Common use of Personal Data Processing Terms Clause in Contracts

Personal Data Processing Terms. 2.1. The parties agree that if the EU/UK Data Protection Laws apply to the processing of Subscriber Personal Data, the parties acknowledge and agree that: 2.1.1. With respect to Subscriber Personal Data, Subscriber is the controller (or, where Subscriber is instructing Algolia on behalf of a third party controller, a processor on behalf of that controller) and Algolia is either (i) the processor or, (ii) where Subscriber is a processor on behalf of a third party controller, Algolia shall be a sub-processor to Subscriber. 2.1.2. Algolia may engage Sub-processors pursuant to Section 7 (Sub-processors). 2.1.3. The subject-matter of the data processing covered by this DPA is the provision of the Services and the processing will be carried out for the duration of the Agreement or so long as Algolia is providing the Services. Attachment 1 of this DPA sets out the nature and purpose of the processing, the types of Subscriber Personal Data Algolia processes and the categories of data subjects whose Personal Data is processed. 2.1.4. Each party will comply with the obligations applicable to it under the EU/UK Data Protection Laws, including with respect to the processing of Subscriber Personal Data. 2.1.5. If Subscriber is a processor itself, Subscriber warrants to Algolia that Subscriber’s instructions and actions with respect to the Subscriber Personal Data, including its appointment of Algolia as a sub-processor, have been authorized by the relevant controller. 2.1.6. For the avoidance of doubt, Subscriber’s instructions to Algolia for the processing of Subscriber Personal Data shall comply with all applicable laws, including the EU/UK Data Protection Laws. As between Algolia and Subscriber, Subscriber shall be responsible for the Subscriber Data and the means by which Subscriber acquired Subscriber Data, and shall maintain such authorizations and all other approvals, consents and registrations as are required to carry out lawful personal data processing activities under Data Protection Laws. 2.1.7. For the purposes of this DPA, the following is deemed an instruction by Subscriber to process Subscriber Personal Data (a) to provide the Services; (b) as further specified via Subscriber’s use of the Services (including the Services’ user interface dashboard and other functionality of the Services); (c) as documented in the Agreement (including this DPA and any Service Order that requires processing of Subscriber Personal Data); and (d) as further documented in any other written instructions given by Subscriber (which may be specific instructions or instructions of a general nature as set out in this DPA, the Agreement or as otherwise notified by Subscriber to Algolia from time to time), where such instructions are consistent with the terms of the Agreement. 2.1.8. When Algolia processes Subscriber Personal Data in the course of providing the Services, Algolia will: 2.1.8.1. Process the Subscriber Personal Data only in accordance with (a) the Agreement and (b) Subscriber’s instructions as described in Section 2.1.7, unless Algolia is required to process Subscriber Personal Data for any other purpose by UK, European Union or member state law to which Algolia is subject. Algolia shall inform Subscriber of this requirement before processing unless prohibited by applicable laws on important grounds of public interest. 2.1.8.2. Notify Subscriber without undue delay if, in Algolia's opinion, an instruction for the processing of Subscriber Personal Data given by Subscriber infringes applicable EU/UK Data Protection Laws. 2.2. The parties acknowledge and agree that the parties will comply with all applicable laws with respect to the processing of Subscriber Personal Data.

Personal Data Processing Terms. 2.1. The parties agree that if the EU/UK EU Data Protection Laws apply to the processing of Subscriber Personal Data, the parties acknowledge and agree that: 2.1.1. With respect to Subscriber Personal Data, Subscriber is the controller (or, where Subscriber is instructing Algolia on behalf of a third party controller, a processor on behalf of that controller) and Algolia is either (i) and the Algolia Group are the processor or, (ii) where of the Subscriber is Personal Data and Algolia or a processor on behalf member of a third party controller, the Algolia shall be a sub-processor to Subscriber. 2.1.2. Algolia Group may engage Sub-Sub- processors pursuant to Section 7 (Sub-processors). 2.1.32.1.2. The subject-matter of the data processing covered by this DPA is the provision of the Services and the processing will be carried out for the duration of the Agreement or so long as Algolia is providing the Services. Attachment 1 of this DPA sets out the nature and purpose of the processing, the types of Subscriber Personal Data Algolia processes and the categories of data subjects whose Personal Data is processed. 2.1.42.1.3. Each party will comply with the obligations applicable to it under the EU/UK EU Data Protection Laws, including with respect to the processing of Subscriber Personal Data. 2.1.4. If the GDPR is applicable, Algolia will process Subscriber Personal Data in accordance with the requirements of the GDPR directly applicable to Algolia’s provision of Services. Notwithstanding anything to the contrary set forth in this DPA, in the event of a conflict or clarification of definitions, the GDPR shall apply only as of May 25, 2018. 2.1.5. If Subscriber is a processor itself, Subscriber warrants to Algolia that Subscriber’s instructions and actions with respect to the Subscriber Personal Data, including its appointment of Algolia as a sub-another processor, have been authorized by the relevant controller. 2.1.6. For the avoidance of doubt, Subscriber’s instructions to Algolia for the processing of Subscriber Personal Data shall comply with all applicable laws, including the EU/UK EU Data Protection Laws. As between Algolia and Subscriber, Subscriber shall be responsible for the Subscriber Data and the means by which Subscriber acquired Subscriber Data, and shall maintain such authorizations and all other approvals, consents and registrations as are required to carry out lawful personal data processing activities under Data Protection Laws. 2.1.7. For the purposes of this DPA, the following is deemed an instruction by Subscriber to process Subscriber Personal Data (a) to provide the Services; (b) as further specified via Subscriber’s use of the Services (including the Services’ user interface dashboard and other functionality of the Services); (c) as documented in the Agreement (including this DPA and any Service Order that requires processing of Subscriber Personal Data); and (d) as further documented in any other written instructions given by Subscriber (which may be specific instructions or instructions of a general nature as set out in this DPA, the Agreement or as otherwise notified by Subscriber to Algolia from time to time), where such instructions are consistent with the terms of the Agreement. 2.1.8. When Algolia processes Subscriber Personal Data in the course of providing the Services, Algolia will: 2.1.8.1. Process the Subscriber Personal Data only in accordance with (a) the Agreement and (b) Subscriber’s instructions as described in Section 2.1.7, unless Algolia is required to process Subscriber Personal Data for any other purpose by UK, European Union or member state law to which Algolia is subject. Algolia shall inform Subscriber of this requirement before processing unless prohibited by applicable laws on important grounds of public interest. 2.1.8.2. Notify Subscriber without undue delay if, in Algolia's opinion, an instruction for the processing of Subscriber Personal Data given by Subscriber infringes applicable EU/UK EU Data Protection Laws. 2.2. The parties acknowledge and agree that the parties will comply with all applicable laws with respect to the processing of Subscriber Personal Data.

Personal Data Processing Terms. 2.1. The parties agree that if the EU/UK EU Data Protection Laws apply to the processing of Subscriber Personal Data, the parties acknowledge and agree that: 2.1.1. With respect to Subscriber Personal Data, Subscriber is the controller (or, where Subscriber is instructing Algolia on behalf of a third party controller, a processor on behalf of that controller) and Algolia is either (i) Sightengine and the Sightengine Group are the processor or, (ii) where of the Subscriber is Personal Data and Sightengine or a processor on behalf member of a third party controller, Algolia shall be a sub-processor to Subscriber. 2.1.2. Algolia the Sightengine Group may engage Sub-processors pursuant to Section 7 (Sub-processors). 2.1.32.1.2. The subject-matter of the data processing covered by this DPA is the provision of the Services and the processing will be carried out for the duration of the Agreement or so long as Algolia Sightengine is providing the Services. Attachment 1 of this DPA sets out the nature and purpose of the processing, the types of Subscriber Personal Data Algolia Sightengine processes and the categories of data subjects whose Personal Data is processed. 2.1.42.1.3. Each party will comply with the obligations applicable to it under the EU/UK EU Data Protection Laws, including with respect to the processing of Subscriber Personal Data. 2.1.4. If the GDPR is applicable, Sightengine will process Subscriber Personal Data in accordance with the requirements of the GDPR directly applicable to Sightengine’s provision of Services. Notwithstanding anything to the contrary set forth in this DPA, in the event of a conflict or clarification of definitions, the GDPR shall apply only as of May 25, 2018. 2.1.5. If Subscriber is a processor itself, Subscriber warrants to Algolia Sightengine that Subscriber’s instructions and actions with respect to the Subscriber Personal Data, including its appointment of Algolia Sightengine as a sub-another processor, have been authorized by the relevant controller. 2.1.6. For the avoidance of doubt, Subscriber’s instructions to Algolia Sightengine for the processing of Subscriber Personal Data shall comply with all applicable laws, including the EU/UK EU Data Protection Laws. As between Algolia Sightengine and Subscriber, Subscriber shall be responsible for the Subscriber Data and the means by which Subscriber acquired Subscriber Data, and shall maintain such authorizations and all other approvals, consents and registrations as are required to carry out lawful personal data processing activities under Data Protection Laws. 2.1.7. For the purposes of this DPA, the following is deemed an instruction by Subscriber to process Subscriber Personal Data (a) to provide the Services; (b) as further specified via Subscriber’s use of the Services (including the Services’ user interface dashboard and other functionality of the Services); (c) as documented in the Agreement (including this DPA and any Service Order that requires processing of Subscriber Personal Data); and (d) as further documented in any other written instructions given by Subscriber (which may be specific instructions or instructions of a general nature as set out in this DPA, the Agreement or as otherwise notified by Subscriber to Algolia Sightengine from time to time), where such instructions are consistent with the terms of the Agreement. 2.1.8. When Algolia Sightengine processes Subscriber Personal Data in the course of providing the Services, Algolia Sightengine will: 2.1.8.1. Process the Subscriber Personal Data only in accordance with (a) the Agreement and (b) Subscriber’s instructions as described in Section 2.1.7, unless Algolia is required to process Subscriber Personal Data for any other purpose by UK, European Union or member state law to which Algolia is subject. Algolia shall inform Subscriber of this requirement before processing unless prohibited by applicable laws on important grounds of public interest. 2.1.8.2. Notify Subscriber without undue delay if, in Algolia's opinion, an instruction for the processing of Subscriber Personal Data given by Subscriber infringes applicable EU/UK Data Protection Laws. 2.2. The parties acknowledge and agree that the parties will comply with all applicable laws with respect to the processing of Subscriber Personal Data.and

Personal Data Processing Terms. 2.1. The parties agree that if the EU/UK EU Data Protection Laws apply to the processing of Subscriber Personal Data, the parties acknowledge and agree that: 2.1.1. With respect to Subscriber Personal Data, Subscriber is the controller (or, where Subscriber is instructing Algolia on behalf of a third party controller, a processor on behalf of that controller) and Algolia is either (i) Zoomd and the Zoomd Group are the processor or, (ii) where of the Subscriber is Personal Data and Zoomd or a processor on behalf member of a third party controller, Algolia shall be a sub-processor to Subscriber. 2.1.2. Algolia the Zoomd Group may engage Sub-processors Subprocessors pursuant to Section 7 (Sub-processors). 2.1.32.1.2. The subject-matter of the data processing covered by this DPA is the provision of the Services and the processing will be carried out for the duration of the Agreement or so long as Algolia Zoomd is providing the Services. Attachment 1 Exhibit A of this DPA sets out the nature and purpose of the processing, the types of Subscriber Personal Data Algolia Zoomd processes and the categories of data subjects whose Personal Data is processed. 2.1.42.1.3. Each party will comply with the obligations applicable to it under the EU/UK EU Data Protection Laws, including with respect to the processing of Subscriber Personal Data. 2.1.4. If the GDPR is applicable, Zoomd will process Subscriber Personal Data in accordance with the requirements of the GDPR directly applicable to Zoomd’s provision of Services. Notwithstanding anything to the contrary set forth in this DPA, in the event of a conflict or clarification of definitions, the GDPR shall apply only as of May 25, 2018. 2.1.5. If Subscriber is a processor itself, Subscriber warrants to Algolia Zoomd that Subscriber’s instructions and actions with respect to the Subscriber Personal Data, including its appointment of Algolia Zoomd as a sub-another processor, have been authorized by the relevant controller. 2.1.6. For the avoidance of doubt, Subscriber’s instructions to Algolia Zoomd for the processing of Subscriber Personal Data shall comply with all applicable laws, including the EU/UK EU Data Protection Laws. As between Algolia Zoomd and Subscriber, Subscriber shall be responsible for the Subscriber Data and the means by which Subscriber acquired Subscriber Data, and shall maintain such authorizations and all other approvals, consents and registrations as are required to carry out lawful personal data processing activities under Data Protection Laws. 2.1.7. For the purposes of this DPA, the following is deemed an instruction by Subscriber to process Subscriber Personal Data (a) to provide the Services; (b) as further specified via Subscriber’s use of the Services (including the Services’ user interface dashboard and other functionality of the Services); (c) as documented in the Agreement (including this DPA and any Service Order that requires processing of Subscriber Personal Data); and (d) as further documented in any other written instructions given by Subscriber (which may be specific instructions or instructions of a general nature as set out in this DPA, the Agreement or as otherwise notified by Subscriber to Algolia Zoomd from time to time), where such instructions are consistent with the terms of the Agreement. 2.1.8. When Algolia Zoomd processes Subscriber Personal Data in the course of providing the Services, Algolia Zoomd will: 2.1.8.1. Process the Subscriber Personal Data only in accordance with (a) the Agreement and (b) Subscriber’s instructions as described in Section 2.1.7, unless Algolia Zoomd is required to process Subscriber Personal Data for any other purpose by UK, European Union or member state law to which Algolia Zoomd is subject. Algolia Zoomd shall inform Subscriber of this requirement before processing unless prohibited by applicable laws on important grounds of public interest. 2.1.8.2. Notify Subscriber without undue delay if, in AlgoliaZoomd's opinion, an instruction for the processing of Subscriber Personal Data given by Subscriber infringes applicable EU/UK EU Data Protection Laws. 2.2. The parties acknowledge and agree that the parties will comply with all applicable laws with respect to the processing of Subscriber Personal Data.

Personal Data Processing Terms. 2.1. The parties agree that if the EU/UK Data Protection Laws apply to the processing of Subscriber Personal Data, the parties acknowledge and agree that: 2.1.1. With respect to Subscriber Personal Data, Subscriber is the controller (or, where Subscriber is instructing Algolia Prime AI on behalf of a third party controller, a processor on behalf of that controller) and Algolia Prime AI is either (i) the processor or, (ii) where Subscriber is a processor on behalf of a third party controller, Algolia Prime AI shall be a sub-processor to Subscriber. 2.1.2. Algolia Prime AI may engage Sub-processors pursuant to Section 7 (Sub-processors). 2.1.3. The subject-matter of the data processing covered by this DPA is the provision of the Services and the processing will be carried out for the duration of the Agreement or so long as Algolia Prime AI is providing the Services. Attachment 1 of this DPA sets out the nature and purpose of the processing, the types of Subscriber Personal Data Algolia processes and the categories of data subjects whose Personal Data is processed. 2.1.4. Each party will comply with the obligations applicable to it under the EU/UK Data Protection Laws, including with respect to the processing of Subscriber Personal Data. 2.1.5. If Subscriber is a processor itself, Subscriber warrants to Algolia Prime AI that Subscriber’s instructions and actions with respect to the Subscriber Personal Data, including its appointment of Algolia Prime AI as a sub-processor, have been authorized authorised by the relevant controller. 2.1.6. For the avoidance of doubt, Subscriber’s instructions to Algolia Prime AI for the processing of Subscriber Personal Data shall comply with all applicable laws, including the EU/UK Data Protection Laws. As between Algolia Prime aI and Subscriber, Subscriber shall be responsible for the Subscriber Data and the means by which Subscriber acquired Subscriber Data, and shall maintain such authorizations authorisations and all other approvals, consents and registrations as are required to carry out lawful personal data processing activities under Data Protection Laws. 2.1.7. For the purposes of this DPA, the following is deemed an instruction by Subscriber to process Subscriber Personal Data (a) to provide the Services; (b) as further specified via Subscriber’s use of the Services (including the Services’ user interface dashboard and other functionality of the Services); (c) as documented in the Agreement (including this DPA and any Service Order that requires processing of Subscriber Personal Data); and (d) as further documented in any other written instructions given by Subscriber (which may be specific instructions or instructions of a general nature as set out in this DPA, the Agreement or as otherwise notified by Subscriber to Algolia Prime aI from time to time), where such instructions are consistent with the terms of the Agreement. 2.1.8. When Algolia Prime AI processes Subscriber Personal Data in the course of providing the Services, Algolia Prime AI will: 2.1.8.1. Process the Subscriber Personal Data only in accordance with (a) the Agreement and and (b) Subscriber’s instructions as described in Section 2.1.7, unless Algolia Prime AI is required to process Subscriber Personal Data for any other purpose by UK, European Union or member state law to which Algolia Prime AI is subject. Algolia Prime AI shall inform Subscriber of this requirement before processing unless prohibited by applicable laws on important grounds of public interest. 2.1.8.2. Notify Subscriber without undue delay if, in Algolia's Prime AI’s opinion, an instruction for the processing of Subscriber Personal Data given by Subscriber infringes applicable EU/UK Data Protection Laws. 2.2. The parties acknowledge and agree that the parties will comply with all applicable laws with respect to the processing of Subscriber Personal Data.