Common use of Order control Clause in Contracts

Order control. Measures to ensure that personal data processed on behalf of the Controller can only be processed in accordance with the instructions of the Controller. Description of the order control measures: • Controller instructions recorded through changelog features in the software Annex 2 for ME Media USA Inc. Subprocessors pursuant to Sect. 9 Data Processing Agreement The Processor currently works with the following subcontractors and the Controller hereby agrees to their appointment. Company: Everflow Technologies Inc. Data processing activity: Marketing platform software Location [city, country]: San Francisco, California, USA Contact information: xxxxxxx@xxxxxxxx.xx Company: Amazon Web Services, Inc Data processing activity: Cloud storage provider Location [city, country]: 12th Avenue South Suite, 1200 Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxx@xxxxxx.xxx Company: Google Data processing activity: Cloud services and physical storage provider, presynching of user device IDs for targeting on google ad exchange Location [city, country]: 0000 Xxxxxxxxxxxx Xxxxxxx, Xxxxxxxx Xxxx, XX 00000, XXX Contact information: xxxxxxx-xx@xxxxxx.xxx Company: SiSense Inc. Data processing activity: Data Visualization Location [city, country]: Xx’xx Xxxxxxxxxx Rd 2, Ramat Gan, Israel Contact information: xxxxxxx@xxxxxxx.xxx Company: Vene International GmbH Data processing activity: Marketing Management Software Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Company: Tableau Software, LLC Data processing activity: Data Visualization Location [city, country]: NorthEdge 0000 X 00xx Xx. Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxxxx@xxxxxxx.xxx Company: ME Mobile GmbH Data processing activity: Data Mediation Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Annex 1 for ME digital Entretenimento do Brasil Ltda Technical and organizational measures to ensure the security of processing The Processor guarantees that the following technical and organizational measures have been taken:

Order control. Measures to ensure that personal data processed on behalf of the Controller can only be processed in accordance with the instructions of the Controller. Description of the order control measures: • Controller instructions recorded through changelog features in the software Annex 2 for ME Media USA Inc. digital Entretenimento do Brasil Ltda Subprocessors pursuant to Sect. 9 Data Processing Agreement The Processor currently works with the following subcontractors and the Controller hereby agrees to their appointment. Company: Everflow Technologies Inc. Data processing activity: Marketing platform software Location [city, country]: San Francisco, California, USA Contact information: xxxxxxx@xxxxxxxx.xx Company: Amazon Web Services, Inc Data processing activity: Cloud storage provider Location [city, country]: 12th Avenue South Suite, 1200 Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxx@xxxxxx.xxx Company: Google Data processing activity: Cloud services and physical storage provider, presynching of user device IDs for targeting on google ad exchange Location [city, country]: 0000 Xxxxxxxxxxxx Xxxxxxx, Xxxxxxxx Xxxx, XX 00000, XXX Contact information: xxxxxxx-xx@xxxxxx.xxx Company: SiSense Inc. Data processing activity: Data Visualization Location [city, country]: Xx’xx Xxxxxxxxxx Rd 2, Ramat Gan, Israel Contact information: xxxxxxx@xxxxxxx.xxx Company: Vene International GmbH Data processing activity: Marketing Management Software Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Company: Tableau Software, LLC Data processing activity: Data Visualization Location [city, country]: NorthEdge 0000 X 00xx Xx. Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxxxx@xxxxxxx.xxx Company: ME Mobile GmbH Data processing activity: Data Mediation Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Annex 1 for ME digital Entretenimento do Brasil Ltda Xxxxxx Medienagentur GmbH Technical and organizational measures to ensure the security of processing The Processor guarantees that the following technical and organizational measures have been taken:

Order control. Measures to ensure that personal data processed on behalf of the Controller can only be processed in accordance with the instructions of the Controller. Description of the order control measures: • Controller instructions recorded through changelog features in the software Annex 2 for ME Media USA Inc. Mobile GmbH Subprocessors pursuant to Sect. 9 Data Processing Agreement The Processor currently works with the following subcontractors and the Controller hereby agrees to their appointment. Company: Everflow Technologies Inc. Data processing activity: Marketing platform software Location [city, country]: San Francisco, California, USA Contact information: xxxxxxx@xxxxxxxx.xx Company: Amazon Web Services, Inc Data processing activity: Cloud storage provider Location [city, country]: 12th Avenue South Suite, 1200 Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxx@xxxxxx.xxx Company: Google Data processing activity: Cloud services and physical storage provider, presynching of user device IDs for targeting on google ad exchange Location [city, country]: 0000 Xxxxxxxxxxxx Xxxxxxx, Xxxxxxxx Xxxx, XX 00000, XXX Contact information: xxxxxxx-xx@xxxxxx.xxx Company: SiSense Inc. Data processing activity: Data Visualization Location [city, country]: Xx’xx Xxxxxxxxxx Rd 2, Ramat Gan, Israel Contact information: xxxxxxx@xxxxxxx.xxx Company: Vene International GmbH Data processing activity: Marketing Management Software Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Company: Tableau Software, LLC Data processing activity: Data Visualization Location [city, country]: NorthEdge 0000 X 00xx Xx. Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxxxx@xxxxxxx.xxx Company: ME Mobile GmbH Data processing activity: Data Mediation Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Annex 1 for ME digital Entretenimento do Brasil Ltda Media USA Inc. Technical and organizational measures to ensure the security of processing The Processor guarantees that the following technical and organizational measures have been taken:

Order control. Measures to ensure that personal data processed on behalf of the Controller can only be processed in accordance with the instructions of the Controller. Description of the order control measures: • Controller instructions recorded through changelog features in the software Annex 2 for ME Media USA Inc. Xxxxxx Medienagentur GmbH Subprocessors pursuant to Sect. 9 Data Processing Agreement The Processor currently works with the following subcontractors and the Controller hereby agrees to their appointment. Company: Everflow Technologies Inc. Data processing activity: Marketing platform software Location [city, country]: San Francisco, California, USA Contact information: xxxxxxx@xxxxxxxx.xx Company: Amazon Web Services, Inc Data processing activity: Cloud storage provider Location [city, country]: 12th Avenue South Suite, 1200 Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxx@xxxxxx.xxx Company: Google Data processing activity: Cloud services and physical storage provider, presynching of user device IDs for targeting on google ad exchange Location [city, country]: 0000 Xxxxxxxxxxxx Xxxxxxx, Xxxxxxxx Xxxx, XX 00000, XXX Contact information: xxxxxxx-xx@xxxxxx.xxx Company: SiSense Inc. Data processing activity: Data Visualization Location [city, country]: Xx’xx Xxxxxxxxxx Rd 2, Ramat Gan, Israel Contact information: xxxxxxx@xxxxxxx.xxx Company: Vene International GmbH Data processing activity: Marketing Management Software Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Company: Tableau Software, LLC Data processing activity: Data Visualization Location [city, country]: NorthEdge 0000 X 00xx Xx. Xxxxxxx, XX 00000, XXX Contact information: xxxxxxxxxxxxxxx@xxxxxxx.xxx Company: ME Mobile GmbH Data processing activity: Data Mediation Location [city, country]: Xxxx-Xxxxxxxxxx-Xxx. 00, 00000 Xxxxxx, Xxxxxxx Contact information: xxxxxxx@xxxxxxxxxxxxx.xxx Annex 1 for ME digital Entretenimento do Brasil Ltda Technical and organizational measures to ensure the security of processing The Processor guarantees that the following technical and organizational measures have been taken:Mediation