The below Service Agreement and related materials ("eFind Materials") may be translated into different languages. In the event of any conflict or inconsistency between any term in eFind Materials in the English language and any translation thereof in any other language, the English version shall prevail.

SERVICE AGREEMENT

BY AGREEING TO AN APPLICABLE EFIND TERMS & CONDITIONS DOCUMENT, WHETHER BY CLICKING "I AGREE" TO SUCH TERMS AND CONDITIONS, SUBMITTING A PAYMENT FORM, OR BY OTHERWISE ACCESSING OR USING THE SERVICES, YOU AGREE THAT CUSTOMER IS BOUND BY THE TERMS OF THIS SA.

1. Acceptance. This Services Agreement ("SA") is incorporated by reference into and, along with the applicable Terms & Conditions document for the specific services Customer (as defined below) is accessing ("Terms & Conditions") and other documents incorporated by reference are collectively referred to as the ("Agreement"), by and between eFind, LLC, a South Dakota corporation with its principal place of business located at 2451 West Grapevine Mills Circle, Suite 234, Grapevine, TX 76051 USA("eFind"), and the business entity or person for whom you ("you") are acting and that will be using the Services (and/or any individual, entity, or successor entity, agency or network acting on Customer's behalf) (the "Customer") and sets forth the legally binding terms between Customer and eFind that govern the delivery of Services. You represent and warrant that you are entering into this Agreement on behalf of Customer and that you have the authority to bind Customer to this Agreement.

2. Services. eFind will deliver the services to Customer as further defined in the applicable Terms & Conditions, (individually, a "Service," and collectively, the "Services") between Customer and eFind. The Services are delivered via Customer's websites, blogs, or other properties approved by eFind (collectively, the "Sites").

3. Authorization. Customer authorizes eFind (a) to deliver the Services, and (b) to use, collect, manage, access, modify, disseminate, make derivative works of, and index the Data (defined below) for the purposes stated in this Agreement. Customer may request to add websites, blogs, or other properties to the Services, and eFind hereby reserves its right to approve or deny Customer's request.

4. eFind's Relationships. eFind has sole discretion to identify, select, and manage relationships with advertisers, merchants, partners and other third parties, establish pricing and other terms and conditions with advertisers, merchants, partners and other third parties, and take all actions relating to the foregoing in order to provide the Services hereunder.

5. Payment Terms.

• Payments to Customer. eFind shall pay Customer fees in accordance with the applicable Terms & Conditions, minus any chargebacks. If the amount accrued for the applicable month is less than $50 (USD) for payments by wire or $25 (USD) for all other payments, payment will be deferred until the month in which the cumulative balance owed to Customer exceeds the applicable thresholds or until the Agreement is terminated. eFind facilitates payment for Services using a payment dashboard hosted by a third-party vendor where, if applicable, Customer will enter Customer's payment detail information, tax related information and other related information. At all times, Customer shall be solely responsible for the accuracy of the information provided in connection with Customer's bank account via the payment dashboard. Customer shall pay any currency conversion fees, or other applicable banking transaction fees, associated with Customer's use of the payment dashboard, if any.
   
• Payments to eFind. In the event Customer owes eFind fees under the applicable Terms & Conditions, such payments are due to eFind within thirty (30) days following the invoice date. Late payments bear interest at the rate of 1.5% per month (or the highest rate permitted by law, if less). Customer shall reimburse eFind for reasonable expenses and attorneys' fees incurred by eFind in connection with eFind's collection of any late payment. Any deviations from the payment terms in this Agreement will be specified in the applicable Terms & Conditions.
   
• Taxes. All amounts are exclusive of taxes and payable in U.S. dollars only unless otherwise agreed by the parties. Customer shall pay all sales, use and excise taxes, and any other similar taxes, duties and charges of any kind imposed on Customer by any federal, state or local governmental entity in connection with the delivery or Customer's receipt of the Services.
   
• Chargebacks. Where applicable, eFind retains its right to adjust payments due to Customer for: (i) non-payment from or adjusted payments by advertisers, merchants, networks, or agents, (ii) where eFind later determines that a prior payment to Customer resulted in an overpayment, (iii) any commission cancellations, reversals, or deductions, including but not limited to, deductions that was determined to include invalid traffic (IVT), or due to a third party's bankruptcy or insolvency, or (iv) any sale that was identified by the advertisers, merchants, networks or agents as not being a bonafide transaction, whether goods are returned by the customer or otherwise, and advertisers, merchants, networks, or agents may make a chargeback claim requesting certain commissions be canceled or reversed to reflect the fact that the advertisers, merchants, networks, or agents business never benefited from the transaction. eFind may reduce the amount of any payment payable to Customer by the amount of any other obligation that is or becomes due and payable by Customer to eFind, and Customer shall be deemed to have consented to such reduction. eFind will have no obligation to make payments for any amounts that eFind, in its sole discretion, deems to have been generated from any Prohibited Activity. "Prohibited Activity" means engaging in any of the following: (1) disseminating Objectionable Content (as defined below); (2) clicking on Customer's own ads, links, or content, or using any means (automated or manual) to in)ate impressions and/or clicks artificially or otherwise generate activity not driven by bona fide human intent; (3) offering a user any inducement of any kind to generate clicks or impressions; (4) forging or misrepresenting any ad request or bid response data, including signals indicating an individual's instructions for the processing of personal data (5) Installing ad code, affiliate links, or delivering ads on or within 404/ error message pages and/or pop-over/pop-under windows, as applicable; or (5) obscuring an advertisement or any portion thereof with other content, advertising or navigational elements. The parties will use commercially reasonable efforts to collaborate on the identification and elimination of any Prohibited Activity.

6. License. Subject to the Terms & Conditions, Customer may provide eFind with certain types of information arising from or related to the Services provided under this Agreement (collectively the "Data").

7. eFind Data. Any Data that eFind aggregates with other data (including eFind's own data, third party data, and data relating to the Sites or the Services), and then disseminates, shall be referred to herein as ("eFind Data").

8. The eFind Platform. If applicable, to enable Customer's use of or the delivery of Services, Customer may need to create an account in a portal provided by eFind to Customer for the provision of Services, which may include a user interface, analytics, dashboard reporting, and other functionalities (the "eFind Platform"), and such use is subject to Customer's creation, and eFind's approval of, Customer's account ("Account"). eFind reserves the right to view, monitor, and/or record activity in Customer's Account without notice or permission from Customer.

9. Confidentiality. "Confidential Information" of a disclosing party under this Agreement ("Discloser") means all of the Discloser's non-public, proprietary or confidential information, including without limitation, the terms of this Agreement. Confidential Information of Discloser shall not be used by the other party hereto ("Recipient") for any purpose other than performing Recipient's obligations or exercising Recipient's rights as contemplated in this Agreement, and subject to the terms of this Agreement, Recipient will not otherwise at any time disclose the Confidential Information of Discloser to any third party without Discloser's prior written consent. Recipient agrees that it shall treat all Confidential Information of Discloser with the same degree of care as it accords to its own Confidential Information, but in no event with less than reasonable care. Recipient's obligations under this Agreement with respect to any portion of the Confidential Information shall terminate if and when Recipient can demonstrate that such information: (a) was publicly available at the time it was communicated to Recipient by Discloser; (b) becomes publicly available after it was communicated to Recipient by Discloser through no breach of this Agreement by Recipient; (c) was in Recipient's possession free of any obligation of confidence at the time it was communicated to Recipient by Discloser; (d) was rightfully communicated to Recipient free of any obligation of confidence subsequent to the time it was communicated to Recipient by Discloser; or (e) was developed by employees or representatives of Recipient independently of and without reference to any of Discloser's Confidential Information. Notwithstanding the foregoing, Recipient may disclose Confidential Information (i) to the extent required by law or (ii) to its employees, attorneys, accountants, banks and other financing sources and their advisors under an obligation of confidentiality; provider, however, Recipient uses commercially reasonable efforts to provide advance written notice to Discloser of such disclosure and work in good faith with Discloser to procure or obtain any reasonable protections with respect to the Confidential Information. Upon termination or expiration of this Agreement, or upon Discloser's written request at any time, Recipient shall promptly return to Discloser, or destroy at Discloser's written request, all documents and other tangible materials representing Confidential Information and all copies thereof.

10.Warranties; Restrictions.

• Mutual Warranties. Each party represents and warrants to the other party that: (i) it holds all rights necessary to perform its obligations hereunder; (ii) all information provided by it to the other party is complete, correct and current; (iii) it will operate in accordance with all applicable privacy policies and all applicable laws, rules, and regulations, including without limitation, applicable privacy and data security laws, rules, and regulations; (iv) it has obtained all licenses, authorizations, approvals, consents or permits required by applicable law to conduct its business generally; (v) it has the full right, power and authority to use all intellectual property used in performing the Services and to grant any rights and licenses set forth in this Agreement; and (vi) it will not infringe the rights of any person or entity in connection with its use, receipt, or delivery of the Services.
   
• Customer Warranties. Customer represents, warrants, and covenants that (i) the Sites are not directed to children under 16 years old and that no portion of the Data has been or will be collected in connection with any site, application, advertisement or other online service directed towards children under 16 years old, (ii) Customer owns or is otherwise authorized to use, and is solely responsible for, the content posted on any Sites, and (iii) that Customer has, and will continue to have, all rights, titles, licenses, permissions and approvals necessary to grant all rights necessary for eFind to perform its obligations hereunder.
   
• Restrictions. Customer shall not: (i) use the Services except as expressly authorized herein; (ii) use the eFind Data for any purpose other than internal analytics purposes; (iii) copy, reproduce, modify, distribute, damage, interfere with, disassemble, decompile, reverse engineer or create derivative works of the Services or the eFind Data; (iv) breach, disable, tamper with or interfere with the proper working of the Services or the eFind Data or develop or use (or attempt) any workaround for any security measure related to the Services or the eFind Data; (v) provide to eFind any information in the nature of social security, credit card, financial account, credit report, or medical or health information, except as may be specifically requested to register an Account with eFind; (vi) provide eFind with Data from any device sending any "Limit Ad Tracking" or analogous device platform signal; or (vii) place any content on any of the Sites that contains or promotes Objectionable Content (as defined below). "Objectionable Content" means any content or activity that is: (1) pornographic, illegal, fraudulent, false, deceptive, misleading, libelous, defamatory or threatening, (2) racist, hate speech or bullying, and/or (3) adware, malware, spyware or any other malicious code or drive-by download applications.

11. Regulatory Compliance Requirements.

• Each party agrees to comply with its respective obligations under (i) all applicable privacy laws, rules and regulations, including, without limitation, the California Consumer Privacy Act ("CCPA"), the Regulation 2016/679 (General Data Protection Regulation) ("GDPR"), the GDPR as incorporated into United Kingdom law pursuant to section 3 of the European Union (Withdrawal Act) 2018 ("UK GDPR"), and any implementation of the European Union Directive 2002/58/EC (as modified by Directive 2009/136/EC), and any replacement legislation, the Swiss Federal Act on Data Protection ("Swiss FDPA"), and any other data protection laws of the EEA and its Member States, or any legislation or regulation amending, supplementing or any of the foregoing from time to time (together "EU Privacy Laws") for any Sites providing content to readers within the European Economic Area or United Kingdom, and (ii) generally accepted privacy self-regulatory guidelines, such as the principles of the Digital Advertising Alliance ("DAA Self-Regulatory Principles"), including the corresponding DAA Self-Regulatory Principles established in other countries and/or regions, as applicable.
   
• Customer must (i) give consumers any and all notices required under the CCPA at the time of personal information data collection and that this notice, among other things, includes a "Do Not Sell My Personal Information" link for submitting optout requests, (ii) maintain and comply with a privacy policy in compliance with applicable law and regulations, including required notice of data collection, use and transfer practices related to the Services, and (iii) comply with the enhanced notice obligations applicable to first parties under the DAA Self- Regulatory Principles, including providing a link from Customer's privacy policy or the Sites to the DAA YourAdChoices tool and/or the MobileApp Choices tool, as applicable.
   
• The terms of the independent Controller Data Processing Addendum located at https://affiliate.efind.com/legal ("DP") is hereby incorporated by reference and will apply to the extent any Data includes Personal Data (as defined in the DP). The DP sets out how the parties shall process Personal Data on Customer's behalf in connection with the Services provided to Customer under this Agreement, including terms addressing lawful data transfers, as applicable.
   
• Customer is solely responsible for reviewing the information made available by eFind in its privacy policy (available at https://affiliate.efind.com/legal/privacy-policy) and making an independent determination as to whether the Services and eFind's privacy practices meet Customer's requirements and legal obligations under applicable laws, rules, regulations, and self-regulatory standards. Customer acknowledges and agrees that eFind may collect, use, disclose, and otherwise process any personal information contained in the Data in accordance with its privacy policy and any applicable Terms & Conditions.
   

12. eFind IP. Customer may be required to access, implement, or use scripts and/or technology provided by eFind, including the eFind Platform (collectively "eFind IP") to enable eFind's delivery of the Service(s) to Customer. Customer shall use the eFind IP as directed by eFind, without modification, cover, or obscurity, and only on a property that eFind has approved in advance in writing. Upon eFind's written request, Customer must discontinue Customer's use of the eFind IP. Subject to the terms of this Agreement, eFind grants to Customer a nonexclusive, non-transferable, non-sublicensable, revocable, and royalty free right to access and use the eFind IP for the limited purpose of exercising Customer's rights and performing Customer's obligations expressly stated in this Agreement. Customer may not and shall not permit any third party to: (a) reverse engineer, decompile or otherwise attempt to discover the eFind IP; (b) interfere with the operation of the eFind IP; or (c) use the eFind IP in any way other than as expressly set forth in this Agreement. eFind retains all right, title and interest in and to the eFind IP, including all processes and derivative works and improvements thereto. All rights in and to the eFind IP which are not expressly granted to Customer herein are reserved by eFind.

13. Changes to the Services and eFind's Affiliate Advertising Services Agreement. eFind is constantly changing and improving the Services and the eFind IP. eFind may limit, suspend, or terminate Customer's access to or use of the Services or eFind IP if eFind has a reasonable basis to suspect that Customer's continued use of the Services or eFind IP is likely to damage or cause harm or risk to Customer, eFind, the Services, other customers, or end users or their data, devices, or systems. eFind may modify this Agreement at any time. Modifications to this Agreement will be posted on the homepage of eFind's website at https://affiliate.efind.com/legal. Changes will not apply retroactively and generally will become effective 14 days after they are posted. However, changes addressing new functions for a Service or made for legal reasons will be effective immediately. If Customer doesn't agree to any terms in this Agreement, Customer must not use the Services. Customer's continued use of the Services after the Effective Date of this Agreement or the effective date of any change constitutes Customer's acceptance of and agreement to follow and be bound by such changes.

14. Term and Termination. This Agreement is effective as of the date of Customer's acceptance date or the data when Customer begins using the Services, whichever is earlier ("Effective Date") and shall continue until terminated by either party upon written notice to the other party; provided, however, this Agreement shall continue to govern each then-existing Terms & Conditions until such agreement is terminated pursuant to its respective terms. If a party materially breaches any of its obligations under this Agreement, the other party may, in addition to its other rights at law or in equity, terminate the applicable Terms & Conditions and this Agreement: (a) immediately upon written notice to the other party of the breach, if the breach is not capable of cure, or (b) on thirty (30) days' written notice to the other party of the breach, if the other party fails to cure the breach within such thirty (30) day period if capable of cure. Upon termination of this Agreement, except to the extent expressly set forth in this Agreement or the applicable Terms & Conditions: (i) both parties shall remain liable for all accrued and unpaid amounts due under the Agreement; (ii) Customer's rights to use any intellectual property or data provided to Customer by eFind are terminated, including eFind IP; and (iii) Customer shall immediately destroy and purge eFind IP within Customer's possession or control. Any right or obligation of the parties in this Agreement which, by its express terms or nature and context is intended to survive termination or expiration of this Agreement, will survive termination.

15. Disclaimers.

• THE EFIND SERVICES, INCLUDING ANY TECHNOLOGY, SOFTWARE, CODE, OR OTHER INTELLECTUAL PROPERTY PROVIDED IN CONNECTION THEREWITH, ARE PROVIDED "AS-IS" AND AS AVAILABLE. TO THE EXTENT PERMITTED BY APPLICABLE LAW, EFIND EXPRESSLY DISCLAIMS ANY WARRANTIES AND CONDITIONS OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE TERMS, WARRANTIES OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, ACCURACY, OR NON- INFRINGEMENT.
   
• Customer is solely responsible for all activities that occur under Customer's Account and for its use of the eFind Platform and Services, including: (i) securing the authentication credentials, systems, and devices Customer uses to access the eFind Platform and the Services; and (ii) implementing appropriate security features of the eFind Platform, such as multi-factor authentication. Customer shall notify eFind immediately of any unauthorized use of Customer's password, Account, or any other breach of security. To the extent permitted by applicable law, eFind hereby disclaims, and shall have no liability or responsibility, for any damage, loss, or injury resulting from hacking, tampering, or other unauthorized access to, or use of, Customer's Account and any payments or information) owing therefrom. Where eFind incurs any losses based on unauthorized activity caused by or contributed to Customer, its employees, or its agents, Customer will be financially liable for such losses. eFind may deduct such losses from Customer's Account or require Customer to immediately pay such losses to eFind.

16. Indemnification. Each party agrees to indemnify, defend and hold harmless the other party and its agents, affiliates and licensors from and against any and all losses, claims, damages, liabilities and expenses arising from third-party claims or any government or industry investigation, including the reasonable costs of investigation and reasonable attorneys' fees (collectively, the "Claims"), arising out of or related to the indemnifying party's breach of any representation, warranty, or covenant, or any other provision of this Agreement, or allegations thereof. Each party's obligation to indemnify the other party is subject to: (a) the indemnified party giving prompt written notice to the indemnifying party in the event that it becomes aware of any Claims or the possibility of any Claims requiring indemnification; (b) the indemnified party giving full cooperation with the indemnifying party, at the indemnifying party's expense, in responding to, defending or settling any such Claims; (c) the indemnifying party keeping the indemnified party informed of the actions and positions taken by the claimant and taken or proposed to be taken by the indemnifying party, including the decision to defend or not defend the Claims or complaint; (d) the indemnified party not admitting any liability or entering into any settlement regarding the Claims on behalf of the indemnifying party; and (e) the indemnified party giving the indemnifying party sole control of the defense of the Claims and that all costs and expenses incurred by the indemnifying party in investigating, resisting, litigating and settling the Claims, including the payment of any award of damages and/or costs to any third party, will be paid by the indemnifying party, provided that no settlement shall be entered into by the indemnifying party that imposes any legal of financial obligation on the indemnified party without the indemnified party's prior written consent.

17. Limitation on Liability. Except with respect to either party's confidentiality, indemnification, and payment obligations, or fraud or willful misconduct, IN NO EVENT SHALL EITHER PARTY BE LIABLE TO THE OTHER PARTY OR ANY THIRD PARTY FOR (a) ANY COMMERCIAL LOSS OR LOST PROFITS OR ANY INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL OR PUNITIVE DAMAGES ARISING FROM OR RELATING TO THIS AGREEMENT (FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION), EVEN IF SUCH PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR (b) ANY DAMAGES ARISING FROM OR RELATED TO THIS AGREEMENT (FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION), NOT TO EXCEED THE FEES DUE UNDER THIS AGREEMENT IN A 6 MONTH PERIOD PRECEDING THE CLAIM.

18. Miscellaneous. Each party will, in all matters relating to this Agreement, act as an independent contractor. eFind's affiliates or subsidiaries may perform some or all of the Services. Customer shall promptly provide all materials, resources, access to systems, or information reasonably requested by eFind to provide the Services and understand that Customer's failure or delay in doing so may impact the delivery of Services; furthermore, Customer shall hold eFind harmless from any impact suffered by Customer in connection with such delay. This Agreement, and all disputes relating thereto, shall be governed exclusively by the laws of the State of South Dakota, without application of its rules regarding conflicts of laws. eFind may use Customer's logo and brand names to provide the Services and in its marketing materials indicating that Customer is a business partner of eFind. Except as expressly contemplated by this Agreement, neither party has, nor will represent that it has, any authority to assume or create any obligation, express or implied, on behalf of the other party, or to represent the other party in any capacity. If any provision of this Agreement is held to be unenforceable, the parties shall substitute for the affected provision an enforceable provision that best approximates the intent and economic effect of the affected provision. Neither party will be liable for any delay or failure to perform any of its obligations set forth in this Agreement due to causes beyond its reasonable control. This Agreement may not be amended except by a writing signed by both parties hereto. Neither party shall assign or transfer any rights or obligations under this Agreement without the prior written consent of the other party; except that a party may assign this Agreement without consent pursuant to a transfer of all or substantially all of such party's business and assets to which this Agreement relates, whether by merger, sale of assets, sale of stock, or otherwise. Any assignment in violation of this provision will be void. This Agreement is binding upon valid heirs, successors, and assigns. This Agreement and the terms of any applicable Terms & Conditions constitutes the entire agreement between Customer and eFind regarding the Services. eFind's failure to exercise or enforce any right or provision of this Agreement shall not operate as a waiver of such right or provision. This Agreement constitutes the entire agreement between Customer and eFind and supersedes all prior agreements between Customer and eFind with respect to the subject matter herein. Except where otherwise indicated, any notice or communication under this Agreement shall be sent via email (a) if to Customer, to the email address submitted by Customer with Customer's Account, and (b) if to eFind, to support@efind.com.

Independent Controller Data Processing

1. Acceptance. This Independent Controller Data Processing ("DP") is entered into by and between eFind and Customer (each, a "Party" and together, the "Parties"). This DP sets forth the legally binding terms between Customer and eFind that govern the Processing of Personal Data (as defined below) of under the Agreement.

2. Definitions. Processing For the purposes of this DP, the following definitions apply. Capitalized terms that are used but not otherwise defined herein shall have the meanings as set forth in the Agreement.

• "Affiliate" means an entity that owns or controls, is owned or controlled by or is or under common control or ownership with either eFind or Customer respectively, where control is defined as the possession, directly or indirectly, of the power to direct or cause the direction of the management and policies of an entity, whether through ownership of voting securities, by contract or otherwise.
   
• "Controller" means the entity which determines the purposes and means of the Processing of Personal Data. For the avoidance of doubt, a Controller is also, where applicable, a "data controller" (as such term is defined under European Data Protection Laws) and a "business" (as such term is defined under the CCPA).
   
• "Data Subject" means the individual to which the Personal Data relates.
   
• "Data Protection Laws and Regulations" means, with respect to a Party, all privacy and data protection laws applicable to such Party's Processing of Personal Data including, where applicable: (i) European Data Protection Laws; (ii) the California Consumer Privacy Act of 2018 and any regulations promulgated thereunder (as amended from time to time, the "CCPA"); and (iii) any other similar data protection laws in any other applicable territory, each as amended, replaced, supplemented or superseded.
   
• "EEA" means the European Economic Area.
   
• "European Data Protection Laws" means, in each case to the extent applicable to the relevant Personal Data or Processing thereof under the Agreement, (a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR"), (b) laws relating to data protection, the processing of Personal Data, privacy and/or electronic communications in force from time to time in the United Kingdom, including the UK General Data Protection Regulation, as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 ("UK GDPR") and the Data Protection Act 2018 (collectively, "UK Data Protection Laws"); (c) the Swiss Federal Act on Data Protection ("Swiss FDP"); and (d) any other data protection laws of the EEA and its Member States.
   
• "Personal Data" means any information Processed under the Agreement that constitutes "personal data," "personal information," "personally identifiable information" or similar information defined under applicable Data Protection Laws and Regulations.
   
• "Process" or "Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
   
• "Processor" means the entity which Processes Personal Data on behalf of the Controller. For the avoidance of doubt, a Processor is also, where applicable, a "data processor" (as such term is defined under European Data Protection Laws) and a "service provider" (as such term is defined under the CCPA).
   
• "Services" means the services the Parties are obligated to provide or permitted to receive pursuant to the Agreement for which each Party determines the purposes and means of the Processing of Personal Data.
   
• "Sensitive Data" means any Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation, as well as any other type of data that is considered sensitive according to Data Protection Laws and Regulations.
   
• "SCCs" means "Module One: Transfer controller to controller" of the Standard Contractual Clauses set forth in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, made available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/, as supplemented and/or amended by the selections and addendum.
   
• "Transfer" means the access by, transfer or delivery to, or disclosure to a person, entity, or system of Personal Data where such person, entity or system is located in a country or jurisdiction other than the country or jurisdiction from which the Personal Data originated.

3. Role of the Parties. In performing their respective obligations under the Agreement, each Party may receive Personal Data which may be subject to Data Protection Laws and Regulations. The Parties acknowledge and agree that each Party is a separate and independent Controller in respect of such Personal Data and shall individually determine the purposes and means of its Processing of such Personal Data. The Parties further acknowledge that neither Party is responsible for determining the requirements of Data Protection Laws and Regulations applicable to the other Party.

4. Restriction on Sensitive Data. The Parties acknowledge and agree that neither Party shall provide or make available Sensitive Data to the other Party in connection with the Services. The Parties acknowledge and agree that eFind shall have no responsibility or liability for any Sensitive Data erroneously or inadvertently transferred under this DP. Nothing in this DP shall be interpreted to limit any restrictions under the Agreement regarding the types of Personal Data that may be provided by Customer to eFind.

5. Obligations of the Parties.

• Lawfulness of Processing. Each Party acknowledges and confirms that: (a) it will comply with applicable Data Protection Laws and Regulations and this DP in connection with its Processing of Personal Data; (b) it will only give lawful instructions to any Processors and/or Sub- Processors; (c) it will be responsible for determining the legal basis(es) of its own Processing activities; and (d) it will provide the other Party with reasonable assistance, information and cooperation as such Party may reasonably request to ensure compliance with the Parties' respective obligations under Data Protection Laws and Regulations.
   
• Consent for Processing. Where applicable, each Party agrees that it has obtained, or has taken commercially reasonable efforts to cause to be obtained, valid Data Subject consent (including renewal of consent) as required by Data Protection Laws and Regulations for each Processing purpose for all Personal Data made available for use in connection with the Services, and, as between the Parties, remains solely responsible for obtaining such valid consent and communicating all relevant withdrawals or revocations of consent to the other Party. Each Party shall (a) notify the other Party of any changes in, or revocation of, the permission to use, disclose, or otherwise Process Personal Data that it provides to such Party (the "Data Receiving Party") under the Agreement that would impact the Data Receiving Party's ability to comply with the Agreement, this DP or applicable Data Protection Laws and Regulations, and (b) where applicable, accept and abide by instructions and/or any consent signals transmitted by the other Party for Processing of Personal Data (including, for example, in the format consistent with the OpenRTB guidelines and/or relevant IAB framework signals). For the avoidance of doubt, nothing in this Section 4(b) shall limit Customer's notice and/or consent obligations under the Agreement or under Section 8 of this DP.
   
• Privacy Notices. In addition to any privacy policy or notice requirements under the Agreement, each Party agrees to provide all notices and disclosures to Data Subjects required to be provided by such Party under Data Protection Laws and Regulations regarding the Processing of Personal Data contemplated under this DP and the Agreement including, where applicable, all disclosures regarding a Data Subject's right to opt-out of Personal Data sales (as such term is defined under the CCPA). Customer acknowledges that eFind is a Data Broker (as such term is defined under California Civil Code § 1798.99.80) registered with the State of California.

6. No Ownership or License. Nothing in this DP shall be construed to convey any ownership interest or license in the Personal Data that is contrary to the ownership interests and licenses set forth in the Agreement.

7. Data Subjects' Rights. Each Party hereby authorizes the other Party to release all Personal Data in its possession directly pertaining to a verified Data Subject request for data portability to the Data Subject or his/her authorized representative, without regard to whether such Personal Data are owned/licensed by eFind or Customer.

8. Regulators. Each Party agrees to: (a) promptly notify the other Party in writing of any question, complaint, investigation, inquiry, warrant, subpoena or proceedings from or brought by any public, governmental, and/or judicial agency or authority (each, a "Regulatory Request"), that relates to such other Party's (i) Processing of Personal Data in relation to the Services, or (ii) potential failure to comply with Data Protection Laws and Regulations; and (b) comply with any written litigation hold, document preservation notice, or similar legal hold requested by the other Party in connection with any Regulatory Request, lawsuit, or other claim, except to the extent required by applicable law.

9. Data Transfers.

• Transfer Authorization. Subject to this Section 9, the Parties acknowledge and agree that each Party is authorized to Process and Transfer Personal Data in any jurisdiction provided that such Processing complies with Data Protection Laws and Regulations. Each Party shall ensure that any Transfer it initiates will, where applicable, be subject to a lawful data transfer mechanism and/or appropriate onward transfer agreements that require that any further Transfers be conducted under a lawful data transfer mechanism.
   
• Onward Transfers by eFind. Customer acknowledges and agrees that eFind may (i) store and Process Personal Data in the United States or anywhere eFind or its Processors maintain facilities, and (ii) disclose and/or Transfer Personal Data to third-party Controllers located in the United States and other countries as contemplated under the Agreement.
   
• Transfers of Personal Data From the EEA, Switzerland or the United Kingdom. With respect to any Transfer of Personal Data originating from the EEA, Switzerland, or the United Kingdom to a Party in a country whose laws have not been deemed by the European Commission to provide an adequate level of protection for Personal Data, and such Transfer is not subject to an alternative adequate transfer mechanism or otherwise exempt from Transfer restrictions under European Data Protection Laws, the Parties agree that the SCCs will be incorporated herein by reference and will apply to the relevant Transfer governed thereby. In furtherance of the foregoing, the Parties agree to the selections and addendum set forth. The SCCs shall automatically terminate with respect to a given Transfer once the Transfer governed thereby becomes lawful under European Data Protection Laws in the absence of such SCCs on any other basis.
   

10. Confidentiality. The Parties agree to take steps to ensure that any person acting under their authority who has access to the Personal Data is subject to an appropriate confidentiality obligation.

11. Limitation Of Liability. Each Party's liability arising out of or related to this DP, whether in contract, tort or under any other theory of liability, is subject to any limitation of liability as set forth in the Agreement and any reference to such limitation of liability of a Party means the aggregate liability of the Party under the Agreement and this DP together. Additionally, each Party shall be independently liable for its own Processing of Personal Data to the extent such Processing does not comply with Data Protection Laws and Regulations.

12. Applicable Law and Jurisdiction. This DP is and remains governed by and shall be construed in accordance with the law designated as applicable in the Agreement, except to the extent required otherwise under the SCCs.

13. Order of Precedence. Except as specifically set forth in this DP, the terms and provisions of the underlying Agreement shall remain unmodified and in full force and event. In the event of a conflict between the terms of the Agreement and the terms of this DP, the terms and provisions of this DP shall prevail with regard to data protection matters.

14. Modification. Modifications to this DP will be posted on the Legal Page of eFind's website at https://affiliate.efind.com/legal. Changes will not apply retroactively and generally will become effective 14 days after they are posted. However, changes addressing new functions for a Service or made for legal reasons will be effective immediately. If Customer does not agree to any terms in this Agreement, Customer must not use the Services. Customer's continued use of the Services after the effective date of this DP or the effective date of any change constitutes Customer's acceptance of and agreement to follow and be bound by such changes.

15. Termination and Survival. The Parties agree that this DP is terminated upon the termination of the Agreement.

16. Invalidity And Severability. If any provision of this DP is found by any court or administrative body of competent jurisdiction to be invalid or unenforceable, the invalidity or unenforceability of such provision shall not affect any other provision of this DP and all provisions not affected by such invalidity or unenforceability will remain in full force and effect.

17. Counterparts. This DP may be executed in any number of counterparts, each of which when executed shall constitute a duplicate original, but all the counterparts shall together constitute the one agreement.