p6

List of Annexes & Appendix

• Annex 1: Details of the Processing
• Annex 2: Standard Contractual Clauses

Annex 1

Nature and Purpose of Processing

CP will Process Personal Data as necessary to perform the Services pursuant to the Agreement, as further specified in the Documentation, and as further instructed by Client in its use of the Services.

Duration of Processing

Subject to Section 8 of the DPA, CP will Process Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing.

Categories of Data Subjects

Client may submit Personal Data to the Services, the extent of which is determined and controlled by Client in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:

• Prospects, customers, business partners, and vendors of Client (natural persons);
• Employees or contact persons of Client’s prospects, customers, business partners, and vendors;
• Employees, agents, advisors, freelancers of Client (natural persons);
• Client’s Users authorized by Client to use the Services.

Type of Personal Data

Client may submit Personal Data to the Services, the extent of which is determined and controlled by Client in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:

• First and last name
• Title
• Position
• Employer
• Date of birth
• Address
• Contact information (email, phone, business address)
• KYC related information (ID data and/or photograph, Company Structure, Board Members, etc.)
• Nationality
• Country of residence
• Bank and/or issuer details

Annex 2

Standard Contractual Clauses

2010 EU Model clauses extracted from 2010/87/EU Annex EU Standard Contractual Clauses for the transfer of personal data to data processors established in third countries which do not ensure an adequate level of data protection.

Introduction

Both parties have agreed on the following Contractual Clauses (the “Clauses”) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by
the data exporter to the data importer of the personal data specified in Appendix 1.