In order to improve the quality of service and ensure the security of our users’ data storage, we inform you about what data we collect and how it is used on our website http://rp-group.com.ua. We respect the confidential information of every person who visits our website, uses our mobile application, or a self-service terminal. Therefore, in accordance with the applicable legislation of Ukraine and the regulations of the European Parliament and Council, we have prepared this Privacy Policy (hereinafter – the “Policy”). This Policy does not apply to any third-party mobile applications or websites that you may use, including those accessed via hyperlinks available on http://rp-group.com.ua.

Personal data provided by you via http://rp-group.com.ua will be used for the following purposes:

• administration of http://rp-group.com.ua and business operations;
• personalization of http://rp-group.com.ua for you, enabling the use of our services on the website;
• sending messages to the user (email, SMS, Viber);
• providing third parties with statistical information about our users (however, such third parties will not be able to identify any individual user from this information);
• as well as other types of use.

In addition, we use your personal data for marketing purposes (commercial mailings and marketing communications about new products, services, and offers that we believe may be of interest to you), in accordance with the law.

We may disclose your personal information, in exceptional cases and solely for the purposes outlined in this Policy, to any of our employees, officers, insurers, professional advisors, agents, suppliers, as well as gas distribution and/or gas supply companies. Please note that the information you provide is included in personal data databases owned by REGION POSTACH-GRUP LLC (company identification code in the Unified State Register of Enterprises and Organizations of Ukraine – 41260164; registered address: 5 Yurii Shumskyi Street, Office 312, Kyiv, 02098, Ukraine) for the purpose of processing and record-keeping within the limits established by law. To achieve the above purposes, your data may be shared with third parties directly involved in data processing. Personal data may be transferred to third parties in the following cases:

• if you have given explicit consent to such transfer;
• if necessary for the conclusion or performance of an agreement between us and a third party in your interest;
• if required for the establishment and conduct of legal procedures (claims, lawsuits, court proceedings, etc.);
• if there are compelling grounds of public interest;
• upon justified requests from public authorities authorized to request and obtain such data and information.

Except as provided in this Policy, we undertake not to disclose your personal information to third parties.

Your consent to the processing of personal data is valid for an indefinite period. The retention period of your personal data is not limited. Your personal data is processed for no longer than necessary in accordance with its lawful purpose and the objectives defined in this Policy.

By providing us with your personal data for processing, you have the following rights:to request access to your personal data;

• to request correction of any inaccurate personal data about you;
• to request deletion of your personal data;
• to restrict or object to the processing of your personal data, as well as the right to data portability;
• to withdraw your consent to the processing of personal data at any time.

To exercise these rights, you need to contact us with a written request sent to the following email address: office@rp-group.com.ua. Please note that the operation of certain components of http://rp-group.com.ua that require your personal data may be discontinued upon its deletion. Our website http://rp-group.com.ua is not intended for children under the age of 14. The processing of personal data of minors aged 14 to 18 is carried out only with the consent of parents (adoptive parents) or legal guardians. If you have a complaint regarding the processing of your personal data, you may contact us, the Ukrainian Parliament Commissioner for Human Rights, or a court.

We inform you that all necessary measures have been taken to protect your personal data from unauthorized access, alteration, disclosure, or destruction using appropriate technical and organizational safeguards. We use HTTPS encryption technology to secure data transmission between your browser and the website http://rp-group.com.ua. However, it must be acknowledged that data transmission over the Internet is not always completely secure. Therefore, once we receive your information, we will take all possible steps to ensure the protection of your personal data.

The terms of the Policy at http://rp-group.com.ua may be subject to change. In such cases, you should periodically review them at http://rp-group.com.ua/politica_ru. All changes take effect from the moment of publication. By continuing to use http://rp-group.com.ua, you confirm your acceptance of the updated Policy terms in force at the time of use.

If you have any questions regarding our Policy, you may contact us at the following email address: office@rp-group.com.ua.

By using http://rp-group.com.ua/, you confirm that you have read the terms of this Policy and the rights granted to personal data subjects under Article 8 of the Law of Ukraine “On Personal Data Protection,” and you agree to these terms by checking the “I agree” box.