Data Processing Addendum

Targetoo is committed to providing a safe, transparent, and fair marketplace for advertisers, publishers, and SSP/DSP platforms. The use of the Ad Exchange, Demand Side Platform, or Supply Side Platform is governed by a contract with Targetoo, which requires compliance with the Targetoo EU Data Processing Addendum (DPA). The obligations set forth are the minimum standards for participants in the Targetoo Ad Marketplace. Targetoo may update this DPA at any time and without prior notice, and all amendments will be posted on the Targetoo website. By using Targetoo's Advertising Marketplace following an update, users agree to any updated version of this DPA. Targetoo reserves the right to suspend or remove sites, applications, advertisers, publishers, DSPs, and SSP platforms from the Targetoo Ad Marketplace if it reasonably suspects or determines any of the DPA rules/policies have been violated.

This Publisher Data Processing Addendum (hereinafter the " DPA ") is entered into by and between Targetoo, which is located atKingsfordweg 151, 1043 GR Amsterdam (hereinafter the " Targetoo ") and you (hereinafter the " Publisher " or " You "), supplements and forms part of Targetoo Publisher's Agreement (hereinafter the " Principal Agreement ") or other written or electronic agreement, between Targetoo and Publisher (or SSP or any other supply side partner) to reflect the parties' agreement about the processing of personal data. This DPA is effective as of the date of Targetoo Publisher's Agreement entered into (" Effective Date ").

Effective Date: December 13, 2023

1. Introduction

This Addendum sets forth the specific terms and conditions applicable to the processing of Personal Data by the Processor on behalf of the Controller. This Addendum is incorporated into and subject to the terms of the Agreement.

2. Definitions

Capitalized terms used in this Addendum shall have the meanings outlined in the Agreement. In addition, the following terms shall have the following meanings:

• Personal Data: any information relating to an identified or identifiable natural person;
• Processing: any operation or set of operations which is performed on Personal Data, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
• Sub-processor: any third party engaged by the Processor to process Personal Data on behalf of the Controller.

3. Subject Matter and Scope

This Addendum applies to all Personal Data processed by Processor on behalf of Controller in connection with the Services.

4. Processing Activities

Processor shall only process Personal Data in accordance with the documented instructions of Controller and for the following purposes:

• providing and operating the Services;
• analyzing and improving the Services;
• preventing fraud and abuse;
• complying with applicable laws and regulations.

5. Processor Obligations

Processor shall:

• implement and maintain appropriate technical and organizational security measures to protect Personal Data from unauthorized access, use, disclosure, alteration, or destruction;
• notify Controller without undue delay upon becoming aware of any Personal Data breach;
• assist Controller in complying with its obligations under applicable data protection laws, including responding to data subject requests;
• not disclose Personal Data to any third parties except as authorized by Controller or as required by law;
• only use Sub-processors authorized by Controller and ensure that such Sub-processors comply with the terms of this Addendum.

6. Data Subject Rights

Controller shall be responsible for handling all requests from data subjects regarding their Personal Data. Processor shall, upon request from Controller, assist Controller in responding to such requests.

7. Data Retention

Processor shall retain Personal Data only for the period necessary to fulfil the purposes for which it was collected and processed, and in accordance with Controller's instructions or as required by applicable law.

8. Audits and Inspections

Controller shall have the right to audit Processor's compliance with the terms of this Addendum at reasonable intervals. Processor shall provide Controller with access to all relevant documentation and information necessary for such audits.

9. Termination

Upon termination of the Agreement, Processor shall either return all Personal Data to Controller or destroy it, at Controller's option.

10. Governing Law and Dispute Resolution

This Addendum shall be governed by and construed in accordance with the laws of [insert jurisdiction]. Any dispute arising out of or relating to this Addendum shall be subject to the exclusive jurisdiction of the courts of [insert jurisdiction].

11. Entire Agreement

This Addendum constitutes the entire agreement and understanding between the parties with respect to the subject matter hereof and supersedes all prior or contemporaneous communications, representations, or agreements, whether oral or written.

12. Severability

If any provision of this Addendum is held to be invalid or unenforceable, such provision shall be struck and the remaining provisions shall be enforced.

IN WITNESS WHEREOF, the parties have executed this Addendum as of the Effective Date first written above.

Targetoo
Kingsfordweg 151, 1043 GR
Amsterdam