General Terms and Conditions of Coral Shell Go + Application

1. General Terms And Conditions Of Business Of Coral Shell Go + Application,

'1.1. These General Terms and Conditions of CORAL SRB d.o.o. Beograd SHELL GO + applications (hereinafter: GENERAL Terms and Conditions) are used for the purpose of defining the purchase of goods and services with the Coral SHELL GO + application (hereinafter: the Application) at Coral gas stations under the SHELL brand on the territory of the Republic of Serbia.

1.2. Coral has the right to change these General Terms and Conditions at any time. It is considered that the amendments to the General Terms and Conditions are known to the User of the application (hereinafter: the User) on the day when their amendment and/or amendment is published on the website: "www.coralenergy.rs",

'2. Coral SHELL GO + APP – the USAGE',

'2.1. Coral SHELL GO + APPLICATION with a virtual loyalty card, is intended for all natural persons of legal age who reside in the territory of the Republic of Serbia.

2.2. The User's data specified in the Application Gateway, which the User enters in electronic form, are used exclusively for the purpose of granting discounts and informing the User about various actions and benefits offered by Coral, depending on the User's consent. The Statement of Consent to the Processing of Personal Data (hereinafter: the Statement), which the User gives in electronic form, is an integral part of the Application Form. Coral will not take into account the consideration of any Application Form (including the Statement) that is not fulfilled in the parts deemed necessary for the provision of the service in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation GDPR) and the Law on the Protection of Personal Data. By accepting and giving (in electronic form) the User of the Coral SHELL GO+ Application Statement of Consent to the processing of personal data, which is an integral part of the Application Form, the User of the Coral SHELL GO + Application gives explicit consent(s) to Coral to collect and process his personal data, in accordance with legal regulations, all for purposes related exclusively to the issuance and use of the SHELL GO + Application and other purposes specified in the Application Form, as well as to provide general and personalized benefits. By accepting the Application Form, the User confirms that he/she is familiar with the principles of personal data processing CORAL SRB d.o.o. Belgrade, expressed in the Privacy Policy, and to the existence of the right to inspect, access, rectify and delete personal data relating to him, as well as to submit a request for the issuance of a copy of his personal data at Coral's disposal. By accepting the Application Form, the User also confirms and guarantees under full material and criminal responsibility that he/she is of legal age and that he/she has a residence in the territory of the Republic of Serbia and that all information is correct and true. The User has the right to withdraw consent at any time by written notification or by e-mail to the following address: infoces@coralenergy.rs, as well as the right to file a complaint with Coral, and at the same time the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection about the rights of the User, the manner of collecting personal data, the purposes of personal data processing, the security of personal data and other issues related to the protection of personal data, can be found in our Privacy Policy on our website or it can be obtained for inspection at our headquarters every working day, during business hours. Data on the Processor and the Personal Data Protection Officer: Personal Data Processor: CORAL SRB d.o.o. Belgrade, Jurija Gagarina br. 40b, 11000 Belgrade, registry no. 21264563, Contact details for the Data Protection e-mail: infoces@coralenergy.rs.

2.3. The SHELL GO+ application is accessed with a username and code based on the name and surname of the user (through the Application Form and on the basis of the data provided on it) and is not transferable. The Application can only be used by a person who is registered on the Application with his or her personal data. Any use and use of the Application by an unauthorized person will be considered an abuse of the Application, which entails the possibility of cancellation of the Application by Coral, which Coral decides on its own.

2.4. Users of the Application who have not used their Application for 24 (twenty-four) months or longer, may be excluded from the loyalty program (SHELL GO + program). Such users can re-enroll in the SHELL GO + program without any restrictions, by re-submitting the application request on the application, i.e. by filling out the Application Form.

2.5. Membership in the Loyalty Programme is free of charge. As part of the loyalty program, the User of the SHELL GO+ Application is entitled to collect points by purchasing basic and premium derivatives, as well as purchases within SHELL Select stores, namely 1 point per purchased one Liter of basic derivatives and 2 points per purchased one Liter of premium derivatives. Also, the User is entitled to 1 point for every 100 (one hundred) dinars spent in SHELL Select stores in order to collect points, emphasizes that he/she wants to use the SHELL GO + application and displays a virtual SHELL GO + loyalty card before the purchase, and the points will be added to the SHELL GO+ Application of the User upon completion of the purchase. The user of the app can see the total sum of points and e-vouchers in their account on the SHELL GO + app or by scanning the app at the gas stations. The right to the points cannot be exercised and the points can not be collected when purchasing tobacco products, e-recharges for the mobile phones, road tolls (ENP) and the usage of the chargers for electrical vehicles (EV chargers). The collected points are valid for 24 (twenty-four) months from the date of the collection. A certain number of collected points can be exchanged for valuable electronic vouchers (e-vouchers) in the amount of 200 dinars for the collected 200 points, in the value of 600 dinars for the collected 400 points and in the value of 1000 dinars for the collected 600 points. The User automatically creates e-vouchers of a certain value according to the number of points collected, within the application in the "Loyalty" section.

2.6. When making a purchase in which the User uses the collected SHELL GO + points that is e-vouchers, new points are collected according to the above mechanism including the value of the used e-vouchers. Each new Application User who fills out the application form and opens an account, is entitled to the initial 100 points.

2.7. The created E-vouchers can be used to purchase the goods in SHELL Select stores. The e-vouchers are not valid for the purchase of the aforementioned goods the tobacco products, e-recharges for mobile phones, road tolls (ENP) as well as any type of fuel and the usage of the chargers for electrical vehicles (EV chargers). The created e-vouchers are valid for 12 (twelve) months counting from the date of creation by the User. In order to use the e-voucher during purchase (excluding any type of fuel, tobacco products, e-credits, toll (ENP) and EV chargers), the bill for the purchase must be higher than the e-voucher that is to be used (at least for 1 (one) dinar greater). The User uses the created e-voucher in such a way that the bill expressed in dinar value is reduced by the amount of the e-voucher, and the rest of the bill, the User can settle in cash or with a credit or debit bank card. The User, after acquiring or creating an e-voucher of any value, can use it while keeping the remaining unused points.

2.8. The collected-points or e-vouchers created on the Application cannot be exchanged for a cash payment, i.e. in a way that the User is paid in cash or in funds on a credit/debit bank card.

2.9. The User may not use more than one type of Coral Application when making a purchase. Obtaining the benefits provided by the Application is possible only and exclusively with the electronic SHELL GO + Application and without the practical display of a virtual loyalty card or e-voucher, the same is not possible.

2.10. The Application is limited to 4 (four) transactions per day.

2.11. The collected points can be used by the User during the first subsequent purchase following the purchase on which the discount was realized.

2.12. By accepting the membership in the loyalty program, the Users of the application agree that the program may be changed and/or terminated by a unilateral decision of Coral, without prior notice. All information about changes or termination of the loyalty program or benefits within the application will be published in a timely manner on the SHELL GO+ application as well as on the Coral website.

2.13. The benefits under the SHELL GO+ application can be obtained under another benefits program within Coral in accordance with these General terms.

2.14. In all cases of force majeure circumstances that prevent or prevent Coral from fulfilling its obligations or make it significantly more difficult for it to do so, Coral shall not be liable for non-fulfilment of its obligations due to the circumstances. In such cases, Coral is authorized not to provide the service or to provide it under changed conditions, according to its own capabilities and according to its own assessment. Force majeure, for the purposes of these General Terms and Conditions and the Agreement, is considered including, but not limited to, individually and/or in combination: natural disasters, fires, floods, storms, war and military operations, civil riots, blockades, embargoes, strikes, boycotts or other industrial disturbances, service or transport network failures, prohibitions and/or measures of state authorities, epidemics and any other circumstances beyond the power and control of Coral ("Force Majeure").

2.15. After considering and approving the completed Application Form, the User is approved to use the Application. All conditions for the use of the Application are autonomously determined and evaluated by Coral, and it is authorized, without any explanation and/or responsibility towards the persons who request the use of the Application, to reject the same request, in accordance with its own assessment.

2.16. The owner of the app is Coral. If there is a change in the personal data on the basis of which the Application was used and which are listed in the Application Form, the User is obliged to immediately inform Coral in writing, via e-mail: infoces@coralenergy.rs or by changing the personal data on the Application.

2.17. The User is obliged to immediately notify Coral of the unauthorized use of the Application as soon as possible by e-mail: infoces@coralenergy.rs, specifying the place and time of the unauthorized use. In that case, the User's responsibility for the use of the Application ceases at the moment when Coral is notified of the unauthorized use of the Application, i.e. when Coral blocks the Application from the web application for the administration of Coral applications. After the User informs Coral about the unauthorized use of the Application in this way, the usage of the Account will be disabled. The User is fully responsible for the misuse of the Application. The User is obliged to keep Coral's contact information for the purpose of timely notification of unauthorized use of the Application. Any unauthorized use of the Application, which is not accompanied by the above obligations by the User, is at the expense of the User.

3. Privacy and Personal Data Protection Policy

3.1. In accordance with the Law on Personal Data Protection ("Official Gazette of the Republic of Serbia", No. 87/2018, hereinafter: the Law), fulfilling the duty of the controller in the capacity of a legal entity towards the User, as the person from whom the personal data relating to the User of the applicatio is collected, Coral provides the User with the following information:

3.1.1. Data Controller

CORAL SRB d.o.o. Belgrade, Yuri Gagarina No. 40b, New Belgrade, Belgrade, registration number: 21264563. e-mail address: infoces@coralenergy.rs.

3.1.2. Personal data

Coral undertakes to respect the privacy of the User and all of the data and specially the personal data of the User.

3.1.3 By accessing and filling out the Application Form and the Statement of Consent for the Use of Personal Data, the User confirms that he/she is familiar with the General Terms of Use of the Application and that he/she agrees with their application. By filling out the Application Form and confirming the Statement of Consent for Data Processing by using the Application, the User confirms that he/she agrees to the collection and processing of the submitted personal data, for the purpose and in the manner defined in point 3 of these General Terms of Use. The personal data that Coral processes are the data that the Application Users directly submitted by filling out the Application Form, when submitting a request for a loyalty card, namely:

• Name and surname,
• Date of birth,
• The mobile phone number that the User uses to log in to the Application,
• E-mail address (which is used to verify the User),
• Loyalty card number used by the Application User to log in to the Application,

All data entered by the User in the Application Form are in the User's account of the application.

The Google Map is displayed on the home screen and provides information about the nearest gas station.

3.1.4. Recipients of personal data

For the purposes of IT protection and personal data processing, Coral hired a processor, PETROLSOFT ING doo, with headquarters in Belgrade, Patrijarha Dimitrija Street 12i, ID number: 07697180, TIN 102065539 e-mail address: office@petrolsofting.com. The above-mentioned personal data of the User are submitted to the aforementioned company.

At the exclusive written request of the Application User, personal data may be forwarded to other recipients. The request means the voluntary application of the Application User for one of the offered commercial services through the Application.

Coral guarantees that it has concluded contracts on the processing of personal data with other handlers, i.e. processors, which were drawn up in accordance with the provisions of the Personal Data Protection Act.

3.2. Purpose and legitimate reasons for the processing of personal data

Purpose of personal data processing:

I) to identify the User on the application

II) to define special offers for Users of the Application based on their spending habits

III) for sending special offers and/or congratulations to the User on the day of his/her birthday,

IV) for notification of new products and services and promotions (Push notifications)

V) for personalized offers

Coral's promotional and commercial offers, as well as personalized offers, in accordance with the consumer habits of the Application User, are sent to the application's users via the Push notification service, Viber service, SMS messages or e-mail notifications. The Application users can opt out of receiving notifications at any time.

Also, Coral uses personal data when dealing with claims and appeals of application users, in order to manage the process of claims and appeals.

Coral will not share personal data of the Application User with third parties except in the case of a change in ownership of the Application - if the Application changes its owner, the Users of the Application will be notified that the Application has been transferred to the new owner. The new owner, as the handler of the personal data of the User, must fulfill all obligations provided for by law, and the User in that case can decide whether they want to continue using the Application services.

3.3. Data storage time

CORAL processes the data of the User during the validity of the contractual-legal relationship regarding the use of the application, as well as one year after the termination of use of the application for any reason. CORAL processes data during the duration of the loyalty program in accordance with the application and in accordance with the stated purpose, and undertakes to delete/destroy all data of the User at the end of the specified period

3.4. Rights of the User

I. The User, in accordance with the provisions of the Law, has the right to access the personal data, the right to correct and supplement or delete personal data of the User, the right to limit processing, the right to data portability, as well as the right to object regarding the usage of his/hers personal data.

II. The User has the right to revoke consent at any time, provided that the revocation of consent does not affect the admissibility of processing on the basis of consent before the revocation.

III. The User has the right to file a complaint with the Commissioner for Information of Public Importance and Protection of Personal Data, if he believes that the processing of his/hers personal data has been carried out contrary to the provisions of the Law.

IV. The User has the right to complain. A request for a complaint can be sent by sending a complaint to infoces@coralenergy.rs.

V. The User can submit a request for the permanent deletion of all personal data and other data entered in the Application by selecting the "Deactivate" option within the Application. Within 30 days from the submitted request for deletion, the previously active account ceases to exist permanently. Data is stored in the system for 30 days in case of need to file, exercise or defend a legal claim of Coral. The User has an additional period of 30 days from the moment he submitted the request for deletion, in which he can cancel the request and reactivate the card within his account on the application. To cancel the request for deactivation, the Application User selects the "I have a card" option when logging in, then enters his mobile phone number and the number of the SNNP card for which he submitted a request for deletion and follows the instructions from the message that will be displayed on the screen (A request for deactivation has been submitted for the entered phone number and card. You can cancel this request within 30 days. If you wish, click the "Cancel" button). Selecting the "Undo" option returns the card to its active state. If the request is not revoked within the specified period of 30 days from the submitted request for deactivation, the account of the User will be permanently canceled/deleted together with his data, including personal data. To immediately delete the account on the application, the User can send an e-mail to the address infoces@coralenergy.rs.

3.5. Data protection

Coral processes all personal data legally, fairly and transparently, only for specific purposes, strictly applying the principle of data minimization as well as in accordance with other principles of processing.

CORAL, through its partner in the field of IT technologies, which is a personal data processor, uses all technical and organizational protection measures in order to protect all of the obtained data including the personal data as well. Among other things, protection measures are in the form of cryptographic protection, IT traffic control, protection of IT infrastructure, firewalls, systems for right of access. CORAL will take steps in order to regularly control as well as maintain and improve the protection system and operation of the Application.

If, despite all the measures taken, there is a violation of data security, CORAL will immediately inform the Users of the application and take all measures to reduce the negative effect.

The personal data as well as other data related to the user account are stored in an encrypted format, with appropriate protection measures, within the Application.

4. FINAL PROVISIONS

4.1. By downloading and activating the Application, the User confirms that he has understood the General terms and Conditions of the SHELL GO+ Application and that he fully accepts them.

4.2. In the event that a provision in these General Terms and Conditions becomes invalid, all other provisions shall remain valid and unchanged. Coral undertakes to replace invalid provisions with legally valid ones.

4.3. The place for the purchase of all goods and services during which the User can benefit from the benefits of the Application are Coral gas stations under the SHELL trademark in the Republic of Serbia.

4.4 Any disputes that may arise from the use of the Application shall be subject to the exclusive jurisdiction of the court in Belgrade.

4.5. These General Terms and Conditions enter into force on ______________ and are valid until the issuance of new General Terms and Conditions of Business of SHELL GO + App.