As of: October 12, 2026

Preamble

Lunelink GmbH, Georgsplatz 1, 20099 Hamburg (“Lunelink”), operates a platform at lunelink.com and app.lunelink.com through which professionals and executives in the real estate industry can create a candidate profile (“Candidates”), and companies can search for personnel and use additional tools for marketing and sales (“Customers”). Candidates and Customers are jointly referred to as “Users.” These General Terms and Conditions (“GTC”) apply to all agreements governing the use of the platform: Part A for all Users, Part B for Customers, Part C for Candidates, and Part D again for all Users. Annex 1 contains the Data Processing Agreement for Customers.

Part A – General Provisions

1. Contracting Party and Scope

1.1. The contracting party is Lunelink GmbH, Georgsplatz 1, 20099 Hamburg, registered with the Hamburg Local Court under HRB 195035, represented by its managing director Taner Çataklı. Any conflicting terms and conditions of the User shall not apply, even if Lunelink does not expressly object to them.

1.2. Customers act as entrepreneurs (§ 14 BGB). Candidates use the platform free of charge as consumers (§ 13 BGB); Part C also applies to them.

1.3. The contract language is German; machine-translated versions are for information purposes only. The current GTC are available at lunelink.com; Lunelink does not store the contract text individually.

2. User Account

2.1. Use of the platform requires a User account. Login credentials, one-time codes, login links and API keys must be treated as confidential; any suspected misuse must be reported to Lunelink without undue delay. 2.2. The information provided during registration and in the account must be truthful and up to date. Registration for third parties or under another person’s identity is prohibited; minors may not use the platform.

2.3. Lunelink may reject registrations without stating reasons and suspend accounts in the event of a justified suspicion of misuse or violations of these General Terms and Conditions.

3. Scope of Services, Availability and Further Development

3.1. The scope of services is determined by the platform as made available from time to time and, for Customers, by the range of functions activated according to the offer or order. There is no entitlement to specific functions, integrations or access methods.

3.2. Lunelink continuously develops the platform and may modify, add or discontinue functions provided that this does not materially impair the contractual purpose for the User or that reasonable alternatives are available.

3.3. No specific availability is owed; maintenance work and disruptions at upstream service providers may lead to interruptions. The platform is not an archiving or data backup service; Users must independently back up any content on which they rely.

4. Communication

Lunelink communicates electronically (by email, WhatsApp, SMS and within the platform) and sends automatic notifications regarding the use of the platform to the contact details provided. Legally relevant declarations to Lunelink may be submitted by email to info@lunelink.com.

5. AI Features

5.1. The platform uses artificial intelligence, including to analyze documents, anonymize profiles, create content and provide the AI assistant “Lune,” which performs tasks at the user’s instruction. AI results may be incomplete or incorrect; users must review them before adopting, publishing or sending them. No specific outcome of AI features is guaranteed.

5.2. Users are responsible for actions Lune performs at their instruction as if they had performed those actions themselves.

5.3. Decisions with legal effect for users, in particular activating a profile or suspending an account, are made by Lunelink through its employees.

5.4. AI-generated images are labeled in a machine-readable format in accordance with Article 50(2) of Regulation (EU) 2024/1689 (the “AI Act”). Users must not remove labels and must fulfill their disclosure obligations under Article 50(4) of the AI Act when publicly using AI-generated or AI-modified content.

6. Data Protection

6.1. Lunelink processes personal data in accordance with the Privacy Notice available at lunelink.com.

6.2. For the candidate marketplace, Lunelink and the customer are each independent controllers. Where the customer processes third-party data using the platform’s marketing tools, Lunelink acts as a processor; Annex 1 applies.

Part B – Special Provisions for Customers

7. Workspace and Conclusion of the Contract

7.1. Customers use the platform through a Workspace with one or more members; the Customer is responsible for the actions of its members. Separate companies or brands receive separate Workspaces.

7.2. The usage agreement is concluded when Lunelink accepts a Customer’s inquiry or order, sets up the Workspace, or when the Customer accepts an offer from Lunelink. Anyone acting on behalf of a company warrants that they are authorized to represent it. Free trial access and promotional Credits do not create any entitlement to continuation.

8. Prices, Access and Credits

8.1. Use of the functions of a Workspace requires active access, which is booked as an access package for a fixed term. Prices are based on the price list in the platform at the time of the order or on the individual offer, in each case net plus VAT.

8.2. An access package does not renew automatically. Upon expiry, the functions are blocked; the data remains stored, and access can be booked again at any time.

8.3. Paid individual actions are paid for with Credits, the price of which is shown on the platform. Credits are non-transferable, cannot be paid out or refunded, and expire when the Workspace is deleted.

8.4. Third-party charges (in particular advertising budgets on Meta as well as fees for domains or Google services) are paid by the Customer directly to the third-party provider.

9. Invoices and Payment

9.1. Access and credit packages are invoiced electronically upon ordering and must be paid by bank transfer within 14 days of the invoice date without deduction.

9.2. In the event of late payment, Lunelink may claim statutory default interest, suspend access after prior notice, and make further orders conditional on settlement of outstanding invoices. The Customer may only set off claims that are undisputed or legally established.

10. Candidate Data

10.1. Candidate profiles are displayed in anonymized form; the Customer receives complete data only if the Candidate releases it. The Customer may request a release but may not exert pressure.

10.2. The Customer uses Candidate Data exclusively to fill the Company's own positions for which the Workspace is operated and treats it confidentially. Disclosure to third parties, use on behalf of third parties (for example, as a recruitment agency without Lunelink's written consent), copying or systematic extraction of profiles, identifying anonymized Candidates through other sources, and informing a Candidate's current employer are prohibited.

10.3. The Customer complies with the General Act on Equal Treatment. Employer profiles and roles being sought must be truthful and relate to positions that are actually to be filled.

10.4. The Customer is solely responsible under data protection law for released data that it processes outside the platform. Lunelink does not owe any specific number or quality of Candidates or the filling of any position; no placement commission is charged.

11. Websites, Third-Party Services and Content

11.1. Websites that the Customer publishes using the Platform are the Customer’s own offerings. The Customer is responsible for the content, legal notice, privacy notices, consents for cookies and tracking, and the rights to the texts, images, videos, logos and fonts used.

11.2. If the Customer connects accounts with third-party providers (e.g. Meta, Google, Legistry), their terms and policies apply to these services; the third-party provider is the contractual partner for their services. Lunelink is not liable for rejections, suspensions, changes or failures of third-party services. If the Customer publishes advertisements through the Platform in a connected Meta advertising account, Lunelink activates Meta’s automatic Creative Optimizations, which enable Meta to adjust the advertisements and generate variants using generative AI.

11.3. The Customer is responsible for all content that it or its members upload, publish or send via the Platform. The Customer holds the required rights, does not infringe any third-party rights, does not disseminate any unlawful or impermissible content, and complies with the applicable regulations, in particular data protection, competition, consumer protection and telemedia law, as well as the General Equal Treatment Act.

11.4. The Customer grants Lunelink the non-exclusive rights of use required to provide the services, in particular for storing, technically processing, making content publicly available on its websites, transmitting it to connected third-party services and processing it by Lunelink’s service providers. 11.5. The Customer shall indemnify Lunelink against third-party claims arising from any unlawful use of the Platform for which the Customer is responsible, including reasonable costs of legal defense. Lunelink may block or remove content that is manifestly unlawful.

11.6. The API may be used only within the scope of these General Terms and Conditions and the documented endpoints; excessive load and circumventing restrictions are prohibited.

11.7. The Customer may connect third-party AI applications to the Platform via a standardized interface; such an application acts through the API on the User’s behalf. The Customer decides which applications to connect and is responsible for their use as for its own actions (Section 5.2); Sections 11.2 and 11.6 apply accordingly to the connected application and its provider. The Customer may disconnect a connection at any time; Lunelink may restrict, modify or discontinue the interface.

12. Term and Termination

12.1. The usage agreement is concluded for an indefinite period and does not establish any ongoing payment obligation. Either party may terminate it with one month’s notice to the end of a calendar month. The right to extraordinary termination for good cause remains unaffected; for Lunelink, this applies in particular in the event of default in payment despite a reminder or breaches of Section 10 or 11.

12.2. If the Customer terminates ordinarily, fees already paid for access packages will not be refunded; if Lunelink terminates ordinarily, Lunelink will refund the portion attributable to the remaining term. 12.3. After termination, Lunelink will delete the Workspace at the customer's request, unless statutory retention obligations prevent this.

13. Liability towards Customers

13.1. Lunelink is liable without limitation for damage arising from injury to life, body or health, in cases of intent and gross negligence, and under the Product Liability Act.

13.2. In the event of a slightly negligent breach of a material contractual obligation (an obligation whose fulfilment is essential for the proper performance of the contract and on whose compliance the customer can regularly rely), liability is limited to the foreseeable damage typical for the contract. Otherwise, liability is excluded, in particular for lost profits, business interruptions and consequential damages, as well as for the conduct of candidates and third-party providers. Mandatory statutory liability remains unaffected.

14. Partner Program

Commissions for referred customers are governed by a separate partner agreement; without such an agreement, there is no entitlement to commission.

Part C – Special Provisions for Candidates

15. Services for Candidates

15.1. Candidates use the platform free of charge; no costs arise even if an employment relationship is established. Lunelink provides a candidate profile that is displayed to employers in anonymized form after activation, enables chats with employers and also presents the anonymized profile to companies without a Lunelink account, for example by post.

15.2. A profile becomes visible only after a preliminary review by Lunelink. There is no entitlement to activation; Lunelink may reject or withdraw activation, for example if the profile does not match the qualifications sought. 15.3. Lunelink does not owe the placement of an employment relationship or any particular inquiries or offers and is not a party to contracts between candidates and employers. Candidates are free to accept or reject inquiries.

16. Registration and Conclusion of the Contract

16.1. By submitting the registration, the candidate offers to conclude the free-of-charge user agreement and accepts these General Terms and Conditions; the contract is concluded as soon as the candidate confirms the registration via the message sent by Lunelink through WhatsApp. The candidate then completes their profile on the platform and reviews any information transferred from documents with the support of AI before saving it.

16.2. Registration is permitted only for natural persons aged 18 or older and only for themselves.

17. Candidates’ Obligations

17.1. Information in the profile must be truthful, complete and up to date. Candidates may upload only content for which they hold the necessary rights, and no third-party data without the relevant authorization.

17.2. The profile and chats may be used exclusively for the candidate’s own job search; insulting, discriminatory, unlawful or promotional content is prohibited.

17.3. The candidate grants Lunelink the non-exclusive rights of use required to provide the services under Section 15, in particular for storing, anonymizing and technically processing the content, displaying it to employers and including it in letters to employers.

18. Anonymity and Profile Release

18.1. Employers initially see the profile in anonymized form, in particular without the candidate’s name, contact details or identifiable profile picture. Anonymization is performed automatically; Lunelink cannot exclude the possibility that an employer may recognize a candidate based on the information in their career history. 18.2. The respective employer sees the complete information, including contact details, only once the candidate has granted access. Access cannot be withdrawn. The candidate controls in the platform whether and how their profile is visible and can specify employers to whom it should not be displayed.

18.3. Companies without a Lunelink account receive only the anonymized profile without contact details; contact is established exclusively through the platform.

19. Termination and Deletion

19.1. The user contract is concluded for an indefinite period. The candidate may terminate it at any time without notice by requesting the deletion of their profile via WhatsApp or by email to info@lunelink.com.

19.2. Lunelink may terminate the contract and delete the profile if the candidate does not respond to messages for an extended period or does not have the professional experience sought by employers; termination will be communicated via WhatsApp, and re-registration is possible. In the event of serious violations of Section 17, Lunelink may immediately suspend or delete the profile.

19.3. Upon deletion, the profile, documents, media and chats are removed from Lunelink. Data that an employer has already received following a release remains the employer’s responsibility.

20. Liability towards Candidates

Lunelink shall be liable without limitation for damages arising from injury to life, body or health, in cases of intent and gross negligence, and under the Product Liability Act. In the event of a slightly negligent breach of a material contractual obligation, liability shall be limited to the foreseeable, contract-typical damage; otherwise, liability for slight negligence is excluded. Lunelink shall not be liable for the conduct of employers. Statutory claims in the event of defects (§§ 327 et seq. BGB) remain unaffected.

21. Cancellation Policy for Candidates

Right of cancellation

You have the right to cancel this contract within fourteen days without giving any reason. The cancellation period is fourteen days from the date on which the contract was concluded.

To exercise your right of cancellation, you must inform us (Lunelink GmbH, Georgsplatz 1, 20099 Hamburg, telephone +49 40 29997020, e-mail info@lunelink.com) of your decision to cancel this contract by means of a clear statement (e.g. a letter sent by post or an e-mail). You may use the model cancellation form below for this purpose, but this is not mandatory.

To meet the cancellation deadline, it is sufficient for you to send your communication concerning the exercise of the right of cancellation before the cancellation period has expired.

Consequences of cancellation

If you cancel this contract, use of the platform will end; since you do not pay any fee as a candidate, no payments need to be refunded. We will delete your profile and the data provided, unless statutory retention obligations prevent us from doing so.

Model cancellation form

If you wish to cancel the contract, please complete this form and return it.

To: Lunelink GmbH, Georgsplatz 1, 20099 Hamburg, e-mail info@lunelink.com

I hereby cancel the contract concluded by me for the use of the Lunelink platform as a candidate.

Registered on: [Date]

Consumer’s name: [Name]

Consumer’s address: [Address] Date and signature (only for notification on paper): [Date, signature]

22. Consumer Dispute Resolution

Lunelink is neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Part D – Final Provisions

23. Amendments to the General Terms and Conditions

Lunelink may amend these General Terms and Conditions for objective reasons (in particular changes in laws or case law, and new or amended functions) with effect for the future, provided that the user is not unreasonably disadvantaged. Amendments will be communicated by email or WhatsApp at least four weeks before they take effect; if the user does not object by then, they will be deemed accepted, as indicated in the notice. In the event of an objection, either party may terminate the agreement effective as of the date the amendments take effect. Amendments to the primary contractual obligations or prices require express consent.

24. Applicable Law and Jurisdiction

24.1. German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. For consumers, this choice of law applies only insofar as it does not deprive them of the protection afforded by mandatory provisions of the law of the country in which they habitually reside.

24.2. If the user is a commercial trader, a legal entity under public law, or a special fund under public law, Hamburg shall have exclusive jurisdiction.

25. Severability Clause

Should individual provisions be or become invalid, the validity of the remaining provisions shall remain unaffected; the statutory provisions shall replace the invalid provision.

Annex 1: Data Processing Agreement

1. Subject Matter, Duration and Purpose

The Customer ("Controller") processes personal data of third parties using the platform’s marketing tools (in particular websites, forms, appointment scheduling, contact management, advertising materials, connected advertising accounts and the AI Assistant). Lunelink ("Processor") processes this data on behalf of the Controller in accordance with Art. 28 GDPR for the purpose of providing these tools. This agreement does not apply to the candidate marketplace or to the data of the Controller’s members. Its duration corresponds to the term of the usage agreement.

2. Types of Data and Data Subjects

Types of data: master and contact data, communication content and uploaded files, contract and process data, calendar and availability data, usage and event data of the websites, including pseudonymous visitor identifiers, as well as content provided by the Controller to the AI Assistant. Data subjects: visitors to the Controller’s websites, its prospective customers, customers and contacts, persons who book appointments, recipients of advertisements and other persons whose data the Controller enters.

3. Instructions

3.1. The Processor processes the data only on the documented instructions of the Controller. The instructions arise from the usage agreement, this agreement and the operation of the platform; further individual instructions shall be issued in text form. If the Processor considers an instruction to be unlawful, it shall inform the Controller and may suspend its execution until confirmation. 3.2. Any processing beyond this shall take place only insofar as required by the law of the Union or a Member State; the Processor shall inform the Controller of this in advance, unless the law prohibits such notification.

4. Processor’s Obligations

4.1. The Processor shall implement technical and organisational measures in accordance with Art. 32 GDPR. The essential measures are described in Section 1.9 of the Privacy Notice and shall be explained upon request; the Processor may adapt them to the state of the art without falling below the existing level of protection.

4.2. All persons involved in the processing shall be obliged to maintain confidentiality, including beyond the end of their activities.

4.3. The Processor shall assist the Controller with requests from data subjects, the security of processing, the notification of personal data breaches and data protection impact assessments; the Processor shall forward requests from data subjects to the Controller.

4.4. The Processor shall notify the Controller without undue delay after becoming aware of any personal data breach affecting the Controller’s data, providing the information known to it regarding the nature, scope, consequences and measures taken.

4.5. After termination of the User Agreement, the Processor shall delete the data at the Controller’s request, unless retention obligations prevent this.

4.6. The Processor shall provide the information necessary to demonstrate compliance with this Agreement and shall facilitate audits, including inspections, announced with reasonable notice, at the Controller’s expense and without unreasonable disruption to operations.

5. Obligations of the Controller

The Controller is responsible for the lawfulness of the processing and for safeguarding the rights of the data subjects, in particular for the legal bases, information obligations and consents on its websites, and shall inform the Processor without undue delay of any irregularities identified.

6. Service Providers and Third Countries

6.1. The Controller authorizes the service providers named in the Privacy Notice at lunelink.com as sub-processors. The Processor shall notify the Controller by email of any new or replacement service providers; if the Controller does not object within 14 days on important data protection grounds, their use shall be deemed approved. If a justified objection cannot be remedied, either party may terminate the Usage Agreement. The Processor shall contractually obligate service providers to comply with corresponding data protection obligations.

6.2. Transfers to third-party providers via accounts connected by the Controller shall be made on its instructions; these providers are recipients of the Controller, not sub-processors of the Processor.

6.3. Processing outside the EU and the EEA shall take place only with the service providers named above and only on the basis of an adequacy decision by the European Commission (including the EU–U.S. Data Privacy Framework) or appropriate safeguards pursuant to Article 46 GDPR.

7. Final Provisions

Liability shall be governed by Article 82 GDPR and the Usage Agreement. Amendments to this agreement must be made in text form; in the event of conflicts, its data protection provisions shall prevail. German law shall apply; the place of jurisdiction shall be that specified in the Usage Agreement.