Common use of APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES Clause in Contracts

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions. Data importer The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. Data Exporter is a provider the legal entity specified in Section 2.1 of enterprise cloud computing solutionsSchedule 1 of the DPA. Data importer The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides Impero is a provider of software solutions which processes personal data upon the services as set forth instruction of the data exporter in accordance with the terms of the Agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data Personal Data to the Service SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to personal data Personal Data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data Personal Data to the Services SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of personal dataPersonal Data: ● First and last name ● Title ● Position ● Employer ● • Name • Date of birth • Gender • Sex • Contact information details (companypostal addresses, emailemail addresses, phone, physical business addresstelephone numbers) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data • Photographs Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which is for the sake of clarity personal data Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex lifelife or sexual orientation. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing Processing of personal data Personal Data by data importer is the performance of the SCC Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the ClausesClauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is the customer, as defined in the Agreement (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutionsdefined above). Data importer The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant Analytic Index, Inc., which provides e-commerce business intelligence to the transfer): Supplier provides the services as set forth in the Agreementbrand manufacturers, advertising agents, investment firms, retailers, and other subscribers. That business intelligence includes fundamental insights that help our clients understand better how to handle their product promotions, pricing, search optimization, and sponsored advertising. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern include, but not limited to, the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First First, Middle, and last name Last Name ● Title ● Position ● Employer ● Contact information Information (companyCompany, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data Special categories of data (if appropriate) The personal data transferred concern include, but not limited to, the following special categories of data (please specify): data: ● Data exporter may submit special categories of data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which is for the sake of clarity personal data Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. It is not anticipated that the Services will be used to process any special categories of data. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): ● The objective of processing Processing of personal data Personal Data by data importer is the performance of the Services pursuant to the Agreement.. Signatures Presumed

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter (as such term is applied mutatis mutandis per the Vendor Supplier Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions, signing in name and on behalf of its Affiliates that are based in the European Economic Area and are a Controller. Data importer The data importer (as such term is applied mutatis mutandis per the Vendor Supplier Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data Supplier shall notify SFDC in writing to the extent Supplier must collect additional categories of Personal Data beyond those listed above in order to provide the Services. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter (is the entity identified as such term is applied mutatis mutandis per “Customer” in the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutionsDPA. Data importer The data importer (is the entity or entities defined as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth “Roambee” in the AgreementDPA all of which provide enterprise cloud computing and monitoring solutions. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data Personal Data to the Service Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to personal data Personal Data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors andvendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data Personal Data to the Services Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of personal dataPersonal Data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation Localization data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is operations are defined in the performance of the Services pursuant to the AgreementDPA.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions, signing in name and on behalf of its Affiliates that are based in the European Economic Area and are a Controller. Data importer The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the ClausesClauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is the customer, as defined in the Xxxx XX Terms of Use (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions“Agreement”). Data importer The data importer (as such term is applied mutatis mutandis per Xxxx XX, Inc., a human resources management service in which the Vendor Privacy Exhibit) is (please specify briefly activities relevant Service stores personal information, supporting documentation of the customer, time off, and employee reviews for the purposes of centralizing human resources data to the transfer): Supplier provides organization in accordance to the services as set forth in terms of the Agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services Categories of data The personal data transferred concern include, but not limited to, the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First First, Middle, and last name Last Name ● Title ● Position ● Employer ● Contact information Information (companyCompany, email, phone, physical business home address) ● ID data Data ● Professional life Life data ● Personal life Life data ● Connection data ● Localisation Localization data Special categories of data (if appropriate) The personal data transferred concern include, but not limited to, the following special categories of data (please specify): data: ! Data exporter may submit special categories of data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which is for the sake of clarity personal data Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): ● The objective of processing Processing of personal data Personal Data by data importer is the performance of the Services pursuant to the Agreement.. Signatures Presumed