Common use of Transfers from Switzerland Clause in Contracts

Transfers from Switzerland. Notwithstanding Section D above, in respect of data transfers from a data exporter established in Switzerland, these Clauses shall be interpreted in accordance with the governing law in Switzerland. In such cases, references throughout these Clauses to Directive 95/46/EC shall be read as references to the relevant legislation in Switzerland concerning data protection, privacy, data security or the handling of information about individuals applicable to the data exporter, and defined terms in Clause 1 shall have the meanings given to them (or reasonably equivalent terms) in such legislation. References to “Member State” shall be read as references to Switzerland. Without prejudice to Section A above, the parties further agree that that in respect of data transfers where, under applicable privacy laws, the definition of “personal data” (or such reasonably equivalent term) extends to information relating to legal entities, references in these Clauses to “personal data” shall also include information relating to legal entities. The parties further agree that, where required by applicable law or upon the request of the relevant supervisory authority, they will do all such further acts as may reasonably be required to grant effect to this Section H, including (but not limited to) executing all documents. Data exporter APPENDIX 1 to the Standard Contractual Clauses The data exporter is the entity identified as “Customer” or “Controller” in the DPA. Data importer The data importer is Eloops and/or its sub-processor (as such term is used in the DPA), as determined by Eloops in accordance with the terms of the DPA concerning cross-border data transfers. Data subjects The personal data transferred concern the categories of data subjects defined in the DPA. Categories of data The personal data transferred concern the categories of data defined in the DPA. Processing operations The personal data transferred will be subject to the basic processing activities defined in Schedule 1 to the DPA. DATA EXPORTER Name: Authorised Signature: DATA IMPORTER Name: Authorised Signature: APPENDIX 2 to the Standard Contractual Clauses Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):

Transfers from Switzerland. Notwithstanding Section D above, in respect of data transfers from a data exporter established in Switzerland, these Clauses shall be interpreted in accordance with the governing law in Switzerland. In such cases, references throughout these Clauses to Directive 95/46/EC shall be read as references to the relevant legislation in Switzerland concerning data protection, privacy, data security or the handling of information about individuals applicable to the data exporter, and defined terms in Clause 1 shall have the meanings given to them (or reasonably equivalent terms) in such legislation. References to “Member State” shall be read as references to Switzerland. Without prejudice to Section A above, the parties further agree that that in respect of data transfers where, under applicable privacy laws, the definition of “personal data” (or such reasonably equivalent term) extends to information relating to legal entities, references in these Clauses to “personal data” shall also include information relating to legal entities. The parties further agree that, where required by applicable law or upon the request of the relevant supervisory authority, they will do all such further acts as may reasonably be required to grant effect to this Section H, including (but not limited to) executing all documents. Data exporter APPENDIX 1 to the Standard Contractual Clauses The data exporter is the entity identified as “Customer” or “Controller” in the DPA. Data importer The data importer is Eloops myInterview and/or its sub-processor (as such term is used in the DPA), as determined by Eloops myInterview in accordance with the terms of the DPA concerning cross-border data transfers. Data subjects The personal data transferred concern the categories of data subjects defined in the DPA. Categories of data The personal data transferred concern the categories of data defined in the DPA. Processing operations The personal data transferred will be subject to the basic processing activities defined in Schedule 1 to the DPA. DATA EXPORTER Name: Authorised Signature: DATA IMPORTER Name: Authorised Signature: APPENDIX 2 to the Standard Contractual Clauses Description cription of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):

Transfers from Switzerland. Notwithstanding Section D above, in respect of data transfers from a data exporter established in Switzerland, these Clauses shall be interpreted in accordance with the governing law in Switzerland. In such cases, references throughout these Clauses to Directive 95/46/EC shall be read as references to the relevant legislation in Switzerland concerning data protection, privacy, data security or the handling of information about individuals applicable to the data exporter, and defined terms in Clause 1 shall have the meanings given to them (or reasonably equivalent terms) in such legislation. References to “Member State” shall be read as references to Switzerland. Without prejudice to Section A above, the parties further agree that that in respect of data transfers where, under applicable privacy laws, the definition of “personal data” (or such reasonably equivalent term) extends to information relating to legal entities, references in these Clauses to “personal data” shall also include information relating to legal entities. The parties further agree that, where required by applicable law or upon the request of the relevant supervisory authority, they will do all such further acts as may reasonably be required to grant effect to this Section HI, including (but not limited to) executing all documents. Data exporter APPENDIX 1 to the Standard Contractual Clauses The data exporter is the entity identified as “Customer” or “Controller” in the DPA. Data importer The data importer is Eloops Unique AG, a provider of a sales platform, and/or its subSub-processor Processor (as such term is used defined in the DPA), as determined by Eloops Unique AG in accordance with the terms of the DPA concerning cross-border data transfers. Data subjects The personal data transferred concern the categories of data subjects defined in the DPA. Categories of data The personal data transferred concern the categories of data defined in the DPA. Processing operations The personal data transferred will be subject to the basic processing activities defined in Schedule 1 to the DPA. DATA EXPORTER Name: Authorised Signature: DATA IMPORTER Name: Authorised Signature: APPENDIX 2 to the Standard Contractual Clauses Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses Clause 4(d) and Clause 5(c) (or document/legislation attached):): Unique has implemented the following security measures: o Clearly defined roles and responsibilities. o Background checks on all employees and sub-processors. o Company-wide risk assessment. o Patch management. o Security incident response. o Vulnerability management and penetration testing. o Secure code development standards incorporating the Open Web Application Security o Logical access controls including 2-factor authentication. o Mobile device management. o Secure data protection and transfer mechanisms.

Transfers from Switzerland. Notwithstanding Section D above, in respect of data transfers from a data exporter established in Switzerland, these Clauses shall be interpreted in accordance with the governing law in Switzerland. In such cases, references throughout these Clauses to Directive 95/46/EC shall be read as references to the relevant legislation in Switzerland concerning data protection, privacy, data security or the handling of information about individuals applicable to the data exporter, and defined terms in Clause 1 shall have the meanings given to them (or reasonably equivalent terms) in such legislation. References to “Member State” shall be read as references to Switzerland. Without prejudice to Section A above, the parties further agree that that in respect of data transfers where, under applicable privacy laws, the definition of “personal data” (or such reasonably equivalent term) extends to information relating to legal entities, references in these Clauses to “personal data” shall also include information relating to legal entities. The parties further agree that, where required by applicable law or upon the request of the relevant supervisory authority, they will do all such further acts as may reasonably be required to grant effect to this Section H, including (but not limited to) executing all documents. Data exporter APPENDIX 1 to the Standard Contractual Clauses The data exporter is the entity identified as “Customer” or “Controller” in the DPA. Data importer The data importer is Eloops Tufin Software Technologies Ltd., a provider of web services, and/or its sub-processor (as such term is used in the DPA), as determined by Eloops Tufin Software Technologies Ltd. in accordance with the terms of the DPA concerning cross-border data transfers. Data subjects The personal data transferred concern the categories of data subjects defined in the DPA. Categories of data The personal data transferred concern the categories of data defined in the DPA. Processing operations The personal data transferred will be subject to the basic processing activities defined in Schedule Annex 1 to the DPA. DATA EXPORTER Name: Authorised Signature: DATA IMPORTER Name: Authorised Signature: APPENDIX 2 to the Standard Contractual Clauses Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):