Cadence Data Processing Addendum Last updated November 20, 2020

This Cadence Data Processing Addendum, including its Annexes and Appendices (“DPA”) supplements the Terms of Use, Privacy Policy, Statements of Work and other written agreements (collectively “Agreement”), with respect to the Processing of Personal Data by Event Cadence, Inc. (hereafter “Cadence”), between Cadence and Customer for the purchase of Cadence Services. This DPA is effective upon its incorporation into the Agreement, said incorporation may be specified in the Agreement, and Order or an executed amendment to the Agreement. In the case of any conflict or inconsistency with the terms of the Agreement, this DPA shall be controlling to the extent of such conflict or inconsistency.

The term of this DPA shall follow the term of the Agreement. Terms not otherwise defined herein shall the meaning set forth in the Agreement.

ANNEX 1 DETAILS OF PRCOESSING ANNEX 2 STANDARD CONTRACTUAL CLAUSES

For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection.

The Customer, as defined in the Statement of Work or Agreement (the “data exporter”)

And

Event Cadence, Inc., 134 North 4th Street, Suite 2013, Brooklyn, New York 11249 (the “data importer”)

Each a “party”; together “the parties”,

HAVE AGREED on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Clause 1

Definitions For the purposes of the Clauses:

Clause 2

Details of the transfer

The details of the transfer and in particular the special categories of personal data where applicable are specified in Appendix 1 which forms an integral part of the Clauses.

Clause 3

Third-party beneficiary clause

Clause 4

Obligations of the data exporter

The data exporter agrees and warrants:

Clause 5

Obligations of the data importer

The data importer agrees and warrants:

Clause 6

Liability

Clause 7

Mediation and jurisdiction

Clause 8

Cooperation with supervisory authorities

Clause 9

Governing Law

The Clauses shall be governed by the law of the Member State in which the data exporter is established.

Clause 10

Variation of the contract

The parties undertake not to vary or modify the Clauses. This does not preclude the parties from adding clauses on business related issues where required as long as they do not contradict the Clause.

Clause 11

Subprocessing

Clause 12

Obligation after the termination of personal data processing services

APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES

This Appendix forms part of the Clauses. Defined terms used in this Appendix 1 shall have the meaning given to them in the Agreement (including the DPA).

Data exporter The data exporter is the legal entity identified as “Customer” in the DPA.

Data importer The data importer is Event Cadence, Inc.

Data subjects Data subjects as defined in Annex 1 of the DPA.

Categories of data Categories of Data as defined in Annex 1 of the DPA.

Special categories of data (if appropriate) The parties do not anticipate the transfer of special categories of data.

Processing operations Processing operations as defined in Annex 1 of the DPA.

APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES

This Appendix forms part of the Clauses

Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):

Data importer will maintain administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of Personal Data uploaded to the SCC Services, as described in the Terms of Use, Privacy Policy, Statement of Work and Agreement and applicable to the specific SCC Services purchased by data exporter, and accessible via Privacy Policy or otherwise made reasonably available by data importer by request to privacy@eventcadence.com. Data Importer will not materially decrease the overall security of the SCC Services during a subscription term.

APPENDIX 3 TO THE STANDARD CONTRACTUAL CLAUSES

If you would like to receive an email when we make updates to Appendix 3, please make your request to privacy@eventcadence.com.