PRIVACY POLICY

LOLO PERSONAL DATA PROTECTION NOTICE

Lolo processes the personal data of users of the Lolo app (Lolo app) and the website www.lolo.id, (Website) of SIA "Lolo".

In this Notice on the protection of personal data, the word connection Lolo platform applies to both the Website and the Lolo App on smart devices. In this Notice on the protection of personal data, the name user applies to all natural and legal persons using the Lolo platform. A person becomes a user of the Lolo Platform by registering on the Lolo Platform. A user is: 1) A customer who uses and uses the Lolo platform to find, reserve, and pay for a service; 2) a service provider who offers and performs the service. The processing of personal data may concern both groups of users.

This Notice on personal data protection may be updated occasionally to reflect changes in data processing regulations or practices. The latest version of the notice can be found on the Website.

1. DATA CONTROLLER

This Personal Data Protection Notice applies to the processing of personal data by Lolo .

2. Grandfather CONTACT INFORMATION

SIA SIA "Lolo", reg. No. 40203330318, legal address: Riga, Baldones Street 5 - 1, LV-1007 , e-pasta address: [email protected]

3. PROCESSED PERSONAL DATA AND DATA SOURCES

The personal data collected and processed by Lolo can be divided into two general categories of data: Users' personal data, analytical data and cookies.

User data

User Data is personal data collected directly from users of the Lolo Platform. Lolo obtains and processes user data when the User registers on the Lolo platform. Lolo also collects and processes information about transactions and payments made by users through the Lolo Platform.

User Data Required to Use the Lolo Platform

The following personal data obtained and processed by Lolo is necessary to properly fulfil the contract concluded with the user (in the context of the terms of use), as well as to implement the legitimate interests of Lolo, while fulfilling the obligations towards the service providers.

By registering on the Lolo platform and creating a user account, the user provides Lolo with the following information:

• full name
• Phone number
• e-pasta adrese
• information about the payment instrument(s), such as the number and expiration date of the payment instrument(s) (required to reserve and pay for Services through the Lolo Platform, but this information is not stored by Lolo. Payment processing is performed by third parties based on international and national standards and regulatory enactments (e.g. Visa, MasterCard, banks)

User data provided voluntarily by the user

The User of the Lolo Platform can improve his experience of using the Lolo Platform by voluntarily providing various information, such as:

• ratings of services provided
• consent ( opt-in ) and disagreement ( opt-out ) for the use of information for marketing purposes
• information provided by the User by phone or email or in conversation with Lolo, including records of calls to customer service

In addition to the User data collected from the Users themselves, Lolo processes individual personal data provided by the service provider about the User.

Analytical data

Although Lolo does not use analytical data to identify the User as an individual, sometimes identification of the User is theoretically possible. In such situations, analytical data may also be considered personal data.

When the User visits the Lolo Platform, searches for Services and makes reservations, the Lolo Platform may automatically collect information about the device and information about the use of the Lolo Platform.

Device information.

Lolo may collect the following information about the technical device you use when using the Lolo Platform:

• device and device identification number
• Country
• IP addresses
• browser type and version
• operating system
• Internet service providers
• the advertising identifier of the device
• visitor identifier

Usage s information.

Lolo may collect information about the User's behaviour when using the Lolo Platform, such as:

• Time spent on the Lolo platform
• information about reservations made through the Lolo platform
• the URL of the site you visited before and after visiting the Lolo Platform
• Time and date of service visits
• Visited sections of the Lolo Platform Services
• the products you search through the Lolo platform

Cookies

The Lolo platform uses cookies, warning the Website Users about it.

Cookies are small text files that are stored on the User's specific device (computer) during a visit to a website or app. On each subsequent visit, cookies are sent back to the site of origin or to another site that recognizes the cookie. Cookies act as a memory of a specific website, allowing this page to remember the specific computer (or device) on subsequent visits, including cookies that can remember the User's settings or improve the User's convenience.

The cookies used can be divided into technologically necessary cookies, without which the execution of the service is technologically impossible or significantly difficult, and analytical statistical cookies.

Users can choose to set their browser to refuse cookies or to warn that cookies are being sent. For example, the following links provide information on how to adjust cookie settings in some popular browsers:

Safari

Google Chrome

Internet Explorer

Mozilla Firefox

The website uses the following cookies:

Required:

• [SESSdb34877a4022e0a5c40d60cffaeb5307] This cookie is only required by content administrators for authentication.
• maintenance_message - this cookie is required by all users so that notifications from the content or platform administrator are not displayed again (those with which the content consumer has familiarized himself and pressed the "Close" button).
• allowCookies – this cookie determines whether the User has agreed to the conditions for the use of cookies and whether to display a notification about the use of cookies in the future.

Statistics:

This website uses the "Google Analytics" program of the company "Google Inc", which uses cookies that are stored on the User's computer and allows to analyze how you use the respective website. The information generated by these cookies about how the User uses this website is sent to a Google server in the USA and stored there. When using IP anonymization, the user's IP address is shortened in the territory of the European Union or the European Economic Area and can only be transferred to Google servers located in the United States for processing in exceptional cases. Google uses this information to evaluate how you use the website in question, to prepare reports for website operators about activities on the website in question and to provide other services related to website and internet use. Google does not associate the IP address received here with any other information that Google has. If necessary, Google can provide this information to third parties, if this is required by law or if third parties process this data on behalf of Google.

• _ga, _gat, _gid - these three cookies are required for all users to allow the transfer of visit data to the statistical collection tool google analytics.

If you do not accept the use of statistical cookies, the visit data will not be included in the Google Analytics statistics.

Social media:

• _cfduid - this cookie is required by all users to be able to share a content unit on their social networks.

4. PURPOSE AND LEGAL BASIS OF PERSONAL DATA PROCESSING

Goals

Lolo's processing of Users' personal data has several purposes. Data may be collected simultaneously based on several purposes:

To ensure the operation of the Lolo Platform, provide Services and fulfil our contractual obligations (legal basis: contract performance and legitimate interests)

Lolo processes Users' personal data in order to be able to offer Services on the Lolo platform to ensure the fulfilment of the concluded Service Agreement.

Data processing is necessary, for example, to process reservations, to communicate with Users, to process payments or any refund (in relevant cases) and to provide service providers with the necessary information to provide the Service. If the User contacts customer service, Lolo will use the information provided to answer the User's questions or resolve the dispute.

Lolo may collect and use data about the exact or approximate location of the User (geographical location of the computer or mobile phone) to offer the Services in the vicinity of the User. Information about the User's location, which allows to identify the User personally, is not collected or used without the User's consent. Permission to use the User's location is requested on the Lolo platform. The tracking feature can be disabled through the Lolo app (Profile - Settings - Location) or through the privacy and security settings of your browser on your computer.

Lolo for legal obligations (legal basis: fulfilment of a legal obligation)

Lolo processes data so that we can comply with our legal obligations. This includes data processed for accounting purposes and to provide information to relevant authorities, such as tax authorities.

For handling disputes and legal proceedings (legal basis: legitimate interests)

Lolo may process personal data to the extent necessary for dispute resolution, litigation, or debt collection. Lolo may also process data to prevent fraud, abuse of the Services, and data, system and network security.

For communication with Customers and marketing needs (legal basis: legitimate interests)

Lolo processes the user's personal data in order to communicate with Customers in connection with the Services, as well as to inform them about possible changes. Personal data of customers is used for the purposes of selling Services, including personalizing offers and providing more appropriate services. User data may be processed to improve the Lolo platform and the Services offered, also to analyze information about the reservation made and the Services received, and the feedback provided.

For quality improvement and trend analysis (legal basis: legitimate interests)

Lolo may also process information about how users use the Lolo Platform to improve the quality and functionality of the Lolo Platform. Personal data may be used, for example, for customer satisfaction surveys. Such data analysis is carried out as far as possible with aggregated data where identification of Customers is not possible.

In certain sections of the Lolo platform, Customers may be asked to give their consent to the processing of personal data. In this case, the relevant Customer data is not processed if the Customer does not give such consent, and the Customer can withdraw the given consent at any time.

5. SHIPPING TO COUNTRIES OUTSIDE THE EUROPEAN UNION

Lolo stores the personal data of Users within the borders of the European Union. However, if the Service Providers include a service provider operating outside the borders of the European Union and the User chooses to receive the Service of this service provider, it is possible to send the User data outside the borders of the European Union.

Lolo will take steps to ensure that users' personal data is protected at an appropriate level in the jurisdictions in which it is processed by including appropriate provisions for this purpose in our mutual agreements.

More information about sending personal data can be obtained by contacting Lolo at the email address provided.

6. RECIPIENTS

Lolo uses users' personal data only to the extent that it is reasonably necessary for the purposes of this Personal Data Protection Statement.

Lolo does not share user information with third parties unless it can be determined that one of the following conditions has occurred.

So that the Service Provider can provide its services in accordance with the purposes of data processing specified in this Notice

To the extent that third parties (for example, Service Providers) need access to personal data in order to be able to provide Services to Customers, Lolo transfers Customer data to such third parties in the minimum necessary amount. Lolo's Customer personal data may also be transferred to authorized service providers who provide, for example, data storage, accounting, sales and marketing services, as well as to payment service providers to process Customer payments.

If personal data is processed by third parties in Lolo's interest or on behalf of Lolo, Lolo includes provisions in the relevant agreements to ensure that user data is processed only for the purposes specified in this Personal Data Protection Notice and in accordance with all applicable laws, and in compliance with relevant confidentiality and security measures.

Contract performance and legitimate interests

Lolo can transfer users' personal data to third parties if there is reason to believe that this is necessary to: (i) ensure the fulfilment of obligations set forth in regulatory acts, or to fulfil a court ruling that has entered into force; (ii) detect, prevent or otherwise facilitate the detection or prevention of fraud or other criminal offences, as well as resolve security or technical problems; and/or (iii) protect the interests, property, or safety of Lolo, other users, or the public, to the extent that it complies with applicable laws and regulations.

With the user's explicit consent

Lolo is entitled to share the user's personal data with third parties if the user has given such explicit consent. The user has the right to withdraw such consent at any time.

7. STORAGE PERIOD

Lolo does not store the user's personal data for longer than is legally permitted and necessary to ensure the use of the Lolo platform and the reservation and use of the Services. The storage period depends on the nature of the information and the purpose of processing. The maximum storage time for different data may be different. Lolo regularly deletes incorrect or unnecessary personal data.

Most of the personal data relating to the Customer's user profile on the Lolo platform is deleted 90 days after the Customer has deleted his user profile. Individual Customer data is stored by Lolo only for as long as the need for such processing is determined by law or is reasonably necessary for the fulfilment of legal obligations or legitimate interests, such as claims consideration, accounting, internal reporting and reconciliation purposes. All personal data relating to the Customer's user profile is deleted two years after the Customer has deleted the user profile, unless data retention is necessary, for example in legal proceedings.

8. CUSTOMER RIGHTS

Access rights

The Customer has the right to access and receive information about the Customer's personal data processed by Lolo. Lolo provides the opportunity to view individual data in the Customer's User profile, as well as the Customer has the right to request a copy of his personal data using the above contact information and

Right to withdraw consent

If the processing is based on the Customer's consent, the Customer may withdraw the consent at any time free of charge. Withdrawing consent may reduce your ability to use the Lolo Platform. Withdrawal of consent does not affect the lawfulness of consent-based processing carried out prior to its withdrawal.

Right to correct

The customer has the right to correct and supplement incorrect or incomplete personal data by contacting Lolo. The customer can correct or update certain personal data in his user profile.

Right to erasure

The Customer may request Lolo to delete the Customer's personal data from our systems, for example, if the data is no longer necessary for the purposes for which it was collected. Lolo will comply with such a request unless Lolo has a legal basis not to delete the data, for example for accounting purposes or legal proceedings. In the event that the Customer wishes to delete his data, Lolo will no longer be able to provide all the services of the Lolo platform.

The right objects

The customer has the right to object to the use of certain personal data if such data is processed for a purpose other than what is necessary for the functioning of the Lolo platform and the provision of Services or the fulfilment of legal obligations. For example, the Customer has the right to request that the processing of personal data be stopped for direct marketing or profiling purposes based on legitimate interests.

Right to restriction of processing

The Customer has the right to request that Lolo restricts the processing of personal data, for example, when the Customer's request to delete, correct data is still being considered or when Lolo does not have a legitimate purpose for processing the Customer's data. In cases where data processing has been restricted, the Customer's data will be saved and will no longer be processed. For example, if the Customer has expressed objections about the accuracy of his data, the processing of such data will be limited until the correctness of the data is ensured. However, this may lead to limited opportunities to use the Lolo platform.

How to exercise your rights

Said right can be exercised by completing and sending Lolo to the e-mail [email protected] data subject request form.

9. DIRECT MARKETING

Lolo can send the Customer information, news and offers about the Lolo Platform and the Services offered in it. The Customer has the right to prohibit the use of the Customer's personal data for direct marketing purposes, market research and profiling carried out for direct marketing purposes, by contacting Lolo at any time, using a link in an e-mail or using the functions of the Lolo platform (Profile Settings Press the button to opt out of receiving notifications ).

10. FILING A COMPLAINT

In the event that the Client believes that Lolo's processing of our personal data does not comply with the applicable legal norms, the Client can submit a complaint to the data protection supervisory authority, the Data State Inspectorate (dvi.gov.lv).

11. SECURITY OF INFORMATION

Lolo uses administrative, organizational, technical and physical safeguards to protect the personal data it collects and processes. Measures include, for example, encryption, anonymization, firewalls, secure facilities and access rights systems as appropriate. Lolo's security controls are designed to maintain an appropriate level of data confidentiality, integrity, availability, and data recovery. Lolo regularly checks the security of the Lolo Platform and IT systems.

If, despite the security measures, a security breach occurs that could negatively affect the privacy of the Customers, Lolo will inform the relevant Customers and other affected parties as soon as possible, as well as the relevant authorities, if and as required by the applicable data protection law.