Common use of Use of Personal Data Clause in Contracts

Use of Personal Data. (a) You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditions. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate the responsibility for compliance with a particular requirement to one Party. (b) You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other individuals (“Data Subjects”) in connection with performing our obligations and/or exercising our rights in respect of any services provided that are governed by these Terms and Conditions, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checks) and to comply with our regulatory obligations. (c) You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) our identity, and that they can contact us and our data protection officer by telephone on +▇▇(▇)▇▇ ▇▇▇▇ ▇▇▇▇; (ii) that we are processing their Personal Data for the purposes set out in clause 18(b); (iii) that our processing of Personal Data as described in these Terms and Conditions is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b) above (which interests are not overridden by prejudice to the relevant individual’s privacy); and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) that the disclosure of Personal Data to third parties described in clause 18(c)(iv) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) that they have certain rights in respect of the processing of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html and that they are encouraged to review such privacy notice; and (ix) such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services.

Use of Personal Data. (a) You acknowledge 4.1. ClientLink makes use of personal data. Indicator - FL Memo Ltd is committed to ensuring that Your data is kept in accordance with and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect meets the requirements of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditions. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation Act 2018 and the UK General Data Protection Regulation (GDPR). Indicator - FL Memo Ltd’s full privacy policy and cookie policy can be found in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate the responsibility for compliance with a particular requirement to one Partythis document on page 5-7. 4.2. If Indicator - FL Memo Ltd creates a Website for You, it is recommended that You incorporate the following wording into the Website: “Through this website (binsert the name of the data processor) You acknowledge obtains and agree that we may process Personal Data processes personal data such as your name and address etc. and contact data (including namesemail address, contact details and financial details) relating to your and your Affiliates’ employees, officers and other individuals (“Data Subjects”) in connection with performing our obligations and/or exercising our rights in respect of any services provided that are governed by these Terms and Conditions, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checksphone number etc.) and to comply with our regulatory obligations. (c) You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be information about your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required professional interests. This data is processed in order to perform keep you fully informed of changes to this website and to offer you the possibility to subscribe to our obligations and exercise our rights in respect of any services provided that are governed by these Terms and Conditionsnewsletter. In particularaddition, before providing us with any Personal Data you shall, a cookie is placed on your computer to store your preferences and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) our identity, and that they can contact us and our data protection officer by telephone on +▇▇(▇)▇▇ ▇▇▇▇ ▇▇▇▇; (ii) that we are processing their Personal Data for the purposes set out in clause 18(b); (iii) that our processing proper functioning of Personal Data as described in the site. For these Terms and Conditions is permitted because it is: (a) necessary for the purposes of purposes, we rely on our legitimate interests in pursuing doing business, including the purposes set out in clauses 18(b) above (which interests are not overridden by prejudice possibility to offer new products and services. You always have the right to request access to your data, as well as correction and/or deletion. You can also object to the relevant individual’s privacy); and/orprocessing of your data, in some cases (b) necessary so by unsubscribing, although this request has the consequence that we can comply with applicable law that we are subject to; (iv) that we may disclose their Personal Data and other information no longer keep you informed or send you the newsletter. If you wish to exercise any of these rights or if you have any questions about the Accounts and way in which your data is processed, you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection can contact us at [EMAIL ADDRESS]. If you do not agree with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) that the disclosure of Personal Data to third parties described in clause 18(c)(iv) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) that they have certain rights in respect of the processing of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) that further information on how way we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of your data you can contact the Personal Data can be found at Information Commissioner’s Office (▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html )”. 4.3. If You already have a website and Indicator - FL Memo Ltd supplies only Website Content we suggest that they the following clauses are encouraged incorporated into Your website. These clauses only relate to review such privacy notice; and the processing of data relating to the ClientLink part: “Via our website ( insert name of data processor) obtains and processes personal data, in par- ticular your identification data (ixtitle, surname, first name, address, etc.) such other information and contact data (email, telephone, mobile phone, etc.), as well as professional data concerning you (function, activities) and the professional fields in which you are interested (topics). This data is processed in order to keep you informed and to offer you the possibility to subscribe to our newsletter. In addition, a cookie is placed on your computer to save your preferences and is indispensable for the proper functioning of the site. For these purposes, we may reasonably require you to give to Data Subjects from time to timerely on our legitimate interests in doing business, including in connection with your use the possibility of certain offering new products or services.”

Use of Personal Data. (a) 23.1 You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditionsunder this Framework Contract. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate this Framework Contract allocates the responsibility for compliance with a particular requirement to one Party. (b) 23.2 You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other identifiable living individuals (“including Authorised Persons) (Data Subjects”) in connection with performing our obligations and/or exercising our rights under this Framework Contact, including: for the purposes of administering and operating your Account; the retention and management of records in respect of any services provided that are governed by these Terms relation to the Account; and Conditionscomplying with applicable law, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checksbut not limited to) and to comply with our regulatory obligationsanti-money laundering regulations. (c) 23.3 You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by under these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) ): our identity, and that they can contact us and our data protection officer by telephone on +sending a message to ▇▇(▇)▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇.▇▇▇ or by sending a letter to Nordea, Group Data Protection Office, ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇ ▇, ▇▇▇▇▇ ▇▇▇▇; (ii) ▇▇, ▇▇▇▇▇▇▇▇, ▇▇▇▇▇▇▇; that we are processing their Personal Data for the purposes set out in clause 18(b); (iii) 23.2; that our processing of Personal Data as described in these Terms and Conditions this Contract is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b) 23.2 above (which interests are not overridden by prejudice to the relevant individual’s privacy); ) and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) ; that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; and (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the this Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) Contract; that the disclosure of Personal Data to third parties described in clause 18(c)(iv23.3(d) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) ; that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) ; that they have certain rights in respect of the processing our use of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) ; that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html in Nordea’s Privacy Policy and that they are encouraged to review such privacy notice; and (ix) and such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services. 23.4 You shall indemnify us against any losses, damages and other liabilities (including legal fees) incurred by us arising out of or in connection with a breach by you of your obligations under this clause 23. 23.5 We shall indemnify you against any losses, damages and other liabilities (including legal fees) incurred by you arising out of or in connection with a breach by us of our obligations under this clause 23.

Use of Personal Data. (a) 24.1 You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditionsunder this Framework Agreement. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate this Framework Agreement allocates the responsibility for compliance with a particular requirement to one Party. (b) 24.2 You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other identifiable living individuals (“including Authorised Persons) (Data Subjects”) in connection with performing our obligations and/or exercising our rights under this Framework Contact, including: (a) for the purposes of administering and operating your Account; (b) the retention and management of records in respect of any services provided that are governed by these Terms and Conditions, including relation to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checks) and to comply with our regulatory obligations.the Account; and (c) complying with applicable law, including (but not limited to) anti-money laundering regulations. 24.3 You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by under these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (ia) our identity, and that they can contact us and our data protection officer by telephone on +▇▇(▇)▇▇ ▇▇▇▇ ▇▇▇▇; (iib) that we are processing their Personal Data for the purposes set out in clause 18(b)24.2; (iiic) that our processing of Personal Data as described in these Terms and Conditions this Agreement is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b) 24.2 above (which interests are not overridden by prejudice to the relevant individual’s privacy); ) and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) ; that we may disclose their Personal Data and other information about the Accounts and you to: : (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; and (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the this Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) ; that the disclosure of Personal Data to third parties described in clause 18(c)(iv24.3(d) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) ; that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) ; that they have certain rights in respect of the processing our use of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) ; that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇.▇/en▇/privacy-policy.html ▇▇▇▇▇▇▇_▇▇▇▇▇▇ and that they are encouraged to review such privacy notice; and (ix) and such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services. 24.4 You shall indemnify us against any losses, damages and other liabilities (including legal fees) incurred by us arising out of or in connection with a breach by you of your obligations under this clause 24. 24.5 We shall indemnify you against any losses, damages and other liabilities (including legal fees) incurred by you arising out of or in connection with a breach by us of our obligations under this clause 24.

Use of Personal Data. (a) You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditions. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate the responsibility for compliance with a particular requirement to one Party. (b) You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other individuals (“Data Subjects”) in connection with performing our obligations and/or exercising our rights in respect of any services provided that are governed by these Terms and Conditions, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checks) and to comply with our regulatory obligations. (c) You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) our identity, and that they can contact us and our data protection officer by telephone on +sending a message to: ▇▇(▇)▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇.▇▇▇, or by sending a letter to: Nordea, Group Data Protection Office, ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇ ▇, ▇▇▇▇▇ ▇▇▇▇ ▇▇▇, ▇▇▇▇▇▇▇▇, ▇▇▇▇▇▇▇; (ii) that we are processing their Personal Data for the purposes set out in clause 18(b12(b); (iii) that our processing of Personal Data as described in these Terms and Conditions is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b12(b) above (which interests are not overridden by prejudice to the relevant individual’s privacy); and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the Framework AgreementContract, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) that the disclosure of Personal Data to third parties described in clause 18(c)(iv12(c)(iv) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United KingdomUK, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) that they have certain rights in respect of the processing of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html in Nordea’s Privacy Policy and that they are encouraged to review such privacy notice; and (ix) such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services. (d) To the extent that you (the Customer) are located in the EEA and the UK is considered a Third Country for the purposes of the GDPR, the additional provisions of this clause 18(d) shall apply: (i) you and we shall be deemed to have entered into the Standard Contractual Clauses, in the form set out at Appendix 1 to these Terms and Conditions; (ii) pursuant to clause 18(d)(i), you (the Customer) shall be the data exporter for the purposes of the Standard Contractual Clauses and we (the Bank) shall be the data importer for the purposes of the Standard Contractual Clauses; and (iii) we and you agree to amend or replace the provisions of the Standard Contractual Clauses to the extent required by Data Protection Legislation. (e) You shall indemnify us against any losses, damages and other liabilities (including legal fees) incurred by us arising out of or in connection with a breach by you of your obligations under this clause 12. (f) We shall indemnify you against any losses, damages and other liabilities (including legal fees) incurred by you arising out of or in connection with a breach by us of our obligations under this clause 12.

Use of Personal Data. (a) 24.1 You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditionsunder this Framework Contract. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate this Framework Contract allocates the responsibility for compliance with a particular requirement to one Party. (b) 24.2 You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other identifiable living individuals (“including Authorised Persons) (Data Subjects”) in connection with performing our obligations and/or exercising our rights under this Framework Contact, including: for the purposes of administering and operating your Account; the retention and management of records in respect of any services provided that are governed by these Terms relation to the Account; and Conditionscomplying with applicable law, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checksbut not limited to) and to comply with our regulatory obligationsanti-money laundering regulations. (c) 24.3 You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by under these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) ): our identity, and that they can contact us and our data protection officer by telephone on +sending a message to ▇▇(▇)▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇.▇▇▇ or by sending a letter to Nordea, Group Data Protection Office, ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇ ▇, ▇▇▇▇▇ ▇▇▇▇; (ii) ▇▇, ▇▇▇▇▇▇▇▇, ▇▇▇▇▇▇▇; that we are processing their Personal Data for the purposes set out in clause 18(b); (iii) 24.2; that our processing of Personal Data as described in these Terms and Conditions this Contract is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b) 24.2 above (which interests are not overridden by prejudice to the relevant individual’s privacy); ) and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) ; that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; and (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the this Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) Contract; that the disclosure of Personal Data to third parties described in clause 18(c)(iv24.3(d) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) ; that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) ; that they have certain rights in respect of the processing our use of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) ; that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html and that they are encouraged to review such privacy notice; and (ix) and such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services. 24.4 You shall indemnify us against any losses, damages and other liabilities (including legal fees) incurred by us arising out of or in connection with a breach by you of your obligations under this clause 24. 24.5 We shall indemnify you against any losses, damages and other liabilities (including legal fees) incurred by you arising out of or in connection with a breach by us of our obligations under this clause 24.

Use of Personal Data. (a) You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditions. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate the responsibility for compliance with a particular requirement to one Party. (b) You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other individuals (“Data Subjects”) in connection with performing our obligations and/or exercising our rights in respect of any services provided that are governed by these Terms and Conditions, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checks) and to comply with our regulatory obligations. (c) You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) our identity, and that they can contact us and our data protection officer by telephone on +▇▇(▇)▇▇ ▇▇▇▇ ▇▇▇▇; (ii) that we are processing their Personal Data for the purposes set out in clause 18(b12(b); (iii) that our processing of Personal Data as described in these Terms and Conditions is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b12(b) above (which interests are not overridden by prejudice to the relevant individual’s privacy); and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) that the disclosure of Personal Data to third parties described in clause 18(c)(iv12(c)(iv) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) that they have certain rights in respect of the processing of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html and that they are encouraged to review such privacy notice; and (ix) such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services. (d) You shall indemnify us against any losses, damages and other liabilities (including legal fees) incurred by us arising out of or in connection with a breach by you of your obligations under this clause 12. (e) We shall indemnify you against any losses, damages and other liabilities (including legal fees) incurred by you arising out of or in connection with a breach by us of our obligations under this clause 12.

Use of Personal Data. (a) You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditions. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate the responsibility for compliance with a particular requirement to one Party. (b) You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other individuals (“Data Subjects”) in connection with performing our obligations and/or exercising our rights in respect of any services provided that are governed by these Terms and Conditions, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checks) and to comply with our regulatory obligations. (c) You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) our identity, and that they can contact us and our data protection officer by telephone on +sending a message to: ▇▇(▇)▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇.▇▇▇, or by sending a letter to: Nordea, Group Data Protection Office, ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇ ▇, ▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇▇▇▇, ▇▇▇▇▇▇▇;; (ii) that we are processing their Personal Data for the purposes set out in clause 18(b); (iii) that our processing of Personal Data as described in these Terms and Conditions is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b) above (which interests are not overridden by prejudice to the relevant individual’s privacy); and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) that the disclosure of Personal Data to third parties described in clause 18(c)(iv) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) that they have certain rights in respect of the processing of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html and that they are encouraged to review such privacy notice; and (ix) such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services.cases

Use of Personal Data. (a) You acknowledge and agree that, unless we agree otherwise in any agreement that we enter into in relation to specific banking services, we and you each act as independent data controllers in respect of the Personal Data that we process in connection with our performance of any services that are subject to these Terms and Conditions. Accordingly, we and you shall comply with our respective obligations under Data Protection Legislation in respect of any Personal Data that we or you (as applicable) process, except to the extent that these Terms and Conditions allocate the responsibility for compliance with a particular requirement to one Party. (b) You acknowledge and agree that we may process Personal Data (including names, contact details and financial details) relating to your and your Affiliates’ employees, officers and other individuals (“Data Subjects”) in connection with performing our obligations and/or exercising our rights in respect of any services provided that are governed by these Terms and Conditions, including to administer and operate your account, to provide any services that we provide to you and your Affiliates, to recover payments, communicate with you, to market our goods and services to you and your Affiliates, to evaluate whether to offer particular services or not, to undertake background checks (including credit reference checks and KYC and AML checks) and to comply with our regulatory obligations. (c) You acknowledge that: (i) you shall have responsibility for the accuracy, quality and legality of the Personal Data; and (ii) it shall be your responsibility to, and you shall, issue any fair processing notices to, and obtain any necessary consents from, Data Subjects as may be required in order for us to process their Personal Data as required in order to perform our obligations and exercise our rights in respect of any services provided that are governed by these Terms and Conditions. In particular, before providing us with any Personal Data you shall, and shall procure that your Affiliates shall, provide the following information to the Data Subjects to whom the Personal Data relates (except where they already have the information): (i) our identity, and that they can contact us and our data protection officer by telephone on +▇▇(▇)▇▇ ▇▇▇▇ ▇▇▇▇; (ii) that we are processing their Personal Data for the purposes set out in clause 18(b); (iii) that our processing of Personal Data as described in these Terms and Conditions is permitted because it is: (a) necessary for the purposes of our legitimate interests in pursuing the purposes set out in clauses 18(b) above (which interests are not overridden by prejudice to the relevant individual’s privacy); and/or, in some cases (b) necessary so that we can comply with applicable law that we are subject to; (iv) that we may disclose their Personal Data and other information about the Accounts and you to: (i) other members of our group and/or third parties who process information in accordance with our instructions for the purposes described above; (ii) third parties who may process Personal Data to carry out background checks on individuals; (iii) third parties who may process Personal Data in order to provide ancillary services such as card payment and other services; (iv) other payment institutions in connection with the administration and execution of payment transactions; (vi) law enforcement agencies and regulatory bodies; and (vii) such other third parties as are referenced in the Framework Agreement, any Mandate to us or any other agreement that we and you may enter into for specific banking services, or who we may notify you of from time to time; (v) that the disclosure of Personal Data to third parties described in clause 18(c)(iv) may involve the transfer of Personal Data to any country, including countries outside of the EEA that may offer a lower level of data protection than in the United Kingdom, but that this will be done with appropriate safeguards in place and that we will provide them with a copy of the relevant safeguards upon request; (vi) that we will retain the Personal Data for as long as it is necessary for the purposes for which they were collected and any other permitted linked purposes, including where required by applicable law; (vii) that they have certain rights in respect of the processing of their Personal Data, including the right to access, and rectify any errors in relation to, their Personal Data; (viii) that further information on how we process Personal Data, Data Subjects’ rights and how Data Subjects may exercise their rights in respect of the Personal Data can be found at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/en/privacy-policy.html and that they are encouraged to review such privacy notice; and (ix) such other information as we may reasonably require you to give to Data Subjects from time to time, including in connection with your use of certain services.