Common use of Ex-UK Transfers Clause in Contracts

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement by reference, and completed as follows: 6.4.1. References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. The UK Controller-to-Processor SCCs apply when UsabilityHub processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. The UK Controller-to-Controller SCCs apply when UsabilityHub processes Customer’s Personal Data as a controller pursuant to Section 9 of this Agreement. Xxxxxx XX(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement DPA by reference, and completed as follows: 6.4.112.2.5.1. References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.212.2.5.2. The UK Controller-to-Processor SCCs apply when UsabilityHub Corelight processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement serves as Appendix II of the UK Controller-to-Processor SCCs.rights 6.4.312.2.5.3. The UK Controller-to-Controller SCCs apply when UsabilityHub Corelight processes Customer’s Personal Company Usage Data and Company Account Data as a controller pursuant to Section 9 the Authorized Affiliates section of this AgreementDPA. Xxxxxx XX(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub Corelight will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B Attachment 2 of this Agreement DPA serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.412.2.5.4. The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement DPA shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018Xxx 0000, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(hClause II(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX Clause IV (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 Xxx 0000 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(h) of the UK Controller-Controller- to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-to- Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018Xxx 0000, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(h) of the UK Controller-Controller- to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-to- Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 Xxx 0000 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018Xxx 0000, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub Noteable processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub Noteable processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub Noteable will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 Xxx 0000 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 5.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 5.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 5.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 5.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018Xxx 0000, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 Xxx 0000 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 6.4.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018Xxx 0000, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. 6.4.2 The UK Controller-to-Processor SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement Addendum serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement Addendum serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. 6.4.3 The UK Controller-to-Controller SCCs apply when UsabilityHub the Company processes Customer’s Personal Data as a controller pursuant to Section 9 of this AgreementAddendum. Xxxxxx XX(hClause II(h) of the UK Controller-Controller- to-Controller SCCs shall be deemed to state that UsabilityHub the Company will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-to- Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX Clause IV (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement Addendum serves as Annex B of the UK Controller-to-Controller SCCs. 6.4.4. 6.4.4 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 Xxx 0000 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.

Ex-UK Transfers. The parties Parties agree that ex-UK Transfers are made pursuant to the UK SCCs, which are deemed entered into and incorporated into this Agreement Addendum by reference, and completed as follows: 6.4.1. 3.3.1 References to the GDPR will be deemed to be references to the UK GDPR and the UK Data Protection Act 2018Xxx 0000, references to “supervisory authorities” will be deemed to be references to the UK Information Commissioner, and references to “Member State(s)” or the EU will be deemed to be references to the UK. 6.4.2. The UK Controller-to-Processor SCCs apply when UsabilityHub processes Customer’s Personal Data as a processor. The illustrative indemnification clause does not apply. In 3.3.2 Clause 4(f) the language “adequate protection within the meaning of Directive 95/46/EC” is deleted and replaced with “a level of data protection that is considered adequate under, or equivalent to, the applicable data protection law.” Clause 9, Governing Law, shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” In Clause 11(3), the language “, namely…” at the end of the sentence is hereby deleted. Exhibit B of this Agreement serves as Appendix I of the UK Controller-to-Processor SCCs. Exhibit C of this Agreement serves as Appendix II of the UK Controller-to-Processor SCCs. 6.4.3. The UK Controller-to-Controller SCCs apply when UsabilityHub processes Customer’s Personal Data as a controller pursuant to Section 9 of this Agreement. Xxxxxx XX(hII(h) of the UK Controller-to-Controller SCCs shall be deemed to state that UsabilityHub Shapeways will process Personal Data in accordance with the data processing principles set forth in Annex A of the UK Controller-to-Controller SCCs. The illustrative commercial clause does not apply. Xxxxxx XX (Governing Law) shall read “The Clauses shall be governed by the law of the Member State in which the Data Exporter data exporter is established, but without prejudice to the rights and freedoms that data subjects may enjoy under their national data protection laws.” Exhibit B of this Agreement serves as Annex B of the UK Controller-to-Controller SCCs.” 6.4.4. 3.3.3 The parties acknowledge and agree that if any of the UK SCCs are replaced or superseded by new standard contractual clauses issued and approved pursuant to Article 46 of the UK GDPR and related provisions of the UK Data Protection Act 2018 Xxx 0000 (“New UK SCCs”), the Data Importer may give notice to the Data Exporter and, with effect from the date set forth in such notice, the application of the UK SCCs set forth in this Agreement Addendum shall be amended so that the UK SCCs cease to apply to ex-UK Transfers, and the New UK SCCs specified in such notice shall apply going forward. To the extent that the use of the New UK SCCs require the parties to complete additional information, the parties shall reasonably and promptly work together to complete such additional information.