(iii) implement appropriate technical and organisational measures to ensure that the treatment meets the requirements of existing data protection legislation and ensures the protection of the rights of the persons concerned; (h) Types of customer data: The Customer may load, transmit or transmit to the Service certain personal data, the scope of which is determined and controlled by the customer at its sole discretion, and may include the following types of personal data: 2.4 The duration of this data protection authority continues until that date: the termination of the contract or the date on which the processor ceases to process personal data for the data manager. 7. The processing of personal data by the data processor on behalf of the processor may take place at the beginning of the clauses. The duration of processing is: (i) the personal data covered by Article 9 or 10 of the 2016/679 Regulation of 27 April 2016, Clause 5 (a) and 5, point b): suspension of the transfer and termination of data (i) any requirement of a person concerned to exercise any of his or her rights under applicable data protection legislation (including the rights to access, correct, cancel and terminate the data, where applicable); and the data processor takes appropriate steps to verify whether, and by whom, personal data has been introduced, modified or deleted into data processing systems. The data processor takes appropriate steps to ensure that (i) the data source is placed under the control of the data exporter; and (ii) personal data embedded in data processing systems is managed by the data manager and the person involved in a secure file transfer. 3.2 Subcontracting obligations. Mailchimp must: (i) enter into a written agreement with each subprocessor, including data protection obligations that provide at least the same level of customer data protection as that data protection authority, as this applies to the type of service provided by that subcontractor; and (ii) remain responsible for the subcontractor`s compliance with the obligations of this data protection officer and the acts or omissions of this subprocessor which have the effect of infringing one of its obligations under this data protection authority. Each Templafy customer for whom Templafy ApS processes data and who has not entered into a valid data processing agreement with Templafy ApS members: identifiers and contact information (name, address, title, contact information, username); Financial information (credit card data, account data, payment information) Employment information (employer, job title, geographic location, area of expertise); (c) Object: The purpose of data processing under this data protection authority is that of customer data. Google provides appropriate data processing conditions for certain products that include the data processing services listed below.

2.4 Customer respect. The customer assures and guarantees that (i) he has complied with and will continue to comply with all applicable laws, including data protection legislation, regarding the processing of customer data and all processing instructions he has given to Mailchimp; and (ii) it has provided all communications and will continue to solicit them and will continue to obtain all consents and rights required by Mailchimp`s data protection legislation to process customer data for the purposes of the agreement.