Common use of TO THE STANDARD CONTRACTUAL CLAUSES Clause in Contracts

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is: [This section is deemed to be populated with your details] Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject to whom your Personal Data relates" in ANNEX 1 to this Addendum] Categories of data The personal data transferred concern the following categories of data: [This section is deemed to be populated with the content of the section headed "The types of your Personal Data to be Processed" in ANNEX 1 to this Addendum] Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX 1 to this Addendum] Processing operations The personal data transferred will be subject to the following basic processing activities: The processing operations are set out in the Agreement. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is: [This section is deemed to be populated with your detailsTO BE COMPLETED] Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] Boomset, Inc. Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject to whom your Personal Data relates" in ANNEX 1 to this AddendumT O BE COMPLETED] Categories of data The personal data transferred concern the following categories of data: [This section is deemed to be populated with the content of the section headed "The types of your Personal Data to be Processed" in ANNEX 1 to this AddendumT O BE COMPLETED] Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX 1 to this AddendumT O BE COMPLETED] Processing operations The personal data transferred will be subject to the following basic processing activities: The processing operations are set out in the Agreement. [TO BE COMPLETED] DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised : Xxxxx Xxx Authorized Signature ………………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c): Data importer has implemented and will maintain the technical and organizational security measures to ensure a level of security appropriate to the risk, including, as appropriate, the measures referred to in Article 32(1) of the GDPR.

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Appendix. Data exporter The data exporter is: [This section is deemed (please specify briefly your activities relevant to be populated with your details] the transfer): The data exporter is the legal entity that has executed the Standard Contractual Clauses as a data exporter, which has purchased Services from data importer pursuant to the Agreement. Data importer The data importer is: [This section is deemed (please specify briefly activities relevant to be populated the transfer): The data importer is the legal entity that has executed the Standard Contractual Clauses as a data importer, which processes personal data upon the instruction of the data exporter in accordance with our details or the relevant Telstra Group Company] terms of the Agreement. Data subjects The personal data transferred concern the following categories of data subjects (please specify): The data exporter may submit personal data to the data importer’s Service to the extent determined and controlled by the data exporter, which shall be limited to personal data relating to the following categories of data subjects: [This section is deemed to be populated with the content Employees, agents, advisors, contractors and freelancers of the section headed "The categories data exporter who are Users of Data Subject to whom your Personal Data relates" in ANNEX 1 to this Addendum] the Service (who are natural persons) Categories of data The personal data transferred concern the following categories of data: [This section is deemed data (please specify): The data exporter may submit personal data to the data importer’s Service to the extent determined and controlled by the data exporter, which shall be populated with limited to User names, contact information and e-mail addresses, solely as required to access and use the content Services of the section headed "The types of your Personal Data to be Processed" in ANNEX 1 to this Addendum] data importer. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX 1 to this Addendum] data (please specify): None. Processing operations The personal data transferred will be subject to the following basic processing activities: activities (please specify): The processing operations are set out objective of Processing of personal data by the data importer is the performance of the Services pursuant to the Agreement in place between the Agreementdata exporter and the data importer. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:…………: ……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Appendix. Data exporter The data exporter is: [This section is deemed (please specify briefly your activities relevant to be populated with your details] the transfer): Data exporter is the Customer being (i) the legal entity that has executed the Standard Contractual Clauses as a data exporter and (ii) all Affiliates (as defined in the agreement) of Customer established within the European Economic Area (EEA); that have purchased or have access to the data importer’s products and/or services under the Services Agreement. Data importer The data importer is: [This section is deemed (please specify briefly activities relevant to be populated with our details or the relevant Telstra Group Company] transfer): A provider of software solutions for tax and accounting experts who provide products and/or services to the data exporter as more fully described in the Agreement Data subjects The personal data transferred concern the following categories of data subjects: [This section subjects (please specify): Personal data transferred is deemed to be populated with the content that of the section headed "The categories employees, workers, consultants, and clients of Data Subject to whom your Personal Data relates" in ANNEX Exporter who are natural persons or as specified at Annex 1 to this Addendum] DPA Categories of data The personal data transferred concern the following categories of data: [This section is deemed to be populated with the content of the section headed "The types of your Personal Data to be Processed" in ANNEX data (please specify): As specified at Annex 1 to this Addendum] DPA Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX As specified at Annex 1 to this Addendum] DPA Processing operations The personal data transferred will be subject to the following basic processing activities: activities (please specify): The purpose of processing operations are set out in by data importer is the Agreement. performance of its obligations pursuant to the Services Agreement or as specified at Annex 1 DPA DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] IMPORTER Name:………………………… Xxxxxxx Xxxxx …………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] EXPORTER Name:…………………………… Xxxxxxx Xxxxx ………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Appendix. Data exporter The data exporter is: [This section is deemed to be populated with your details] Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] Docmosis Pty Ltd. Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject to whom your Exporter may submit Personal Data relates" to Data Importer’s Service, the extent of which is determined and controlled by Data Exporter in ANNEX 1 its sole discretion, and which may include, but is not limited to this Addendum] Data Exporter’s clients’ Personal Data and other Personal Data concerning Data Exporter’s employees, contractors, collaborators, customers, prospects, suppliers and subcontractors. Categories of data The personal data transferred concern Data Exporter has complete control over the following categories of data: [This section is deemed Personal Data it sends to be populated with Processed by the content Services. Data Importer has no way of knowing the section headed "The types categories of your Personal Data sent to be Processed" in ANNEX 1 to this Addendum] Processed by the Services. Special categories of data (if appropriate) The personal data transferred concern Data Exporter has complete control over the following special categories of data: [This section is deemed Personal Data it sends to be populated with Processed by the content Services. Data Importer has no way of knowing the section headed "The types special categories of your Personal Data sent to be Processed by the Services. Processing operations Data Importer provides cloud based document generation services. Data Exporter, as a client of Data Importer, may use the Services to generate documents. Data Importer has no control over whether the data sent to be Processed by the Services is in fact Client Personal Data. If Data Exporter sends Client Personal Data to be Processed " in ANNEX 1 to this Addendum] Processing operations The personal data transferred will be subject by the Services then the generated document may then contain Client Personal Data. Once the Client Personal Data has been Processed and any generated document has been returned to the following basic processing activities: The processing operations are set out Client, the generated document and any Client Personal Data is automatically deleted from the Data Importer’s systems (including that of its Subprocessor). Client shall follow the “Guidelines for Using the Docmosis Cloud Services in a GDPR-Compliant Manner” issued by the AgreementCompany dated 25 May 2018 and as amended or updated. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is: [This section is deemed to be populated with your details] ………………………………………. Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] BizLogr, Inc. dba FreeBusy Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject data subjects are set out in Annex A to whom your Personal Data relates" in ANNEX 1 to this Addendum] the DPA. Categories of data The personal data transferred concern the following categories of data: [This section is deemed The categories of data are set out in Annex A to be populated with the content of the section headed "The types of your Personal Data to be Processed" in ANNEX 1 to this Addendum] DPA. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types If applicable, special categories of your Personal Data data are set out in Annex A to be Processed " in ANNEX 1 to this Addendum] the DPA. Processing operations The personal data transferred will be subject to the following basic processing activities: The processing operations activities are set out in Annex A to the AgreementDPA. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………: …………………… Authorised Authorized Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised : Stefan Negritoiu Authorized Signature ……………………./ Stefan Negritoiu /… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is: [This section is deemed (please specify briefly your activities relevant to be populated with your details] the transfer): The data exporter is the relevant “Customer Group Member” in the Addendum to which the Clauses are attached. Data importer The data importer is: [This section is deemed (please specify briefly activities relevant to be populated with our details or the transfer): The data exporter is the relevant Telstra Group Company] “Contracted Processor” in the Addendum to which the Clauses are attached. Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "subjects (please specify): The categories of Data Subject to whom your Personal Data relates" data subjects are as set forth in ANNEX Schedule 1 to this of the Addendum] . Categories of data The personal data transferred concern the following categories of datadata (please specify):: [This section is deemed to be populated with the content of the section headed "The types of your Personal Data to be Processed" personal data are as set forth in ANNEX Schedule 1 to this of the Addendum] . Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content Special categorized of data, if any, are as set forth in Schedule 1 of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX 1 to this Addendum] . Processing operations The personal data transferred will be subject to the following basic processing activities: The nature and purpose of the processing operations are is set out forth in Schedule 1 of the AgreementAddendum. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Appendix. Data exporter The data exporter is: [This section is deemed to be populated with your details] Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] Docmosis Pty Ltd. Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject to whom your Exporter may submit Personal Data relates" to Data Importer’s Service, the extent of which is determined and controlled by Data Exporter in ANNEX 1 its sole discretion, and which may include, but is not limited to this Addendum] Data Exporter’s clients’ Personal Data and other Personal Data concerning Data Exporter’s employees, contractors, collaborators, customers, prospects, suppliers and subcontractors. Categories of data The personal data transferred concern Data Exporter has complete control over the following categories of data: [This section is deemed Personal Data it sends to be populated with Processed by the content Services. Data Importer has no way of knowing the section headed "The types categories of your Personal Data sent to be Processed" in ANNEX 1 to this Addendum] Processed by the Services. Special categories of data (if appropriate) The personal data transferred concern Data Exporter has complete control over the following special categories of data: [This section is deemed Personal Data it sends to be populated with Processed by the content Services. Data Importer has no way of knowing the section headed "The types special categories of your Personal Data sent to be Processed by the Services. Processing operations Data Importer provides cloud based document generation services. Data Exporter, as a customer of Data Importer, may use the Services to generate documents. Data Importer has no control over whether the data sent to be Processed by the Services is in fact Customer Personal Data. If Data Exporter sends Customer Personal Data to be Processed " in ANNEX 1 to this Addendum] Processing operations The personal data transferred will be subject by the Services then the generated document may then contain Customer Personal Data. Once the Customer Personal Data has been Processed and any generated document has been returned to the following basic processing activities: The processing operations are set out Customer, the generated document and any Customer Personal Data is automatically deleted from the Data Importer’s systems (including that of its Subprocessor). Customer shall follow the “Guidelines for Using the Docmosis Cloud Services in the Agreementa GDPR-Compliant Manner” issued by Docmosis dated 25 May 2018 and as amended or updated. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised Signature ……………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is: [This section is deemed to be populated with your details] Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject to whom your Personal Data relates" in ANNEX 1 to this Addendum] Categories of data The personal data transferred concern the following categories of data: [This section is deemed to be populated with the content of the section headed "The types of your Personal Data to be Processed" in ANNEX 1 to this Addendum] Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX 1 to this Addendum] Processing operations The personal data transferred will be subject to the following basic processing activities: The processing operations are set out in the Agreement. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… 1DPH «««««««««««« $XWKRULVHG 6LJQDWXUH «««««««« DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised Signature ……………………1DPH ««««««««««««