PRIVACY AND PERSONAL DATA PROTECTION POLICY

Effective Date: June 17, 2026 This Privacy Policy (hereinafter referred to as the “Policy”) defines the procedure for obtaining, storing, processing, and protecting personal data that PrJSC “Ivano-Frankivsktourist” (“Prykarpattya” Hotel) (hereinafter referred to as the “Provider” or “Site Administration”) receives from users of the website https://hotel-prykarpattya.com.ua (hereinafter referred to as the “Site”), customers of hotel services, and guests. We respect the confidential information of every person who visits our Site or uses our services; therefore, we strive to ensure the maximum protection of your personal data in accordance with the Law of Ukraine “On Personal Data Protection”.

1. WHAT PERSONAL DATA WE COLLECT

We collect only the data necessary for the proper provision of hotel services, room reservations, and communication with you. This data includes:

• • Identification Data: last name, first name, middle name of the Customer or Guests, date of birth, nationality.

• • Contact Data: telephone number, email address (E-mail).

• • Reservation Data: period of stay, date and time of check-in/check-out, number of guests, room category, number and age of children, information about extra beds.

• • Payment Data: payment card details (cardholder name, card number, expiration date, CVC code), if provided to guarantee a booking, settle invoices, or collect penalties under the Public Offer Agreement.

• • Technical Data (Automatic Collection): IP address, browser type, cookies data, access time, and the addresses of websites from which the user navigated to the Site.

2. PURPOSES OF PERSONAL DATA PROCESSING

Your personal data is processed exclusively for the purpose of:

1. 1. Booking and Reservation Management: processing orders, issuing invoices for payment, providing booking confirmations.

1. 1. Provision of Hotel Services: temporary accommodation and stay in specially equipped rooms of the “Prykarpattya” Hotel, catering arrangements.

1. 1. Settlements and Financial Management: processing payments, executing refunds, or collecting penalties in cases provided for by the terms of the agreement.

1. 1. Feedback and Support: sending notifications, requests, information regarding the provision of services, handling complaints or suggestions.

1. 1. Service Improvement: analyzing website visit statistics to optimize its performance and enhance the quality of customer service.

3. LEGAL BASIS FOR DATA PROCESSING

The Site Administration processes personal data based on the following legal grounds:

• • Conclusion and performance of the Public Offer Agreement for the provision of hotel services (entering into an adhesion contract via acceptance/invoice payment).

• • The User’s consent to the processing of their personal data (provided when filling out booking or feedback forms on the Site).

• • Compliance with legal obligations imposed on the Provider by the current legislation of Ukraine (including tax and accounting records, registration of foreign citizens, etc.).

4. DATA RETENTION AND TRANSFER TO THIRD PARTIES

4.1. Personal data is stored for the period necessary to achieve the purposes of its processing, but no less than the limitation period established by the legislation of Ukraine or the retention periods for financial reporting. 4.2. We do not sell or transfer your personal data to third parties for commercial purposes. Data transfer is possible only in the following cases:

• • Banking Institutions and Payment Systems: to process transactions, authorize payments, hold or deduct funds in accordance with the terms of the agreement.

• • State Authorities: based on official requests, in cases and under the procedure strictly stipulated by the current legislation of Ukraine.

• • Authorized Representatives: third parties (e.g., IT providers supporting the operation of the booking system) who act solely in the interests of the Hotel and based on confidentiality agreements.

5. PERSONAL DATA PROTECTION

The Provider takes all necessary organizational, legal, and technical measures to protect the personal data of Users from accidental or unauthorized access, destruction, modification, blocking, copying, or disclosure.

Please note! According to the Public Offer Agreement, all terms of interaction between the Parties and the transferred data are confidential. We use modern encryption protocols when transmitting payment data through the Site.

6. RIGHTS OF USERS (DATA SUBJECTS)

In accordance with the Law of Ukraine “On Personal Data Protection”, you have the right to:

• • Know about the sources of collection, location of your personal data, and the purpose of its processing.

• • Obtain information on the conditions for granting access to personal data, including information about third parties to whom your data is transferred.

• • Access your personal data and receive a confirmation as to whether it is being processed.

• • Submit a motivated request for the modification or destruction of your personal data if this data is processed unlawfully or is inaccurate.

• • Withdraw consent to the processing of personal data (if the processing was carried out solely on the basis of consent).

To exercise your rights, you can contact us with a written request via email at: tourhotel@ukr.net.

7. COOKIES

The Site uses cookies to personalize services, analyze traffic, and simplify the booking process. Cookies are small text files stored on your device. You can disable cookies in your browser settings at any time, but this may affect the proper functioning of certain features of the Site.

8. CHANGES TO THE PRIVACY POLICY

The Provider reserves the right to unilaterally update this Policy. The new version of the Policy becomes effective from the moment it is posted on the Site, unless otherwise provided by the new version itself. We recommend reviewing this page periodically to keep track of current terms.

9. COMPANY CONTACT INFORMATION AND REQUISITES

If you have any questions regarding this Policy or the processing of your data, please contact us using the details provided below: PrJSC “Ivano-Frankivsktourist” Ukraine, 76025, Ivano-Frankivsk 140-A Hetmana Mazepy Str. Account No. 26002052525156 at JSC “Privatbank”, Ivano-Frankivsk branch MFO 336677, Code 02659186 E-mail: tourhotel@ukr.net