CONSENT

to Personal Data Processing

I hereby, acting freely, of my own will and in my own interest, and confirming my legal capacity, give my consent to Ural Car Rental LLC (TIN 2540160475, OGRN 1102540001431, registered address: Office 205, 34 Snegovaya Street, Vladivostok, Primorsky Krai, 690074, Russian Federation) (hereinafter referred to as the Operator) to process my personal data in accordance with Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006.

1. Purposes of Personal Data Processing

Personal data is processed by the Operator for the following purposes:

• arranging and processing vehicle reservations;

• verifying the possibility of entering into a rental agreement;

• concluding, performing, amending and terminating a vehicle rental agreement;

• identifying the lessee and verifying submitted documents;

• accepting and processing payments, receiving and refunding the security deposit, and performing pre-authorization of funds;

• providing additional services under the rental agreement;

• communicating with the client regarding performance of the agreement, sending notices, messages and documents;

• resolving claims, processing requests, collecting debts and compensating damage caused;

• complying with the requirements of Russian law, including tax, accounting and other mandatory record-keeping requirements;

• protecting the Operator’s legitimate interests in the event of disputes.

2. List of Personal Data

I give my consent to the processing of the following personal data provided by me personally or obtained during performance of the agreement:

• surname, name and patronymic;

• date and place of birth;

• citizenship;

• registration and/or residential address;

• contact phone number;

• email address;

• details of identity document;

• driving license details;

• bank card details and other payment details to the extent necessary for performance of the rental agreement;

• information on concluded rental agreements, payments made, reservations, refunds, debts and other actions related to performance of the agreement;

• other personal data voluntarily provided by me and necessary to achieve the stated purposes of processing.

3. Actions with Personal Data

I grant the Operator the right to perform both automated and non-automated processing of personal data, including:

• collection;

• recording;

• systematization;

• accumulation;

• storage;

• clarification, including updating and modification;

• extraction;

• use;

• transfer, including provision and access, in cases provided for by Russian law or necessary for performance of the agreement;

• anonymization;

• blocking;

• deletion;

• destruction.

4. Transfer of Personal Data to Third Parties

I agree that my personal data may be transferred to third parties solely to the extent necessary to achieve the purposes of processing, including:

• credit institutions and payment services;

• fiscal data operators;

• organizations providing payment processing services;

• providers of information systems and services used by the Operator for performance of the agreement;

• government authorities and organizations in cases provided for by Russian law;

• other persons where such transfer is necessary for performance of the rental agreement or directly provided for by Russian law.

The Operator does not disseminate personal data without separate consent of the personal data subject, unless otherwise provided by Russian law.

5. Term of Personal Data Processing

This consent is valid from the moment it is provided until the purposes of personal data processing are achieved or until it is withdrawn by the personal data subject, unless another retention period is established by Russian law.

If the rental agreement is terminated, the Operator may continue to process and store personal data for the periods established by Russian law, as well as during the limitation period for the protection of its rights and legitimate interests.

6. Withdrawal of Consent

I am informed that I have the right to withdraw this consent at any time by sending a written request to the Operator or an electronic request using the contact details specified on the Operator’s official website.

Withdrawal of consent does not affect the lawfulness of personal data processing carried out before the Operator receives such withdrawal, and does not terminate personal data processing in cases where such processing may be carried out without the consent of the personal data subject under Russian law.

7. Electronic Consent

This consent may be provided either by signing a hard-copy document with a handwritten signature or by performing actions in electronic form that make it possible to reliably establish the will of the personal data subject, including ticking a checkbox on the Operator’s website, confirming by a code sent via SMS or email, or by another method of electronic identification.

Such consent has the same legal force as consent executed on paper.

8. Final Provisions

I confirm that, before providing this consent, I have read the Privacy Policy, the Personal Data Processing Policy and other documents of the Operator governing personal data processing, understand their content, and consent to the processing of my personal data under the terms set out above.