Issued by Sturmfrei Hospitality Pvt. Ltd.

Effective Immediately

At Sturmfrei Hospitality Pvt. Ltd. (“Sturmfrei”, “Company”, “we”, “our”), the privacy, security, and protection of guest information remain a top priority.

We wish to inform all guests that there has been an increase in phishing attempts, fraudulent calls, fake payment requests, impersonation scams, spoofed emails, and unauthorized communications targeting hospitality customers across the industry.

Cybercriminals may attempt to misuse company names, logos, employee identities, booking references, or communication channels to deceive guests into disclosing sensitive information or making unauthorized payments.

1. Official Communication Policy

Sturmfrei representatives will communicate with guests only through officially authorized channels, including:

• Registered company email domains
• Verified company contact numbers
• Official booking/payment channels
• Company-approved communication platforms

Guests are advised not to trust communications originating from unknown numbers, personal email IDs, unverified links, or suspicious payment requests.

2. Sensitive Information We Will Never Request

For security reasons, Sturmfrei personnel will never request the following through calls, WhatsApp, SMS, email or chat:

• Banking passwords
• Credit/debit card PIN
• CVV numbers
• OTPs
• Net banking credentials
• UPI PIN
• Full payment authentication credentials

Any request for such information should be treated as fraudulent.

3. Payment Safety Advisory

Before making any payment, guests must verify:

• Beneficiary name
• Bank account / UPI details
• Payment link authenticity
• Booking confirmation source

Sturmfrei shall not be responsible for payments made to unauthorized third-party accounts due to failure to verify payment credentials.

4. Guest Responsibility

Guests are strongly advised to:

• Verify suspicious communications before acting
• Avoid clicking unknown links or attachments
• Report suspicious messages immediately
• Use secure networks while making payments
• Keep personal devices protected

Guests are responsible for exercising reasonable caution while interacting digitally with parties claiming to represent Sturmfrei.

5. Data Security Commitment by Company

Sturmfrei maintains reasonable administrative, technical, and operational safeguards to protect guest information, including but not limited to:

• Access controls
• Role-based permissions
• Credential security
• Secure software practices
• Internal cybersecurity awareness training
• Incident response protocols

While the Company takes commercially reasonable security measures, no internet-based transmission or digital platform can be guaranteed to be fully secure against malicious actors.

6. Limitation of Liability

To the fullest extent permissible under applicable law, Sturmfrei Hospitality Pvt. Ltd., its directors, employees, affiliates and representatives shall not be liable for:

• Fraud by third-party impersonators
• Phishing attacks
• Social engineering scams
• Unauthorized transactions performed outside official systems
• Loss arising from guest disclosure of confidential credentials

This limitation applies where such loss occurs due to acts beyond the Company's reasonable control.

7. Incident Reporting

If you receive suspicious communication claiming to be from Sturmfrei, please report immediately to:

Guest Support Desk

• Email: bookings@staysturmfrei.com
• Phone: +91 79482 21212

Early reporting significantly improves fraud prevention and response.

Disclaimer

This advisory is issued in the interest of guest safety and digital security. Continued use of Sturmfrei services implies acknowledgment of cyber risks inherent in digital communications and acceptance of responsibility to exercise due caution.