Data Sharing Addendum

1.1 Unless expressly stated in the Addendum, the capitalised terms shall have the meanings indicated below:

Personal Data. Any information relating to the Data Subject, whether directly or indirectly, and whether collected by automated, semi-automated, or non-automated means.

Data Controller. A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data;

Data Protection Legislation. All applicable international, regional (including the GDPR), and national data protection and privacy laws and regulations governing the collection, processing, and protection of Personal Data, including but not limited to the PDPL.

Data Subject. A natural person who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

PDPL. UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Processing. Any operation or set of operations performed on Personal Data using any electronic means, including processing and other means. Such Processing includes, but is not limited to: collecting, storing, recording, organizing, adapting, modifying, circulating, altering, retrieving, exchanging, sharing, using, characterizing, disclosing Personal Data by broadcasting, transmitting, distributing, making available, coordinating, merging, restricting, blocking, erasing, or destroying it, or creating forms thereof.

Supervisory Authority. Any state authority or agency that supervises the Customer’s and/or Redmob’s compliance with the Data Protection Legislation.

2.1 The Parties shall share the Personal Data while performing the General Terms and implement the requirements of the Data Protection Legislation separately as independent Data controllers within the meaning of the Data Protection Legislation

3.1 The Parties shall take appropriate technical and organizational measures to implement the necessary standards to protect and secure the Personal Data in order to preserve its confidentiality and privacy, and to ensure that it is not breached, destroyed, altered or tampered with, taking into account the nature, scope and purposes of processing and the possibility of risks to the confidentiality and privacy of the Data Subject's Personal Data.

3.2 The Parties shall apply appropriate technical and organizational measures in connection with automatic settings to ensure that the processing of Personal Data is limited to what is necessary for the intended purpose. This includes applying such measures in respect of the volume and type of Personal Data collected, the nature of the processing, the duration of storage, and the level of accessibility to the data.

4.1 The Parties shall cooperate and assist each other in resolving any matters related to the Processing of the Personal Data under this Addendum.

4.2 At the request of the other Party, the Party shall provide that other Party with information related to the Processing of Personal Data transferred under this Addendum, if it is necessary for that other Party to fulfil its obligations under the Data Protection Legislation.

4.3 The Parties shall promptly notify each other in writing if they become aware of any possible or existing factual and legal circumstances that may affect the Processing of Personal Data, the status of the Parties and the rights and obligations under this Addendum.

5.1 If a dispute or claim is raised by a Data Subject or the Supervisory Authorities regarding the Processing of the Personal Data under this Addendum and it could affect the other Party, the Party facing the dispute or claim shall promptly notify the other Party. Both Parties shall cooperate to resolve the matter amicably and in a timely fashion.

6.1 The provisions of this Addendum shall apply as long as the Parties share Personal Data. The obligations of confidentiality provided for in Chapter 8 of this Agreement (“Confidentiality”) shall remain in effect after the expiration or termination of this Addendum.

7.1 The Parties shall have no right to any remuneration for the performance of their obligations under this Addendum.

8.1 Information contained in the Addendum and / or related hereto, also disclosed to the Party in the course of the fulfilment of the Addendum both deliberately and accidentally, shall be confidential. Both during the period of the Addendum and after its termination, this information may be disclosed to third parties only to the extent where such disclosure of information is necessary for the proper implementation of the Addendum, and only with the prior written consent of the other party.