DECLARATION OF CONSENT FOR THE PROCESSING AND PROTECTION OF PERSONAL DATA

1. Data Collection Controller
AFM Intermediários de Crédito, Lda., with corporate tax number (NIPC) 519264991, headquartered at Rua Detrás dos Álamos, Largo das 7 Ruas Loja 1B, registered with the Bank of Portugal as a Tied Credit Intermediary under no. 0008711 (hereinafter “Tied Credit Intermediary”).

2. Personal Data Collected
To process and analyse the financing application, the Tied Credit Intermediary collects and processes the following categories of personal data and supporting documents:

• Identification and Contact Data: Full name, date of birth, marital status, marital property regime (if applicable), nationality, number of dependents, identification document number and validity (Citizen Card / Passport / Residence Permit), Tax Identification Number (NIF), tax and residential address, phone number, and email address.

• Employment Data: Profession, type of employment contract (permanent, fixed-term, self-employed), sector of activity, employer name, seniority in the company, and job position.

• Financial and Asset Data: Monthly and annual income, bank statements of current accounts (last 3 months transactions), payslips (last 3 months), last Personal Income Tax Return (IRS) and respective settlement note, proof of other income (e.g., pensions, rental income, commissions), and identification of owned real estate or movable assets.

• Credit Liability Data: Credit Responsibility Report issued by the Bank of Portugal’s Central Credit Register (details of current loans, outstanding amounts, and repayment history).

• Additional Supporting Documents (depending on credit purpose): Urban Property Tax Booklet (Caderneta Predial), Property Registry Certificate, Promissory Purchase and Sale Agreement (CPCV), or quotes for works/goods to be acquired.

3. Information on Processing and Data Origin
After the transmission of personal data by the Tied Credit Intermediary to the partner banking institutions listed below, these act as independent Data Controllers.

The data will be processed through automated and non-automated means for the purposes of risk analysis, presentation of credit proposals, and execution of the respective credit agreement.

For detailed information on how each banking institution processes your data, you may consult their respective Privacy Policies:

• NOVO BANCO, S.A. | Novo Banco Privacy Policy
• CAIXA GERAL DE DEPÓSITOS, S.A. | CGD Privacy Policy
• BANCO SANTANDER TOTTA, S.A. | Política de Privacidade Santander
• BANCO BPI S.A. | BPI Privacy Policy
• ABANCA PORTUGAL, S.A. | ABANCA Privacy Policy
• BANKINTER, S.A. - SUCURSAL EM PORTUGAL | Bankinter Privacy Policy
• SICAM - CAIXA CENTRAL E CAIXAS DE CRÉDITO AGRÍCOLA MÚTUO | Crédito Agrícola Privacy Policy

The data will be retained by the Tied Credit Intermediary and by the partner banking institutions for the period necessary to fulfil the processing purposes and for legally mandatory periods (such as those provided for under anti-money laundering and counter-terrorism financing legislation, or tax retention periods), after which it will be deleted or anonymised.

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, object, restrict processing, and erase your data. You may exercise these rights with the Tied Credit Intermediary (via email: credito@afm.tax) or directly with the Data Protection Officer (DPO) of any of the relevant banking institutions.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

4. Express Consent Declarations
For the appropriate purposes, the undersigned declares:

A) Authorisation for Intermediation and Initial Processing
I/we authorise the Tied Credit Intermediary to collect, analyse, and process my/our personal data and documents for the purpose of processing the financing application.

B) Authorisation for Transmission to Banking Institutions
I/we authorise the partner banking institutions of the Tied Credit Intermediary to process my/our personal data, as well as the documents provided, for the purpose of preliminary analysis, assessment, and decision-making regarding my/our credit application.

C) Authorisation for Bidirectional Exchange of Information
I/we authorise the partner banking institutions and the Tied Credit Intermediary to exchange all necessary information for the specific purpose of credit intermediation, including receiving financing proposals, being informed of decisions made regarding the financing, and receiving data relating to the date and amount of the executed contract.

The data subject(s) have the right to withdraw this consent at any time through the means indicated in this declaration, without affecting the lawfulness of processing carried out prior to withdrawal. However, withdrawal of consent will make it impossible to continue the service and complete the credit application process.

5. Signature and Validation Method
This declaration may be signed either in handwritten form (physical format) or electronically/digitally.

In the case of a digital signature, the data subject(s) acknowledge and accept that an electronic signature (simple, qualified, or through the State authentication system – Digital Mobile Key) has the same legal effect as a handwritten signature, fully binding them to the terms herein.