Data Processing Addendum

1) Parties and roles

To the extent novasphereasolut.com processes personal data on your instructions to provide travel quote services, novasphereasolut.com acts as a processor, and you (the customer/partner requesting a quote) act as the controller in relation to the personal data you provide or determine for the quote fulfillment.

If, instead, you contact us directly as an end customer and novasphereasolut.com determines the purposes and means of processing, novasphereasolut.com acts as a controller for the personal data processed for responding to your request and related service communications.

2) Scope of data processing

novasphereasolut.com processes personal data that you provide to request and arrange travel quotes and related communications. Typical data may include your contact details and request-related information (for example, traveler contact information, itinerary preferences, and communication history to the extent necessary to fulfill the quote).

Where applicable, we limit processing to what is necessary for quote fulfillment, customer service, fraud prevention, and legal compliance.

3) Lawfulness and legal notices

Personal data processing is carried out in accordance with the requirements of Ukrainian law, including the notice and lawful basis obligations under:

• Закон України «Про захист персональних даних» від 01.06.2010 № 2297-VI.

If your travel services are provided through the website or if you distribute commercial e-messages, you must ensure stable, direct access to mandatory seller/provider identification details. This DPA is without prejudice to such obligations and references:

• Закон України «Про електронну комерцію» № 675-VIII стаття 7.

For consumer services offered at a distance, consumer-required information (including about the provider and price/conditions) must be provided in the contract/landing page flow in accordance with:

• Закон України «Про захист прав споживачів» від 10.06.2023 № 3153-IX.

General rule: for businesses offering services to consumers in Ukraine, service information should be provided in Ukrainian (where applicable), referencing:

• Закон України «Про забезпечення функціонування української мови як державної» № 2704-VIII.

4) Security measures

novasphereasolut.com applies appropriate organizational and technical security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures are reviewed and updated as needed to maintain an appropriate security level for the services provided.

5) Subprocessors

Where novasphereasolut.com uses subprocessors to support quote fulfillment, such subprocessors process personal data only to the extent necessary to provide the relevant services and under appropriate contractual and security requirements consistent with this DPA.

If subprocessors apply in your specific processing context, details can be provided upon request so you can assess the involvement of subprocessors.

6) Data subject rights and cooperation

To the extent required, novasphereasolut.com assists controllers in responding to requests from data subjects regarding access, rectification, deletion, or other rights under applicable law. Cooperation includes providing relevant information about processing activities within the scope of the services.

7) Retention

novasphereasolut.com retains personal data only for as long as necessary for quote fulfillment, dispute resolution, and compliance with applicable legal obligations, after which data is deleted or anonymized in accordance with internal procedures.

8) Contact

If you have questions about data processing, you can contact us at: