PRIVACY POLICY AND COOKIES POLICY

The Privacy Policy determines the terms and conditions for processing the User's personal data and also constitutes an annex to the OasisLand Terms of Use. This Privacy Policy is an annex to the OasisLand Terms of Use, which can be found on the website https://oasisland. org/.

Unless expressly indicated herein to have a different meaning from them, all terms contained herein shall be interpreted in accordance with the Terms of Use.

If your place of residence is in the European Union (EU), your personal data will be processed as follows: Controller and personal data processing Controller OasisLand GLOBAL spółka z o.o., with registered office in Gdańsk, address: ul. Zacna 2, 80-283, Gdańsk, Poland, entered in the Register of Entrepreneurs of the National Court Register, kept by the District Court of Gdańsk-Ponok, VII Economic Section of the National Court Register, KRS No.: 0001058226, NIP: 9571163148, REGON: 521683174, share capital of PLN 20,000.00 (Twenty Thousand 0/100 PLN), fully paid. All representations shall be addressed only to the relevant entity.

The Controller may be contacted by e-mail at: [e-mail].

For the purposes of this document, the Platform, the Controller, the Administrator and the Service Providers are collectively referred to as “OasisLand”. Applicable Law The Controller processes Personal Data in accordance with the requirements of applicable law, in particular Polish and EU privacy laws on the security of Personal Data. The User is liable for providing false Personal Data. By accepting the Privacy Policy, the User agrees to the terms and conditions regarding the collection, processing and protection of Personal Data using the Platform.

Furthermore, the Controller processes the Personal Data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – hereinafter referred to as the “GDPR”). Respect for Privacy The Service Provider makes every effort to ensure the utmost respect for the privacy of the Data Provider when processing the Personal Data and to ensure the security of the Processed Personal Data with the utmost care, in particular ensuring that all legal measures are taken to protect the Personal Data collected.

Measures Taken The Service Provider represents the implementation of technical and organizational measures to ensure the protection of the Processed Personal Data appropriate to the risk and the protected data category, in particular to protect the data against unauthorized sharing, unlawful processing and loss, damage or destruction. Scope and purpose of processing The Service Provider processes the User's personal data for the following purposes: establishing, changing, performing or terminating the relationship agreed between the Service Provider and the User; fulfilling the legal obligations of the Controller; marketing and advertising the Services, as well as sending commercial information; using ICT terminal devices and automatic triggering systems for marketing purposes; Data analysis The processing of personal data consists in profiling the User based on his/her behavior, interests, payment reputation and purchase preferences. Based on the profiling, communicate to the User specific content that may be of interest to them. Representative and Anti-Money Laundering Officer The Controller is represented by Mr. Anibal Jose da Cunha Saraiva Soares, Chairman of the Board of Directors (EID number: 784-1980-1122675-4), who has appointed Mr. Rafal Kufieta (PESEL - Personal ID number: 80060201331) as the Controller's Anti-Money Laundering Officer, responsible for combating money laundering and combating financial terrorism.

Data Sharing For the execution of the Agreement, the Controller may disclose the Collected Personal Data to the following entities: employees, partners, delivery services, operators of online payment systems, entities that provide operational, legal, accounting and IT services to the Service Provider, as well as entities with whom the Service Provider has a personal or financial connection. In this case, the amount of information disclosed is limited to the necessary minimum. Website Traffic Analysis The Service Provider states that it is allowed to use tools designed to analyze traffic within the Platform, such as Google Analytics and other similar tools.

Specifically, the Service Provider is entitled to collect information on User activities and behavior, such as visits to the Platform and use of the Services. The Service Provider uses this data to study the market and traffic on the Platform, as well as to create statistics, in particular to assess interest in published content, as well as to improve the Platform and to fulfil obligations within the scope of combating money laundering and terrorist financing. The collected data shall be processed