third Party Sites as the Club is not responsible for and has no influence on the content or the
privacy practices of Third Party Sites.
The Club reserves the right to make amendments to this Privacy Policy at any time. We encourage you to
regularly review this Privacy Policy to make sure you are aware of any changes and how your personal
data may be used.

Type of information and purposes

When you visit our communication platforms, our web server automatically records details about your visit
– i.e. your IP address, the website from which you visit us, the type of browser software used our pages
that you actually visit including the date and the duration of your visit.
In addition, we process personal data that you provide through our communication platforms – i.e. when
you enter personal details on a registration page or if you sign up for an email newsletter.
The Club may use the personal data that you provide to us with your consent for a specified purpose or
when you interact with our communication platforms or we process your data if we have legal basis,
namely, with regards to your registration to our events.
Our websites use third party cookies for analytics (Google Analytics) to track common metrics such as
platform engagement, concurrent users, maximum number of users, time spent on a page, etc. Any use
of such analytics cookies is to improve your user experience and provide the Club with valuable insights
to help us better tailor our activities.

Share of personal data

We do not share your personal data with any third party that intends to use it for direct marketing
purposes, unless you have provided specific consent in relation to this.

The Club may share your personal data with third parties for other purposes, but only in the following
circumstances:
I. With your consent
We will share personal data with third parties when we have your consent to do so. We require explicit
opt-in consent for the sharing of any sensitive personal information.
II. For legitimate interests
We will share personal data based on legitimate interests as, for example, when you register as member
of the Club with the particular purpose of networking with other members, except where such interests
are overridden by your interests or fundamental rights, in which case we will request your explicit consent.
III. For external processing (service providers)
We may engage service providers, agents or contractors to provide services on our behalf, including to
administer our communication platforms available to you. These third parties may come to access or
otherwise process your personal data in the course of providing these services.
The Club requires such third parties to comply with all relevant data protection laws and security
requirements in relation to your personal data, usually by way of a written agreement.
IV. Compliance with laws
We will share personal data with third parties if we have a good-faith belief that access, use, preservation
or disclosure of the personal data is reasonably necessary to:
– Meet any applicable law, regulation, legal process or enforceable governmental request
– Enforce applicable Terms of Use, including investigation of potential violations
– Detect, prevent or otherwise address fraud, security or technical issues
– Protect against harm to the rights, property or safety of the Club, our users or the public as required or
permitted by law

Store and transfer of personal data

The Club develops communication activities in Romania an internationally. When transferring personal
data internationally, we make sure that we comply with applicable laws and regulations, for example, by
entering into agreements that will ensure that the recipients of your information maintain an adequate
level of data protection.

Security of personal data

The Club is committed to protecting the security of your personal data. Any information provided to the
Club by you is handled with due care and security, and will not be used in ways other than as set forth in
this Privacy Policy, or in any specific policies, or in ways to which users have not explicitly consented. The
Club employs a range of technologies and security measures to protect the information maintained on our
systems from loss, misuse, unauthorized access or disclosure, alteration or destruction.
However, since the internet is not a 100% secure environment, the Club cannot ensure nor guarantee the
security of any information that the user may transmit to our communication platforms. There is no
guarantee that information may not be accessed, disclosed, altered or destroyed by breach of any of the
Club`s physical, technical or managerial safeguards.
All Club representatives who have access to and are associated with the processing of personal data are
obliged to respect the confidentiality of all such personal data.

Duration of retaining personal data

The Club will retain your personal data for the period necessary to fulfil the purposes outlined in this
Privacy Policy and/or as long we require the personal data to provide the activities undertaken, unless a
longer retention period is required to comply with our legal obligations, resolve disputes and enforce our
agreements.

Accessing your data. Contact us

You have a right to request access to your personal data. You may send us a request for access,
provision of such information will be subject to the supply of appropriate evidence of your identity. You
also have the right to request that the Club corrects any inaccuracies in your personal data.
You have the right to opt out of receiving marketing communications or any other information from the
Club or about the Club events and can do so by (a) following the instructions for opt-out in the relevant
marketing communication or (b) by contacting us.
Should you have any questions, concerns and/or complaints about this Privacy Policy or if you
would like to make any recommendations or comments to improve the quality of our Privacy
Policy, please email us at bucharest@brec.ro.
The Club is the data controller for personal data we collect through means stated in this Privacy Policy.
Our address is:
Bucharest, 39 Tuzla St., Estia Building 2, Apartment 4, Sector 2.

The Club is the data controller for personal data we collect through means stated in this Privacy Policy.