Privacy Policy Last updated: April, 2026

1. Who we are SeasonHop is an online platform connecting seasonal hospitality workers with employers across Europe. For the purposes of the General Data Protection Regulation ("GDPR"), SeasonHop is the controller of your personal data. Contact: hallo@seasonhop.com

2. Who this policy applies to This Privacy Policy applies to users of the SeasonHop platform, including: Workers Employers Visitors who interact with the Platform SeasonHop is intended only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18.

3. What personal data we collect Depending on how you use the Platform, we may collect: Account data Name Email address Password hash Account type Account status and registration timestamps Worker profile data Profile details, work preferences, experience, qualifications, languages, availability, nationality, location preferences, and similar information you choose to provide Profile photos and gallery uploads Identity verification data (where required) — government-issued identification documents submitted for identity verification purposes Employer profile and listing data Business name, location, contact details, property profile, accommodation information, job listings, and related uploaded photos VAT number and related business registration information provided upon registration Communication data Messages exchanged through the Platform Support or account-related correspondence sent to us Technical and security data IP address Browser and device information Log and security event data Timestamps and activity related to account access and Platform use Legal and administrative data Records of account actions, moderation actions, and acceptance of legal documents such as Terms of Service and Privacy Policy versions, where implemented

4. How we collect data We collect personal data: Directly from you when you register, complete your profile, upload content, send messages, or contact us Automatically when you use the Platform, including through server logs and essential technical mechanisms needed to run the service

5. Why we process your data and legal basis Under GDPR, we must have a valid legal basis for processing. Purpose Legal basis Creating and managing your account Performance of a contract, Article 6(1)(b) GDPR Displaying profiles and listings to other users Performance of a contract, Article 6(1)(b) GDPR Enabling messaging and core marketplace functionality Performance of a contract, Article 6(1)(b) GDPR Providing support and responding to requests Performance of a contract and legitimate interests, Article 6(1)(b) and 6(1)(f) GDPR Securing the Platform, preventing abuse, fraud, and unauthorised access Legitimate interests, Article 6(1)(f) GDPR Maintaining technical logs and service integrity Legitimate interests, Article 6(1)(f) GDPR Identity verification Legitimate interests and legal obligation, Article 6(1)(f) and 6(1)(c) GDPR Complying with legal obligations Legal obligation, Article 6(1)(c) GDPR

We do not currently use your personal data for advertising profiling or analytics tracking. We do not currently send marketing emails unless you separately opt in in the future.

6. How we use your data We use your personal data to: Create and maintain user accounts Operate worker and employer profiles Display relevant information to other users of the Platform Allow workers and employers to find and contact each other Host and display uploaded photos and other content Secure the Platform and investigate misuse — this may include reviewing message content where a user has been reported for conduct that violates our Terms of Service, where we have reasonable grounds to suspect abuse, fraud, harassment, or other harmful behaviour Communicate with you about your account or support requests Enforce our Terms and protect users and the Platform Comply with legal obligations We do not sell your personal data. We do not use automated decision-making that produces legal or similarly significant effects.

7. Who can see your data Because SeasonHop is a two-sided marketplace, some information you provide is intentionally visible to other users. Worker data visible to employers This may include, depending on what the Platform displays: First name and profile details Work experience, qualifications, languages, preferences, and availability Profile photos and gallery images Messages sent through the Platform Employer data visible to workers This may include: Employer and business profile information Job listing details Accommodation and property photos Messages sent through the Platform Please only include information you are comfortable sharing within the Platform context.

8. Who we share data with and operator details We share personal data only where necessary. Platform operator The Platform is operated by: Matic Strancar Lozice 12 5272 Podnanos Slovenia hallo@seasonhop.com Infrastructure providers We currently use infrastructure operated on Hetzner, including our own PostgreSQL-backed application environment. Email provider We use SMTP email services to send operational and account emails. Legal or regulatory disclosures We may disclose personal data where required by law, court order, or binding request from a competent authority, or where necessary to establish, exercise, or defend legal claims. Business transfer If SeasonHop is sold, merged, or reorganised, personal data may be transferred as part of that transaction, subject to applicable law. We do not currently use payment processors, analytics services, or advertising networks in the live Platform.

9. International transfers We aim to process and store data within the EEA where possible. If personal data is transferred outside the EEA in the future, we will ensure an appropriate safeguard is in place, such as Standard Contractual Clauses or another lawful transfer mechanism under GDPR.

10. Data retention We retain personal data only as long as necessary for the purposes described in this policy. Data type Retention period Active account and profile data For as long as the account remains active Closed account and profile data Up to 12 months after closure or deletion request Message data Up to 12 months after account closure, unless longer retention is necessary for dispute handling, abuse prevention, or legal claims Identity verification documents Deleted promptly once verification is complete, unless retention is required by law Technical and security logs As reasonably necessary for security, troubleshooting, and service integrity Legal compliance records As long as required by applicable law

Where retention is no longer necessary, we will delete or anonymise personal data unless we are legally required or otherwise permitted to keep it longer.

11. Cookies and similar technologies SeasonHop does not currently use analytics or advertising cookies. The Platform may use strictly necessary technical mechanisms, such as session or authentication-related cookies, to keep users logged in, protect accounts, and operate core features securely. These are necessary for the service to function. If we introduce analytics, marketing, or optional cookies later, we will update this Privacy Policy and implement appropriate consent controls where required.

12. Your rights under GDPR Subject to applicable law, you have the right to: Access your personal data Correct inaccurate or incomplete data Request deletion of your data Restrict processing Object to processing based on legitimate interests Receive your data in a portable format where applicable Withdraw consent where processing is based on consent Lodge a complaint with a competent supervisory authority To exercise any of these rights, contact us at hallo@seasonhop.com. If you are based in the EEA, you may also lodge a complaint with the supervisory authority in your country of residence. As SeasonHop is operated from Slovenia, the primary supervisory authority is the Information Commissioner of the Republic of Slovenia (ip-rs.si).

13. Data security We take appropriate technical and organisational measures to protect personal data, including: Password hashing Encrypted connections in transit where applicable Access controls Infrastructure and operational security measures appropriate to the size and nature of the service No system can guarantee absolute security. If you believe your account or data may have been compromised, contact us immediately at hallo@seasonhop.com.

14. Third-party links The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those third parties.

15. Changes to this Privacy Policy We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on the Platform and, where appropriate, notify users through the Platform or by email.

16. Contact For questions or requests regarding this Privacy Policy, contact us at: Email: hallo@seasonhop.com