Privacy Policy

1. Introduction

Welcome to Hamease by Hamhey GmbH ("Hamhey", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Hamease platform and related services. By using our services, you agree to the collection and use of information in accordance with this policy. If you have any questions or concerns, please contact us at support@hamhey.com.

2. Data Controller

The data controller responsible for your personal data is: Hamhey GmbH Kolonnenstr. 8 10827 Berlin, Germany Email: support@hamhey.com Managing Director: Lj Shaik

3. Data We Collect

4. How We Use Your Data

We process your personal data for the following purposes: • Service Delivery: To provide and maintain our tenant management platform, process payments, and facilitate communication. • Account Management: To create and manage your account, verify your identity, and provide customer support. • Communication: To send service updates, reminders, and respond to your inquiries via email, WhatsApp, or other channels. • Payment Processing: To process rent payments, facilitate bank transfers, and manage financial transactions through Stripe Connect. • AI-Powered Features: To power our automated tenant communication, maintenance routing, and rent collection reminders. • Analytics & Improvement: To analyze usage patterns, improve our services, and develop new features. • Legal Compliance: To comply with legal obligations, including tax reporting and regulatory requirements. • Security: To detect, prevent, and address fraud, security issues, and technical problems.

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds: • Contract Performance: Processing necessary to fulfill our service agreement with you (Art. 6(1)(b) GDPR). • Legal Obligation: Processing required to comply with legal requirements (Art. 6(1)(c) GDPR). • Legitimate Interests: Processing for our legitimate business interests, such as improving our services and preventing fraud (Art. 6(1)(f) GDPR). • Consent: Where you have given explicit consent for specific processing activities (Art. 6(1)(a) GDPR).

6. Data Sharing and Disclosure

We may share your information with: • Service Providers: Third-party vendors who assist us in operating our platform, including: - Stripe (payment processing) - WhatsApp/Meta (business communication) - Cloud hosting providers - Analytics services • Legal Requirements: When required by law, court order, or governmental authority. • Business Transfers: In connection with a merger, acquisition, or sale of assets. • With Your Consent: For any other purpose with your explicit permission. We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as necessary to: • Provide our services and maintain your account • Comply with legal obligations (e.g., tax records for 10 years under German law) • Resolve disputes and enforce agreements • Support legitimate business purposes When data is no longer needed, we securely delete or anonymize it. Tenant records are retained for the duration of your service agreement plus any legally required retention period.

8. Data Security

We implement appropriate technical and organizational measures to protect your data: • Encryption: Data is encrypted in transit (TLS/SSL) and at rest. • Access Controls: Role-based access with strong authentication requirements. • Regular Audits: Periodic security assessments and vulnerability testing. • Secure Infrastructure: Hosted on enterprise-grade cloud infrastructure with SOC 2 compliance. • Employee Training: Regular privacy and security training for all team members. While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights (GDPR)

As a data subject under GDPR, you have the following rights: • Right of Access: Request a copy of your personal data we hold. • Right to Rectification: Request correction of inaccurate or incomplete data. • Right to Erasure: Request deletion of your data ("right to be forgotten") under certain circumstances. • Right to Restrict Processing: Request limitation of how we process your data. • Right to Data Portability: Receive your data in a structured, machine-readable format. • Right to Object: Object to processing based on legitimate interests or for direct marketing. • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent. • Right to Lodge a Complaint: File a complaint with a supervisory authority. To exercise these rights, contact us at support@hamhey.com. We will respond within 30 days.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for: • Essential Cookies: Required for basic platform functionality and security. • Preference Cookies: Remember your settings and language preferences. • Analytics Cookies: Help us understand how you use our platform (e.g., usage patterns, popular features). You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place: • Standard Contractual Clauses (SCCs) approved by the European Commission • Adequacy decisions where applicable • Other legally recognized transfer mechanisms Our primary data processing occurs within the EU/EEA.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by: • Posting the updated policy on our website with a new "Last updated" date • Sending an email notification for significant changes • Displaying a notice within the platform We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: Hamhey GmbH Data Protection Inquiries Kolonnenstr. 8 10827 Berlin, Germany Email: support@hamhey.com For complaints, you may also contact the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).