Contractual standards for Data Processing on Behalf, last revised December 8, 2014 • Regular review of logs .................................................................................................. ☐ ☐ • Inputting responsibilities specified in organizational structure ..................................... ☐ ☐ c) Please use the following field (free text) for details of additional or other measures you have implemented or if you would like to provide more specific information on the above items: (Please use additional sheet if necessary.) d) If input control is not relevant to the services subject to this Agreement, please briefly state the reasons below: (Please use additional sheet if necessary.) 6. Job control Definition: Job control means the action taken to ensure that personal data being processed on behalf of Controller can only be processed in accordance with the instructions issued by Controller. a) Who holds overall responsibility for implementing and ensuring compliance with job control? Controller Processor b) What action is taken to implement job control and who carries out this action? (Please select appropriate answers and mark with a cross, as applicable) Co Pr • System implemented for regularly checking the commissioning process o Submission of self-assessments .................................................................... ☐ ☐ o Submission of agreements with subcontractors ........................................... ☐ ☐ o Checks on subcontractors by Processor ........................................................ ☐ ☐ Page 14 of 20

Cooperation Agreement |  Startup adVANce Challenge - Page 41 Cooperation Agreement |  Startup adVANce Challenge Page 40 Page 42