ACCEPTABLE USE POLICY FOR CONSUMER CUSTOMERS

T-Travel - Global eSIM Data Service

Consumer acceptable rules for prepaid travel eSIM packages

Hrvatski Telekom d.d., member of Deutsche Telekom Group,
Radnicka cesta 21, 10000 Zagreb, Croatia

1. General

1.1. This Acceptable Use Policy for Consumer Customers (the "Policy") applies to prepaid T-Travel eSIM data packages provided by Hrvatski Telekom d.d., Radnicka cesta 21, 10000 Zagreb, Croatia.

1.2. This Policy forms part of the Contract Documents together with the Terms and Conditions, order confirmation and Price list

1.3. The Service is intended for roaming and travel connectivity purposes only, meaning temporary personal mobile data use outside the User’s normal country of residence. It must not be used as a domestic replacement service or as a fixed broadband substitute.

1.4. This Policy applies to all package families, including Lite, Standard, Max and Unlimited. For the Unlimited Package, the User may use 3 GB per rolling 24-hour period at the maximum available speed. After this daily full available speed allowance has been consumed within the relevant 24-hour period, the maximum speed is reduced to 1 Mbps until the next reset. This speed reduction is an integral part of the Unlimited Package and is applied automatically in accordance with the product rules. It does not, by itself, mean that the User has breached this Policy or that the usage is considered abusive, fraudulent or irregular.

1.5. Terms such as "including", "include", "in particular" and similar expressions are illustrative and shall be read as "including without limitation".

2. Permitted Use

2.1. The User may use the Service for private, personal and legitimate mobile internet access while travelling.

2.2. Typical permitted uses include browsing, messaging, email, navigation, travel apps, social media, streaming, hotspot use for the User’s own personal devices, and other ordinary consumer mobile data activities.

2.3. Occasional tethering or hotspot use is permitted where supported by the device and partner network, provided it remains personal, non-commercial and consistent with the intended travel use of the Service.

3. Package-Specific Fair Use Rules

3.1. Lite, Standard and Max Packages are volume-based packages. The User may use the included data volume during the validity period and Applicable Coverage shown at purchase.

3.2. Unlimited Packages are subject to speed management based on a rolling 24-hour window. The User receives 3 GB per rolling 24-hour period at full available speed. After 3 GB has been consumed within that 24-hourperiod, the maximum speed is reduced to 1 Mbps until the next reset of the full available speed allowance.

3.3. The reset of the full available speed allowance is calculated as a rolling 24-hour window anchored to the first qualifying use of the Unlimited Package. The first qualifying use means the moment when the User first connects to an available partner mobile network within the Applicable Coverage of the purchased package and initiates mobile data traffic through the installed eSIM Profile. For example, if the Unlimited Package is first used at 14:30, the 3 GB full available speed allowance resets at 14:30 on each following day during the package validity period. The reset is not based on local midnight, UTC midnight or OCS midnight.

3.4. The 1 Mbps speed after the full available speed allowance has been consumed is designed to allow continued essential mobile data use, such as messaging, maps, email and light browsing, but may not be suitable for high-bandwidth activities.

3.5. For the Unlimited Package, the full available speed allowance per rolling 24-hour period and the subsequent speed reduction described in this Section are the applicable data-volume control mechanism. The Provider will not treat regular data consumption above 3 GB per rolling 24-hour period as misuse merely because the User has exceeded that full available speed allowance per rolling 24-hour period. However, the Provider may still take measures under this Policy if the Service is used for prohibited purposes, including fraud, unlawful activity, resale, automation, network attacks, or other non-personal or abusive use.

4. Country, Regional and Multiple Package Use

4.1. A User may hold multiple active packages on one eSIM Profile where technically and commercially available.

4.2. Where multiple packages for the same country or coverage area are active, the package expiring first is consumed first, unless the purchase flow or campaign terms state otherwise.

4.3. Where a Country Package and a Regional Package cover the same destination, the Country Package has priority over the Regional Package for usage in that country.

4.4. The User must not attempt to manipulate package priority, network selection, device configuration or traffic routing to obtain benefits not intended by the package design.

5. Prohibited Use of the Service

5.1. The User must not use the Service for any of the following:

5.2. The above restrictions do not prohibit regular personal hotspot use, regular high data consumption within the purchased package, or regular continued use at 1 Mbps after the Unlimited Package full available speed allowance for the relevant rolling 24-hour period has been consumed.

6. Harmful, Deceptive or Illegal Activities

6.1. The User must not use the Service to violate any law, regulation or third-party right. Prohibited activities include:

7. Network Integrity and Traffic Management

7.1. If the User’s traffic is harmful to attacks, overloads, degrades or threatens the integrity or security of the network, partner network, platform, other users or third parties, the Provider may apply proportionate technical measures.

7.2. Such measures may include blocking or limiting clearly malicious or harmful traffic, temporary restriction of the Service, speed management, suspension, denial of traffic, disconnection of IP addresses, termination or other technical mitigation reasonably necessary to protect the Service, partner networks, users or third parties. Such measures are applied based on technical and security indicators and do not involve monitoring or analysing the content of the User’s communications.

7.3. The Provider may implement technical mechanisms to prevent prohibited activities where feasible.

7.4. In case of distributed denial-of-service attacks, comparable attacks, malware activity or compromised devices, the Provider may mitigate or disconnect affected resources until the risk has ceased.

8. Permanent Roaming and other Non-Intended Use

8.1. The Service is intended for temporary travel use. It must not be used as a local domestic service in the User’s country of residence or as a substitute for a permanent local mobile subscription.

8.2 The Provider may assess whether the Service is being used inconsistently with its intended temporary travel purpose based on objective and technically available indicators. Such indicators may include, for example, predominant or continuous use of the Service in the same country for more than 90 consecutive days, repeated purchases of packages for the same destination without reasonable travel-related movement, lack of usage in other destinations, repeated use from the same or similar locations, or technical indicators suggesting stationary or fixed installation. The Provider will assess such indicators collectively and proportionately, with continuous use of the service for more than 90 consecutive days in the same country being considered non-intended use. Where reasonably possible, the Provider may notify the User if usage indicates that the Service has been used continuously or predominantly in one country for more than 90 consecutive days or otherwise appears inconsistent with the intended temporary travel purpose.

8.3. The Provider will not treat the mere use of an Unlimited Package beyond 3 GB within a rolling 24-hour period as abuse, because the product design already provides for speed step-down to 1 Mbps. Action under this section requires reasonable grounds indicating non-intended use or another prohibited activity.

9. Accuracy of Information and Security

9.1. The User must provide accurate, complete and up-to-date information during purchase, activation, support and refund processes.

9.2. The User is responsible for keeping their device, email account, payment credentials and account access secure. The User should promptly contact support if they suspect unauthorized use, loss, theft, compromised credentials or payment abuse.

10. What Happens if Usage Falls Outside this Policy

10.1. If the Provider has reasonable grounds to determine, based on objective technical, security, payment, account or usage indicators, that the User has breached this Policy or engaged in a prohibited activity, the Provider may take one or more of the following proportionate measures:

Such measures are applied without monitoring or analysing the content of the User’s communications, except where required or permitted by applicable law.

10.2. The Provider will notify the User of suspension, termination or material restriction. Immediate action may be taken without prior notice where required for network security, legal compliance, fraud prevention or protection of other users.

10.3. If the Service is suspended or terminated due to breach of this Policy, unused data, promotional benefits, discounts, remaining validity or fees may be forfeited.

11. Liability and Indemnity

11.1. The User is responsible for loss, damage, claims, administrative costs and third-party complaints arising from the User’s breach of this Policy, unlawful use or misuse of the Service.

11.2. Nothing in this Policy limits the Provider’s rights or remedies available under the Contract Documents, law or equity with respect to any prohibited activity.

12. Legal Compliance and Final Provisions

12.1. This Policy is governed by Croatian law and applicable European Union law.

12.2. The Provider may amend this Policy for legal, regulatory, security, technical, operational or commercial reasons. Amendments shall be published on the website/application.

12.3. These Policy apply from 1 August 2026 and shall remain in force until further notice of any amendments.