Common use of Data Processing Instructions Clause in Contracts

Data Processing Instructions. Purposes Specify all purposes for which the Personal Data will be processed by the Data Processor. Provide access to Data Processor’s marketing data reporting and analytics Application Services. Categories of Data Specify the different types of Personal Data that will be processed by the Data Processor The following Personal Data is processed by default. If the Data Controller intends to process other categories of Personal Data with the Application Services of the Data Processor, the latter must be notified hereof, and an additional agreement must be concluded. ● Email Address ● IP Address ● Timestamps ● Name (on a voluntary basis) Special categories of Personal Data Specify the different special categories of Personal Data that will be processed by the Data Processor The Controller does not intend to and will not instruct the Processor to process any special categories of Personal Data. In the event that the Data Controller instructs the Data Processor to process special categories of Personal Data on its behalf, the Data Controller shall ensure that all legal requirements for the processing of such special categories of Personal Data by the Data Processor (esp. those set forth in art. 9 (2) GDPR) are met at all times. Data Subjects Specify the categories of data subjects whose personal data will be processed by the Data Processor. The following categories of data subjects are affected by the data processing operations by default. If the Data Controller intends to process Personal Data of other categories of data subjects with the Application Services of the Data Processor, the latter must be notified hereof, and an additional agreement must be concluded. ● Users of the Application Services Processing Operations Specify all processing activities to be conducted by the Data Processor Collect, store, and process data Processor’s Application Services. to enable access to the Data

Data Processing Instructions. Purposes Specify all purposes for which the Personal Data will be processed by the Data Processor. Provide access to Data Processor’s marketing data reporting and analytics Application Services. Categories of Data Specify the different types of Personal Data that will be processed by the Data Processor The following Personal Data is processed by default. If the Data Controller intends to process other categories of Personal Data with the Application Services of the Data Processor, the latter must be notified hereof, and an additional agreement must be concluded. ● Email Address ● IP Address ● Timestamps ● Name (on a voluntary basis) Special categories of Personal Data Specify the different special categories of Personal Data that will be processed by the Data Processor The Controller does not intend to and will not instruct the Processor to process any special categories of Personal Data. In the event that the Data Controller instructs the Data Processor to process special categories of Personal Data on its behalf, the Data Controller shall ensure that all legal requirements for the processing of such special categories of Personal Data by the Data Processor (esp. those set forth in art. 9 (2) GDPR) are met at all times. Data Subjects Specify the categories of data subjects whose personal data will be processed by the Data Processor. The following categories of data subjects are affected by the data processing operations by default. If the Data Controller intends to process Personal Data of other categories of data subjects with the Application Services of the Data Processor, the latter must be notified hereof, and an additional agreement must be concluded. ● Users of the Application Services Processing Operations Specify all processing activities to be conducted by the Data Processor Collect, store, and process data Processor’s Application Services. to enable access to the DataData Processor’s Application Services.

Data Processing Instructions. Purposes Specify all purposes for which the Personal Data will be processed by the Data Processor. Provide access to and enable use of Data Processor’s marketing data reporting Application Services and analytics Application Servicesadditional services as agreed between Data Controller and Data Processor. Categories of Data Specify the different types of Personal Data that will be processed by the Data Processor The following Personal Data is processed by default. If the Data Controller intends to process other categories of Personal Data with the Application Services of the Data Processor, the latter must be notified hereof, and an additional agreement must be concluded. ● Email Address ● IP Address ● Timestamps ● Name (on a voluntary basis) Special categories of Personal Data Specify the different special categories of Personal Data that will be processed by the Data Processor The Controller does not intend to and will not instruct the Processor to process any special categories of Personal Data. In the event that the Data Controller instructs the Data Processor to process special categories of Personal Data on its behalf, the Data Controller shall ensure that all legal requirements for the processing of such special categories of Personal Data by the Data Processor (esp. those set forth in art. 9 (2) GDPR) are met at all times. Data Subjects Specify the categories of data subjects whose personal data will be processed by the Data Processor. The following categories of data subjects are affected by the data processing operations by default. If the Data Controller intends to process Personal Data of other categories of data subjects with the Application Services of the Data Processor, the latter must be notified hereof, and an additional agreement must be concluded. ● Users of the Application Services Processing Operations Specify all processing activities to be conducted by the Data Processor Collect, store, and process data to enable access to and use of the Data Processor’s Application Services. to enable access to the Data.