Annex 1

to the Public Offer Agreement on charitable donation (money) for the general (charity) purposes

Dated January 1, 2024

NOTIFICATION OF CONSENT

to collecting, processing and use of personal data

I, the Donor who has accepted the Public Offer for voluntary, charitable donation to the NGO “Geothermal Ukraine” (EDRPOU code 44900467) according to the Law of Ukraine  “On Personal Data Protection”, do deliberately and voluntarily give to the NGO “Geothermal Ukraine” (EDRPOU code 44900467), hereinafter- “GU”, my consent to automated and non-automated processing (including collection, accumulation, storage and use) of my personal data, namely: surname, first name, patronymic, passport details, registration number of a taxpayer’s record card, photo or other image record, communication number, e-mail address, residence data, other data voluntarily provided by me for processing, - in order to ensure the implementation of civil and legal, economic and legal relations; administrative and legal, tax relations, relations in the field of accounting; relations in the field of statistics; and ensuring the implementation of other relations requiring personal data processing in accordance with the Civil Code of Ukraine, the Tax Code of Ukraine, other normative legal acts of Ukraine, the Statute of the GU, other local acts of the GU.

I give, hereby, my consent to transfer (distribution) of my personal data solely for the stated above purpose and in the manner as set out by the Law of Ukraine “On Personal Data Protection” and local acts of the GU, which establish the procedure for personal data processing and protection. I do not require the notification of a transfer (distribution) of my personal data to third parties, if such a transfer (distribution) happens in my interests in order to realize the mentioned above legal relationship.

By signing this notification of consent, I confirm that I have been notified in writing (a) about the purposes of the personal data processing (in accordance with the purpose set forth therein) and persons to whom my personal data is transferred, as well as about my rights, set out in the article 8 of the Law of Ukraine “On Personal Data Protection”, according to the article, a subject of the personal data shall be entitled to:

1) be aware of the processing sources, the location of his/ her personal data, purpose of data processing, location or residence( stay) address of an owner or an administrator of the personal data or direct a respective assignment to persons authorized by the Donor to receive this information, except cases stipulated by the Law;

2) receive information on the conditions of the access to personal data, in particular, the information of third parties to whom the personal data is transferred;

3) access to his/her personal data;

4) receive a response whether his/her personal data is being processed not later than within 30 calendar days from the day of an inquiry submission, besides cases stipulated by the Law; and receive a description of such personal data;

5) submit a reasoned claim to an owner of personal data with an objection against processing his/her personal data;

6) submit a reasoned claim for changing or deleting his/her personal data by any owner or administrator of the personal data, if this data are invalid or processed illegally;

7) protect his/her personal data against illegal processing and accidental loss, deleting, destruction associated with an intentional concealment, not providing or its improper providing, as well as, protect the personal data from providing the information which is invalid or which besmirched the honor, dignity or business reputation of an individual;

8) file claims on the processing of his/her personal data with competent authorities or the court;

9) apply means of legal protection if the law on personal data protection is violated.

10) submit a warning in regards to his/her rights’ limitation on the personal data processing at the time of giving consent;

11) withdraw consent for processing his/her personal data;

12) be aware of the mechanism of automated processing of the personal data;

13) be protected against automated decisions, which may cause legal consequences for him/her.

This notification of consent is valid for an unidentified period.