Host Terms of Use

Welcome to the HeyStudent platform (heystudent.com), designed specifically for students, offering a wide range of rental options including apartments, rooms, houses, flats, maisonettes, and more, making the rental process easier and more accessible. At the same time, it provides property owners and prospective hosts with the opportunity to list their properties and connect with suitable students, based on their preferred rental terms and duration.

Table of Contents

Article 1 - Definitions

Capitalized terms have the meanings given to them below:

• Company: The company under the name "HeyStudent SINGLE MEMBER PRIVATE COMPANY" based in Athens (Attica) at 20 Solomou Street, Postal Code 17456, with Tax Identification Number 802691928 of the Tax Office KEFODE ATTIKIS and business registration number 181034103000.
• Host: A business user of the Platform, who has registered on the Platform, created a Host Account and accepted the Terms of Use. A Host is any natural or legal person who rents their Property to Students through the Platform.
• Service Level Agreement (SLA): The Company's requirements regarding the minimum level of service that Hosts must provide on the Platform, as specified in Annex A.
• Payment Institution: The legal entity with which the Company cooperates for the settlement and payment of transactions through the Platform. The Company currently uses Stripe. The Company reserves the right, at its sole discretion, to replace the Payment Institution through which electronic payment services are provided on the Platform, or to modify, in whole or in part, the manner in which these services are carried out.
• Listing: Property / properties or part of property/properties offered by a Host. The Listing includes, but is not limited to the following information: description, location, type, price, reviews, videos, etc.
• Student Account: The account created by the Student / tenant on the Platform in order to have personalized access to the Platform and to the features of the Platform, such as for the submission of Booking requests.
• Property: The property or part of a property (e.g., apartments, houses, flats, studios, lofts, rooms, beds etc.) offered by the Host to the Students through the Platform.
• Rent: The fee agreed to be paid by the Student to the Host according to the Booking. In particular, Students shall pay the Rent using Stripe. The minimum rental period shall be three (3) months. After this minimum term, the Student may choose to extend the Booking for additional periods based on weekly cycles. Various payment methods will be integrated through Stripe, including (e.g. Klarna, monthly installments, quarterly installments, semi-annual installments, advance payment, bank transfer, payment in local currency, and other options enabled by Stripe). Availability is not guaranteed at all times or in all locations and is subject to country-specific restrictions, availability, and other applicable limitations.
• “Deposit”: The security amount, equivalent to one month’s Rent, paid in advance by the Student for the Booking prior to check-in, together with the payment of the first Rent.
• Booking: The agreement between the Host and the Student in exchange for a fee (the Rent).
• Booking Request: The request submitted by the Student through the Platform, addressed to a Host, for the rental of a Property based on the features provided by the Host. The request is either automatically accepted if the Host has enabled the “instant booking” feature or requires the Host’s prior approval.
• “Rental Agreement”: The written agreement executed by the parties for the completion of a Booking through the Platform. The Rental Agreement may either be uploaded by the Host to the Platform for execution by the Host and the Student, or the Host may choose for execution the standard agreement template provided by the Company. It is hereby clarified and acknowledged by the Host that the standard agreement template provided by the Company is indicative only, and that the Host bears sole responsibility for reviewing its content and ensuring that it includes all necessary terms and information required for rental agreements in the jurisdiction where the relevant Property is located.
• Rental: The lease agreement entered into between the Host and the Student, after the Student’s Booking request has been accepted and the Booking has been completed through the Platform. The Host shall bear responsibility, together with the Student, for the formal completion of the Rental and for submitting the Rental Agreement and/or all relevant information to the competent state platforms for rental reporting purposes.
• Student: A User who has registered on the Platform and has self-declared their student status by ticking the relevant checkbox during the sign-up process, confirming that they possess all necessary documents to prove such status.
• Guardian: a parent, legal guardian, or other adult authorized to act on behalf of a Student who is under 18 years of age, and who has successfully completed the Persona identity verification process on the Platform, the terms of which shall apply during the verification process.
• Terms and conditions of the Payment Institution: The terms of service of the Payment Institution, which the Host can find by following the link below: https://stripe.com/legal which form an integral part of the Terms of Use and include in detail all the information required by law to inform the Host in accordance with Articles 50 to 58 of Law 4537/2018 and are available for storage on a durable medium in accordance with Article 53. Acceptance of the Terms of Use means unconditional acceptance of the Terms of Use of the Payment Institution in their entirety.
• Host Environment: Part of the Platform that is intended for and accessible only to Hosts and the Company and is located at host.heystudent.com/dashboard. Through this, Hosts can post information about their property/properties on the Platform, manage their Account, be informed about issues that concern Hosts exclusively, and communicate with the Company and Students.
• Content: The content of the Platform provided by the Company consists, among other things, of text, images, and technical specifications, which the Company makes available to the Users. It also includes Listings, property descriptions, photos and videos, platform trademarks, student reviews and comments, trademarks of the Company and its partners as they appear on the Platform, etc. The Company reserves the right to adapt the content at any time.
• Platform: The HeyStudent online platform (hereinafter "HeyStudent, the Platform"), frontend and backend, and its entire content, through which the conclusion of the Booking is facilitated, coordinated, and completed.
• Commission: The Company shall receive a commission of 6% for each Booking through the Platform. Specifically, it shall receive 3% from the Student payment and 3% from the Host payout.
• Services: All mediation services provided by the Company through the Platform, including, but not limited to, managing the presence of Hosts, making Properties available for rent, promoting Properties, managing Bookings, etc.
• User: Any natural or legal person of the Platform who visits the Platform either as a simple visitor or as a registered user to view the available Properties and conclude a Booking through the Platform.

Article 2 - Platform Services - Creation and use of the Host’s account

1. The Company provides online intermediation services for the promotion and booking of Hosts’ Properties to Students through the Platform. Acting as an intermediary, the Company connects Hosts and Students to facilitate the conclusion of a Booking through the Platform, without being a party to the Booking, controlling, or interfering with the Rental. In this context, the Company operates as a provider of online intermediation services between Hosts and Students in accordance with Regulation (EU) 2019/1150 of the European Parliament and of the Council.

2. Each interested Host must create an Account in the Hosts' Environment in order to be able to display their Listings and their characteristics, including the Rent, and to enable the conclusion of a Booking through the Platform.

3. To qualify and operate as a Host on the Platform, a person or legal entity must first satisfy the following conditions:

• Provide the Company with their personal details and the necessary supporting documents (e.g., ID card, Passport, Driving License, etc.), if they are a natural person, or the corresponding details of the legal entity along with the necessary supporting documents, if they are a legal entity.
• Complete an identity verification process through the Persona identity verification system, by providing a valid ID or passport.
• Represents and warrants to the Company that he/she is the owner of the Property intended for use on the Platform or is otherwise duly authorized.
• Submit all necessary documentation required by law in each particular country pertaining to the Property/Listing.
• Maintain an active account in any banking institution that is acceptable by Stripe.
• Maintain a valid postal address, corresponding to their place of residence or business activity.
• Maintain a valid Tax Identification Number (TIN) or equivalent number, if required.
• Create an Account by following the instructions in the Host Environment.
• Accept these Terms of Use, including Annexes A (Service Level Agreement), B (Hosts' Privacy Policy) and C (Management and protection of personal data of the Platform's users).

4. By creating the Account, the Host grants the Company their consent, for the latter to authorize the Payment Institution and companies cooperating with the Payment Institution that mediate in the provision of the Services, to seek information and data from information files and databases legally maintained regarding the Host's solvency and reliability.

5. The Host is responsible for the validity, accuracy, and truthfulness of the information entered into the Account, including the Properties/ Listings’ information and must regularly update this information as well as the relevant content (such as photographs and videos) so that it reflects the true, current, and accurate condition and specifications of his/her Property(ies)/ Listing(s).

6. The submission of documents and information by the Host does not imply the automatic creation and maintenance of an active Account on the Platform. The Company reserves the right to carry out a typical review of the documents and information provided by the Host. If the Company suspects that such documents or information do not meet the legal requirements or are inaccurate, false, incomplete or misleading it may reject the Host's request to create and/or maintain the Account or suspend the Host’s access to the Account itself.

7. The Host is fully and solely responsible for the proper use of the Account and actions taken using their access credentials, including any unauthorized use. In the event of a breach of the Account or a suspected or potential breach of the Account, the Host must promptly notify the Company in writing and immediately change the Account password. The Company shall not be liable for any consequences resulting from delay in the Host's notification of such breach, potential breach, or threatened breach of the Account.

8. When creating the Account, the Host must provide their address, telephone number, and if applicable Tax Identification Number (TIN) and, if applicable, General Commercial Registry Number (GEMI) for the information of the Students and for the exercise of their rights.

9. The Company may at any time suspend or terminate the use of the Host's Account in accordance with these Terms of Use.

10. For technical and operational reasons, the Company may access the Host's Account through its administrative dashboard ("force login") in order to identify and resolve technical issues, respond to support requests, or ensure the proper functioning of the Platform. By creating and maintaining an Account, the Host expressly acknowledges, consents to, and authorises such access.

Article 3 - Rules for the Proper Use of the Host's Account

1. The Host is solely responsible for the use of its Account and its communication with Students or other Hosts on the Platform through the tools provided by the Platform, in order to quickly and effectively resolve any issues that may arise.

2. The Host bears full and exclusive responsibility for the information provided when creating a Listing, as specifically set out in Article 4.

3. The Company may delete, modify, block, suspend access to, or review any Host’s content or Account that believes it may violate national law, EU law, and/or the Terms of Use.

4. The Host shall, by way of example and without limitation, comply with national and/or EU/Global legislation on the protection of Students and shall refrain from, directly or indirectly, the following actions:

• Provision of inaccurate or misleading information, data, or statements regarding the properties to the Company.
• Acts or omissions that could mislead Users regarding characteristics, rent, availability, location, authenticity of the presented/advertised properties or the material presenting them and, by extension, the information available for preview and for concluding the Booking.
• Unfair competition practices or actions that may constitute money laundering, in accordance with applicable law.
• Publishing or submitting content that (a) is offensive, defamatory, untrue, misleading, threatening, extortionate, pornographic, promotes racism or xenophobia, or is otherwise offensive or inappropriate, (b) infringes the intellectual property, trademark rights, or trade secrets of third parties.
• Collection of personal data through the Platform or the Services, except where such actions are expressly permitted under these Terms of Use and the Annex C for specific purposes.
• Bypassing the security measures implemented by the Company to prevent or restrict access to the Platform or the use of the Platform or the Company's services where the Company has suspended or prohibited the Host’s access.
• Copying, distributing, modifying, part or all of the Platform or its functions.

Article 4 - Listings – Property Information

1. The Listings are compiled either by the Host in accordance with the instructions provided in the Host Environment or, by the Company on behalf of the Host, for inclusion in the Platform, following the Company’s approval of the Listing.

2. The Host bears full and exclusive responsibility for the information provided when creating the Listing, including, but not limited to, the amenities, photographs, videos (including 3D or virtual tours), location, Rent and other details of the Property for Rent, such as any shared/common areas of the Property and/or the building the Property is in. The Company shall bear no responsibility for the content or accuracy of the information provided in relation to each Property, including but not limited to its characteristics, description and condition.

3. The Company has no obligation to monitor the content / material posted by the Host on the Platform and shall bear no liability for any misrepresentation, inaccuracy or omission in any Listing. Even in cases where the Company assists the Host in creating, producing, editing, digitizing or uploading any content (including, without limitation, photographs, videos, 3D renderings or virtual tours), such assistance, including the use of automated image enhancement tools, shall be of a purely technical and presentational nature and shall not be construed as verification, certification or endorsement of the accuracy, completeness or truthfulness of such content.

4. The Company carries out a typical check of the specifications of the Listings/Properties but is not obliged to check and monitor all the information provided by the Hosts. The Company's approval after the typical check is limited solely to the format and manner of presentation of the properties on the Platform and does not constitute any substantive verification of the information provided by the Host. Company bears no responsibility for identifying or rectifying any misrepresentations made to the Listing regarding the Properties (including but not limited to its characteristics, description and condition) or any hidden/ non-obvious defects in the Host's Property. Furthermore, the Company is not required to offer advice on matters beyond the scope of its intermediary role.

5. The Company may publish or display a Host's Listing on the Platform before the Host's Account creation and verification process has been completed. In such cases, the Listing shall remain inactive, and Students shall not be able to submit a Booking Request or conclude a Booking for the relevant Property until the Listing has been activated, which occurs upon the successful completion and activation of the Host's Account. Any such Listing displayed prior to activation is provided for preliminary informational purposes only. The Company does not review, verify, or endorse the content of any Listing displayed prior to activation, and bears no responsibility or liability whatsoever for its accuracy, completeness, legality, or availability, nor for any reliance placed on it by any User prior to activation.

6. The Company reserves the right, upon justification, not to approve all or part of the Listings, and to require the Host to make specific adjustments or changes. In this case, the Host must comply with the Company's request and amend the Listings accordingly. However, if the Property continues to be presented on the Platform without the adjustments requested by the Company, the Company is entitled to unilaterally remove the Listing. The categories and/or subcategories of Listings may be modified at the sole discretion of the Company.

7. The Host is required to keep the information regarding the Listings available for Booking on the Platform accurate and up to date at all times. If the Host wishes to make changes to the Listings that has already been approved by the Company, the Host must notify the Company and these changes be subject to new approval from the Company.

8. The Host must immediately notify the Company upon discovering any errors, defects, or omissions in their Listings (including, but not limited to, inaccuracies in the Rent or the description). If the Host has already submitted inaccurate information (such as an incorrect Rent), the Company may, at the Host’s expense, take any commercially reasonable measures to prevent and/or remedy any harm caused to Users/Students and/or the Company due to the Host’s inaccuracy. For example, the Company may require the Host to honor all Bookings that were submitted with an incorrect Rent as provided by the Host.

9. The Listings are an integral part of the Content, which is the exclusive property of the Company. The Host acquires only the non-exclusive, non-transferable right to use the Content for the Booking of their Property/ Properties through the Platform.

Article 5 - Availability of Properties

1. The Host may offer through the Platform Properties for rent, such as rooms, apartments, lofts, flats, houses, etc., in accordance with the characteristics selected by the interested party among the available listing and without including any defects. In addition, the Host is obliged to comply with all applicable rental legislation of the relevant jurisdiction and must have previously obtained all necessary permits and certifications as required by law.

2. The Host must offer the Property on the Platform at a price no higher than the lowest price at which the same Property is offered by the Host on any another website or online platform. This obligation is imposed to ensure more favorable pricing for Users/Students and to support the enhancement of the Platform’s quality, innovation, and operational sustainability, which aims to mediate between Students and Hosts to provide optimal support and service to both parties.

3. The Host is responsible to monitor the calendar of each Property and its Bookings via the Platform, and ensure that the Property is appropriately prepared as described in the Listing and made available as presented on the Platform within the time limits specified in the Booking.

Article 6 - Booking

1. The Host shall execute the Bookings in accordance with these Terms of Use, monitor the demand for the Listing via the Platform, and ensure that the Property is appropriately prepared as described in the Listing and made available as presented on the Platform within the time limits specified in the Host's Environment and agreed in the Booking.

2. In the event of: a) cancellation of the Booking within the time frame specified by the Host, or b) acceptance of the Booking terms followed by the Host’s inability to proceed with the Booking within the specified time frame, the Booking shall be considered cancelled.

3. The Company shall not be liable to the Host, nor shall it be obliged to compensate the Host for any expenses incurred - or profits lost as the result of the cancellation of the booking, nor to refund the relevant Commission charged by the Company in the form of a service fee.

4. Stripe will issue at the time of the selected payment the relevant tax document (invoice-receipt) corresponding to the Booking.

5. The Company shall send the Student confirmation of the Booking by email. The Host authorizes the Company to communicate directly with the Student on behalf of the Host.

6. The Host acknowledges that the Booking of the Property can only be accepted through the Platform.

7. The Booking facilitated through the Platform shall be deemed completed upon the execution of the Rental Agreement via the Platform. Upon execution of the Rental Agreement, a civil contract (the “Rental”) is formed directly between the Host and the Student. The Host shall bear responsibility, together with the Student, for the formal completion of the Rental and for submitting the Rental Agreement and/or all relevant information to the competent state platforms for rental reporting purposes.

8. The Company shall not be held responsible for the accuracy and completeness of the information (including credit card details and dates) provided by the Students.

9. The Host may choose whether to proceed with the conclusion of the Booking with "instant booking," i.e., automatically upon a Student's request, or may opt to manually accept or reject each Booking request.

Article 7 - Booking Cancellation - Eviction

1. The Host hereby guarantees that he/ she shall make the property available to the Student, free from any defects in accordance with the details provided in the Listing and in accordance with the terms agreed upon in the Booking concluded via the Platform. If the Host is unable to fulfill its obligations under the Booking for any reason, it must immediately notify the Company with an email at: support@heystudent.com.

2. Should any defects be identified in the Property, the Host is obliged to exercise reasonably best endeavors to rectify and resolve any issues and provide the Property free from any defects at his earliest convenience. If the Host is, for any reason, unable to provide the agreed Property with a defect-free condition, the Host shall compensate the Company and/or the Student for all reasonable costs and expenses incurred as the result of the cancellation on behalf of any of the three parties. The Host shall not be eligible to claim any monetary compensation for cancellation as he would normally under his Property’s cancellation policy.

3. The Company shall ensure that the Student is automatically notified by email in the event of any cancellation or if the Host is unable to perform the Booking.

4. Once accepted, the Host may not cancel the Booking unless one of the reasons described above applies and the relevant process is followed. In the event of allegations or suspicions of any fraudulent activity (e.g. in relation to Bookings, credit card fraud, money laundering or payment of the Rent), the Company reserves the right to cancel the relevant Booking and/or suspend or cancel the transfer of related funds.

5. Cancellations by the Students are subject to the specific cancellation policy set by each Host, which determines the amount of money to be refunded or retained.

6. The Commission is non-refundable under any circumstances after the Student’s scheduled check-in date at the Property. The Commission may be refunded if any cancellation occurs prior to the Student’s check-in date.

7. A change in the Booking start date by the Student shall not affect the Terms of Use nor obligation to pay the corresponding Commission to the Company.

8. If a Booking is canceled due to a defect or missing feature in the Listing (as per the Students' Terms of Use), the Company is not responsible for the relationship between the parties, and the Commission received by the Company will not be refunded.

9. The Host may select one of the following cancellation policy options, which will apply to the Student in case of cancellation:

a) Easy Exit: Cancel up to 4 weeks before move-in for a full refund. Cancel later and pay one month’s rent. After move-in, give 4 weeks’ notice to leave early.

b) Advance Notice: Cancel up to 8 weeks before move-in for a full refund. Cancel 4–8 weeks before for a 50% refund. Cancel later, no refund. After move-in, give 8 weeks’ notice to leave early.

c) Full Commitment: Cancel within 48 hours of booking for a full refund (if check-in is still 90+ days away). After that, no refund for cancellation within 12 weeks of move-in. Early move-out? Pay remaining rent until booking ends.

d) Custom cancellation policy: The Host may create a custom cancellation policy through the completion of the relevant fields on the Platform.

10. In all cases, the selected cancellation policy must be made available and clearly visible to the Student prior to the conclusion of the Booking.

Article 8 - Company Commission

1. Following the creation of the Account, and for each completed Booking concluded through the Platform, the Commission is deducted from the Host’s fee. Specifically, the Company shall charge a commission of six percent (6%) for each Booking, allocated as follows: three percent (3%) from the Student and three percent (3%) from the Host.

2. Stripe shall issue and send the relevant receipt and/or invoice automatically to each Party.

3. The Company reserves the right, at its sole discretion and at any time, to adjust, cancel, increase, or decrease any applicable fees or Commissions, in whole or in part, subject to the conditions set out in paragraph 3 of Article 19.

Article 9 - Rent - Deposit

1. The Student shall pay the agreed fee (Rent) to the Host according to the Booking. In particular, Students shall pay the Rent using Stripe. The minimum rental period shall be three (3) months. After this minimum term, the Student may choose to extend the Booking for additional periods based on weekly cycles in accordance with the applicable process. Various payment methods will be integrated through Stripe depending on the country, any applicable restrictions, availability, and other relevant factors (e.g. through Klarna, monthly installments, quarterly installments, semi-annual installments, advance payment, bank transfer, payment in local currency, and other options enabled by Stripe).

2. By accepting the Terms and Conditions of the Payment Institution, the Host becomes an indirect recipient of the Card Verification services agreed between the Company and the Payment Institution, and remains fully liable to the Company for any act, omission or error related to the Booking. The Company reserves the right, at its sole discretion, to replace the Payment Institution through which electronic payment services are providing via the Platform, or to modify the preferred payment method facilitated through such Payment Institution.

3. The first Rent payment shall be made by the Student prior to check-in, together with the payment of the Deposit.

4. The Deposit shall be held by the Host for the entire duration of the Booking and shall be refunded to the Student within five (5) days after the end of the Booking. The Host shall have the right to submit a damage claim within five (5) days after the end of the Booking and retain the Deposit, or a part thereof, by uploading to the Platform supporting evidence justifying the claim (e.g., damage to the Property).

5. The Rent shall be paid by the Student within the first five (5) calendar days of each month. If payment is not made within this period, the Host shall be entitled to terminate the relevant Booking and may request the Student’s immediate departure from the Property.

6. The Company shall bear no responsibility for the payment obligations of the Students in relation to the Bookings concluded through the Platform.

Article 10 - Relations between the parties - Communication

1. When a Student proceeds with the conclusion of a Booking, a direct legal relationship is created between the Host and the Student.

2. The Host acknowledges that the Company is neither a party to the relationship between the Host and the Student, nor will it be involved in the details of the Booking as set out in the Listing. However, Students must accept the Student Terms of Use in order to proceed with a Booking through the Platform. These Terms of Use apply exclusively between the Company and the Hosts governing the Services provided by the Company, i.e. the Platform.

3. The Host is solely responsible for ensuring the lawful display of the Properties on the Platform, in full compliance with the applicable national, EU, and international laws, including, without limitation, consumer protection laws and laws governing property leases. The Host must remain informed of such laws and monitor any changes. Additionally, the Host is fully responsible for the proper performance of the Rental, including fulfilling the Student's expectations and addressing any issues related to the cancellation of the Booking. The Host shall indemnify and hold the Company harmless against any claims brought by the Student against the Company, including but not limited to unfair commercial practices or non-compliance with applicable law, in relation to the Property's display, the conclusion of the Booking through the Platform, and the official completion of the Rental along with the submission of the relevant information to the competent state platforms for rental reporting purposes. Furthermore, the Host is solely liable to the Company for indemnifying the latter in the event of a claim by the Payment Institution or any other third party arising from an act, omission or failure of the Host in the context of its promotion, failure of payment, presence and activity on the Platform. In the event of any administrative or other fine or penalty being imposed on the Company due to a breach by the Host - either during its promotion on the Platform or during its transaction through the Platform - of the provisions of the applicable legislation (such as, indicatively, Law 2251/1994, Law 4933/2022, Law 4624/2019, and Law 4819/2021, as well as the relevant decisions, Ministerial Decisions, Presidential Decrees and Circulars regulating the scope of these Terms of Use and the Parties’ cooperation), the Host shall be obliged to compensate the Company for any amount that the Company is required to pay or did pay, as well as to take any legal action, where and as legally provided, to protect the Company from any claim or penalty against it, and shall bear the relevant expenses for this purpose.

4. The Host shall be solely responsible for satisfying the Student's requests after the Booking ("post- Booking liability"). Post-Booking liability is entirely the responsibility of the Host and the Company assumes no such liability.

5. The Company serves exclusively as an intermediary between the Host and the Student. In this context, the Company enables correspondence between the Host and the Student either via the Company’s designated email address support@heystudent.com or via the Platform’s chat. In the case of communication through the Company’s email, the Company will forward the messages from one party to the other. The Host and the Student may request to conduct a video call via the Platform’s chat if they wish to discuss matters related to the Property, the Booking request, or other relevant issues. For the purpose of facilitating communication, the contact details of the opposing party shall be provided immediately upon completion of a Booking. Throughout the duration of the Rental, the Host and the Student shall maintain direct communication regarding any matters concerning the Property, the Rental, or other relevant issues. Communication may also take place via the Platform’s chat, which shall remain active for the entire duration of the Booking.

6. As mentioned above in term 6.7., following the completion of the Booking via the Platform, the Host and Student are solely responsible for finalizing the Rental and submitting the necessary information to the relevant state platforms.

7. Hosts shall have the right to submit a damage claim within 5 days after the end of the Booking. Claims submitted after this period will not be accepted.

8. The Company may temporarily restrict communication between the Student and the Host via the Platform if there are valid grounds, such as suspicious or fraudulent activity.

9. All communications conducted via the Platform are stored by the Company and may be accessed and used by the Company for the following purposes:

• To support the Host in addressing questions or issues raised by the Student, including cancellation requests and damage claims.
• To mediate the resolution of any disputes that may arise for a period of five (5) calendar days following the Student’s departure.
• To assess the Host’s compliance with Annex A and the Terms of Use.
• To analyze and improve the Platform’s internal processes.

10. The Host explicitly agrees and grants the Company permission to store, access, and use communication exchanged through the Platform and email in accordance with the terms of the Company.

11. All such communication will be retained by the Company for a specific period in accordance with the Host’s Privacy Policy.

12. The Host may not offer the same Property for rental at a lower price outside the Platform or on other platforms/websites than what is available on the Platform. The Host is also prohibited from sending advertising material or discount coupons or promoting the Listing in any manner through or on behalf of the Platform without prior written consent from the Company. The Host may not advertise the Platform without first obtaining written consent from the Company.

13. The Host may not commercially exploit or use for purposes other than those specified in the Host's Personal Data Protection Policy, any data of Students.

14. The Host acknowledges that the Company uses the so-called " Service Level Agreement " as outlined in Annex A. If the Host fails to meet these service levels, the Company reserves the right to suspend or terminate the Host's Account in accordance with Article 12 of the Terms of Use.

15. The Host acknowledges and accepts that the Students participate in a rating system, based on which the Host receives a so-called "rating" and that they may also write reviews about the Host and publish them on the Platform. The Company has no influence on these reviews and will not censor them, in accordance with Article 17.

16. Acceptance of the Terms of Use by the Host does not create any special relationship between the Host and the Company beyond the provision of the Services. Therefore, the Host and the Company are not in an employer-employee relationship, representative-agent relationship, principal-agent relationship, nor do they form a joint venture or any other legal entity.

17. The Company is not obliged to monitor any content or information uploaded by the Student on the Platform.

Article 11 - Restriction, Exclusion, Suspension of Services

1. If the Company decides to restrict or suspend the provision of services to a specific Host in relation to certain Listings made available by that Host, it must provide the Host, before or at the time of the restriction or suspension taking effect, with a justification for its decision on a durable medium. Such actions may occur if the Company has reasonable grounds to suspect that one or more Terms of Use are being violated, including instances of fraud, outstanding debts to the Company, violations of intellectual property rights, disruption of the proper functioning of the Host Environment, or if maintaining the Host’s Account could potentially harm the reputation of the Company or third parties. The Company also reserves the right to discontinue all Platform Services at any time.

2. If the Company decides to discontinue the provision of Services to a specific Host, it shall provide such Host, at least thirty (30) days prior to the effective date of the discontinuation, with the grounds for its decision on a durable medium.

3. This notice period shall not apply where the Company:

• has a legal or regulatory obligation to cease providing all Services provided through the Platform to a specific Host in a manner that does not allow it to comply with this notice period,
• exercises a right of termination for compelling reasons under national law in accordance with EU law.
• can prove that the Host has repeatedly violated the applicable Terms of Use, resulting in the termination of all Services.

4. In cases where the above notice period does not apply, the Company shall provide the Host concerned with a justification for its decision on a durable medium without undue delay.

5. If the Company revokes the restriction, suspension, or termination, it shall, without undue delay, restore the Host's access to any personal or other data, or both, that was created by the Host's use of the specific services prior to the restriction, suspension, or termination.

6. The justification mentioned in the preceding paragraphs shall include a reference to the specific facts or circumstances, including the content of notifications from third parties, which led to the Company's decision, as well as a reference to the reasons for that decision.

7. The Company shall not be required to provide justification if it has a legal or regulatory obligation not to disclose the specific facts or circumstances or not to disclose the reason or reasons, or if it can prove that the specific Host has repeatedly violated the Terms of Use, resulting in the termination of all Services.

8. The Host may close their Account at any time by giving thirty (30) calendar days’ notice to the Company, by sending an email to the Company support@heystudent.com or by selecting the “Delete Account” option available in the account settings. If the Host has ongoing Bookings, pending Booking Requests, or open dispute cases, these must be fully resolved before the account can be deleted. If there are no such outstanding issues, the Host’s Listings will be deleted immediately upon submission of the deletion request.

Article 12 - Consequences of Termination of Cooperation / Termination of Host’s Account

1. In the event of the termination of the Host's Account, for any reason:

• The Host's access to their Account and the Host Environment will be disabled.
• The Host’s Listing will be deleted according to the provisions of article 11.8.
• The Host shall no longer have the right to use the Company's Content, trademarks, and trade names to the extent that it had such right until that time.
• The Host may not claim any compensation from the Company in connection with the termination of his Account by the Company, and the Host waives any right to compensation for this reason.
• The data provided by the Host to the Company shall remain in the Company's possession at all times, regardless of whether the Host's Account is still active or inactive/terminated.

2. Termination of the Host's Account shall not affect the rights of either party with respect to any prior claim or breach of any of the provisions of the Terms of Use.

3. Any obligations of the parties relating to limitation of liability, confidentiality, and indemnification, as well as any other obligations arising from the Terms of Use that by their nature are intended to survive, including any obligations to pay or service Students in connection with the ongoing Bookings, shall survive the termination of the Hosts’ Account.

Article 13 - Liability, Declarations, and Warranties of the Host

1. The Host represents and warrants that he/she will fully comply with its obligations under the Terms of Use and shall indemnify the Company in full for any loss and/or costs of any nature arising from any failure to comply with them. In addition, the Host undertakes the obligation to comply fully with all applicable laws and regulations on the protection of privacy, such as the General Data Protection Regulation (GDPR), as well as with the Hosts’ Privacy Policy incorporated into the Terms of Use as Annex B and forming an integral part thereof, and shall indemnify the Company for any damage suffered by the Company or any third party as a result of the Host's failure to comply with the above.

2. The Host guarantees that it displays, offers, and makes available through the Platform only Properties that:

• are suitable for Booking as defined by the Company according to their characteristics.
• are not misleading or otherwise violate applicable laws or regulations, are genuine and are depicted as accurately as possible.
• are free from defects or lack of agreed characteristics.
• do not infringe any rights of third parties.

3. The Host also guarantees that:

• They are the owner or otherwise authorized with the right to rent them.
• They act in accordance with the Terms of Use and the Company's instructions regarding the use of the Platform, as well as the Host Terms of Use, cancellation, and all applicable laws and regulations.
• Act in a manner that does not damage the reputation and/or image of the Platform and/or the Company.

4. The Host understands and accepts that they are solely responsible for the Booking throughout its duration and until the Student's departure in accordance with the terms and specified time period agreed in the Booking and regardless of whether he/she has had his/her own account terminated/suspended.

Article 14 - Disclaimer and Limitation of Liability

1. The Platform and the Content included in the Platform are provided "as is". The Company does not guarantee nor warrant that the Platform and/or the Services provided through it or the services of the Persona verification system, Stripe payment institution, and any other third party systems used will be provided continuously, without interruption, without errors and/or without delays and/or that the Platform and/or the server used by the Company or the Persona verification system, Stripe payment institution, and any other third party systems used will be free of malware or that the results of the use of the Platform or the Persona verification system, Stripe payment institution, and any other third party systems used will meet the requirements and expectations of the Host.

2. To the maximum extent permitted by law, the Company shall not be liable to the Host or any other party for any indirect damage or for any extraordinary, exemplary, incidental, consequential or other damages (including, but not limited to, lost profits or loss of time), whether based on contract, tort, strict liability or otherwise and which arises out of or is in any way connected with any access to or use of the Platform or the Company's or the Persona verification system, Stripe payment institution, and any other third party systems used or any use of the instructions and other information provided through the Platform or other sources.

3. The Company is not responsible for the use of the Platform by any User/Student, nor for his/her general behavior. The Company shall not be held responsible for any matter arising from the Student’s conduct in relation to the Property or the execution of the Rental, including the Student’s stay or any actions affecting the Property.

4. In the event that the exclusion of the Company's liability under clause 2 of this Article is declared wholly or partially invalid by a competent court or is annulled, the parties agree that in such a case the Company shall be liable solely and exclusively for direct positive damages and for any other damages up to 50% of the Commission received for the Property.

5. The Company shall not be liable for any delay or failure to perform any of its obligations under the Terms of Use due to reasons, events or other issues beyond their reasonable control (force majeure).

Article 15 - Intellectual property rights

1. The Company acquires the non-exclusive, non-transferable right to use the intellectual property rights related to the Property and its display on the Platform, including, but not limited to, intellectual property rights, trademarks, trade names, distinctive features, copyrights etc., provided that the Host displays the Property available through the Platform. It also acquires the right to make communications and advertising statements across all media for the benefit of the Platform.

2. The Host acknowledges that all intellectual property rights related to the Platform, the Host Environment, the design, the Content, and all brand names, trademarks, and logos of the Company are and remain the property of the Company and may not be used by the Host under any circumstances without the prior written consent of the Company. The Host shall fully respect the intellectual property rights of both of the Company and any third parties.

3. The Host agrees that it will not file and/or register in his/ her name a trademark or domain name containing the elements "Hey student", “HeyStudent” or any similar elements, terms or logos. Any use of the Company's trademarks, logos, intellectual property rights by the Host must have the prior written consent of the Company.

4. The Host agrees that during the term of this Agreement and for 12 months after its termination, it will not participate in, own, cooperate with, manage, operate, or participate in any business that directly competes with the Company.

Article 16 - Host Evaluation

1. The Students may evaluate the Host after the Booking period has elapsed. The evaluation shall be carried out upon completion of the Booking, based on specific qualitative and quantitative criteria.

2. Students will be asked to evaluate the Property and their communication with the Host by selecting a rating from one (1) to five (5) with one (1) being the lowest rating and five (5) being the highest. The Platform will have an evaluation section where the Student will be able to rate their overall experience of the Booking as well as specific sub-categories of their experience with the listing.

3. Furthermore, Students may submit a written comment along with their rating to the Host. This review will consist of a rating and accompanying text. Reviews from both Students and Hosts, including any written comments, will be published on the Platform following a typical check conducted using an application that detects abusive characterizations based on predefined keywords.

4. Once published on the Platform, the Hosts' ratings, submitted by Students, (both the overall cumulative rating and individual comments) will remain publicly available and accessible without restriction to the Host, other Hosts, Students, and other Users of the Platform. Also, after the reviews are made public, if a User or Host considers a review to be unlawful or inappropriate, such as containing defamatory statements, hate speech, harassment, threats, false or misleading information, or the unlawful disclosure of personal or confidential data of the Host or any third party, they may report it using the button next to the review or by sending a message to support@heystudent.com in order for the Company to review and take action or not.

5. The Host understands and accepts that positive and negative reviews of the Property may appear on the Platform at any time. The Company implements control measures to ensure that reviews of Hosts and their Properties come from Students who have actually completed their stay at the Property and have previously entered into a booked through the Platform. However, the Company does not approve, guarantee, adopt, or promote the reviews of other Students and has no obligation to monitor the reviews posted by Students on the Platform or to verify the truth or accuracy of such reviews. The reviews reflect solely the personal opinions of the Students, and/or personal opinions of Hosts and the Company bears no responsibility or liability towards the Host or any third party in connection with such reviews.

6. The overall cumulative rating of both the Property and the Host, as outlined above, shall also serve as one of the criteria for determining the ranking of the Property on the Platform in conjunction with other factors, set out in Article 17.

7. The Host undertakes not to influence directly or indirectly, the submission and/or publication of reviews on the Platform. By way of example and without limitation, the Host shall refrain from knowingly submitting or facilitating the submission of reviews by first-degree relatives (by blood or marriage), business associates, or any other affiliated individuals. In the event the Host becomes aware of such actions, he/she shall immediately notify the Company. Furthermore, the Host is strictly prohibited from offering monetary compensation or any other form of incentive to third parties for the purpose of encouraging the publication of positive reviews about themselves, negative reviews about other Hosts, or the removal or alteration of existing reviews.

Article 17 - Properties’ classification

1. The Platform displays Properties - and by extension, the Hosts offering them - to Students based on various criteria, such as: (i) the Listings page, (ii) the Property search page, (iii) the individual Property page, and (iv) Student comments and ratings. These parameters determine how Properties are presented to Students for easier discovery.

2. The ranking parameters referred to in paragraph 1 of this article are determined by the following factors:

A. Listings page: Appears after searching using the search bar on the Platform. The Properties displayed are determined by the relevance and filters. The order of the Properties on the results page is determined by an algorithm that calculates the popularity rating. This algorithm considers interaction data from Students over the past few days and factors such as: the Property description, rankings, comments, photographic material, photo/video quality, ratings, amenities, the location of the Property, the proximity to the student's university, the number of completed Rentals for a Property the number of clicks on a Property and other relevant factors.

B. Geographic Area: The Student may specify a geographic area or the name of a university as part of their Listings search criteria. The Platform could adapt the ranking of relevant Listings based on their proximity to the location defined by the Student. Listings closer to the specified area or university will be prioritized accordingly in the search results.

C. Listing Comparison: If multiple Hosts offer Properties with similar characteristics, the Platform will prioritize certain Listing to assist the Student. The main parameters used to evaluate one Listing over another include: Best selected location, total cumulative rating of the Listing based on the reviews of the Students.

D. Same Ranking: In the event that multiple Hosts offer Listings within the same category, at the same price, with similar popularity, rent, and/or availability, the ranking will be determined by the evaluation score of the Listing. If the evaluation scores are identical, the ranking will be further determined based on the alphabetical order of the Listing names or Host names, as listed on the Platform.

3. The Student may modify the ranking of the Listings displayed on the Platform by choosing different filters.

4. The Host may receive certain privileges that can affect the display or visibility of their Property on the Platform. These privileges will be clearly indicated as promotional, ensuring transparency for all Users.

5. On various pages of the Platform, the Company may display suggestions that the Company assumes to be relevant to the Listing that the User has viewed, such as "Similar to this." The presentation of suggested Listings is determined by an algorithm that evaluates their similarity. This algorithm prioritizes recent interaction data from Students over older data, along with information about the Listings. The factors considered in the algorithm include, but are not limited to:

• Cases where Students who viewed the specific Listing also searched for another Listing.
• Listings that Students ultimately selected.
• Comparability with other Listings (e.g., location, features, rent).
• New Listings recently added to the Platform.
• Popular Listings.

Article 18 - Confidentiality

1. During the use of the Platform, the Host Account, and the Host Environment, the Host may have access to confidential information belonging to the Company. The Host agrees that for as long as the Host's Account remains active and for a period of five (5) years after its termination: (a) all confidential information shall remain the sole property of the Company, except for the personal data of Student belonging to the respective Host, (b) the Host shall use the confidential information only as reasonably necessary for the proper use of the Platform and the Company's Services (c) they or their third parties shall not disclose, directly or indirectly (through a third party), disclose the confidential information to any person, company or other third party, unless required to do so by law or court order, (d) takes all reasonable measures to protect confidential information from any use not authorized by the Company; and (e) retain confidential information only for as long as its use is necessary for the use of the Platform and the Company's Services or for the fulfillment of its legal obligations arising from the use of the Platform and Services, and in any case shall delete such confidential information.

2. This term does not limit the Host's right to disclose confidential information in the context of internal or regulatory compliance required by the Host's internal regulations or by law (e.g., tax record keeping), provided that it limits disclosure to the minimum necessary and expressly mentions the confidential nature of confidential information.

3. The Host shall not be entitled to issue a press release or make public statements about the Services or use the name, trademarks or logo of the Company and/or the Platform in any way (including advertising material) without the prior written consent of the Company or to mislead or distort the relationship between the Company and the Host in any way. Hosts may use the indication "Available on the HeyStudent Platform" only as specified and in accordance with the trademark usage described in Article 15.

4. The roles and responsibilities of the Parties in relation to the processing of personal data of the Students are set out in detail in Annex C – Management and Protection of Personal Data of the Platform's Users, which forms an integral part of the Terms of Use.

Article 19 - Final provisions

1. The Host shall never present itself as a representative or agent of the Company and, in particular, shall not make any promises or assume any obligations in the name and on behalf of the Company, otherwise it undertakes to indemnify the Company for any failure to comply with this term.

2. The Host shall not be entitled to transfer any of its obligations or rights under the Terms of Use to third parties, unless the Company has given its prior written consent to do so.

3. The Company shall be entitled to amend the Terms of Use at any time. In this case, the Company will notify the Hosts at least fifteen (15) days before the impending change so that the Host can make technical and commercial adjustments in order to comply with the new Terms of Use . During this period, the Host reserves the right to terminate his/ her Account as a result of the changes by sending an email to support@heystudent.com, in accordance with paragraph 8 of Article 12 of the Terms of Use. The changes will not take effect before the end of the above period. The amended Terms of Use will be published in the terms section of the platform heystudent.com/terms. If the Host continues to use their Account by submitting new or providing existing listings for booking after notification of the amended Terms of Use, this means that they have tacitly accepted the application of the amended Terms of Use. Therefore, the Host is advised to consult the Terms of Use and the Host Environment and emails send out by the Company regarding matters like these frequently and regularly.

4. The notice period of at least 15 days (in accordance with clause 3 hereof) shall not apply if the Company amends the Terms of Use i) in order to comply with a legal obligation or ii) to address an unforeseen and imminent threat related to fraud prevention, malware, spam, privacy violations, and misuse of personal data, or cybersecurity risks. The amended Terms of Use shall take effect immediately upon notification and posting on the Host Environment.

5. The Company complies with European and Greek legislation on electronic commerce, including Law 2251/1994, Regulation 2019/1150, the Code of Conduct for Electronic Commerce, Regulation (EU) 2022/2065 on the Digital Services Act (DSA) and any relevant legislation regulating the general operation, responsibilities, and obligations of the Platform. If any provision of the Terms of Use is found to be contrary to applicable law, that provision shall be amended to comply with applicable law, taking into account as far as possible the purpose of the relevant provision.

6. The Host agrees that the Company will inform them occasionally by email to the address they have provided in their Account about the use and capabilities of the Platform and/or their Account.

7. If the Host fails to comply with the Terms and the Company does not take immediate action in this regard, and regardless of the length of time for which the Company continues to fail to take action, this shall not be deemed a waiver by the Company of its rights under the Terms of Use, nor shall it in any way prevent the Company from seeking compliance with the Terms of Use in the future.

Article 20 - Applicable law- Jurisdiction

The Terms of Use and any dispute arising from or related to them shall be interpreted and enforced in accordance with Greek and European law. The Host agrees and accepts that the courts located in Athens, Greece are the appropriate and exclusive venue for the resolution of any dispute relating to the Terms of Use and agrees to the jurisdiction of such courts.

Article 21 - Contact us

If you have any questions about these Terms of Use or the Services provided through the Platform, you may contact us by email at: support@heystudent.com.

ANNEX A: Service Level Agreement (SLA)

The criteria by which the Company will determine whether Host’s overall performance meets the quality of services that the Company wishes to provide through the Platform are as follows:

• The Host agrees to respond to every request within 24 hours on a working day.
• The Host hereby agrees that the minimum period for any given booking concluded via the Platform shall be no less than 3 calendar months. The Host agrees not to decline a request more than 3 times consecutively.
• The Host agrees not to cancel a Booking more than 3 times consecutively.

ANNEX B: Hosts' Privacy Policy

This Policy describes and explains how the Hosts’ personal data is being processed through our online platform "HeyStudent" (hereinafter "the Platform" or “HeyStudent”). For the purposes of this Policy, where reference is made to Hosts whose personal data is processed, it is meant and it refers to natural persons or the legal representatives of our Hosts, who are in this case personal data subjects (hereinafter referred to as "Hosts", "you"). In addition, please note that this Policy is an integral part of the Terms of Use of the Platform (hereinafter referred to as "Terms of Use").

Please read our Policy carefully to clearly understand how we collect, use, protect or process in any way the personal data relating to you as Hosts through our Platform in the context of our cooperation.

1. Who we are - Data Controller

The Platform is owned and managed by the company under the name "HeyStudent SINGLE MEMBER PRIVATE COMPANY", based in Athens (Attica) at 20 Solomou Street, Postal Code 17456, with Tax Identification Number 802691928 of the Tax Office KEFODE ATTIKIS and business registration number 181034103000 (hereinafter "the Company" or "we").

Our Company has developed the Platform HeyStudent, through which Hosts display their properties to facilitate property bookings from Platform’s registered users (potential tenants) through our Platform (hereinafter "Students"). Students can browse our Platform and submit a booking request for a property listed by a Host through our Platform. The types of properties displayed and available for booking through our Platform and the relevant details are set out in detail in our Platform Terms of Use. The Company provides online intermediation services between Hosts and Students in accordance with Regulation (EU) 2019/1150 of the European Parliament and of the Council, connecting Hosts and Students to facilitate the conclusion of a booking through the Platform, without being a party to the booking or having any control over or involvement in the rental.

The Company is the Data Controller of your personal data collected through our Platform in the context of our cooperation.

The Company informs the Host, and the Host acknowledges being aware of the following:

2. Definitions

• "GDPR" means the General Data Protection Regulation 2016/679.
• "Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one whose identity can be established, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
• "Processing" means any operation or set of operations which is performed, whether or not by automated means, on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• "Data Controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its appointment may be provided for by Union or Member State law.
• "Data Processor" means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
• "Recipient" means the natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether or not a third party.
• "Third party": means any natural or legal person, public authority, agency or body, with the exception of the data subject, the controller, the processor and persons who, under the direct supervision of the controller or the processor, are authorized to process personal data.
• The other terms of this Policy shall have the meaning assigned to them in the Platform’s Terms of Use.

3. How do we collect your data?

Directly from you

We collect personal data directly from you when:

• You express your interest in becoming a Host in our Platform by filling out the relevant form, entering for this purpose your personal data (e.g. name, email address, telephone number, details of your properties).
• You enter in your account, after you have been given access by us, data such as financial information, bank account details, etc., and submit to the Company the relevant required identification documents, financial documents, legal documents of legal representatives, etc.
• You communicate with us by email/phone or chat within the context of our cooperation.
• You respond to Student reviews concerning you on our Platform.
• You communicate with the Students through our mediation, via the Platform’s messaging or chat functionality

By automated means when using our Platform

When you use our Platform as part of our cooperation, e.g. when you create an Account to become a new Host, we automatically collect information, including personal data, about the pages you visit, the services you use and how you use them. This information may include information about your interactions with the Platform, log data and device information, IP address, dates and times of access, hardware and software information, geographic location, browser type and version and operating system, cookie data and data from similar technologies, as well as other information about the Platform’s use. For more information on the use of cookies and similar technologies, please read the Platform’s Cookie Policy.

4. What data do we collect directly from you?

The personal data we collect in the context of our cooperation may include the following:

• Identification and certification (traceability) information or documents, such as your name, surname, your mailing address, your email address, your telephone number, your identity card or passport details, your account details, details of legal documents of legal representatives. To complete the sign-up process, the Host must complete the Persona platform identity verification system, the terms of which shall apply during the verification process.
• All the necessary documents relating to the property and its ownership, as well as photographs and videos of the property, and any additional details required to be displayed when the property is presented for rental.
• IBAN details, bank account details (number and beneficiary), as well as details relating to the clearance of transactions between us, such as payment details, commissions, etc.
• Financial information (e.g. VAT/ Tax data, VAT details, TIN number, tax office, GEMI, personalised information from taxisnet).
• Any information contained in your communications with us, by email, telephone or post, including the content of communications and metadata.
• Any information contained in your communications with the Students, facilitated through our mediation, via the Platform’s messaging or chat functionality.

Special categories of data: We inform you that we do not collect special categories of personal data (e.g. health data) of Hosts on our Platform. In the event that, however, we detect, or you point out the existence of such data on our Platform or in our communications, we assure you that we will proceed to their immediate deletion.

Reviews: Students will be sent a rating request after the rental is completed where they could rate the Host on a scale (from one (1) to five (5) with one (1) being the lowest rating and five (5) being the highest) and free text space to provide details. In addition, we inform you that if we receive a report and determine that a published review violates personal data protection laws (e.g., unlawful disclosure of the Host’s or a third party’s data), we may, at our discretion, delete the review after informing its author of such action.

5. How and for what purpose do we use your data?

We use the personal data we collect (e.g. when you create an account as a Host), within the framework of our cooperation, to provide our services, to improve and develop our Platform, to create and maintain a reliable and secure area and to comply with our legal obligations. More specifically, we use your data:

• To ensure the traceability of our business users in relation to our legal obligations.
• For you to access the Host Environment by creating an account and becoming a Host for the presentation and promotion of properties made available for booking through the Platform.
• To provide you with services in the context of our cooperation in the Host Environment in accordance with the Terms of Use.
• To enable you to receive notifications via the Platform regarding booking requests concerning your properties.
• To enable Host reviews by Students who have completed a booking through the Platform.
• For you to receive cancellation requests from Students.
• To send you notifications and other communications related to your Account, to respond to your requests and to take into account your comments in the context of our cooperation.
• To respond to service requests of Students with respect to a specific Host or booking request.
• To provide online intermediation services for direct communication between the Host and the Student via the Platform’s messaging or chat functionality.
• To send you promotional messages, marketing, advertising and other information about properties and/or services.
• To enable the Company to review/evaluate you as a Host for purposes of Platform ranking.
• To ensure the implementation of the Terms of Use and other policies.
• To enable the efficient operation of the Platform.
• To comply with our legal obligations.
• To detect and prevent fraud, spam, abuse, security incidents and other harmful activities and conduct security investigations and risk assessments.
• To improve our services and your experience as Host, for the purposes of testing, troubleshooting and improving the functionality and quality of our online services, and generally to optimize and adapt our Platform to your needs, making it easier to use.

We will only use your data for the purposes set out above. No other use of your data will be made without prior notice and, where required, your explicit consent. If we reasonably consider that we need to use your data for another purpose, it will be a purpose relevant and compatible with the purpose for which the data was originally collected. In addition, before we use the data for an alternative purpose, we will also take into account, inter alia, any relationship between the purposes for which the data were collected and the purposes of the further processing envisaged, the context in which the data were collected, the nature of the data, the likely consequences of the envisaged further processing for the data subjects and the existence of appropriate safeguards.

6. What are the legal bases for your data processing?

The Company is based on the following legal bases:

• The processing of your data is necessary for the performance of the contract between you and the Company, between you and the Student, but also for measures to be taken at your request prior to entering into a contract.
• The processing is necessary for the purposes of the legitimate interests pursued by the Company or a third party. The Company will always balance the rights and interests of Hosts in protecting their data against the rights and interests of the Company or the rights of third parties such as the Students. In particular, for the purposes of providing regular updates to the Host by email, mobile phone message (SMS) or any other appropriate means of communication addressed to the Host, the Company will use the Host’s contact information it has lawfully obtained, during our previous business relationship, as long as the Host does not object to such communication. Such communication may include information about the Company’s services and/or offers and/or promotional activities, the conduct of surveys for the improvement of the services provided to the Hosts as well as other promotional activities and similar purposes. Finally, we consider that our legitimate interests include the presence and promotion of our Platform and our services in any electronic social networks (social media) and other information society services, giving also the opportunity to other users of these networks to participate in promotional activities as well as to express that they like our page and to post comments on our services.
• The processing is necessary to comply with a legal obligation to which the Company is subject (such as tax legislation, consumer protection legislation, lawful law enforcement requests and any relevant legislation regulating the general operation, responsibilities, and obligations of the platform ).
• The processing is based on your explicit and freely given consent. In the event that we have requested your consent to a particular processing, you have the right to withdraw your consent at any time.

7. Who has access to your data?

The authorized employees and executives of the Company, as well as any of our agents, suppliers or subcontractors, may gain access to your data, as this is reasonably necessary for the fulfillment of the processing purposes set out in this Policy.

We would also like to inform you that some of your data, or details of your properties, may be accessible to any User of the Platform/Student prior to submitting a booking request for any of your properties, to the extent that this information is necessary for the purpose of informing the public regarding such distance contracts, in accordance with the law and the Terms of Use.

In addition, we may disclose your data:

• To respond to your requests for support services or Student requests concerning you or clarification of a review or a cancellation.
• To the extent that we are obliged to do so by law.
• In relation to any ongoing or future legal proceedings.
• In order for the Company to establish, exercise or protect the rights, property or safety of the Company and the Platform’s users (including, but not limited to, enforcing our Terms of Use).
• To third-party service providers that provide support services, such as:
  • technology/development services
  • customer support
  • market research and evaluation management
  • fraud detection and prevention services, including the anti-fraud control service
  • internet service providers, cloud storage providers, technical support, such as content moderation services
  • identity verification system through the company Persona or any other third-party provider of identity verification
  • payment institutions such as Stripe
  • marketing services; for more information about personalized advertising and your options, please also read our Cookies Policy.

Please note that each third party with whom the Platform collaborates is subject to the specific strict conditions for processing personal data set out in the GDPR. We do not sell, trade or otherwise transfer your data to third parties.

8. Where do we store your data and where do we transfer it?

Your data is stored in secure servers and computer systems within the EU.

To fulfil the Company’s purposes, the personal data collected is processed within the European Economic Area (EEA). However, we may use providers for certain online services, located outside the EEA. In any case where data is transferred to a third country, the Company will take appropriate measures (safeguards), such as ensuring that the transfer takes place in a country that enjoys an adequacy decision or will apply standard contractual clauses, to ensure an adequate level of data protection and the lawfulness of the data processing.

9. How long do we retain your data?

We will retain your data only for as long as necessary for the performance of the contract between us, to enable you to use our services and to enable us to provide you with our services, to comply with applicable laws, to resolve disputes with any parties and in any way necessary to enable us to conduct our business, including the detection and prevention of fraud or other illegal activities.

In the event that the Host opts for termination/deletion of his/her account it shall be done following the passing of 30 calendar days, in accordance with the Terms of Use, and we will delete all personal data concerning you, with the exception of those that:

• must be retained in compliance with legal provisions (for example, in order to comply with tax law),
• is required to comply with any current or future legal proceedings,
• is necessary to establish, exercise or defend the legal rights, property or safety of the Company and the Platform users.

However, certain personal data concerning you and related to our cooperation, in particular payment/transaction data, but also information about the notifications you have received, any consent and its withdrawal, may be retained as necessary information in order to enable us to document the lawfulness of Company’s processing of your data and to protect the legal claims of the parties.

The identification and legal representation data of the Host is retained for as long as their account on the Platform is active and for five (5) years from the termination of their account.

In the event that the Company, for any reason, limits, suspends or completely discontinues the provision of intermediation services through the Platform to a specific Host, in accordance with the Terms of Use, your data will be retained by the Company for a period of five (5) years; after this period of five (5) years, the provisions on the deletion of data mentioned above will apply. If within this retention period the Company revokes the restriction, suspension or termination, it will without undue delay reinstate your account and any access to your personal data (and/or other data).

With regard to your data contained in your direct communications with Students through our mediation, we inform you that they are retained for a period of five (5) years.

With regard to the transaction records, the retention period is five (5) years as of the date of each transaction.

If you have a question about the specific retention period for certain types of personal data we process, please contact us using the contact details provided below.

10. How do we protect your data?

We have implemented appropriate technical and organisational measures and procedures to prevent unauthorised access to and use of personal data. We use security procedures and technical and physical restrictions on the access and use of personal data. Your data is stored on secure networks and is only accessible by a limited number of people who have special access rights to such systems and are bound by a duty of confidentiality. Only authorised personnel are allowed to access data during work-related duties.

Furthermore, the Company’s processors acting on behalf of the Company, and its agents/fulfillment assistants are committed to maintaining the confidentiality of the Hosts’ personal data and not to disclose or allow access to any third party without the Host’s prior notice, except in cases expressly provided for by law. In addition, processors acting on behalf of the Company during the performance of their duties are contractually obliged to implement appropriate technical and organisational measures to ensure the best possible protection of personal data against any accidental or unlawful destruction, damage or loss, alteration or unauthorised access and, in general, unlawful processing of data. These aim to ensure and document that processing is carried out in accordance with the GDPR, taking into account the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons.

11. What are your rights?

Subject to the provisions of the applicable legislation (i.e. the GDPR), you have the following rights in relation to your data:

• Request access to the personal data we hold about you. You can request a copy of your data and we will provide it to you free of charge. If you request further copies, we may charge a reasonable fee for administrative costs.
• Request that we correct any inaccurate data concerning you and, taking into account the purposes of processing, to complete any incomplete data concerning you. In any case, please note that when you provide us with your data, you guarantee that it is true and accurate and you undertake to inform us of any change or modification thereof.
• Request that we delete all your data to the extent that it is no longer necessary for the purpose for which it was collected and processed, as explained above, or when we are no longer legally allowed to process such data. Please note that, in this case, we will only retain non-personal data and information for statistical and technical purposes. We will also retain certain payment/transaction data for as long as we are required to do so by applicable tax law and/or our contractual obligations to our service providers.
• Request that we cease or restrict the processing of your data, which means that in some cases you can ask us to suspend the processing of data for a period of time or to keep it longer than necessary.
• Where the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.
• Request portability of your data. The right only applies to information that you have given us yourself, if we process information based on your consent or in preparations about the conclusion of a contract and the processing is automated.
• To lodge a complaint before the competent data protection authority, in particular before the Greek Personal Data Protection Authority (https://www.dpa.gr/el/polites/katagelia_stin_arxi), if you believe that the processing of your data is not lawful.
• Insofar as the legal basis for the processing of your data is consent, you have the right to withdraw this consent at any time. The withdrawal will not affect the lawfulness of the processing prior to the withdrawal.
• You can instruct us at any time not to process your personal information for marketing purposes.

Please note that in order to respond to any of the above requests, we will require you to provide us with appropriate proof of your identity.

The Company may not satisfy a request where it demonstrates compelling and legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of its legal claims. Furthermore, the exercise of certain of the above rights may result in an impediment to the provision of the Services.

In any case, we inform you that we will respond to your requests without delay, and in any case within one month of receipt of the request. This period may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests, after informing you of such a time extension within one month of receipt of the request, as well as of the reasons for the delay.

You can exercise any of your rights in relation to personal data concerning you by email to support@heystudent.com.

12. Contact us

If you have any questions about this Policy and how we process your personal data, you can contact us by sending an email to info@heystudent.com.

13. Changes to this Policy

This Policy may change periodically in order to respond to feedback from our Hosts, changes to our services or changes in the legal framework. If there are material changes to this Policy, we will notify you either by displaying a notice on our Platform of such changes before they take effect, or by sending you a notice by email.

We encourage you to periodically review this Policy to keep up to date with how the Company processes your data.

14. Management of the Platform users' Personal Data

We inform you that the allocation of roles and obligations relevant to the applicable personal data legislation between the Company and the Hosts with regard to the management of Platform users' (Students’) data is made in accordance with Annex C of the Terms of Use (see below).

ANNEX C: Management and protection of personal data of the Platform's users

By registering on the Platform and creating a Host Account, the Host accepts and is fully bound by this Annex C, which constitutes an integral part of the Terms of Use.

The present document outlines and specifies the purposes of the processing of personal data to ensure compliance with the legislation on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter "GDPR"). It reflects the roles and relationships of the parties involved in the processing of personal data relating to Students within the framework of their cooperation, in accordance with the Platform’s Terms of Use and the GDPR where the parties primarily act as joint controllers managing booking requests through the Platform or in cases where each party is an independent controller for specific processing activities related to their own operations.

A. Definitions

For the purposes of this document:

• “Personal data” means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one whose identity can be established, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
• “Processing” means any operation or set of operations which is performed, whether or not by automated means, on personal data or on sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• “Data Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its appointment may be provided for by Union or Member State law.
• "Data Processor” means natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
• “Recipient” means the natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether or not a third party.
• “Third party” means any natural or legal person, public authority, agency or body, with the exception of the data subject, the controller, the processor and persons who, under the direct supervision of the controller or the processor, are authorised to process personal data.
• “Consent” of the data subject: any freely given, specific, explicit and informed indication of the data subject's wishes by which the data subject signifies his or her agreement, by a statement or by a clear affirmative action, to the processing of personal data concerning him or her.
• "Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access of personal data transmitted, stored or otherwise processed.

The other terms of this agreement shall have the meaning assigned to them in the Platform’s Terms of Use.

B. Roles of the Parties

According to the interpretation by the EU institutions (see European Data Protection Board Guidelines 07/2020 on the concepts of Controller and Processor), the predominant criterion for the existence of joint controllers is the joint participation of two or more entities in determining the purposes and means of a processing operation. The joint participation may take the form of a joint decision taken by two or more entities or be the result of convergent decisions of two or more entities, where those decisions complement each other and are necessary to carry out the processing in the sense that they have a tangible impact on the determination of the purposes and means of processing. An important criterion is that processing for the purposes of this agreement would not be possible without the participation of both parties, in the sense that the processing by each party is inseparable, i.e. inextricably linked.

Furthermore, the existence of shared responsibility does not necessarily mean equal responsibility of the various entities involved in the processing of personal data. An entity shall be considered a joint controller only for the processing operations for which it determines, together with others, the means and purposes of the processing. If one of these entities decides on its own the purposes and means of previous or subsequent processing operations in the processing chain, that entity should be considered the sole controller for those specific processing operations.

For the purposes of the cooperation between the Host and the Company:

1. The Host as joint Controller with the Company

The following rules delineate the framework for the processing of personal data by each Host as joint Data Controller with the Company in relation to the personal data of Students who choose to make booking requests through the Platform and set out the principles and procedures to be followed by the parties and the responsibilities they each undertake.

The Company provides online intermediation services for the promotion and booking of Hosts’ Properties to Students through its online Platform. In this context, it collects and processes personal data relating to Students who submit a booking request for a Host’s property through the Platform, which (data) is subsequently shared with the Host in the context of their cooperation and the necessary performance of the acceptance procedure by the Host. The Host, as a business user of the Platform, offers properties through the Platform. The Company is not a party to the contract between the Host and the Student.

In this regard, the parties act as joint Data Controllers since they jointly determine the purpose of the processing (the promotion of the Host’s properties through the Platform) and the essential elements of the manner of processing (presentation of the Host's properties and services through the Platform, submission of the Student’s request to book a property through the Platform) with collection of the necessary data. Indeed, for the mutually agreed processing by and within the agreement between them, the joint actions of both parties are required, since it would not be possible to make a booking through the Platform without the participation of both parties, in the sense that the processing by each party is inseparable, in other words inextricably linked.

1.1. Purpose of processing

The nature and subject matter of the processing of personal data arise from the purposes and scope of the agreement between the parties, as set out in the Terms of Use.

More specifically, the Company undertakes the collection and storage of personal data relating to Students who book the Host’s properties through the Platform, which it shares with the Host, in order for the latter to accept the booking request and complete the booking.

Therefore, the Company jointly with the Host determines the purpose of the processing, which consists exclusively of the processing of the booking request for the Host’s properties through the Platform and to facilitate communication between Hosts and Students.

Therefore, any further processing of the Student’s personal data by the Host, including for direct marketing purposes, is not permitted unless a valid legal basis is established.

1.2. Data categories

The Company and each Host share the following categories of data as joint Data Controllers:

All data concerning a Student and required per booking request and in particular: name, surname, telephone number, email address, identity data, any comments of the Booking, university name and expected graduation date.

1.3. Lawfulness of Processing: Each party shall ensure that it processes personal data lawfully, in accordance with data protection legislation and on one of the following legal bases:

• processing is necessary for the performance of a contract to which the data subject is a party or to take measures at the request of the data subject prior to the conclusion of a contract.
• processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless those interests override the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
• processing is necessary to comply with a legal obligation to which the parties are subject (such as tax legislation, consumer protection legislation, or lawful law enforcement requests).
• the data subject has given his or her consent to the processing of personal data for one or more specific purposes.

1.4. Data Quality: The Company aims to ensure that personal data is accurate, and the Host acknowledges he/she must observe the principle of integrity and accuracy, where necessary, of such data. When any of the parties become aware of inaccuracies in the personal data, they are obliged to inform the other party.

1.5. Exercise of Data Subjects' Rights: For the collected personal data, the data subjects have the right of access, the right to rectification, as well as the right to portability, the right to object and the right to erasure under the terms of the GDPR. Each party undertakes the management of the requests for the exercise of the data subjects' rights. Each party agrees to immediately notify the other party in case of exercise of a right and in any case the parties agree to provide reasonable and immediate assistance to each other (within 5 working days of such a request) so that they can comply with and respond to any queries or complaints regarding the processing of the data.

1.6. Transfers of Personal Data to third countries: The parties are aware that for the operation of the Platform, Student data is stored in a secure manner on servers and computer systems within the EU and processed within the European Economic Area (EEA). In the event that, within the scope of the processing described in this agreement, a party needs to receive services from providers located outside the EEA or in a jurisdiction that is not deemed adequate under the GDPR, such data transfer will only take place if appropriate safeguards, as provided in Articles 44 et seq. of the GDPR, have been implemented.

1.7. Storage and Retention of Personal Data: The data collected is stored by the Company in a secure encrypted electronic file for specific periods of time, as explicitly defined in the Privacy Policy for Users of the Platform.

1.8. Security measures: The Parties agree to implement appropriate and adequate security measures to protect the personal data processed pursuant to this agreement against the risks of accidental or unlawful destruction, loss (including accidental events), access, alteration, unauthorized disclosure. Each of the Parties undertakes that access to personal data processed under this agreement shall be limited to a limited number of employees and to the extent necessary for the agreed purposes. The use of personal data by staff shall be subject to the same commitments to lawful processing and data security that the Parties undertake hereunder.

1.9. Record of Processing Activities: In the event that it is mandatory to keep a record of processing activities Article 30 of the GDPR, the parties agree that the Company shall keep the record in the form and manner set out in this article as well as for the relevant mapping of personal data.

1.10. Data Breach: Each party shall immediately notify the other party of any incident or suspected incident of unlawful processing of personal data during the cooperation period of the parties and the provision of the Host’s services, in accordance with Articles 33 and 34 of the GDPR.

2. The Host as an Independent Data Controller

Each Host acts as an independent Data Controller concerning the personal data of Students for all processing activities conducted for the formal completion of the Rental and the submission of the relevant information to the competent state platforms for rental reporting purposes; these processing activities pertain to the Host’s own operations relating to bookings and are carried out using its own resources, particularly in relation to providing the properties to Students, in accordance with its own policies and its legal obligations. The Host as an independent Data Controller is obliged to comply with the obligations established by the GDPR for data controllers towards data subjects, in particular the obligations to inform data subjects and to satisfy their rights.

3. The Company as an Independent Data Controller

When the Company offers online intermediation services to all business users (i.e., Hosts) and Students through the Platform, it collects personal data related to Students use and browsing of the Platform, including data, metadata, and generated cookies. This information is not shared with the Hosts for processing; instead, it is provided only as aggregated statistical data (referred to as "other data"). Additionally, the processing of Users’/Student’s data by the Company is governed by the Student Privacy Policy, which is applicable and subject to change over time.

4. Other Data

Non-personal data is information in aggregate form, to which each Host has access for the qualitative analysis of traffic to its properties. In particular, these data are being processed for the purpose of transparency in the provision of online intermediation services through the Platform, for providing adequate information to the Hosts and for evaluation purposes for the better functioning of the Platform and the Hosts, in accordance with article 9 para. 2 c' of Regulation 1150/2019/EC, and do not constitute personal data of Students. Specifically, access is given to the following categories of data:

Data of a statistical nature that do not identify natural persons for the bookings of the Students and/or for all the reservations through the Platform.

C. Duration of this Agreement

The present Annex is valid for the duration of the cooperation between the parties under these Terms of Use.