This section details how MDA CAPITAL INVEST, a.s. ("we," "us," or "our") collects, processes, and safeguards personal data provided voluntarily by users during account registration and profile configuration on mdacapitalinvest.com (the "Platform"). As a data controller based in Kladno, Czechia, our data processing activities strictly adhere to the European Union General Data Protection Regulation (GDPR).

1.     Data We Collect Upon Registration

When you register an account or create a user profile on our Platform, we collect the necessary personal identifiers to provide access to our global investment marketplace. This personal information may include:

• • • Identity Data: Full name, date of birth, and nationality (required for international regulatory compliance and verification).
    • Contact Data: Email address, phone number, and physical mailing address.
    • Account Credentials: Username, encrypted password, and secure authentication preferences.
    • Financial and Investment Profiles: Information regarding your investment preferences, budget allocations, and asset interests.

2.     Legal Basis and Purposes of Processing

Under Article 6 of the GDPR, we process your personal data based on the following lawful mandates:

• • • Performance of a Contract: Processing is necessary to establish your user account, verify your credentials, and grant access to the Platform's investment services, tools, and listings.
    • Compliance with Legal Obligations: As a financial and business development platform, we must process specific identity data to comply with international Anti-Money Laundering (AML) and Know Your Customer (KYC) statutes.
    • Your Explicit Consent: When you complete optional fields within your user profile or sign up for marketing alerts, you supply this information voluntarily and give us explicit permission to process it for those specific goals.

3.     How Your Registration Data is Utilised

We use the information collected from registration and profile forms to:

• • • Set up, operate, and maintain your secure user account.
    • Verify your identity and eligibility to participate in marketplace listings.
    • Communicate critical platform alerts, updates, or requested property listings.
    • Process investment queries and connect you with authorized transaction managers.

4.     Data Sharing and International Disclosures

We do not sell or rent your registration details. Your data is only shared under strict confidentiality agreements in the following scenarios:

• • • Authorized Service Providers: Trusted IT hosts, security systems, and verification partners who assist in operating the Platform.
    • Marketplace Partners: When you explicitly request to connect with a specific real estate or asset listing, relevant contact details may be shared with authorized local brokers or project managers to facilitate your transaction.
    • Legal Enforcement: If required by Czech or European Union authorities under applicable statutory regulations.

5.     Your Data Protection Rights Under GDPR

As an esteemed user of our platform, you hold full data sovereignty and are entitled to the following rights under European data protection laws:

• • • Right of Access and Rectification: You have the absolute right to review, update, or edit your personal information at any time. This can be performed instantly by logging into your account and navigating to the «Main Menu — Profile» section of the Platform.
    • Right to Erasure ("Right to be Forgotten"): You can request the permanent deletion of your account and registration data, subject to any overlapping statutory record-keeping obligations (such as AML compliance).
    • Right to Restrict or Object to Processing: You retain the right to limit how we use your data or object to specific processing activities, such as receiving direct marketing updates.
    • Right to Data Portability: You may request an export of the personal data you provided to us in a structured, machine-readable format.

6.     Data Security and Retention

We implement robust technical and organizational security measures to shield your profile data from unauthorized access, alteration, disclosure, or accidental destruction. Your personal information is retained only as long as your account remains active or as strictly required to fulfil our legal, accounting, and compliance reporting duties.

7.     How to Exercise Your Privacy Rights

To submit a formal request regarding your data protection rights, delete your account, or inquire about our data security practices, please contact our dedicated compliance office:

• • • Data Protection Inquiries: info@mdacapitalinvest.com
    • Corporate HQ: MDA CAPITAL INVEST, a.s., Generála Selnera 3256, Kročehlavy, 272 01 Kladno, Czechia

You can also contact the relevant data protection institution.

Updated: August.17.2026