Common use of TO THE STANDARD CONTRACTUAL CLAUSES Clause in Contracts

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, and community and collaboration software services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers of data exporter (natural persons), individuals, employees, agents, contractors, and affiliates of data exporter. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: First, Middle and Last Name; Email Address; Company Name, and Title Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the processing services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): …………………………………Transferring personal data for the provision of services as detailed in the Agreement…………………………………………………………………… ……………………………………………………………………………………… Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, and community and collaboration software services which involves sub-processing Processing personal data provided by, to enable and pursuant to facilitate the instructions and directions of, the processor in accordance with the terms provision of the relevant processing agreement. services detailed in the Agreement…………………………………………………………………………………………………… Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers Cardholders or prospective customers shoppers of data exporter (natural persons), individuals, employees, agents, contractors, and affiliates the Controller; Management personel of data exporter. the Controller Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstEncrypted credit card number, Middle name, email, address, IP adress and Last Nameany other information transferred by the controller; Email Address; Company Name, and Title ………………………………………………………………………………… Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None ……………N/A…………………………………………………………………………………………… Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by processing, storing, analyzing, visualizing, and monitoring data importer is the performance of the processing services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx :……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, and community and collaboration software services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers of data exporter (natural persons), individuals, employees, agents, contractors, and affiliates of data exporter. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: First, Middle and Last Name; Email Address; Company Name, and Title Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the processing services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx Xxxxx Xxxxx Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Customer identified above. Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logicis: APTTUS Corporation, LLC is a provider of email marketing0000 Xxxxxxx Xxxxxx Xxxx, marketing automationXxxxx 000, and community and collaboration software services which involves sub-processing personal data provided byXxx Xxxxx, and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreementXX 00000. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons))  Employees or contact persons of data exporter’s prospects, individualscustomers, employeesbusiness partners and vendors  Employees, agents, contractorsadvisors, and affiliates freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstData exporter may submit Personal Data to the Services, Middle the extent of which is determined and Last Name; Email Address; Company Namecontrolled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None data: Not applicable. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): activities: The objective of Processing of Personal Data by data importer is the performance of the processing services Services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxx Xxxxxxxx Authorised Signature ………………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter Data Exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… legal entity specified in Section 3.1 of Schedule 1 of the DPA. Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher LogicOpenExchange Interfaces, LLC Inc. OpenExchange is a provider of email marketing, marketing automation, and community and collaboration enterprise software services as a service solutions which involves sub-processing process personal data provided by, and pursuant to upon the instructions and directions of, instruction of the processor data exporter in accordance with the terms of the relevant processing agreementAgreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers Data exporter’s users authorized by data exporter to use the Services on behalf of data exporter (natural persons), individuals, employees, agents, contractors, and affiliates attendees of data exportervirtual events hosted by Customer using the Services. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic dataFor data exporter access to the OpenExchange service, the data exporter at a minimum provide the following personal data elements: First, Middle Employee First and Last Name; Name Employee Email Address; Address Employee Mobile Phone Number Employee title or position Company Name, and Title Business Address Employee password or other service authentication credential Localization data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None None. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the processing services Services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER DATA IMPORTER Name:………………………………… …….… Name: ………………………………….… Authorised Signature …………………… DATA IMPORTER NameAuthorised Signature: Xxx Xxxxxxxx Authorised Signature ………………………………….…

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Company which has an account with Vendor for provision of Services, and any affiliates of that Company. Data importer The data importer is (please specify briefly activities relevant to Webgroup Media, LLC, which processes Personal Data on behalf of and on the transfer): Higher Logic, LLC is a provider instruction of email marketing, marketing automation, and community and collaboration software services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. Company Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or subjects: • Customers, prospective customers of data exporter (natural persons), individuals, employees, agents, contractorscustomers, and affiliates other persons with a business relationship with the Company • Employees or agents of data exporterthe Company. • Other persons authorized by the Company to use the Services provided by Vendor. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstNames, Middle and Last Name; Email Address; Company Namecontact information, identification data, and Title Special categories of data (if appropriate) The personal data transferred concern others as necessary to provide the following special categories of data (please specify): None Service or for Company to serve their customers. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the processing services pursuant necessary to the Agreementprovide Services to Company, as requested by the data exporter, which may include collection, organizationincluding but not limited to transmission, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combinationand display of said data. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx Xxxxxx Xxxxxxxxxxx, Xx Authorised Signature ……………………APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): …………………………………………………………………………………………………………………………………………………… …………………………………………………………………………………………………………………………………………………… Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher LogicBuildscale, LLC Inc. is a provider of email marketing, video marketing automation, and community and collaboration software sales services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor data exporter in accordance with the terms of the relevant processing agreementAgreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers of data exporter (natural persons)• Customer employees, individuals, employeescontractors, agents, and/or representatives • Customer customers and affiliates, and their employees, contractors, agents, representatives, prospects, and affiliates website visitors (some of data exporter. which may be end users of Buildscale’s software products and services) Categories of data The personal data transferred concern the may include following categories of data (please specify): Non-sensitive demographic data: First• Standard contact information such as name, Middle and Last Name; Email Address; Company Nametitle, email address, physical address, phone number, etc. • information about an individual’s computer or mobile device or technology usage, including (for example) IP address, MAC address, unique device identifiers, unique identifies set in cookies, and Title any information passively captured about a person’s online activities, browsing, application or hotspot usage or device location Special categories of data (if appropriate) The personal data transferred concern the may include following special categories of data (please specify): None • N/A unless configured by Customer Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is the activities in performance of the processing video marketing and sales services pursuant to as set forth in the Agreement, such as requested by the data exporterstoring, which may include collectioncopying, organizationsummarizing, storageaggregating, adaptation or alteration, retrieval, consultation, use, or alignment or combinationdeleting data. SIGNATURE PAGE FOLLOWS DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx Buildscale, Inc. Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this AppendixAppendix Data exporter Data Exporter is the user of ANALEC Products and services and provides client data as part of the use of the Services. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… importer Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC Importer is a provider of email marketingsoftware product company providing ANALEC products (ResearchWise, marketing automationClientManager, and community and collaboration software services which involves sub-processing personal data provided by, and pursuant Conference Management) to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreementits Client(s). Data subjects The personal data transferred concern the following categories of data subjects: • Data relating to individuals provided to ANALEC via the Services, by (or at the direction of) the Client or by Client’s End Users. • Data subjects (please specify): Customers or prospective customers of include the individuals about whom data exporter (natural persons), individuals, employees, agents, contractors, and affiliates of data exporteris provided to ANALEC via the Services. Categories of data The personal data transferred concern Client may submit Personal Data to the Services, the extent of which is determined and controlled by the Client in its sole discretion, and which may include, but is not limited to the following categories of data (please specify): Non-sensitive demographic dataPersonal Data: First, Middle • First and Last Name; Email Address; Company Namename • Contact information (company, email, phone, physical address) • Connection data • IP Address and Title other cookie data Special categories of data (if appropriate) The personal data transferred concern the following special categories of do not include sensitive data (please specify): None Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal activities: Data by importer will process personal data importer is as necessary to perform the performance of the processing services pursuant to the Agreement, as requested by . The processing operations performed on the personal data will depend on the scope of data exporter's services. Such services may include: • Collecting, which may include collectionRecording, organizationOrganising, storageStorage, adaptation or alterationUse, retrievalAlteration, consultationDisclosure, useTransmission, or alignment or combination. Retrieval, Destruction, Archival DATA EXPORTER Name:…………: ……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx ……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… is: Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, and community and collaboration software services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. is: Outreach Corporation Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers subjects: Prospects, customers, business partners and vendors of data exporter (who are natural persons)) Employees or contact persons of data exporter’s prospects, individualscustomers, employeesbusiness partners and vendors Employees, agents, contractorsadvisors, and affiliates freelancers of data exporter (who are natural persons) Data exporter. ’s users authorized by data exporter to use Outreach’s Services Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstFirst and last name Title Position Employer Contact information (company, Middle and Last Name; Email Address; Company Nameemail, and Title phone, physical business address) ID data Professional life data Connection data Localisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Data exporter will not submit special categories of data (please specify): None to the Outreach Services. For the sake of clarity, special categories of data means personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): activities: The objective of Processing processing of Personal Data personal data by data importer is the performance of the processing services Outreach Services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Outreach Corporation Name: Xxx Xxxxxxxx :……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to a customer of the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… data importer’s custom software applications and/or proprietary platform for the secure transmission and storage of data resulting from the use of these applications. Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, custom software applications and community platform for the secure transmission and collaboration software services which involves sub-processing personal storage of data provided by, and pursuant to resulting from the instructions and directions of, the processor in accordance with the terms use of the relevant processing agreementthese applications. Data subjects The personal data Personal Data transferred concern the following categories of Data Subjects: • Authorized Users of the Solution and the Platform; • Employees of the data subjects (please specify): Customers or prospective customers exporter; • Consultants of the data exporter; • Contractors of the data exporter; • Agents of the data exporter; and/or • Third parties with which the data exporter (natural persons), individuals, employees, agents, contractors, and affiliates of data exporterconducts business. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstAny personal data comprised in Customer Data. “Customer Data” means all data and information submitted by Users of the Solution and the Platform and includes names, Middle contact details and Last Name; Email Address; Company Name, and Title email addresses. Special categories of data (if appropriate) The personal data transferred may concern the following special categories of data: Any personal data (please specify): None comprised in the Customer Data, as defined above, which may be used to uniquely identify an individual, including but not limited to a User’s biometric data or data concerning health, as defined in the GDPR. Processing operations The personal data Personal Data transferred will be processed in accordance with the Principal Agreement and may be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is activities: • Storage and other processing necessary to provide, maintain and update the performance of the processing services pursuant Services provided to the data exporter; • To provide technical support to the data exporter; and • Disclosures in accordance with the Principal Agreement, as requested compelled by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combinationlaw. DATA EXPORTER Name:…………: ……………………………… Authorised Signature ……………………………… DATA IMPORTER Name: Xxx Pieter-Xxxxxxxx Xxxxxx Authorised Signature ………………………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Data exporter is the Customer being (i) the legal entity that has executed the Standard Contractual Clauses as a data exporter and (ii) all Affiliates (as defined in the agreement) of Customer established within the European Economic Area (EEA); that have purchased or have access to the data importer’s products and/or services under the Services Agreement. Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a A provider of email marketing, marketing automation, software solutions for tax and community and collaboration software accounting experts who provide products and/or services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, data exporter as more fully described in the processor in accordance with the terms of the relevant processing agreement. Agreement Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers Personal data transferred is that of data exporter (natural persons), individuals, employees, agentsworkers, contractorsconsultants, and affiliates clients of data exporter. Data Exporter who are natural persons or as specified at Annex 1 DPA Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: First, Middle and Last Name; Email Address; Company Name, and Title As specified at Annex 1 DPA Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None As specified at Annex 1 DPA Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective purpose of Processing of Personal Data processing by data importer is the performance of the processing services its obligations pursuant to the Agreement, Services Agreement or as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. specified at Annex 1 DPA DATA EXPORTER IMPORTER Name:………………………… Xxxxxxx Xxxxx …………………… Authorised Signature …………………… DATA IMPORTER EXPORTER Name: Xxx Xxxxxxxx :…………… Xxxxxxx Xxxxx ………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to a customer of the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… data importer’s custom software applications and/or proprietary platform for the secure transmission and storage of data resulting from the use of these applications. Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, custom software applications and community platform for the secure transmission and collaboration software services which involves sub-processing personal storage of data provided by, and pursuant to resulting from the instructions and directions of, the processor in accordance with the terms use of the relevant processing agreementthese applications. Data subjects The personal data Personal Data transferred concern the following categories of Data Subjects: ● Authorized Users of the Solution and the Platform; ● Employees of the data subjects (please specify): Customers or prospective customers exporter; ● Consultants of the data exporter; ● Contractors of the data exporter; ● Agents of the data exporter; and/or ● Third parties with which the data exporter (natural persons), individuals, employees, agents, contractors, and affiliates of data exporterconducts business. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstAny personal data comprised in Customer Data. “Customer Data” means all data and information submitted by Users of the Solution and the Platform and includes names, Middle contact details and Last Name; Email Address; Company Name, and Title email addresses. Special categories of data (if appropriate) The personal data transferred may concern the following special categories of data: Any personal data (please specify): None comprised in the Customer Data, as defined above, which may be used to uniquely identify an individual, including but not limited to a User’s biometric data or data concerning health, as defined in the GDPR. Processing operations The personal data Personal Data transferred will be processed in accordance with the Principal Agreement and may be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is activities: ● Storage and other processing necessary to provide, maintain and update the performance of the processing services pursuant Services provided to the data exporter; ● To provide technical support to the data exporter; and ● Disclosures in accordance with the Principal Agreement, as requested compelled by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combinationlaw. DATA EXPORTER Name:…………: ……………………………… Authorised Signature ……………………………… DATA IMPORTER Name: Xxx Xxxxxxxx Xxxx xx Xxxxx Authorised Signature ……………………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c): This Section describes the technical and organizational security measures and procedures that the data importer shall, as a minimum, maintain to protect the security of Personal Data created, collected, received, or otherwise obtained. Data importer will keep documentation of technical and organizational security measures identified below to facilitate audits and for the conservation of evidence. Data importer will at any time comply with the specific statutory requirements for technical and organizational security measures stipulated in the national law applicable to the data exporter (including without limitation Art. 32 GDPR for data exporters from the EU/EEA). Data importer hereby represents that it is aware of such specific statutory requirements and has implemented the necessary security measures even if they are not expressly detailed in the following. The data importer has implemented and will maintain appropriate technical and organizational measures to protect the personal data against misuse and accidental loss or destruction as set forth in its Data Security Whitepaper available at xxxxx://xxxxxxxxxxx.xxx/resources/JourneyApps-Whitepaper-Data-Security.pdf and the Principal Agreement. DATA EXPORTER Name: ……………………………… Authorised Signature ……………………………… DATA IMPORTER Name: Xxxx xx Xxxxx

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): ………………………………………………………………………………………………………………………… ………………………………………………………………………………………………………………………… …………………………………………………… Data importer The data importer is (please specify briefly activities relevant to the transfer): Higher LogicBuildscale, LLC Inc. is a provider of email marketing, video marketing automation, and community and collaboration software sales services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor data exporter in accordance with the terms of the relevant processing agreementAgreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Customers or prospective customers of data exporter (natural persons)● Customer employees, individuals, employeescontractors, agents, and/or representatives ● Customer customers and affiliates, and their employees, contractors, agents, representatives, prospects, and affiliates website visitors (some of data exporter. which may be end users of Buildscale’s software products and services) Categories of data The personal data transferred concern the may include following categories of data (please specify): Non-sensitive demographic data: First● Standard contact information such as name, Middle and Last Name; Email Address; Company Nametitle, email address, physical address, phone number, etc. ● information about an individual’s computer or mobile device or technology usage, including (for example) IP address, MAC address, unique device identifiers, unique identifies set in cookies, and Title any information passively captured about a person’s online activities, browsing, application or hotspot usage or device location Special categories of data (if appropriate) The personal data transferred concern the may include following special categories of data (please specify): None ● N/A unless configured by Customer Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of Processing of Personal Data by data importer is the activities in performance of the processing video marketing and sales services pursuant to as set forth in the Agreement, such as requested by the data exporterstoring, which may include collectioncopying, organizationsummarizing, storageaggregating, adaptation or alteration, retrieval, consultation, use, or alignment or combinationdeleting data. SIGNATURE PAGE FOLLOWS DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxx Xxxxxxxx Buildscale, Inc. Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter Exporter The data exporter is (please specify briefly your activities relevant to the transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… is: [TO BE COMPLETED] Data importer Importer The data importer is (please specify briefly activities relevant to the transfer): Higher Logic, LLC is a provider of email marketing, marketing automation, and community and collaboration software services which involves sub-processing personal data provided by, and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. is: [TO BE COMPLETED] Data subjects Subjects The personal data transferred concern the following categories of data subjects subjects: Categories of Data Subjects, as determined by the Data Exporter, may include company representatives and (please specify): Customers or prospective customers of data exporter (natural persons)end) users, individuals, such as employees, agentsjob applicants, contractors, collaborators, partners, suppliers and affiliates customers of the Company. Data Subjects also may include consumers and individuals attempting to communicate or transfer personal data exporterto users of the services to be provided under the Principal Agreement. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: FirstCategories of personal Data, Middle as determined by the Data Exporter, may only include personal contact information such as name, home address, home telephone or mobile number, fax number, email address, employment details including employer name, job title and Last Name; Email Address; Company Name, and Title function. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): data: None Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): activities: The objective of Processing processing of Personal personal data by Data by data importer Importer is the performance of the processing services pursuant to the Principal Agreement. DATA EXPORTER [Populated with details of, as requested by and deemed to be signed on behalf of, the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER :] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name: Xxx Xxxxxxxx :……………………………… Authorised Signature ……………………