PRIVACY POLICY – DAYMAKER

We value your right to privacy and make every effort to protect your personal data in accordance with the applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and national implementing legislation.

If you are a resident of the state of California, USA and to the extent that it applies to us, we will comply fully with all requirements set forth in the California Consumer Privacy Act (“CCPA”) and nothing in this Privacy Policy can be construed as limiting any right you might have as a resident of the State of California pursuant to the CCPA or pursuant to Californian Civil Code Section 1798.83 et. sec. (“Shine the Light” requests).

If you are a resident of the state of Nevada, USA and to the extent that it applies to us, we will comply fully with all requirements set forth in the Nevada Senate Bill 220 (“SB 220”) and nothing in this Privacy Policy can be construed as limiting any right you might have as a resident of the state Nevada pursuant to the SB 220.

In this Privacy Policy, we want to inform you in clear terms about what personal data we collect from you, for what purposes we will process this data, the legal basis for this processing, to whom your personal data may be transferred, how long we will retain your data, how we will protect your data and what rights you have with regard to the processing of your personal data.

1.     Who is Daymaker?

DAYMAKER BV is a limited liability company incorporated under Belgian law, having its registered office at Gasthuisstraat 59, 2340 Beerse (Belgium), registered with the Crossroads Bank of Enterprises under the number 0766.997.608 (hereinafter “Daymaker”, “we” or “us”).

Daymaker has set up a platform which gives users the opportunity to become involved with the exchange of travel information by ways of sharing travel routes and giving particular tips related to these travel routes (hereinafter the “Daymaker Platform”). In the context of these activities, Daymaker collects, holds, discloses and/or otherwise processes personal data. Pursuant to the applicable data protection legislation, Daymaker qualifies as the ‘data controller’ with respect to these personal data.

2.     Whose personal data does Daymaker collect?

In the context of its business (as described above), Daymaker processes personal data of professional and non-professional users who subscribe to the Daymaker Platform, of contact persons at professional users of the Daymaker Platform, of prospects, and of visitors of our website.

3.     What personal data does Daymaker collect?

Daymaker may collect the following personal data about you insofar as this information is relevant for the purposes for which it is needed, as explained under title 4 below. Anytime certain information is mandatory and other information is optional, this shall be clearly indicated as such, so that you can choose whether or not to provide us such information.

Identification information

and

contact

Personal identification data: name, surname, e-mail address, zip number, personal interests, a picture (optional) and if applicable company name and number

Username, password and account information of persons subscribing to the Daymaker Platform

Electronic identification data: information collected via cookies (read our Cookie policy)

Financial information

Bank account number

Financial transactions: amounts that you have paid, overview of the payments, etc.

Personal characteristics

 Personal details: language, date of birth, sex

Profession and employment

Company or organization, function

Leisure and hobbies

Travel preferences such as travelling with kids or disabled, preference concerning culture, adventure, culinary, etc.

Other

Other data you provide to us

4.     For what purposes do we use your personal data?

Daymaker may use your personal data for the following purposes:

• For customer management;

• To offer and improve our services;

• For the authentication and access to your account on the Daymaker Platform;

• For the management of (invoice) disputes and claims;

• For the management of our website;

• For the handling of customer inquiries and complaints;

For your perfect information, your can find hereinafter the legal grounds applicable to these processing activities:

• For the processing of your personal data for the delivery of services and for the follow- up on our services, to provide you with certain information with respect to the purchased service, or in the context of customer complaint handling, Daymaker relies upon the necessity for the performance of a contract;

• in all other cases, the processing of your personal data is based on our legitimate interests (i.e. the interest of contacting prospects and possible customers, of informing consumers of our offering and to promote our business in general, both online and offline, of improving our services, ).

5.     With whom does Daymaker share your personal data?

Daymaker may disclose your personal information to the following parties:

• With our service providers who act as our ‘processors’ such as IT/cloud service providers, PR/marketing agencies, creative

• With our professional advisors such as external law firms and

• With government authorities such as the government, police authorities or the judiciary in case we have a legal obligation to do so.

Daymaker will implement appropriate safeguards when transferring your personal data to third parties. If necessary, we will for example conclude a data transfer or a processing agreement specifying the limitations to the use of your personal data and the obligations with respect to the security of your personal data.

Your personal data will not be lent or sold to third parties for marketing purposes without your prior explicit consent. Your personal data will not be transferred to countries outside the European Economic Area.

6.    How long does Daymaker store your personal data?

Your personal data will not be stored for longer than is necessary in relation to the purposes for which Daymaker processes them (as listed above). Afterwards it is still possible that they can be found in our back-ups or archives, but they will no longer be actively processed in a file.

More specifically, the following retention guidelines are applied by Daymaker:

• personal data included in accounting, financial or other official documents will be retained for as long as such documents legally need to be kept;

• personal data required for the execution and follow-up of a contractual relationship will be kept for the entire duration of that relationship and for 10 years following termination thereof;

• personal data obtained in the context of complaint handling will be deleted (or anonymized) as soon as the complaint is closed;

• for any data collected via cookies, we refer to our Cookie Policy which can be found here.

Only where Daymaker is legally obliged to, or where this is necessary for defending its interests in the context of judicial proceedings (e.g. in case of a dispute), Daymaker will store the personal data for longer periods.

More information on our retention periods is available upon simple request.

7.     How does Daymaker protect your personal data?

Daymaker will implement the necessary administrative, technical and organizational measures for ensuring a level of security appropriate to the specific risks that it has identified.

Daymaker protects your personal data against destruction, loss, alteration, unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed.

Further, Daymaker seeks to ensure that it keeps your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).

More information on our protection measures is available upon simple request.

8.     What are your rights and how can you exercise them?

Within the limits defined by articles 15-22 of the GDPR, you have the following legal rights with respect to your personal data:

• Right of access: you have the right to obtain confirmation from us as to whether or not we are processing your personal data, to obtain access to that personal data and how and why they are processed, as well as to receive a copy of that data.

• Right to rectification: you have the right to obtain a rectification of your personal data or to request that we complete your personal data if you notice that we are processing incorrect or incomplete data about you.

• Right to erasure (‘right to be forgotten’): you have the right to obtain data erasure in certain specific

• Right to restriction of processing: You have the right to have the processing of your personal data restricted in certain specific

• Right to data portability: you have the right to obtain the personal data that you have provided to us, in a structured, common and machine-readable form, and to transfer those personal data (or have them transferred) to another data

• Right to object: you have the right to object to the processing of your personal data on the basis of our legitimate interest for reasons relating to your specific

The exercise of these rights is in principle free of charge. Only where requests are manifestly unfounded or excessive Daymaker may charge a reasonable fee.

Daymaker aims to respond your requests or questions as quickly as possible. We might request a proof of identity in advance in order to double-check your request.

If you are a resident of the EU, you can find more information and advice on the above rights via your national Data Protection Authority (DPA). In addition, you also have the right at any time to lodge a complaint with your DPA in connection with the processing of your personal data by us.

Belgian users can visit the website of the Belgian DPA via the following link: www.gegevensbeschermingsautoriteit.be. They can reach the authority via contact@apd- gba.be or by regular mail at the following address:

Gegevensbeschermingsautoriteit Drukpersstraat 35

1000 Brussel

If you are a resident of California, USA, you can contact the Office of the Attorney General of the State of California Department of Justice. To submit a question or comment, please visit the following webpage: https://oag.ca.gov/contact/general-comment-question-or-complaint- form. If you believe our business has violated the CCPA, we would like to have the opportunity to deal with any issues, but you may report a complaint at: https://oag.ca.gov/contact/consumer- complaint-against-business-or-company.

If you are a resident of Nevada, USA, you can contact the Nevada Attorney General’s Office. Please visit the following webpage for contact details of the Attorney General’s Office: https://ag.nv.gov/Complaints/File_Complaint/.

9.     Changes to this privacy policy

From time to time it may be necessary to change this Privacy Policy. When Daymaker posts changes to the policy, it will change the date of the "latest update" at the bottom of this Privacy Policy. The most current version of this Privacy Policy will be available on our website at all times.

10.   Contact

If you have any questions or concerns about this Privacy Policy or the processing of your personal data by Daymaker, you may contact us by e-mail at [info@daymaker.travel], or by regular mail to: Daymaker BV, attn. [name and surname], Gasthuisstraat 59, 2340 Beerse (Belgium).