Cookie Policy

Cookies are small text files stored on your device (computer, tablet, smartphone) when visiting websites. Cookies allow websites to recognize your device and store certain information about your preferences or past actions. Besides cookies, we may use other similar technologies, such as: • Local Storage – storing data in the browser • Session Storage – temporary data storage during a session • Pixel tags (web beacons) – small images used for tracking • JavaScript – for collecting information about website usage We will refer to all these technologies collectively as "cookies" for the purposes of this Policy.

We use the following types of cookies: 2.1 Necessary cookies These cookies are essential for the proper functioning of the website and cannot be switched off. They ensure basic functions like website navigation, access to secured areas, remembering your cookie preferences, and other basic features. • Purpose: Ensuring technical functionality, security, remembering your cookie preferences • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) • Retention Period: Up to 12 months or until deleted by user • Option to Refuse: No (they are necessary for website functioning) 2.2 Analytical cookies These cookies help us understand how visitors use our websites, collect anonymous statistical data about traffic, most visited pages, time spent on the web, and similar. This information helps us improve functionality and user experience of our websites. • Purpose: Traffic analysis, user experience improvement, content optimization • Legal Basis: Your consent (Art. 6(1)(a) GDPR) • Retention Period: Up to 26 months (Google Analytics) • Option to Refuse: Yes (can be refused in cookie settings) • Third Parties: Google LLC (Google Analytics)

3.1 Necessary Cookies Name: staybrand-cookie-preferences • Purpose: Storing your cookie preferences • Type: Local Storage • Retention: Permanent until deleted • Provider: Jakub Pos Name: staybrand-cookie-consent • Purpose: Recording whether you consented to cookie usage • Type: Local Storage • Retention: Permanent until deleted • Provider: Jakub Pos 3.2 Analytical Cookies (Google Analytics) Name: _ga • Purpose: Distinguishing individual users • Type: HTTP Cookie • Retention: 2 years • Provider: Google LLC • Domain: .staybrand.io Name: _ga_[ID] • Purpose: Maintaining session state • Type: HTTP Cookie • Retention: 2 years • Provider: Google LLC • Domain: .staybrand.io Name: _gid • Purpose: Distinguishing individual users • Type: HTTP Cookie • Retention: 24 hours • Provider: Google LLC • Domain: .staybrand.io Name: _gat (if used) • Purpose: Throttling request rate • Type: HTTP Cookie • Retention: 1 minute • Provider: Google LLC • Domain: .staybrand.io

4.1 Google Analytics We use the Google Analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for analyzing traffic on our websites. Google Analytics uses cookies to analyze how visitors use our websites. Information generated by cookies about your use of our websites (including your IP address) may be transmitted to Google servers in the USA and stored there. Google may use this information to evaluate your use of our websites, compile reports on website activity for website operators, and provide other services related to website activity and internet usage. More information on how Google uses your data can be found in Google's Privacy Policy: https://policies.google.com/privacy You can also refuse cookie usage by Google by downloading and installing the Google Analytics Opt-out Browser Add-on available at: https://tools.google.com/dlpage/gaoptout 4.2 Data Transfer to Third Countries Since Google Analytics may transfer data to the USA, we use Standard Contractual Clauses approved by the European Commission to ensure an adequate level of protection for your personal data.

5.1 Necessary Cookies Processing of personal data via necessary cookies is based on our legitimate interest (Art. 6(1)(f) GDPR) to ensure technical functionality and security of our websites. 5.2 Analytical Cookies Processing of personal data via analytical cookies is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by changing cookie settings in your browser or using our cookie banner.

Regarding the processing of your personal data via cookies, you have the following rights: • Right of access (Art. 15 GDPR) – you have the right to obtain information about what personal data we process about you • Right to rectification (Art. 16 GDPR) – you have the right to request correction of inaccurate data • Right to erasure (Art. 17 GDPR) – you have the right to request deletion of your data ("right to be forgotten") • Right to restriction of processing (Art. 18 GDPR) – you have the right to request restriction of processing your data • Right to data portability (Art. 20 GDPR) – you have the right to obtain your data in a structured format • Right to object (Art. 21 GDPR) – you have the right to object to the processing of your data • Right to withdraw consent (Art. 7(3) GDPR) – you have the right to withdraw your consent for data processing for marketing purposes at any time • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) – you have the right to lodge a complaint with the Office for Personal Data Protection To exercise your rights, contact us at email: hello@staybrand.com or in writing at: StayBrand s.r.o., Wenceslas Square 1, 110 00 Prague 1, Czech Republic.

7.1 Cookie Management via Our Website Upon your first visit to our websites, a cookie banner will appear where you can: • Accept all cookies • Reject all non-essential cookies • Adjust cookie settings according to your preferences Your preferences are stored in your browser's Local Storage and will be respected during future visits. 7.2 Cookie Management via Browser Most browsers accept cookies automatically. However, you can set your browser to reject cookies or notify you when websites try to store a cookie. Below are links to instructions for managing cookies in the most common browsers: • Google Chrome: https://support.google.com/chrome/answer/95647 • Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox • Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 • Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac • Opera: https://help.opera.com/en/latest/web-preferences/#cookies Please note that blocking or deleting cookies may affect the functionality of our websites, and some features may not be available. 7.3 Do Not Track (DNT) Some browsers support the "Do Not Track" (DNT) feature. If you have this feature enabled, we respect your preferences and will not use analytical cookies unless you have explicitly granted consent.

Personal data collected via cookies is retained only for the time necessary to fulfill the purpose for which it was collected, or for the period laid down by law. • Necessary Cookies: Retained for the session duration or maximum 12 months • Analytical Cookies: Retained for maximum 26 months (Google Analytics) After the retention period expires, personal data is automatically deleted or anonymized.

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include: • Data encryption in transit (HTTPS) • Restricting access to personal data only to authorized persons • Regular checks and updates of security measures • Usage of secured servers and data centers Despite these measures, we cannot guarantee absolute security of data transmission over the internet.

Our websites are not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If we discover that we have collected personal data from a child under 16 without parental or guardian consent, we will delete this data immediately.

We may update this Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The date of the last update is indicated at the top of this Policy. We recommend you review this Policy regularly to stay informed about how we use cookies. By continuing to use our websites after changes are published, you agree to the updated Policy. In case of significant changes, we will inform you via our website or email.

If you have any questions, comments, or requests regarding this Policy or our use of cookies, you can contact us: Jakub Pos Lihovarská 1262/17 190 00 Prague - Libeň Czech Republic Email: info@staybrand.io Phone: +420 777 123 456 Office for Personal Data Protection Pplk. Sochora 27 170 00 Prague 7 Czech Republic Web: https://www.uoou.cz Email: posta@uoou.cz Phone: +420 234 665 111

This Policy is part of our Terms and Conditions and Privacy Policy. We recommend reading these documents as well to fully understand how we process your personal data. This Policy is drafted in accordance with: • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) • Act No. 110/2019 Coll., on personal data processing • Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive) This Policy is effective from the date of its publication on our websites.