General Terms and Conditions for Using the Usercentrics Software (USA) until July 2023

USERCENTRICS

GENERAL TERMS AND CONDITIONS (USA)

WHEREAS, Customer desires to use the Company Products (as defined below) as set forth on the Order Form to which these GTC are attached, and Company desires to grant a license to use such hosted software in accordance with the terms set forth in this Agreement.

NOW, THEREFORE, in consideration of the mutual covenants and agreements set forth in this Agreement, the parties hereby agree as follows:

1. Company Products and Services

1.1. Provision of Products and Services. Subject to the terms and conditions of this Agreement, Company will provide Customer with the online software-as-a-service products and services on a subscription basis for the Subscription Term (defined below), and such other products and services, as set forth on an applicable Order Form (collectively, “Company Product(s)”). Company Products include Company Software (as defined below). Each Order Form will be incorporated into, and is fully governed by, this Agreement upon execution of the Order Form by both parties. In the event of any conflict or inconsistency between this Agreement and an Order Form, this Agreement shall control.

1.2. Access to Products. Customer may access and use Company Products on a non-exclusive and non-transferrable basis, solely for its internal business purposes, and only in accordance with the terms and conditions of this Agreement, the applicable Order Form, and any end user technical documentation provided by Company for such Company Products (“Documentation”). To the extent Company provides Customer with any downloadable software, agents, SDKs, APIs, or other code in connection with the Company Products (“Company Software”), Company grants to Customer a non-exclusive, non-transferable, non-sublicensable, limited right and license to use the Company Software during the applicable Subscription Term solely as reasonably necessary for Customer’s use of the Company Products in accordance with this Agreement. For clarity, except for Company Software, Company’s software products are provided on a remote, software-as-a-service basis only.

1.3. Permitted Users. Customer may permit its employees, agents, independent contractors and consultants to use the Company Products on its behalf (“Permitted Users”), provided Customer remains responsible for the acts and omissions of each such Permitted User. Use of the Company Products by Customer in the aggregate must be within the restrictions set forth in the applicable Order Form (if any). If Customer is given passwords to access Company Products on Company’s systems, Customer shall require that all Permitted Users keep user ID and password information strictly confidential and not share such information with any unauthorized person. Customer shall be responsible for any and all actions taken using Customer’s accounts and passwords.

1.4. Use by Affiliates. Each of Customer’s Affiliates (defined below) identified on an Order Form will be entitled to access and use the applicable Company Products in accordance with this Agreement and the applicable Order Form, provided that Customer shall remain responsible to Company for the actions and omissions of each such Affiliate (and each of such Affiliate’s Permitted Users). The terms of this Agreement will govern, and will be incorporated by reference in, each such Order Form as if this Agreement were separately executed by the applicable Customer Affiliate, and the term “Customer” as used in this Agreement will be deemed as applying to such Customer Affiliate for the purposes of such Order Form. “Affiliate” means an entity that, directly or indirectly, controls, is controlled by, or is under common control with a party. As used herein, “control” means the power to direct the management or affairs of an entity or the beneficial ownership of fifty percent (50%) or more of the voting equity securities or other equivalent voting interests of an entity.

1.5. General Restrictions. Customer shall not, and shall not allow any third party (including any Permitted User) to: (a) sell, rent, lease or use any Company Product for time sharing purposes; (b) use any Company Product to help develop, or help provide to any third party, any product or service similar to or competitive with any Company Product; (c) reverse engineer, decompile, disassemble, or otherwise seek to obtain the source code of any Company Product; (d) copy, modify or create derivative works from any Company Product or any Documentation; (e) remove or obscure any copyright or proprietary or other notice contained in any Company Product or Documentation; (f) propagate any virus, Trojan horse, or other malware or programming routine intended to damage any system or data; (g) access or use any Company Products in a manner intended to circumvent or exceed service account limitations or requirements; (h) use any Company Products in a manner that violates any applicable law, regulation, or legal requirement or obligation; (i) use any Company Products in violation of any third-party rights of privacy or intellectual property rights; (j) use or permit the use of any tools in order to probe, scan or attempt to penetrate or benchmark any Company Products; (k) post, upload, transmit or provide any Customer Data that Company reasonably deems to be unlawful, harmful, abusive or otherwise objectionable; or (l) use the Company Products except as expressly permitted by this Agreement.

1.6. Service Level Agreement. Company will make commercially reasonable efforts to provide the Company Products in accordance with the availability, service credit, and other terms set forth in Exhibit A (“Service Level Agreement”).

2. Customer Obligations; Customer Data

2.1. Generally. “Customer Data” means information, data, and other content, in any form or medium, that is downloaded, or otherwise received, 1 directly or indirectly (including via a third-party provider), from Customer (including from a Permitted User on Customer’s behalf) by or through the Company Products, or provided by Customer to Company to input into the Company Products. Customer represents and warrants to Company that Customer’s use of Company Products and all Customer Data is and will be at all times compliant with Customer’s privacy policies and all applicable local, state, federal and international laws, regulations and conventions, including, without limitation, those related to data privacy, international communications, and the exportation of technical or personal data (including Personal Data (as defined in Section 12)). Customer is solely responsible for the accuracy, content and legality of all Customer Data. Customer represents and warrants to Company that Customer has sufficient rights in the Customer Data to grant the rights granted to Company in Section 2.2 below and that the Customer Data does not infringe or otherwise violate the rights of any third party.

2.2. Rights in Customer Data. As between the parties, Customer shall retain all right, title and interest (including any and all intellectual property rights) in and to the Customer Data. Customer hereby grants to Company a non-exclusive, worldwide, irrevocable, transferable, sublicensable (through multiple tiers), fully paid-up, royalty-free right and license to use, copy store, transmit, modify, and display the Customer Data in order to: (a) provide the Company Products to Customer; and (b) perform such other actions as authorized or instructed by Customer in writing (email to suffice).

2.3. De-identified Data. Company may create and use de-identified data related to Customer’s use of the Company Products in order to improve Company’s products and services, to develop new products and services, and for its other business purposes (and such de-identified data will be owned by Company).

2.4. Third Party Application Service Providers. Customer may be able to access and use certain optional third-party services or products (e.g., a third-party service that integrates with Company via opt-in, or uses Company’s APIs) through or with its use of the Company Products (“Third-Party Services”). Customer is under no obligation to use any Third-Party Services. IF CUSTOMER USES ANY THIRD-PARTY SERVICES, COMPANY WILL NOT BE RESPONSIBLE FOR ANY ACT OR OMISSION OF ANY PROVIDER OF SUCH THIRD-PARTY SERVICES. COMPANY DOES NOT WARRANT OR PROVIDE DIRECT SUPPORT FOR ANY THIRD-PARTY SERVICES. CUSTOMER ACKNOWLEDGES AND AGREES THAT COMPANY WILL HAVE NO RESPONSIBILITY OR LIABILITY FOR THE ACTS OR OMISSIONS OF ANY PERMITTED USERS IN CONNECTION WITH ANY THIRD-PARTY SERVICES.

3. Ownership

3.1. Ownership. Customer acknowledges that no intellectual property rights are assigned or transferred to Customer hereunder. Customer is obtaining only a limited right to access and use the Company Products set forth on the applicable Order Form. Customer agrees that Company or its suppliers own and retain all right, title and interest (including all patent, copyright, trade secret and other intellectual property rights) in and to (a) the Company Products, Documentation, and any and all related and underlying technology, documentation, and other information and (b) any intellectual property it develops hereunder, and any derivatives thereof (individually and collectively, “Company Technology”).

3.2. Feedback. In the event Customer provides Company with any suggestions, ideas, improvements or other feedback with respect to any aspect of the Company Products (“Feedback”), Company shall own such Feedback.

4. Subscription Terms, Fees and Invoicing and Payment

4.1. Subscription Term and Renewals. The term of the contract and, accordingly, the billing shall begin upon the date defined in the contract offer. This Agreement shall commence on the Effective Date and shall remain in effect for an initial period of twelve (12) months unless a longer term has been contractually agreed on (“Regular Contract Term”); thereafter, this Agreement shall be extended for one or more additional periods of 12 months each (a “Renewal Term”), unless either party notifies the other party thirty (30) days prior to the expiration of the then-current term that it does not wish to renew this Agreement. The termination does not require any justification and must be declared in writing to the other party. (Each Regular Contract Term and Renewal Term is referred to herein as a “Term”).

4.2. Fees, Invoicing and Payment. The calculation of the base fee to be paid by the customer results from the contract offer or completed online contract offer. The applied metric for the base fee is the total number of sessions per year for the total domains and the monthly average DAUs (daily active users) for apps, as described in the contract offer. At the time the contract is concluded, the expected number of sessions/DAU is estimated. The Customer shall provide Usercentrics with the information necessary for calculating the base fee. Usercentrics reserves the right to check the Customer’s information on the sessions/DAU and, in the event of deviations, to use the measured sessions/DAU as the basis for calculating the base fee. The verification shall be carried out by counting the sessions/DAU by querying the Settings ID. The resulting base fee, for the entire contract term, is payable in advance. Payment must be made within 30 days of the invoice date. Usercentrics reserves the right to change the customer to the corresponding higher package if the sessions / DAU on the domains / apps specified in the contract offer are exceeded by at least 10% in three consecutive months. The price difference resulting in comparison to the original contract offer may be invoiced by Usercentrics for the remaining contract term. Payment must be made within 30 days of the invoice date. Customers are required to pay any sales, use, value-added withholding, or similar taxes or levies, whether domestic or foreign, other than taxes based on the income of the Company.

Unless otherwise agreed, invoicing shall be done for the entire contract term in advance. Invoices for managed services are sent after they have been provided. 2 Usercentrics is entitled to send the invoice via email. Payment is due in 30 days after the invoice date. The invoice amount must therefore be credited to the Usercentrics account within 30 days of the invoice date. Late payment fees shall be charged at a rate of 3% or the maximum amount allowed by law, whichever is less (plus the costs of collection). The right to claim higher damages for late payment remains reserved.

4.3. Session Increase and Excess Use. Should Customer desire an increase in the amount of sessions/ DAUs, Customer may order such increase with a corresponding higher fee set out on a new Order Form subject to these GTC. For the avoidance of doubt, a new Initial Term will accompany a new Order Form and any unused fees paid towards the prior Order Form shall carry over to such new Order Form. Usercentrics reserves the right to change the customer to the corresponding higher package if the sessions / DAUs (daily active users) on the domains / apps specified in the contract offer are exceeded by at least 10% in three consecutive months. The price difference resulting in comparison to the original contract offer may be invoiced by Usercentrics for the remaining contract term. Payment must be made within 30 days of the invoice date.

4.4. Retroactive Billing for Excess Use. Should Customer use the Company Products in excess of the amount of sessions purchased as part of any given Order Form, Company shall bill Customer to account for Customer’s excess usage, subject to the terms set forth in this Section 4.

4.5. Suspension of Service. If Customer’s account is ten (10) days or more overdue, in addition to any of its other rights or remedies, Company reserves the right to suspend Customer’s access to the applicable Company Product without liability to Customer until such amounts are paid in full.

5. Term and Termination

5.1. Term. This Agreement is effective as of the Effective Date and will continue in effect until terminated as set forth below.

5.2. Termination. Either party may terminate this Agreement with at least five (5) days’ prior written notice if there are no Order Forms then in effect. In addition, either party may terminate this Agreement if the other party (a) fails to cure any material breach of this Agreement (including a failure to pay fees) within thirty (30) days after receiving a written notice (such notice must contain sufficient details as to the nature of the breach and state the intent to terminate by an email in the case of non-payment); (b) ceases operation without a successor; or (c) seeks protection under any bankruptcy, receivership, trust deed, creditors’ arrangement, composition, or comparable proceeding, or if any such proceeding is instituted against either of the contractual parties (and not dismissed within sixty (60) days thereafter). For clarity, termination of this Agreement will automatically terminate all Order Forms.

5.3. Effect of Termination. Upon the expiration or termination of this Agreement, (a) Customer shall immediately cease any and all use of and access to Company Products (including any and all related Company Technology) and (b) each party will return to the other party (or destroy) such other party’s Confidential Information. Except as otherwise set forth herein, termination of this Agreement is not an exclusive remedy and the exercise by either party of any remedy under this Agreement will be without prejudice to any other remedies it may have under this Agreement, by law, or otherwise.

5.4. Customer Data. At any time before or within thirty (30) days after termination or expiration of this Agreement, Customer may download Customer Data from the Company Products in accordance with the Documentation. Customer acknowledges that if Customer or a Permitted User deletes Customer Data from the Company Products, such Customer Data may still reside in Company’s systems, applications, databases and servers (including, without limitation, as backups and/or archives). Customer acknowledges that the foregoing actions during any Subscription Term may have an adverse impact on Customer’s use of the Company Products (and Company is not liable with respect thereto).

5.5. Survival. The following Sections shall survive any expiration or termination of this Agreement: 1.5, 2, 3, 4.2, 5, 6.2, 7, 8, 9, 11, and 13.

6. Limited Warranty; Disclaimer

6.1. Limited Warranty. Company warrants that it will provide the Company Products in substantial conformity with the applicable Documentation and the descriptions in the Order Form. Company’s sole liability (and Customer’s sole and exclusive remedy) for any breach of this warranty shall be, in Company’s sole discretion and at no charge to Customer, to use commercially reasonable efforts to provide Customer with an error correction or work-around that corrects the reported non-conformity, or if Company determines such remedies to be impracticable, to allow Customer to terminate the Subscription Term and receive as its sole remedy and Company’s entire liability, a refund of any fees Customer has pre-paid for use of Company Products or related services it has not received as of the date of the warranty claim. The limited warranty set forth in this Section 6.1 shall not apply: (a) unless Customer makes a claim within thirty (30) days of the date on which the condition giving rise to the claim first appeared, (b) if the error was caused by misuse, unauthorized modifications or third-party hardware, software or services, or (c) to Company Products provided on a no-charge or evaluation basis.

6.2. Warranty Disclaimer. EXCEPT FOR THE WARRANTIES SET FORTH IN THIS AGREEMENT, COMPANY PRODUCTS AND ALL SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. COMPANY AND ITS SUPPLIERS EACH EXPRESSLY DISCLAIM ANY OTHER WARRANTIES, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, TITLE, OR FITNESS FOR A PARTICULAR PURPOSE

7. Limitation of Liability

EXCEPT WITH RESPECT TO EITHER PARTY’S OBLIGATIONS UNDER SECTION 8 (INDEMNIFICATION) 3 (WHICH IN THE CASE OF COMPANY’S OBLIGATIONS SHALL BE LIMITED IN THE AGGREGATE TO ONE MILLION AMERICAN DOLLARS (USD 1,000,000)), OBLIGATIONS UNDER SECTION 9 (CONFIDENTIAL INFORMATION), GROSS NEGLIGENCE, OR WILLFUL MISCONDUCT: (A) NEITHER PARTY SHALL BE LIABLE, UNDER ANY LEGAL OR EQUITABLE THEORY OF LAW, WITH RESPECT TO ANY SUBJECT MATTER OF THIS AGREEMENT FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL OR PUNITIVE DAMAGES OF ANY KIND, INCLUDING LOST PROFITS, BUSINESS, CONTRACTS, REVENUE, GOODWILL, PRODUCTION, AND ANTICIPATED SAVINGS OR DATA, EVEN IF INFORMED OF THE POSSIBILITY OF SUCH DAMAGES IN ADVANCE; AND (B) EACH PARTY’S AGGREGATE LIABILITY SHALL IN NO EVENT EXCEED THE FEES PAID BY CUSTOMER TO COMPANY DURING THE TWELVE (12) MONTH PERIOD PRIOR TO WHEN THE CLAIM AROSE

8. Indemnification

8.1. Indemnification by Company. Company shall indemnify, defend, and hold harmless Customer from and against any claims, costs, damages, losses, liabilities and expenses (including reasonable attorneys’ fees and costs) arising from the infringement of a U.S. patent, copyright, trademark, or other intellectual property right asserted against Customer by a third party based upon Customer’s use of Company Products in accordance with the terms of this Agreement, provided that Company shall have received from Customer: (a) prompt written notice of such claim (but in any event notice in sufficient time for Company to respond without prejudice); (b) the exclusive right to control and direct the investigation, defense, or settlement (if applicable) of such claim (as long as such settlement releases Customer from any and all liability); and (c) all reasonable necessary cooperation of Customer. If Customer’s use of any Company Product is, or in Company’s opinion is likely to be, enjoined due to the type of infringement specified above, or if required by settlement, Company may, in its sole and reasonable discretion: (x) substitute substantially functionally similar products or services; (y) procure for Customer the right to continue using Company Products; or if (x) and (y) are commercially impracticable, (z) terminate the Agreement and refund to Customer any unused, prepaid fees paid by Customer for the terminated period. The foregoing indemnification obligation of Company shall not apply to the extent that the alleged infringement arises from: (1) any modification of the Company Products other than by or on behalf of Company; (2access to or use of any Company Product in combination with any hardware, system, software, network, or other products, materials or services not provided by or on behalf of Company (3) use of Company Products in breach of this Agreement; or (4) Customer Data. THIS SECTION 8.1 SETS FORTH COMPANY’S SOLE LIABILITY AND CUSTOMER’S SOLE AND EXCLUSIVE REMEDY WITH RESPECT TO ANY CLAIM OF INTELLECTUAL PROPERTY INFRINGEMENT.

8.2. Indemnification by Customer. Customer shall indemnify, defend, and hold harmless Company from and against any and all claims, costs, damages, losses, liabilities and expenses (including reasonable attorneys’ fees and costs) arising out of or in connection with any claim arising from or relating to (a) Customer’s violation of any laws, regulations, or rights relating to Customer Data (including, without limitation, privacy laws, regulations, or rights), or Customer’s breach of Section 2.1, (b) any action taken (or not taken) by Customer based upon use of a Company Product, or (c) any dispute between Customer and any other user of the Company Products. This indemnification obligation is subject to Customer receiving: (x) prompt written notice of such claim (but in any event notice in sufficient time for Customer to respond without prejudice); (y) the exclusive right to control and direct the investigation, defense, or settlement of such claim; and (z) all reasonable necessary cooperation of Company at Customer’s expense

9. Confidential Information

9.1. Definition. “Confidential Information” means information disclosed by one party to the other that is marked as confidential or proprietary or that ought reasonably to be understood as confidential or proprietary. All Company Technology, performance information relating to the Company Products, and the terms and conditions of this Agreement (including the fees and pricing information) shall be deemed Confidential Information of Company without any marking or further designation. Confidential Information does not include Customer Data, nor does it include information that the recipient already lawfully knew, that becomes public through no fault of the recipient, that was independently developed by the recipient without any reference to or use of Confidential Information, or that was rightfully obtained by the recipient from a third party.

9.2. Obligations. The recipient agrees not to disclose Confidential Information except to its Affiliates, employees, contractors and agents who need to know it and have agreed in writing to keep it confidential. Only those parties may use the Confidential Information, and only to exercise the recipient’s rights and fulfill its obligations under this Agreement, while using at least a reasonable degree of care to protect it. The recipient may also disclose Confidential Information to the extent required by law after providing reasonable notice to the discloser and cooperating to obtain confidential treatment. Unauthorized disclosure of Confidential Information may cause harm not compensable by damages, and the disclosing party may seek injunctive or equitable relief in a court of competent jurisdiction, without posting a bond, to protect its Confidential Information. Nothing herein shall limit Usercentrics from disclosing the terms of this contract to potential financing sources, security holders, strategic partners and advisors

10. Security

Company shall use reasonable physical, technical, and administrative procedures designed to protect, safeguard and help prevent loss, misuse, and unauthorized access, disclosure, alteration or destruction of Customer Data, and Company will choose these safeguards based on the sensitivity of the information that is collected, processed, and stored and the current state of applicable technology.

11. Publicity

Except as otherwise agreed in writing (email to suffice), neither party may use the other party’s name, logos or marks without such party’s written pre-approval in each case; provided that Company may use Customer’s name and logo on Company’s web site and in Company promotional materials to identify Customer as an Company customer.

12. Data Processing

To the extent that Company processes any data which is defined as “personal data,” “personal information,” or “sensitive data” in the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) or the California Consumer Privacy Act of 2018, as amended (“CCPA”) (“Personal Data”), Company shall do so as described within its privacy policy at [https://usercentrics.com/privacy-policy/]. If the Personal Data that Company processes relates to individuals who are data subjects entitled to the rights granted under GDPR, Customer acknowledges that Company does so as a processor as defined in GDPR. If the Personal Data that Company processes relates to individuals who are California residents, and Customer is subject to CCPA, Customer acknowledges that Company does so as a service provider as defined in CCPA. To comply with the requirements of the applicable data protection laws, including but not limited to GDPR and CCPA, with respect to the processing of Personal Data, the parties agree to enter into an appropriate data processing addendum (“DPA”) and to adhere to the provisions of such DPA. In the event of any conflict between this Agreement and a DPA, the DPA shall govern.

13. General Terms

13.1. Assignment. This Agreement will bind and inure to the benefit of each party’s permitted successors and assigns. Neither party may assign this Agreement except upon the advance written consent of the other party, except that either party may assign this Agreement without such consent in connection with a merger, reorganization, acquisition or other transfer of all or substantially all of such party’s assets or voting securities. Any attempt to transfer or assign this Agreement except as expressly authorized under this Section 13.1 will be null and void.

3.2. Force Majeure. Neither party shall be liable to the other for any delay or failure to perform any obligation under this Agreement (except for a failure to pay fees) if the delay or failure is due to unforeseen events which occur after the signing of this Agreement and which are beyond the reasonable control of such party, such as a strike, blockade, war, act of terrorism, riot, natural disaster, or failure or diminishment of power or telecommunications or data networks or services.

13.3. Subcontractors. Company may use the services of subcontractors for performance of services under this Agreement, provided that Company remains responsible for such subcontractors’ compliance with the terms of this Agreement.

13.4. Independent Contractors. The parties to this Agreement are independent contractors. There is no relationship of partnership, joint venture, employment, franchise or agency created hereby between the parties. Neither party will have the power to bind the other or incur obligations on the other party’s behalf without the other party’s prior written consent.

13.5. Severability. If any provision of this Agreement shall be adjudged by any court of competent jurisdiction to be unenforceable or invalid, that provision shall be limited to the minimum extent necessary so that this Agreement shall otherwise remain in effect.

13.6. Governing Law; Jurisdiction and Venue. This Agreement shall be governed by the laws of the State of Delaware and the United States without regard to conflicts of laws provisions thereof, and without regard to the United Nations Convention on the International Sale of Goods. Except for claims for injunctive or equitable relief or claims regarding intellectual property rights (which may be brought in any competent court in Alameda County), any dispute arising under this Agreement shall be finally settled in binding arbitration. The Judicial Arbitration and Mediation Service, Inc. (“JAMS”) will administer the arbitration in accordance with its Comprehensive Arbitration Rules and Procedures (though to the extent JAMS’ Expedited Arbitration Procedures are available, they will apply), and the arbitration will be held in Wilmington, Delaware. Subject to the foregoing provisions of this Section 13.6, the jurisdiction and venue for actions related to the subject matter hereof shall be the state and United States federal courts located in Alameda County, California and both parties hereby submit to the personal jurisdiction of such courts.

13.7. Notice. Any notice or communication required or permitted under this Agreement shall be in writing to the parties at the addresses set forth as first listed above or at such other address as may be given in writing by either party to the other in accordance with this Section and shall be deemed to have been received by the addressee (a) if given by hand, immediately upon receipt; (b) if given by overnight courier service, the first business day following dispatch or (c) if given by registered or certified mail, postage prepaid and return receipt requested, the second business day after such notice is deposited in the mail. In addition, any legal notices to Company must be delivered to the following email address: [legal@usercentrics.com] but, notwithstanding earlier receipt via email, legal notices will be deemed received when the physical notice is received as set forth in preceding sentence.

13.8. Amendments; Waivers. No supplement, modification, or amendment of this Agreement shall be binding, unless executed in writing by a duly authorized representative of each party to this Agreement. No waiver will be implied from conduct or failure to enforce or exercise rights under this Agreement, nor will any waiver be effective unless in a writing signed by a duly authorized representative on behalf of the party claimed to have waived. Purchase orders (and similar documents) issued by Customer are for administrative purposes only (e.g., setting forth products and services ordered and associated fees) and any additional or 5 different terms or conditions contained in any such order shall not apply (even if the order is accepted, or performed on by Company).

13.9. No Third Party Rights. There are no third party beneficiaries to this Agreement.

13.10. Export Compliance. Each party shall comply with all applicable export and re-export control and trade and economic sanctions laws, including the Export Administration Regulations maintained by the U.S. Department of Commerce, trade and economic sanctions maintained by the U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”), and the International Traffic in Arms Regulations maintained by the U.S. State Department. Neither party, nor any of its subsidiaries or any person acting on its behalf or owning 50% or more of its equity securities or other equivalent voting interests, is (a) a person on the List of Specially Designated Nationals and Blocked Persons or any other list of sanctioned persons administered by OFAC or any other governmental entity, or (b) a national or resident of, or a segment of the government of, any country or territory for which the United States has embargoed goods or imposed trade sanctions.

13.11. Entire Agreement. This Agreement is the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements and communications, relating to the subject matter of this Agreement. This Agreement may be executed electronically and in counterparts (such as via DocuSign), which counterparts taken together shall form one legal instrument. Any pre-printed terms in a Customer purchase order or similar document are null and void.

EXHIBIT A

Usercentrics Service Level Agreement

Severity Levels

Usercentrics provides a variety of services as part of its Consent Management Platform. Usercentrics classifies the severity of the impact of potential issues or incidents caused by any of its services as follows:

System Availability

Uptime Commitment

During the Term of the agreement under which Usercentrics has agreed to provide the Consent Management Platform to Customer, the Monthly Uptime Percentage for the Service will be at least ninety-nine point nine percent (99,9%) for Severity Level 1 and ninety-nine point five percent (99,5%) for Severity Level 2.

Any such issue detected by Usercentrics’ continuous monitoring is recorded as a Service Failure. Subject to the Uptime Exclusions defined in this document, “Monthly Uptime Percentage” is calculated by subtracting from 100% the ratio of the number of Service Failures to the number of all monitoring requests during any monthly billing cycle.

This Uptime Commitment only covers SaaS instances and does not apply to self-hosted instances. Uptime is generally measured across all instances.

Uptime Exclusions

Following times and circumstances are excluded from any uptime calculation:

• regularly scheduled maintenance of the Service.
• any problems not caused by Usercentrics that result from (a) computing or networking hardware, (b) other equipment or software under Customer’s control, (c) the Internet, or (d) other issues with electronic communications;
• Usercentrics’ suspension or termination of the Service in accordance with the Agreement and/or its associated Contract;
• software that has been subject to unauthorized modification by Customer;
• negligent or intentional misuse of the Service by Customer; or
• “Beta”or“limited availability”products, features and functions identified as such by Usercentrics.

Scheduled Maintenance

Usercentrics performs regular maintenance to ensure a robust, secure and scalable service to Customer. Usercentrics therefore reserves the right to perform scheduled maintenance with expected downtimes according to the schedule below:

Remedies

If service uptime falls below the committed uptime SLA during a billing cycle (monthly), Customer’s sole and exclusive remedy will be eligible to receive Financial Credits.

In order to receive any of the Financial Credits, Customer must notify Usercentrics Customer Success Manager within thirty days from the time Customer becomes eligible to receive a Financial Credit. Customer must also provide Usercentrics with log files or other proof showing unavailability or errors and the date and time those issues occurred. If Customer does not comply with these requirements, Customer will forfeit its right to receive a Financial Credit. If a dispute arises with respect to this SLA, Usercentrics will make a determination in good faith based on its system logs, monitoring reports, configuration records, and other available information, which Usercentrics will make available for auditing by Customer at Customer’s request.

The aggregate maximum number of Financial Credits to be issued by Usercentrics to Customer for any and all Downtime Periods that occur in a single billing month will not exceed 50% of the amount due by Customer.

Support Reaction Times

Issue Reporting

Usercentrics operates a continuous uptime monitoring system. In the event that Customer detects an issue, Customer should immediately inform Usercentrics by email to contact@usercentrics.com or via the Usercentrics support portal at https://usercentrics.atlassian.net/servicedesk/customer/portals.

Response Time Commitment

Usercentrics will use its best efforts to resolve severe issues immediately in accordance with the response time commitment indicated below:

Usercentrics will determine the Severity Level assigned to each support issue in its reasonable discretion, but taking into consideration the Severity Level indicated by Customer.

Time to resolution can only be committed for cases where the issue is related to Usercentrics components only. 

Business hours are Monday to Friday, except on German public holidays, from 9 AM to 5 PM in the Berlin time zone.

Customer​ ​duties​

When reporting an issue, Customer must provide clear step-by-step instructions on how to reproduce the issue and any suitable supporting material (e.g. screenshots, screen recordings, logs, links) and, where applicable, access to Customer’s setup or environment. The failure of doing so may result in delays of the issue analysis and resolution.

Remedies

In the event Usercentrics has not resolved a severity 1 or severity 2 issue within the committed time to resolution then Customer’s sole and exclusive remedy will be eligible to receive Financial Credits.

In order to receive any of the Financial Credits, Customer must notify Usercentrics Customer Success Manager within thirty days from the time Customer becomes eligible to receive a Financial Credit. Customer must also provide Usercentrics with the related issue number. If Customer does not comply with these requirements, Customer will forfeit its right to receive a Financial Credit. If a dispute arises with respect to this SLA, Usercentrics will make a determination in good faith based on its issue tracking logs and other available information, which Usercentrics will make available for auditing by Customer at Customer’s request. 

The aggregate maximum number of Financial Credits to be issued by Usercentrics to Customer for any and all time to resolution SLA breaches that occur in a single billing month will not exceed 50% of the amount due by Customer.

Usercentrics Support Service Overview

Click here to see the Terms and Conditions valid from December 21, 2023.