Common use of TO THE STANDARD CONTRACTUAL CLAUSES Clause in Contracts

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): A hotel chain, who processes the categories of data below for the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence services. Data importer The data importer is (please specify briefly activities relevant to the transfer): A software as a service (SaaS) company providing web hosting services, reservation/booking services, GMS, Media and business intelligence services to hotels. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Hotel guests; Employees of data exporter using the services Categories of data The personal data transferred concern the following categories of data with respect to hotel guests (please specify): Guest information: salutation, last name, first mail, title, email, company, address 1, xxxxxxx0, xxxx, xxxxx, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card type, credit card number, expiration date, name on card, billing address 1, billing address 2, billing city, billing country, billing state, billing postal code, billing code The personal data transferred concern the following categories of data with respect to Data exporter employees (please specify): First and last name; email address; position Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): As indicated on any agreement for Services from TravelClick, Inc. involing the processing of Personal Data on behalf of the Data exporter.

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): A hotel chain, who processes the categories of data below for the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence services. Data importer The data importer is (please specify briefly activities relevant to the transfer): A software as a service (SaaS) company providing web hosting services, reservation/booking services, GMS, Media and business intelligence services to hotels. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Hotel guests; Employees of data exporter using the services Categories of data The personal data transferred concern the following categories of data with respect to hotel guests (please specify): Guest information: salutation, last name, first mail, title, email, company, address 1, xxxxxxx0, xxxx, xxxxx, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card type, credit card number, expiration date, name on card, billing address 1, billing address 2, billing city, billing country, billing state, billing postal code, billing code The personal data transferred concern the following categories of data with respect to Data exporter employees (please specify): First and last name; email address; position Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): As indicated on any agreement for Services from TravelClick, Inc. Amadeus involing the processing of Personal Data on behalf of the Data exporter.

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): A hotel chain, who processes the categories of data below for the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence serviceslisted above. Data importer The data importer is (please specify briefly activities relevant to the transfer): A software as a service (SaaS) company providing web hosting services, reservation/booking services, GMS, Media provider who performs employment screening and business intelligence services verifications of the personal information of the applicants for the purposes of ensuring an applicant’s capabilities with regard to hotelsa particular position and avoiding additional liability for data exporter with regards to improper hiring. With such information data exporter can evaluate if they will hire the applicant or not and if findings align with contractual and regulatory requirements. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Hotel guests; Employees of data exporter using the services subjects: job applicants, and potentially contractors, subcontractors and/or temporary employees. Categories of data The personal data transferred concern the following categories of data: - Identification data with respect to hotel guests (please specify): Guest information: salutation, last - name, first mailinternal ID number, titlegovernment-issued identification numbers (where authorized by the law of the data exporter); - Contact information - home and business addresses, emailphone number, companyfax, address 1mobile devices and email addresses; - Personal information - birth date; - Criminal record - file number, xxxxxxx0file date, xxxxcharges, xxxxxlevel of charge, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card typedisposition and sentence (if any); - Social Security Number (or equivalent); - Driver's history - driver's license and state of issuance (or equivalent); - Credit history information - places of employment and prior address, credit card numberaccount types, expiration dateterms, name on cardamounts past due, billing address 1loan types, billing address 2balances, billing citypublic records, billing countryhigh credit, billing statedates opened and closed, billing postal codepayment patterns, billing code The personal data transferred concern the following categories credit limits and modes of data with respect payment; - Education information - diploma earned, major, degree(s) earned and graduation; dates related to Data exporter employees (please specify): First attendance; and last name; email address; - Employment information - previous and current employers, dates of employment, position held, salary and eligibility to rehire. Special categories of data (if appropriate) DocuSign Envelope ID: 51738651-7D4F-49F6-92BC-819839070612 The personal data transferred concern the following special categories of data data: - Criminal record - file number, file date, charges, level of charge, disposition and sentence (please specify): None. if any) Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): As indicated on any agreement Data importer receives information from third parties and assembles the relevant data into employment screening reports for Services from TravelClickdata exporter to evaluate applicant. Data importer will securely store data for the length of time it is needed. …………………………………………………………………………………………………… DATA EXPORTER Other information necessary in order for the contract to be binding (if any): DATA IMPORTER Address: 0000 Xxxxxx Xxxxxx Xxxxx, Inc. involing the processing of Personal Data on behalf of the Data exporter.Xxxxxx, XX 00000 DocuSign Envelope ID: 51738651-7D4F-49F6-92BC-819839070612

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): A hotel chain, who processes the categories of data below for the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence services. Data importer The data importer is (please specify briefly activities relevant to the transfer): A software as a service (SaaS) company providing web hosting services, reservation/booking services, GMS, Media and business intelligence services to hotels. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Hotel guests; Employees of data exporter using the services services. Categories of data The personal data transferred concern the following categories of data with respect to hotel guests (please specify): Guest information: salutation, last name, first mail, title, email, company, address 1, xxxxxxx0, xxxx, xxxxx, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card type, credit card number, expiration date, name on card, billing address 1, billing address 2, billing city, billing country, billing state, billing postal code, billing code The personal data transferred concern the following categories of data with respect to Data exporter employees (please specify): First and last name; email address; position position. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): As indicated on any agreement for Services from TravelClick, Inc. involing the processing of Personal Data on behalf of the Data exporter.

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Standard Contractual Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter The data exporter is: The Customer which is (please specify briefly your activities relevant subject to the transfer): A hotel chainData Protection Laws of the European Union, who processes the categories of data below for European Economic Area, Switzerland and/or the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence servicesUnited Kingdom together with any Authorized Affiliates. Data importer The data importer is (please specify briefly activities relevant to the transfer): A is: PROS, Inc., a provider of software as a service (SaaS) company providing web hosting solutions and related professional services, reservation/booking services, GMS, Media and business intelligence services to hotels. Data subjects The and Categories of data Data exporter may submit personal data transferred concern to the Subscription Service and/or as part of the Professional Services, the extent of which is determined and controlled by data exporter in its sole discretion. Depending on the use case, this may include, but is not limited to, the following categories of personal data subjects (please specify): Hotel guests; Employees and data subjects: Smart Configure, Price, Quote & Smart Price Optimization and Management Solutions Subscription Service Categories of data exporter using the services Personal Data Categories of data The personal subjects  User log-in ID and credentials  Online identifiers (IP address)  Location data transferred concern the following categories of data with respect to hotel guests (please specify): Guest information: salutationtime zone, last name, first mail, title, email, company, address 1, xxxxxxx0, xxxx, xxxxx, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card type, credit card number, expiration date, name on card, billing address 1, billing address 2, billing city, billing country, billing state, billing postal code, billing code The personal data transferred concern the following categories of data with respect to Data exporter employees (please specify): location/language preferences)   First and last name; email name Title, Position and Employee ID  Users of the Subscription Service  Employer  Email address  Phone number  Business address  PROS Smart Configure, This will depend on your configuration, but may include:  First and last name  Title and Position  Employer  Email address  Phone number  Address  Location data (time zone, location/language preferences)  Certain Personal Life Data to the extent necessary to perform the configure, quote process  Prospects and customers of Customer and Customer Affiliates Price, Quote  User log-in ID and credentials  Location data (time zone, location/language preferences)  PROS Smart Price Optimization and Management    Online identifiers (IP address; ) First and last name Title, Position and Employee ID  Users of the Subscription Service  Employer  Email Address  Phone Number  User log-in ID and credentials  First and last name  Title and position  PROS Contribution Management System (CMS)   Employer Email address  Users of the Subscription Service Travel Solutions Subscription Service Categories of Personal Data Categories of data subjects  PROS RM Advantage  User log-in ID and credentials  PROS RM Essentials  First and last name  PROS RM Essentials Network Add-On   Employer Title and Position  Users of the Subscription Service  PROS Market Valuation Module (MVM)  Email address  PROS Group Sales Optimizer (GSO)        User log-in ID and credentials First and last name Employer Title and Position Email address Physical business Address Phone number  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons     First and last name Date of birth PNR locator (booking reference number) Travel information (e.g., destination, fare information, travel status)  Prospects and customers of Customer and Customer Affiliates   PROS Real-Time Dynamic Pricing (RTDP) Advantage PROS Real-Time Dynamic Pricing (RTDP) Ultimate     User log-in ID and credentials First and last name Employer Email address  Users of the Subscription Service  PROS OneSearch – Groups      User log-in ID and credentials First and last name Title and Position Employer Email address  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  OneSearch - Groups processes certain pseudonymous data - such as date of birth, bank identification number, gender, country of citizenship and residence, and frequent flyer program details (e.g. miles accumulated, passenger score/tier level) – where the additional information required to identify the individual is held by Customer (or its business partners and resellers)  Prospects and customers of Customer and Customer Affiliates  PROS Dynamic Offers      User log-in ID and credentials First and last name Title and Position Employer Email address  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  Dynamic Offers processes certain pseudonymous data - such as date of birth, bank identification number, gender, country of citizenship and residence, and frequent flyer program details (e.g. miles accumulated, passenger score/tier level) – where the additional information required to identify the individual is held by Customer (or its business partners and resellers)  Prospects and customers of Customer and Customer Affiliates  PROS Pricing Cache      User log-in ID and credentials First and last name Employer Title and Position Email address  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  PROS Retail for Airlines  First and last name  Email address & phone number  Date of birth (for minors only)  Meal preferences  Health data if relevant to travel requirements  Certain additional information dependent on destination (e.g. gender, date of birth, travel document number, issue country, redress number and known traveller number)  Online identifiers (IP address, website clicks)  Users of the Subscription Service, which include prospects and customers of Customer and Customer Affiliates Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: This will depend on the use case for the Subscription Service. Data exporter may submit special categories of data to the Subscription Service and/or as part of the Professional Services, the extent of which is determined and controlled by the data exporter in its sole discretion For the sake of clarity, special category data is Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, genetic data, and biometric data (please specify): Nonewhere used for identification purposes), and data concerning health, a person’s sex life or sexual orientation. Processing operations The personal data transferred will be subject to the following basic processing activities: Processing activities (please specify): As indicated on any agreement for will be limited to those necessary to provide the Subscription Service and Professional Services from TravelClick, Inc. involing pursuant to the processing of Personal Data on behalf of the Data exporter.Agreement. DATA EXPORTER Name: Authorised Signature DATA IMPORTER Name: Xxxxx Xxxxxxx Authorised Signature

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Standard Contractual Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is: The Customer which is (please specify briefly your activities relevant subject to the transfer): A hotel chain, who processes the categories of data below for the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence servicesUK GDPR together with any Authorized Affiliates. Data importer The data importer is (please specify briefly activities relevant to the transfer): A is: PROS, Inc., a provider of software as a service (SaaS) company providing web hosting solutions and related professional services, reservation/booking services, GMS, Media and business intelligence services to hotels. Data subjects The and Categories of data Data exporter may submit personal data transferred concern to the Subscription Service and/or as part of the Professional Services, the extent of which is determined and controlled by data exporter in its sole discretion. Depending on the use case, this may include, but is not limited to, the following categories of personal data subjects (please specify): Hotel guests; Employees and data subjects: Smart Configure, Price, Quote & Smart Price Optimization and Management Solutions Subscription Service Categories of data exporter using the services Personal Data Categories of data The personal subjects  User log-in ID and credentials  Online identifiers (IP address)  Location data transferred concern the following categories of data with respect to hotel guests (please specify): Guest information: salutationtime zone, last name, first mail, title, email, company, address 1, xxxxxxx0, xxxx, xxxxx, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card type, credit card number, expiration date, name on card, billing address 1, billing address 2, billing city, billing country, billing state, billing postal code, billing code The personal data transferred concern the following categories of data with respect to Data exporter employees (please specify): location/language preferences)   First and last name; email name Title, Position and Employee ID  Users of the Subscription Service  Employer  Email address  Phone number  Business address  PROS Smart Configure, This will depend on your configuration, but may include:  First and last name  Title and Position  Employer  Email address  Phone number  Address  Location data (time zone, location/language preferences)  Certain Personal Life Data to the extent necessary to perform the configure, quote process  Prospects and customers of Customer and Customer Affiliates Price, Quote  User log-in ID and credentials  Location data (time zone, location/language preferences)  PROS Smart Price Optimization and Management    Online identifiers (IP address; ) First and last name Title, Position and Employee ID  Users of the Subscription Service  Employer  Email Address  Phone Number  User log-in ID and credentials  First and last name  Title and position  PROS Contribution Management System (CMS)   Employer Email address  Users of the Subscription Service Travel Solutions Subscription Service Categories of Personal Data Categories of data subjects  PROS RM Advantage  PROS RM Essentials  PROS RM Essentials Network Add-On  PROS Market Valuation Module (MVM)  User log-in ID and credentials  First and last name  Employer  Title and Position  Email address  Users of the Subscription Service  PROS Group Sales Optimizer (GSO)  User log-in ID and credentials  First and last name  Employer  Title and Position  Email address  Physical business Address  Phone number  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  First and last name  Date of birth  PNR locator (booking reference number)  Travel information (e.g., destination, fare information, travel status)  Prospects and customers of Customer and Customer Affiliates  PROS Real-Time Dynamic Pricing (RTDP) Advantage  PROS Real-Time Dynamic Pricing (RTDP) Ultimate  User log-in ID and credentials  First and last name  Employer  Email address  Users of the Subscription Service  PROS OneSearch – Groups  User log-in ID and credentials  First and last name  Title and Position  Employer  Email address  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  OneSearch - Groups processes certain pseudonymous data - such as date of birth, bank identification number, gender, country of citizenship and residence, and frequent flyer program details (e.g. miles accumulated, passenger score/tier level) – where the additional information required to identify the individual is held by Customer (or its business partners and resellers)  Prospects and customers of Customer and Customer Affiliates  PROS Dynamic Offers  User log-in ID and credentials  First and last name  Title and Position  Employer  Email address  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  Dynamic Offers processes certain pseudonymous data - such as date of birth, bank identification number, gender, country of citizenship and residence, and frequent flyer program details (e.g. miles accumulated, passenger score/tier level) – where the additional information required to identify the individual is held by Customer (or its business partners and resellers)  Prospects and customers of Customer and Customer Affiliates  PROS Pricing Cache  User log-in ID and credentials  First and last name  Employer  Title and Position  Email address  Users of the Subscription Service  Customer (and Customer Affiliates’) business partners and resellers, as well as their employees and other related persons  PROS Retail for Airlines  First and last name  Email address & phone number  Date of birth (for minors only)  Meal preferences  Health data if relevant to travel requirements  Certain additional information dependent on destination (e.g. gender, date of birth, travel document number, issue country, redress number and known traveller number)  Online identifiers (IP address, website clicks)  Users of the Subscription Service, which include prospects and customers of Customer and Customer Affiliates Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: This will depend on the use case for the Subscription Service. Data exporter may submit special categories of data to the Subscription Service and/or as part of the Professional Services, the extent of which is determined and controlled by the data exporter in its sole discretion For the sake of clarity, special category data is Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, genetic data, and biometric data (please specify): Nonewhere used for identification purposes), and data concerning health, a person’s sex life or sexual orientation. Processing operations The personal data transferred will be subject to the following basic processing activities: Processing activities (please specify): As indicated on any agreement for will be limited to those necessary to provide the Subscription Service and Professional Services from TravelClick, Inc. involing pursuant to the processing of Personal Data on behalf of the Data exporter.Agreement. DATA EXPORTER Name: Authorised Signature DATA IMPORTER Name: Xxxxx Xxxxxxx Authorised Signature