Common use of APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES Clause in Contracts

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions. The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, incData Exporter is the legal entity specified in Section 2.1 of Schedule 1 of the DPA. is a provider of enterprise cloud computing solutions. Data importer The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides Impero is a provider of software solutions which processes personal data upon the services as set forth instruction of the data exporter in accordance with the terms of the Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data Personal Data to the Service SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to personal data Personal Data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data Personal Data to the Services SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of personal dataPersonal Data: ● First and last name ● Title ● Position ● Employer ● • Name • Date of birth • Gender • Sex • Contact information details (companypostal addresses, emailemail addresses, phone, physical business addresstelephone numbers) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data • Photographs The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which is for the sake of clarity personal data Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex lifelife or sexual orientation. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing Processing of personal data Personal Data by data importer is the performance of the SCC Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions, signing in name and on behalf of its Affiliates that are based in the European Economic Area and are a Controller. The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (is the entity identified as such term is applied mutatis mutandis per “Customer” in the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutionsDPA. The data importer (is the entity or entities defined as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth “Roambee” in the AgreementDPA all of which provide enterprise cloud computing and monitoring solutions. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data Personal Data to the Service Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to personal data Personal Data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors andvendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data Personal Data to the Services Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of personal dataPersonal Data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation Localization data The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is operations are defined in the performance of the Services pursuant to the AgreementDPA.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (as such term is applied mutatis mutandis per the Vendor Supplier Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions, signing in name and on behalf of its Affiliates that are based in the European Economic Area and are a Controller. The data importer (as such term is applied mutatis mutandis per the Vendor Supplier Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data Supplier shall notify SFDC in writing to the extent Supplier must collect additional categories of Personal Data beyond those listed above in order to provide the Services. The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. Clauses The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxxData Exporter is (i) the legal entity that has executed the Standard Contractual Clauses as a Data Exporter and, inc. is a provider (ii) all Affiliates (as defined in the Main Agreement) of enterprise cloud computing solutionsCustomer established within the European Economic Area (EEA) and Switzerland that have purchased SCC Services on the basis of one or more application form(s). The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides IIJ is a provider of enterprise cloud computing solutions which processes personal data upon the services as set forth instruction of the data exporter in accordance with the terms of the Main Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data Personal Data to the Service SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to personal data Personal Data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data Personal Data to the Services SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of personal dataPersonal Data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business addressbusinessaddress) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the SCC Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which is for the sake of clarity personal data Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing Processing of personal data Personal Data by data importer is the performance of the SCC Services pursuant to the Main Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter (as such term is applied mutatis mutandis per the Vendor Supplier Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions, signing in name and on behalf of its Affiliates that are based in the European Economic Area or the United Kingdom. The data importer (as such term is applied mutatis mutandis per the Vendor Supplier Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides the services as set forth in the Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter and/or SFDC Customers (who are natural persons) ● Employees or contact persons of data exporter’s and/or SFDC Customers’ prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter and/or SFDC Customers (who are natural persons) ● Data exporter’s and/or SFDC Customers’ Users authorized by data exporter and/or SFDC Customers to use the SCC Services The personal data transferred concern the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First and last name ● Title ● Position ● Employer ● Contact information (company, email, phone, physical business address) ● ID data ● Professional life data ● Personal life data ● Connection data ● Localisation data Supplier shall notify SFDC in writing to the extent Supplier must collect additional categories of Personal Data beyond those listed above in order to provide the Services. The personal data transferred concern the following special categories of data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): The objective of processing of personal data by data importer is the performance of the Services pursuant to the Agreement.

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix The data exporter (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxxThe (i) legal entity that has created an account with Netlify, inc. is Inc. (“Netlify”) for provision of the Service, and executed the Clauses as a provider data exporter and, (ii) all affiliates of enterprise cloud computing solutionssuch entity established within the EEA, which have purchased Services from Netlify or its Affiliates. The data importer (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly activities relevant to the transfer): Supplier provides Netlify, which processes Personal Data upon the services as set forth instruction of the data exporter in accordance with the Agreementterms of the Principal Agreement between the data exporter and Netlify. The personal data Personal Data transferred concern the following categories of Data Subjects: The data subjects (please specify): Data exporter may submit personal data Personal Data to the Service Netlify and its Affiliates which may include, but is not limited to personal data Personal Data relating to the following categories of data subjects: ● Prospects• Prospective customers, customers, resellers, referrers, business partners partners, and vendors of the data exporter (who are natural persons) ● ); • Employees or contact persons of the data exporter’s prospectsprospective customers, customers, resellers, referrers, subcontractors, business partners partners, and vendors ● (who are natural persons); • Employees, agents, advisors, and freelancers of the data exporter (who are natural persons) ● Data exporter’s Users ); and/or • Natural persons authorized by the data exporter to use the SCC Services services provided by Netlify, Inc. to the data exporter. The personal data Personal Data transferred concern the following categories of data: The data (please specify): Data exporter may submit personal data Personal Data to the Services Netlify, Inc. and its Affiliates which may include, but is not limited to to, the following categories of personal dataPersonal Data: ● First and last name ● Title ● Position ● Employer ● Contact Names, titles, position, employer, contact information (company, email, phone, fax, physical business address) ● ID data ● Professional address etc.), identification data, profession life data ● Personal data, personal life data ● Connection data ● Localisation data The personal data transferred concern the following special categories of data, connection data, or localization data (please specify): Data exporter may submit special categories of data to the Services, and which is for the sake of clarity personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex lifeincluding IP addresses). The personal data Personal Data transferred will be subject to the following basic processing activities (please specify): activities: The objective of the processing of personal data Personal Data by data importer Netlify is to provide the performance of the Services Service, pursuant to the Principal Agreement.. DATA EXPORTER Name: ..................................................................

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the ClausesClauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. The data exporter is the customer, as defined in the Xxxx XX Terms of Use (as such term is applied mutatis mutandis per the Vendor Privacy Exhibit) is (please specify briefly your activities relevant to the transfer): Xxxxxxxxxx.xxx, inc. is a provider of enterprise cloud computing solutions“Agreement”). The data importer (as such term is applied mutatis mutandis per Xxxx XX, Inc., a human resources management service in which the Vendor Privacy Exhibit) is (please specify briefly activities relevant Service stores personal information, supporting documentation of the customer, time off, and employee reviews for the purposes of centralizing human resources data to the transfer): Supplier provides organization in accordance to the services as set forth in terms of the Agreement. The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit personal data to the Service which may include, but is not limited to personal data relating to the following categories of data subjects: ● Prospects, customers, business partners and vendors of data exporter (who are natural persons) ● Employees or contact persons of data exporter’s prospects, customers, business partners and vendors ● Employees, agents, advisors, freelancers of data exporter (who are natural persons) ● Data exporter’s Users authorized by data exporter to use the SCC Services The personal data transferred concern include, but not limited to, the following categories of data (please specify): Data exporter may submit personal data to the Services which may include, but is not limited to the following categories of personal data: ● First First, Middle, and last name Last Name ● Title ● Position ● Employer ● Contact information Information (companyCompany, email, phone, physical business home address) ● ID data Data ● Professional life Life data ● Personal life Life data ● Connection data ● Localisation Localization data The personal data transferred concern include, but not limited to, the following special categories of data (please specify): data: ! Data exporter may submit special categories of data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which is for the sake of clarity personal data Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. The personal data transferred will be subject to the following basic processing activities (please specify): ● The objective of processing Processing of personal data Personal Data by data importer is the performance of the Services pursuant to the Agreement.