Privacy Statement Relating to Kogi’s Customer Data Processing

KogiCapital Ltd and its affiliates (hereafter: ‘Kogi’, ‘we’, ‘us’, ‘our’) collect and process data relating to its business relations, including tenants, suppliers, external investors, (potential) buyers and sellers and other contacts (hereafter each class of persons is together referred to as: ‘I’,‘me’, ‘you’). Kogi is responsible for the processing of your data as described below and therefore is the data controller. Kogi respects your privacy. For this reason and based on current legislation (GDPR), Kogi has implemented a high standard of data protection, which complies with applicable law. With this privacy statement, Kogi aims to inform you about the processing of your personal data. Kogi urges you to read this statement and familiarise yourself with its content. This privacy statement may change from time to time and we advise you to regularly check our website to find the most recent version of the applicable privacy statement.

Which categories of personal data does Kogi collect and/or process about me?

Kogiprocesses personal data of its tenants, suppliers, external investors,(potential) buyers and sellers and other contacts, as described below(hereafter together referred to as: ‘Customer data’). If you fall under one of these categories of persons, please find below more information on Kogi’sprocessing of such data.

Kogi may have received the data mentioned below from sources other than directly from you, i.e. by obtaining information from a compliance tool (such as ComplianceCatalyst), the local Chamber of Commerce or in connection with the performance of other legal checks to prevent corruption, identity theft, financial fraud, money laundering and/or terrorist financing (KYC).

I am a tenant or potential tenant…

Kogicollects and processes data relating to persons working at the legal entities who rent properties from or through business relations of Kogi. Kogi may process the following categories of data about you:

• Personal information, including name, gender, date of birth and place of birth.
• Contact information, including address, postal code, place of residence, telephone number and email address.
• Business information/legal entities/job titles, signatures.
• Bank account(s) of the Tenant.
• Background information (PEP and sanction information).
• Data provided by you directly.
• Data whose processing is required pursuant to, or necessary with a view to the application of legislation.

I am a supplier or potential supplier…

Kogi may process your personal data if you represent a company that delivers services to Kogi. Kogi may collect and/or process the following categories of data about you:

• Personal information, including name, gender, date of birth and place of birth.
• Contact information, including address, postal code, place of residence, telephone number and email address.
• Data with respect to the reputation of (the representatives of) the company e.g. fraud, money laundering etc.
• Business information/legal entities/job titles, signatures
• Background information (PEP and sanction information).
• Bank account(s) of the company
• Data provided by you directly
• Data whose processing is required pursuant to, or necessary with a view to the application of legislation.

I am a buyer or seller (or a potential buyer or seller)…

Kogi collects and processes data relating to persons who work at legal entities that (potentially) buy or sell any properties from, with or viaKogi. Kogi may process the following data categories from this class of persons:

• Personal information, including name, gender, date of birth, place of birth and photo.
• Contact information, including address, postal code, place of residence, telephone number and email address.
• Business information/legal entities/job titles, signatures.
• Background information (PEP and sanction information).
• Bank account(s) of the legal entities.
• Data provided by you directly.
• Data whose processing is required pursuant to, or necessary with a view to the application of legislation.

I am an external investor (or potential external investor)…

Kogi may process your data if you act as of on behalf of external investor in relation to Kogi. Kogi may process the following data categories:

• Personal information, including name, gender, date of birth, place of birth.
• Contact information, including address, postal code, place of residence, telephone number and email address.
• Bank account(s) of the external investor.
• Business information/legal entities/job titles, signatures.
• Background information (PEP and sanction information).
• Data provided by you directly
• Contracts.
• Data whose processing is required pursuant to, or necessary with a view to the application of legislation.

I am a job applicant…

Kogi collects and processes data relating to persons who applied to work at Kogi (applicants). Kogi may process the following categories of data from applicants:

• Personal information, including name, gender, date of birth, place of birth and photo.
• Contact information, including address, postal code, place of residence, telephone number and email address.
• Data regarding (to be) followed educational programs, courses or internships.
• Data regarding the position applied for
• Data regarding the nature and content of the current position, as well as regarding the ending thereof
• Data regarding the nature and content of previous positions, as well as regarding the ending thereof
• Data whose processing is required pursuant to, or necessary with a view to the application of legislation.
• Other (relevant) data provided by the applicant.

Kogi may have received your data from other sources besides directly from you, i.e. via recruiters or head hunters.

1. I am a person not mentioned in any category above…

Kogi may process your data if you act as a contact with Kogi (e.g. for CRMor PR applications). Kogi may process the following data categories:

• Personal information, including name, gender, date of birth, place of birth.
• Contact information, including address, postal code, place of residence, telephone number and email address.
• Business information/job titles.

Please note that the data as described below may not be all data Kogicollect or processes about you. To find out more information about Kogi’s HRdata processing, please consult the related privacy statement.

1. For what purpose does Kogi process my customer data?

Kogi collects and possesses Customer data described above for multiple purposes and in the legitimate interest of Kogi in order to conduct or facilitate core and regular business activities, to fulfil legal requirements and or for the performance of a contract/pre-contractual arrangements. These include:

‍

• Rent and lease management
• Maintenance and (re)development management
• Valuations
• Acquisition and divestment management
• Financial and management reporting
• PR and corporate communications
• Purchasing
• Tax
• The management and administration of job applicants.

Please be aware that the processing of the data categories for the purposes, as mentioned above, are based on one of the legal bases mentioned(depending upon the specific data category and sub purpose at stake), and not all legal bases simultaneously.

1. Who may receive my data?

Kogi works together with its trusted partners to enable the collection and processing of Customer Data.

Please find below a schedule with the (types of) partners we work with:

• Provider of an accountancy programme
• Provider of an e-mail service
• Provider of financial administration
• Provider of administration software
• CRM provider
• Provider of data sharing tool
• Provider of KYC-system
• Provider of valuation tool to assess deal proposals and perform property valuations
• Provider of real estate planning tool

1. How long will my customer data be stored?

Customer data will be stored as long as necessary for the purpose for which the data is collected and processed.

1. Who can I contact about my data?

If you have a question or would like to submit a complaint with regards to the collection and processing of your data by Kogi, you can contact Kogi’sCompliance Officer at: info@kogi.green

‍