Termos e condições do parceiro

Fecha de la última actualización ("Fecha de Entrada en Vigor"): 08 de Julio de 2025

Estos TÉRMINOS Y CONDICIONES DEL PROGRAMA DE REFERIDOS DE YUNO (en adelante, los “Términos y Condiciones”) regulan la relación entre Yuno Colombia S.A.S. (“Yuno”)sociedad constituida conforme a las leyes de la República de Colombia, identificada con NIT. 901.568.211-4 con domicilio en la ciudad de Bogotá, representada en este acto por Julián David Nuñez Barrero, y cualquier entidad o individuo que participe en el programa de referidos de Yuno mediante la presentación de un Anexo de Reparto de Ingresos (en adelante, “Anexo de Reparto de Ingresos”) que remita a estos Términos y Condiciones, o que haya sido aceptado por Yuno como parte de su programa de referidos (en adelante, el “Partner”).

Al presentar un Anexo de Reparto de Ingresos  a Yuno, o al participar de cualquier forma en el programa de referidos de Yuno (por ejemplo, al presentar referidos que sean aceptados por Yuno conforme al programa), el Partner manifiesta su aceptación plena y sin reservas a quedar obligado por estos Términos y Condiciones, los cuales podrán ser modificados por Yuno conforme a la sección 11.6. Estos Términos y Condiciones, junto con el Anexo de Reparto de Ingresos correspondiente, constituyen el acuerdo íntegro entre Yuno y el Partner respecto del programa de referidos.

Antecedentes

1. Yuno se dedica a la prestación de servicios de orquestación inteligente de pagos y servicios relacionados (“Servicios de Yuno”).
2. El Referente desea participar en el programa de referidos de Yuno, refiriendo potenciales clientes a Yuno a cambio de una contraprestación, sujeta a los términos establecidos en este documento.
3. Yuno desea recibir dichos referidos y otorgar una compensación mediante un esquema de reparto de ingresos, conforme a lo dispuesto en estos Términos y Condiciones y en el Anexo de Reparto de Ingresos correspondiente.

Por lo tanto, en consideración al valor y beneficios mutuos, las Partes acuerdan lo siguiente:

‍

1. DEFINICIONES E INTERPRETACIONES

‍

1.1. Definiciones

‍

Salvo que el contexto requiera lo contrario, los términos en mayúsculas tendrán los siguientes significados:

• Acuerdo: Significa estos Términos y Condiciones, junto con cualquier Anexo de Reparto de Ingresos aplicable aceptado por las Partes, y cualquier otro anexo o documento que se incorpore por referencia.
• Información Confidencial: Tiene el significado establecido en la sección 6.
• Derechos de Propiedad Intelectual: Tiene el significado establecido en la sección 7.
• Anexo de Reparto de Ingresos: Cualquier anexo ejecutado entre Yuno y el Partner que incorpore estos Términos y Condiciones por referencia, incluyendo el anexo  inicial y cualquier otro aplicable en caso de renovación o modificación.
• Entidad Sancionada: Persona física o moral incluida en listas de sanciones mantenidas por la ONU, OFAC, UE, UK OFSI o cualquier otra autoridad que resulte aplicable a cualquiera de las Partes.
• Leyes AML Aplicables: Las Recomendaciones del GAFI y cualquier legislación nacional que regule el lavado de dinero y financiamiento al terrorismo en el Territorio (por ejemplo, Ley 2195/2022 en Colombia, Ley 9.613/1998 en Brasil, Bank Secrecy Act de EE.UU.).
• Leyes ABC Aplicables: Incluyen, entre otras, la FCPA de EE.UU., el UK Bribery Act 2010, la Ley 2195/2022 (CO),  y cualquier otra legislación anticorrupción vinculante para las Partes.

‍

1.2 Interpretación

‍

Salvo que el contexto indique lo contrario:

1. las referencias a secciones y anexos se refieren a este Acuerdo;
2. los títulos se incluyen solo por conveniencia y no afectan su interpretación;
3. el singular incluye el plural y viceversa;
4.  las referencias a cualquier género incluyen todos los géneros;
5. los términos “incluyendo”, “entre otros” o similares no implican limitación;
6. las referencias a cualquier Parte incluyen a sus sucesores y cesionarios autorizados;
7.  las referencias a cualquier documento lo incluyen modificado, complementado o reemplazado;
8. las referencias a leyes incluyen sus reformas, sustituciones o reglamentos aplicables.

‍

2. REFERRAL PARTNERSHIP

‍

2.1. Nombramiento.
Sujeto a los presentes Términos y Condiciones, y una vez aceptado por Yuno, el Partner es designado y acepta dicho nombramiento como un referenciador no exclusivo de clientes potenciales para los Servicios de Yuno.

‍

2.2. Alcance de las Actividades de Referido.
El alcance específico de las actividades del Partner, incluyendo objetivos, servicios específicos a ser referenciados y el Territorio aplicable, será detallado en la Asociación con Reparto de Ingresos correspondiente. El Partner únicamente podrá promover los Servicios de Yuno conforme a lo establecido en estos Términos y Condiciones y en la Asociación con Reparto de Ingresos aplicable.

‍

3. OBLIGACIONES

‍

3.2. Obligaciones del Partner

El Partner se compromete a cumplir con las siguientes obligaciones en el marco de este Acuerdo:

1. Desempeñar todas las actividades de forma profesional, conforme a los estándares de la industria y siguiendo las instrucciones o lineamientos proporcionados por Yuno.
2. Realizar únicamente declaraciones, garantías o promesas sobre los Servicios de Yuno que estén incluidas en documentación oficial de Yuno o autorizadas por escrito.
3. Informar a Yuno de manera oportuna sobre cualquier queja, observación o retroalimentación relevante de prospectos o Clientes Referidos que pudiera afectar la reputación, operaciones o relaciones comerciales de Yuno;
4. Cumplir en todo momento con la legislación aplicable, incluyendo sin limitarse a: leyes AML, leyes ABC aplicables y normas de protección de datos. El Partner deberá realizar verificación de sanciones sobre los prospectos antes de referirlos a Yuno, y conservar evidencia documental de dichas verificaciones por al menos cinco (5) años.
5. Obtener y mantener las licencias, permisos y autorizaciones necesarias para cumplir sus obligaciones bajo este Acuerdo, y proporcionar evidencia de su cumplimiento a solicitud de Yuno.
6. No incurrir en prácticas engañosas, ilícitas o poco éticas que puedan perjudicar la reputación de Yuno o la integridad de sus servicios.
7.  No modificar ningún material o documento proporcionado por Yuno sin consentimiento previo por escrito.
8. No realizar declaraciones sobre los servicios de Yuno que contradigan su documentación oficial o material de marketing; evitar cualquier afirmación o compromiso no autorizado.
9. Brindar acompañamiento proactivo y personalizado durante las fases de onboarding e implementación (previa y posterior a la activación), incluyendo: (i) Asistencia en la integración técnica; (ii) Soporte operativo y técnico antes y después del go-live; y (iii) Registro preciso de los referidos y seguimiento del proceso de cierre comercial.
10. Emplear sus mejores esfuerzos para posicionar favorablemente a Yuno ante los Clientes Referidos y fomentar relaciones comerciales duraderas.
11. Proporcionar a Yuno toda la información relevante y necesaria para cumplir los objetivos del presente Acuerdo, incluyendo los detalles pertinentes sobre Clientes Referidos mediante los canales acordados (correo electrónico, reportes, portales, etc.).
12. Reconocer que Yuno se reserva la discreción absoluta para determinar si celebra o no acuerdos con los prospectos, tras realizar revisiones de cumplimiento.
13. Precalificar a los Clientes Referidos durante la fase previa a la implementación, considerando criterios internos de elegibilidad, incluyendo pero no limitado a: (i)Evaluación de requerimientos; (ii) Gestión de riesgos; (iii) Documentación de due diligence; (iv) Revisión de factibilidad técnica; (v) Validaciones de aseguramiento de calidad.
14. Una vez validada la elegibilidad del Cliente Referido, colaborar activamente con Yuno y el Cliente durante la implementación, actuando como gestor del programa, y de ser necesario, co-gestionar al Cliente durante el ciclo de vida del servicio.
15. Reportar de manera oportuna a Yuno cualquier contacto con Clientes Referidos, proporcionando suficiente información para su evaluación, en el formato acordado por las Partes (correo, reporte, medio electrónico, etc.).
    
    

3.3. Obligaciones de Yuno: Yuno se obliga a lo siguiente en el marco del presente Acuerdo:

1. Designar a un representante calificado del equipo de Desarrollo de Negocios (Business Development) o equivalente, quien será responsable de colaborar estrechamente con el Partner para coordinar, planear y facilitar el cierre exitoso de oportunidades comerciales.
2. Proporcionar al Partner el soporte e información razonablemente necesarios para que este pueda cumplir con sus obligaciones bajo el presente Acuerdo.
3. Mantener la calidad y disponibilidad de los Servicios de Yuno conforme a los estándares de la industria.
4. Procesar todas las referencias recibidas de manera profesional y en un plazo razonable.
5. Notificar al Partner con anticipación razonable sobre cualquier cambio material en los Servicios de Yuno o en el programa de referidos que pueda afectar las actividades del Partner conforme a este Acuerdo.
6. Compensar al Partner conforme a los términos de reparto de ingresos establecidos en la Asociación con Reparto de Ingresos aplicable y conforme a estos Términos y Condiciones, siempre que corresponda.

(a) designate and appoint a qualified Business Development (BD) or a representative who will be responsible for engaging in close collaboration with the Referrer to strategize, coordinate, and facilitate the successful closure of sales opportunities; 

(b) provide the Referrer with reasonable support and information necessary for the performance of its obligations under this Agreement; 

(c) maintain the quality and availability of its services in accordance with industry standards; 

(d) process all referrals in a timely and professional manner; (e) provide reasonable notice to the Referrer of any material changes to its services or referral programs that may affect the Referrer's activities under this Agreement;

(f) Compensate the Referrer for successful Referred Clients in accordance with the Revenue Share terms detailed in the applicable Partnership Schedule and these Terms and Conditions, if applicable.

‍

3.4. Antisoborno y anticorrupción . El Partner deberá: (i) cumplir con las Leyes ABC Aplicables; (ii) mantener procedimientos adecuados para prevenir actos de soborno; (iii) no ofrecer, prometer ni entregar nada de valor con el fin de influir indebidamente a ninguna persona; (iv) reportar de inmediato cualquier posible violación al canal de Ética y Cumplimiento de Yuno; (v) llevar libros y registros contables precisos; (vi) reconocer que cualquier incumplimiento constituye una infracción material que faculta a Yuno a terminar el Acuerdo de forma inmediata.

‍

3.5. Prevención de lavado de activos: El Partner declara y garantiza que ni él, ni sus propietarios, ni ningún Prospecto que refiera es una Entidad Sancionada ni participa en actividades de lavado de dinero o financiamiento al terrorismo. El Partner deberá: (i) verificar a los Prospectos en listas de sanciones antes de referirlos; (ii) notificar a Yuno si cambia el estatus de sanción de algún Prospecto; (iii) cooperar con los requerimientos de Yuno relacionados con procesos de conocimiento del cliente (KYC/KYB), incluyendo formularios KYB, dentro de un plazo de diez (10) días hábiles; (iv) mantener políticas de cumplimiento en materia de prevención de lavado de dinero consistentes con los estándares del GAFI (FATF).

‍

4. COMPENSACIÓN.

‍

4.1. Yuno pagará al Partner una Participación sobre los Ingresos conforme a lo especificado en el Anexo de Reparto de Ingresos aplicable. El derecho del Partner a recibir dicha compensación estará condicionado al cumplimiento íntegro del presente Acuerdo.
Los términos de pago —incluyendo procedimientos de facturación, moneda y cualquier umbral mínimo para efectuar pagos— serán establecidos en la Asociación con Reparto de Ingresos. Salvo que se indique lo contrario, Yuno será responsable de calcular y transferir los pagos correspondientes.

Yuno no estará obligado a pagar ninguna Participación sobre los Ingresos en los siguientes casos:

• Si el Partner incumple este Acuerdo;
• Si los referidos fueron obtenidos mediante declaraciones falsas, engañosas o en violación de la ley o de las políticas de Yuno.

Adicionalmente, Yuno podrá sin perjuicio de otros recursos compensar cualquier monto que el Partner le adeudecontra cualquier pago pendiente de Participación sobre los Ingresos.

‍

5. DURACIÓN Y TERMINACIÓN 

‍

5.1. Este Acuerdo entrará en vigor en la fecha que se indique en el Anexo de Reparto de Ingresos (la “Fecha de Entrada en Vigor”) y permanecerá vigente durante el plazo inicial establecido en dicho documento (el “Plazo Inicial”), si lo hubiere. Si no se especifica un Plazo Inicial, este Acuerdo permanecerá vigente por tiempo indefinido.

‍

5.2. Una vez vencido el Plazo Inicial, si aplica, el Acuerdo podrá renovarse conforme a lo establecido en el Anexo de Reparto de Ingresos o, en su defecto, continuará vigente por tiempo indefinido salvo que sea terminado conforme a esta sección.

‍

5.3. Terminación por causa: Cualquiera de las Partes podrá terminar este Acuerdo de forma inmediata mediante notificación escrita a la otra Parte si:

1. La otra Parte incurre en un incumplimiento material de cualquier disposición de este Acuerdo y, si dicho incumplimiento es subsanable, no lo corrige dentro de un plazo de treinta (30) días después de haber recibido notificación por escrito;
2. La otra Parte incurre en una serie de incumplimientos persistentes que, en conjunto, constituyan un incumplimiento material;
3. La otra Parte se vuelve insolvente, entra en proceso de liquidación, celebra un acuerdo con sus acreedores o se designa un síndico o administrador sobre alguno de sus activos;
4. La otra Parte cesa o amenaza con cesar sus operaciones comerciales.

‍

5.4. Terminación por conveniencia: Una vez concluido el Plazo Inicial (en caso de existir), cualquiera de las Partes podrá dar por terminado este Acuerdo sin necesidad de causa, mediante notificación escrita con al menos noventa (90) días de anticipación a la otra Parte.

‍

5.5. Derechos adicionales de terminación: Cualquiera de las Partes (la “Parte Terminante”) podrá dar por terminado este Acuerdo de forma inmediata mediante notificación escrita a la otra Parte (la “Parte No Terminante”) si:

1. La Parte No Terminante incurre en prácticas fraudulentas, engañosas o poco éticas;
2. La Parte No Terminante realiza declaraciones o garantías no autorizadas respecto a los servicios de la Parte Terminante (en el caso de que el Partner termine, respecto a los servicios de Yuno conforme al alcance del Acuerdo);
3. En el caso de que Yuno termine el Acuerdo: si el Partner se convierte en competidor de Yuno o se asocia con uno;
4. En el caso de que el Partner termine el Acuerdo: si Yuno incurre en actos que afecten de forma directa y sustancial las actividades comerciales principales del Partner mediante acciones competitivas no contempladas en el presente Acuerdo;
5. La Parte No Terminante incurre en actos u omisiones que razonablemente puedan perjudicar la reputación o relaciones comerciales de la Parte Terminante.

‍

5.6. Efectos de la terminación:  En caso de terminación o expiración de este Acuerdo:

1.  Todos los derechos y licencias otorgados conforme a este Acuerdo terminarán de inmediato;
2. Cada Parte deberá devolver o destruir toda la Información Confidencial de la otra Parte;
3. El Partner cesará toda actividad relacionada con referidos y dejará de utilizar materiales de Yuno;
4. Yuno pagará al Partner cualquier monto devengado y no disputado de Participación sobre los Ingresos respecto de Clientes Referidos que hayan calificado antes de la fecha efectiva de terminación, conforme a los términos de pago aplicables;
5. En relación con Clientes Referidos que hayan celebrado un contrato de servicios con Yuno antes de la fecha de terminación y respecto de los cuales el Partner tenga derecho a Participación sobre los Ingresos, Yuno continuará pagando dicha participación durante un período de tres (3) meses posteriores a la fecha de terminación (el “Período de Cola”), siempre y cuando la terminación no se haya producido por incumplimiento material o conducta fraudulenta del Partner, conforme a las secciones 5.2 o 5.4(a), y siempre que el Cliente Referido permanezca como cliente activo de Yuno.

‍

5.7. Supervivencia: Las siguientes disposiciones permanecerán vigentes tras la terminación o expiración de este Acuerdo: Secciones 1 (Definiciones e Interpretación), 5.5 (Efectos de la Terminación), 5.6 (Supervivencia), 6 (Confidencialidad), 7 (Propiedad Intelectual), 12 (Declaraciones y Garantías), 13 (Indemnización), 14 (Limitación de Responsabilidad) y 15 (Disposiciones Generales).

6. CONFIDENCIALIDAD. 

‍

6.1. A los efectos de este Acuerdo, se entenderá como “Información Confidencial” toda información no pública, ya sea divulgada de forma oral, escrita, electrónica o por cualquier otro medio, que sea proporcionada por una de las Partes (la “Parte Reveladora”) a la otra Parte (la “Parte Receptora”), y que esté designada como confidencial o que razonablemente deba entenderse como tal por su naturaleza y las circunstancias de su divulgación. La Información Confidencial incluye, sin limitarse a ello, datos técnicos, secretos comerciales, conocimientos técnicos, planes de productos o servicios, listas de clientes o prospectos, mercados, software, desarrollos, invenciones, procesos, fórmulas, tecnología, diseños, planos, configuraciones de hardware, estrategias comerciales, información financiera, precios u otra información empresarial. La Información Confidencial de Yuno incluye específicamente la arquitectura de los Servicios de Yuno y documentación no publicada. La Información Confidencial del Partner puede incluir información específica no pública sobre su operación comercial o clientes referidos que comparta con Yuno para efectos de este Acuerdo, y que esté claramente identificada como confidencial.

‍

6.2. No se considerará Información Confidencial aquella que la Parte Receptora pueda demostrar que: (i) Era de conocimiento público y estaba disponible de forma general antes de su divulgación por la Parte Reveladora; (ii) Se hace pública y de conocimiento general después de la divulgación por parte de la Parte Reveladora, sin que medie acción u omisión de la Parte Receptora o sus Representantes en violación de este Acuerdo; (iii) Ya se encontraba en posesión de la Parte Receptora en el momento de la divulgación, sin obligación de confidencialidad; (iv) Fue obtenida de un tercero sin violación de obligación de confidencialidad por parte de dicho tercero y sin que la Parte Receptora supiera que tal tercero estaba obligado a guardar confidencialidad; y (v) Fue desarrollada de manera independiente por la Parte Receptora sin utilizar ni referirse a la Información Confidencial de la Parte Reveladora.

‍

6.3. Obligaciones de confidencialidad mutua: Cada Parte, en su calidad de Parte Receptora, se obliga a (i) Mantener en estricta confidencialidad toda la Información Confidencial de la Parte Reveladora; (ii) Utilizar la Información Confidencial únicamente para cumplir con sus obligaciones o ejercer sus derechos conforme a este Acuerdo (el “Propósito Permitido”); (iii) No divulgar Información Confidencial a terceros sin consentimiento previo por escrito de la Parte Reveladora, salvo lo permitido en la sección siguiente; (iv) Implementar medidas técnicas y organizativas adecuadas para proteger la Información Confidencial y evitar su uso, divulgación o publicación no autorizados. Estas medidas deberán ser al menos tan estrictas como aquellas que utilice la Parte Receptora para proteger su propia información confidencial de similar importancia, y en ningún caso inferiores a un estándar razonable de diligencia; (v) Notificar de inmediato por escrito a la Parte Reveladora cualquier uso, acceso, divulgación o pérdida no autorizada de su Información Confidencial; (vi) Cooperar razonablemente con la Parte Reveladora para proteger su Información Confidencial y remediar cualquier divulgación no autorizada. 

‍

6.4. Divulgaciones permitidas: La Parte Receptora podrá divulgar Información Confidencial de la Parte Reveladora únicamente: (i) A sus empleados, directivos, consejeros, abogados, auditores o asesores financieros (“Representantes”) que tengan una necesidad legítima de conocer dicha información para el Propósito Permitido, siempre que tales Representantes estén sujetos a obligaciones de confidencialidad por escrito (o deberes profesionales de secreto) al menos igual de estrictas que las contenidas en este Acuerdo. La Parte Receptora será responsable por cualquier incumplimiento de confidencialidad cometido por sus Representantes; (ii) Cuando sea requerida por ley, orden judicial o autoridad gubernamental competente, siempre que, en la medida en que sea legal y razonablemente posible, la Parte Receptora notifique por escrito a la Parte Reveladora antes de realizar dicha divulgación, permitiéndole oponerse o solicitar medidas de protección. La Parte Receptora limitará su divulgación a la mínima información requerida para cumplir con dicha obligación legal

‍

6.5. Devolución o destrucción: A solicitud escrita de cualquiera de las Partes, o al momento de la terminación o expiración de este Acuerdo (lo que ocurra primero), cada Parte deberá, dentro de un plazo no mayor a treinta (30) días, a) Devolver a la otra Parte todos los documentos y materiales tangibles que contengan su Información Confidencial; y  b) Eliminar o destruir de forma segura todas las copias electrónicas de dicha Información Confidencial que obren en su poder o bajo su control. Cada Parte deberá proporcionar un certificado escrito de destrucción si así se le solicita. No obstante, cada Parte podrá conservar copias de Información Confidencial que (i) esté obligada a conservar por mandato legal o normativo; (ii) se encuentren en copias de respaldo automatizadas o sistemas de archivo, siempre que no sea razonablemente posible su eliminación. Dicha Información Confidencial conservará su carácter confidencial y estará sujeta a estas obligaciones mientras permanezca en posesión de la Parte Receptora.

‍

7. PROPIEDAD INTELECTUAL

‍

7.1. A los efectos del presente Acuerdo, se entenderá por Derechos de Propiedad Intelectual todos aquellos derechos de propiedad intelectual e industrial reconocidos en cualquier jurisdicción a nivel mundial, ya sean registrados o no, incluyendo cualquier solicitud o derecho de solicitud de dichos derechos. Esto incluye, sin limitarse a ello, derechos de autor y conexos, derechos sobre bases de datos, información confidencial, secretos industriales, conocimientos técnicos (know-how), nombres comerciales, marcas, marcas de servicio, logotipos, nombres de dominio, derechos de imagen o de acción por competencia desleal, patentes, modelos de utilidad, derechos sobre topografías de semiconductores y derechos sobre diseños.

7.2. Titularidad: a) Propiedad Intelectual de Yuno: Entre las Partes, Yuno y/o sus licenciantes son y seguirán siendo titulares exclusivos de todos los derechos, títulos e intereses sobre los Servicios de Yuno, sus marcas, nombres comerciales, logotipos, información confidencial, sitio web, materiales de marketing proporcionados por Yuno, así como todos los Derechos de Propiedad Intelectual relacionados, incluyendo modificaciones, mejoras o desarrollos derivados. Cualquier obra derivada creada utilizando Propiedad Intelectual de Yuno será propiedad exclusiva de Yuno; b) Propiedad Intelectual del Partner: Entre las Partes, el Partner y/o sus licenciantes conservarán todos los derechos, títulos e intereses sobre sus marcas, nombres comerciales, logotipos, información confidencial, sitio web, materiales de marketing desarrollados de forma independiente, así como los Derechos de Propiedad Intelectual relacionados; c) No se entiende que este Acuerdo transfiere derechos de propiedad intelectual entre las Partes, excepto por las licencias limitadas expresamente otorgadas. Cada Parte reconoce que no adquiere ningún derecho sobre la Propiedad Intelectual de la otra, salvo los estrictamente permitidos en virtud del presente Acuerdo; d) Retroalimentación: En caso de que el Partner proporcione sugerencias, ideas, mejoras u otros comentarios sobre la Propiedad Intelectual de Yuno (“Comentarios”), Yuno tendrá una licencia irrevocable, mundial, transferible, sublicenciable, perpetua y libre de regalías para usar o incorporar dichos Comentarios. El Partner no estará obligado a proporcionar Comentarios.

‍

7.3. Concesión de Licencias: a) Licencia de Yuno al Partner: Sujeto a los términos de este Acuerdo, Yuno otorga al Partner una licencia no exclusiva, intransferible, no sublicenciable y revocable durante la vigencia del Acuerdo, para utilizar las marcas, nombres comerciales y materiales de marketing de Yuno que sean proporcionados periódicamente, exclusivamente con el fin de desempeñar sus obligaciones bajo este Acuerdo, identificarse como partner de referidos de Yuno y referir clientes potenciales. El Partner deberá respetar las guías de uso de marca que le sean proporcionadas por Yuno y no podrá modificar dichas marcas o materiales sin autorización previa y por escrito. Toda la plusvalía derivada del uso de las marcas de Yuno beneficiará exclusivamente a Yuno; Y b) Licencia del Partner a Yuno (si aplica): En la medida en que el Partner proporcione a Yuno elementos de su Propiedad Intelectual (por ejemplo, logotipos o marcas del Partner) para fines vinculados a este Acuerdo (como actividades de co-marketing o identificación como partner), el Partner concede a Yuno una licencia no exclusiva, intransferible, no sublicenciable (excepto a sus agentes o subcontratistas para cumplimiento de sus obligaciones), mundial, libre de regalías y revocable, para utilizar dichas marcas exclusivamente para los fines acordados por escrito entre las Partes o los necesarios para cumplir con este Acuerdo. Yuno deberá respetar las guías razonables de uso de marca que le sean proporcionadas por el Partner. Toda la plusvalía derivada del uso de las marcas del Partner beneficiará exclusivamente al Partner

‍

7.4. Restricciones sobre el Uso de Propiedad Intelectual: Cada Parte, en su calidad de licenciataria, se compromete a no a) Utilizar la Propiedad Intelectual de la Parte licenciadora de forma que pueda dañar, desprestigiar o diluir su valor o reputación; b) Registrar, intentar registrar, o ayudar a terceros a registrar marcas, nombres comerciales, dominios o identificadores similares a los de la Parte licenciadora sin autorización escrita; c) Cuestionar la titularidad o validez de los Derechos de Propiedad Intelectual de la Parte licenciadora ni colaborar con terceros para hacerlo; d) Incurrir en conductas que puedan constituir infracción, uso indebido o competencia desleal respecto de la Propiedad Intelectual de la otra Parte; e) Salvo autorización expresa, copiar, modificar, adaptar, traducir, descompilar, desensamblar, realizar ingeniería inversa o crear obras derivadas a partir de la Propiedad Intelectual de la Parte licenciadora, especialmente respecto de software o tecnología de Yuno; f) Eliminar, alterar u ocultar avisos de derechos (incluidos avisos de copyright o marca) contenidos en los materiales proporcionados. 

‍

7.5. Notificación de Infracciones: Cada Parte deberá notificar por escrito a la otra Parte tan pronto como tenga conocimiento de cualquier uso no autorizado, infracción o apropiación indebida de los Derechos de Propiedad Intelectual relacionados con este Acuerdo. Ambas Partes se comprometen a cooperar razonablemente, a solicitud y costo de la Parte titular de los derechos, en cualquier investigación o acción de cumplimiento que se inicie. Ninguna de las Partes estará obligada a ejercer acciones legales, pero la Parte titular tendrá derecho exclusivo a decidir si las lleva a cabo

‍

8. PROTECCIÓN DE DATOS

‍

8.1. Cumplimiento de la legislación aplicable. Cada Parte deberá cumplir con las obligaciones que le correspondan en virtud de la legislación aplicable en materia de protección de datos personales en relación con este Acuerdo.

‍

8.2. Obligaciones del Partner respecto a los datos de Clientes Referidos. El Partner declara y garantiza que, con respecto a cualquier dato personal de Clientes Referidos (potenciales o actuales) que proporcione a Yuno o procese en relación con este Acuerdo:

1. Cuenta con una base legal válida para la recolección, tratamiento y transferencia de dichos datos personales a Yuno, incluyendo, cuando así lo requiera la legislación aplicable, el consentimiento de los titulares.
2. Ha proporcionado todos los avisos necesarios a los titulares de los datos personales sobre el tratamiento y la transferencia de sus datos a Yuno, conforme a la legislación aplicable.
3. No proporcionará a Yuno ningún dato personal que no sea estrictamente necesario para los fines de la referencia o según lo acordado en el Anexo de Reparto de Ingresos. 

‍

3. Uso de datos personales por parte de Yuno. Yuno tratará los datos personales recibidos del Partner de conformidad con su Política de Privacidad vigente, disponible en https://www.y.uno/privacy, y con la legislación aplicable. Para los fines de este Acuerdo, cuando el Partner proporcione a Yuno datos personales de Clientes Referidos, ambas Partes actuarán como responsables independientes del tratamiento en lo que respecta a los datos que cada una procese.
4. Seguridad de los datos. Cada Parte deberá implementar y mantener medidas técnicas y organizativas apropiadas para proteger los datos personales bajo su posesión o control frente a destrucción, pérdida, alteración, divulgación o acceso no autorizados, ya sean accidentales o ilícitos, en línea con los estándares de la industria y la legislación aplicable.
5. Transferencias internacionales. En caso de que el Partner transfiera datos personales desde una jurisdicción que limite las transferencias internacionales de datos (por ejemplo, el Espacio Económico Europeo o el Reino Unido) a Yuno, ubicado en una jurisdicción que no cuente con un nivel adecuado de protección conforme a las autoridades del país de origen, el Partner garantiza que ha implementado las salvaguardas necesarias para dicha transferencia conforme a la legislación aplicable. Esto puede incluir el uso de las Cláusulas Contractuales Tipo aprobadas por la Comisión Europea u otros mecanismos válidos cuando se trate de una transferencia entre responsables del tratamiento

‍

9. ANTISOBORNO Y CORRUPCIÓN.

‍

9.1. El Partner declara, garantiza y se obliga a que él, sus propietarios, directores, funcionarios, empleados, agentes y cualquier tercero que actúe en su nombre en relación con este Acuerdo (conjuntamente, los Representantes del Partner), cumplirán con toda la legislación aplicable en materia de antisoborno y anticorrupción. Esto incluye, entre otras, la Ley de Prácticas Corruptas en el Extranjero de los Estados Unidos (FCPA), la Ley de Soborno del Reino Unido de 2010 y cualquier ley anticorrupción aplicable en las jurisdicciones en las que opere o desempeñe actividades en virtud de este Acuerdo

‍

9.2. Ni el Partner ni sus Representantes deberán, directa o indirectamente, ofrecer, prometer, autorizar, solicitar ni aceptar ningún beneficio económico u otra ventaja, pago, dádiva o consideración de ningún tipo que pueda ser considerado un acto ilegal o corrupto, incluyendo pero no limitado a sobornos o pagos de facilitación, a o de cualquier persona o entidad, ya sea un funcionario público o un representante del sector privado, con el fin de obtener o retener negocios, asegurar ventajas indebidas o influir en decisiones relacionadas con este Acuerdo o el negocio de Yuno. A los efectos de esta cláusula, se entenderá por funcionario público cualquier funcionario o empleado de un gobierno en cualquier nivel, organismo, dependencia o empresa estatal, organización internacional pública, partido político, candidato o persona que actúe en representación de cualquiera de los anteriores

‍

9.3. El Partner deberá mantener libros, registros y cuentas precisos respecto de sus actividades en relación con este Acuerdo, reflejando con detalle razonable todas las transacciones realizadas, de conformidad con principios contables generalmente aceptados

‍

9.4. El Partner se obliga a notificar de inmediato a Yuno por escrito sobre cualquier denuncia, investigación, sospecha o violación real a esta sección

‍

9.5. Yuno podrá terminar este Acuerdo con efecto inmediato mediante notificación escrita al Partner si determina, a su discreción razonable, que este ha incumplido cualquier disposición de esta cláusula.

‍

10. SANCTIONS AND ANTI-MONEY LAUNDERING (AML) COMPLIANCE

‍

10.1. Cumplimiento en materia de sanciones. El Partner declara, garantiza y se obliga a que:a) Ni él, ni sus propietarios, directores, funcionarios, empleados o representantes involucrados en este Acuerdo son personas físicas o morales (“Persona”) que estén, o que sean propiedad o estén controladas por personas que estén: (i) sujetas a sanciones impuestas o administradas por la Oficina de Control de Activos Extranjeros del Departamento del Tesoro de los Estados Unidos (OFAC), el Departamento de Estado de los Estados Unidos, el Consejo de Seguridad de las Naciones Unidas, la Unión Europea, Su Majestad el Tesoro del Reino Unido, u otras autoridades competentes (conjuntamente, “Sanciones”; y (ii) ubicadas, organizadas o residentes en países o territorios sujetos a sanciones (incluyendo, sin limitarse a ello, Cuba, Irán, Corea del Norte, Siria y las regiones de Crimea, República Popular de Donetsk y República Popular de Lugansk en Ucrania), b) No utilizará directa ni indirectamente fondos recibidos de Yuno conforme a este Acuerdo, ni los prestará, aportará o dispondrá de ellos de forma tal que pueda implicar una violación a las Sanciones por parte de cualquiera de las Partes; y c) No referirá a Yuno ningún cliente potencial que, a su leal saber y entender, esté sujeto a Sanciones o involucrado en actividades que pudieran constituir una infracción a dichas disposiciones.

‍

10.2. Cumplimiento en materia de prevención de lavado de dinero. El Partner llevará a cabo su actividad empresarial en cumplimiento con toda la legislación aplicable en materia de prevención de lavado de dinero y financiamiento al terrorismo. El Partner se abstendrá conscientemente de participar en cualquier transacción o de referir a cualquier cliente potencial que esté involucrado en, o facilite, actividades de lavado de dinero, financiamiento al terrorismo u otras actividades ilegales

‍

10.3. Notificación y terminación. El Partner deberá notificar de inmediato a Yuno por escrito si llega a tener conocimiento de cualquier incumplimiento a esta Sección. Yuno podrá dar por terminado este Acuerdo de manera inmediata mediante notificación escrita al Partner si determina, a su discreción razonable, que el Partner ha incumplido cualquiera de las disposiciones de esta Sección 10 o que mantener la relación con el Partner pudiera exponer a Yuno a riesgos de violación de Sanciones o de prevención de lavado de dinero

‍

11. AUDIT RIGHTS

‍

11.1. Yuno, o un auditor independiente designado por Yuno y sujeto a obligaciones de confidencialidad no menos estrictas que las establecidas en este Acuerdo, tendrá derecho, previa notificación por escrito con al menos diez (10) días hábiles de anticipación (salvo que se requiera un plazo menor debido a una sospecha de incumplimiento material o requerimiento regulatorio), a auditar los registros, procesos y documentación del Partner que estén directamente relacionados con el cumplimiento de sus obligaciones materiales bajo este Acuerdo, incluyendo, entre otras, las obligaciones establecidas en las secciones 8 (Protección de Datos), 9 (Antisoborno y Anticorrupción) y 10 (Cumplimiento en Materia de Sanciones y Prevención de Lavado de Dinero). El Partner deberá proporcionar cooperación razonable y acceso a la información y al personal relevante en relación con dichas auditorías. Las auditorías deberán realizarse de forma que se minimicen las interrupciones injustificadas en las operaciones del Partner. Si como resultado de una auditoría se detecta un incumplimiento material por parte del Partner, este deberá, sin perjuicio de otros derechos o recursos de Yuno, tomar las medidas correctivas necesarias por su cuenta y, si el incumplimiento es significativo, asumir los costos razonables, documentados y directamente relacionados con dicha auditoría

‍

12. REPRESENTACIONES Y GARANTIAS

‍

12.1. Cada Parte declara y garantiza a la otra Parte que: a) Tiene plena capacidad y autoridad para celebrar este Acuerdo y cumplir con las obligaciones derivadas del mismo; b) Este Acuerdo constituye una obligación legal, válida y vinculante para dicha Parte, exigible conforme a sus términos; c) La celebración y ejecución de este Acuerdo no viola ningún otro acuerdo o compromiso al que dicha Parte esté sujeta; d) Cumplirá con todas las leyes y regulaciones aplicables en el desempeño de sus obligaciones conforme a este Acuerdo; e) Ha obtenido y mantendrá durante la vigencia del Acuerdo todas las licencias, permisos y autorizaciones necesarias para cumplir con sus obligaciones; f) Cuenta con los conocimientos, habilidades, experiencia y recursos necesarios para ejecutar sus obligaciones de manera profesional conforme a este Acuerdo; g) No realizará declaraciones ni otorgará garantías respecto a la otra Parte o sus servicios, salvo que medie autorización previa y por escrito de dicha Parte; h) No incurrirá en prácticas engañosas o poco éticas que puedan afectar la reputación o relaciones comerciales de la otra Parte.

‍

13. INDEMNIZACIÓN

‍

13.1. Cada Parte (en calidad de “Parte Indemnizante”) se compromete a indemnizar, defender y mantener indemne a la otra Parte, así como a sus directivos, consejeros, empleados, agentes y afiliadas (en conjunto, la “Parte Indemnizada”), frente a cualquier pérdida, daño, responsabilidad, reclamación, acción, resolución judicial, acuerdo, intereses, sanciones, multas, costos o gastos de cualquier tipo, incluyendo honorarios razonables de abogados y los costos asociados con el ejercicio del derecho de indemnización conforme a este Acuerdo (en conjunto, las “Pérdidas”), que se deriven o resulten de: a) cualquier incumplimiento por parte de la Parte Indemnizante de sus declaraciones, garantías, compromisos u obligaciones establecidas en este Acuerdo; b) cualquier acto u omisión negligente o doloso de la Parte Indemnizante, sus empleados o agentes, en el cumplimiento de sus obligaciones bajo este Acuerdo; c) cualquier reclamación de que las actividades, servicios o materiales proporcionados o utilizados por la Parte Indemnizante en el marco de este Acuerdo infringen o constituyen uso indebido de los derechos de propiedad intelectual de un tercero. Sin embargo, la Parte Indemnizante no tendrá obligación de indemnizar bajo este inciso si la reclamación se basa en: (i) modificaciones no autorizadas o uso indebido por parte de la Parte Indemnizada de los servicios o materiales proporcionados por la Parte Indemnizante; Y (ii) especificaciones o materiales proporcionados por la Parte Indemnizada y utilizados por la Parte Indemnizante conforme a instrucciones. Y d) cualquier reclamación derivada del incumplimiento de leyes o regulaciones aplicables por parte de la Parte Indemnizante en relación con sus obligaciones u operaciones bajo este Acuerdo

‍

13.2. La Parte que solicite la indemnización deberá notificar de forma oportuna a la Parte Indemnizante sobre cualquier reclamación sujeta a indemnización. La Parte Indemnizante tendrá el control de la defensa y de cualquier acuerdo en relación con dicha reclamación, siempre que cualquier acuerdo que implique una obligación o admisión por parte de la Parte Indemnizada requiera su consentimiento previo y por escrito

‍

14. LIMITATION OF LIABILITY

‍

14.1. EXCLUSIÓN DE DAÑOS INDIRECTOS. SALVO EN CASO DE INCUMPLIMIENTO DE LAS OBLIGACIONES DE CONFIDENCIALIDAD O DE LOS DERECHOS DE PROPIEDAD INTELECTUAL, NINGUNA DE LAS PARTES SERÁ RESPONSABLE FRENTE A LA OTRA POR DAÑOS INDIRECTOS, INCIDENTALES, ESPECIALES, EJEMPLARES, CONSECUENCIALES O PUNITIVOS, INCLUYENDO, ENTRE OTROS, LA PÉRDIDA DE GANANCIAS, DATOS O OPORTUNIDADES DE NEGOCIO, YA SEA QUE DICHA RESPONSABILIDAD SE BASE EN CONTRATO, RESPONSABILIDAD EXTRACONTRACTUAL O CUALQUIER OTRA TEORÍA JURÍDICA, INCLUSO CUANDO SE HUBIERA ADVERTIDO LA POSIBILIDAD DE DICHOS DAÑOS. 

‍

14.2. LÍMITE DE RESPONSABILIDAD. SALVO EN LOS CASOS DE OBLIGACIONES DE INDEMNIZACIÓN, INCUMPLIMIENTO DE OBLIGACIONES DE CONFIDENCIALIDAD O VIOLACIÓN DE DERECHOS DE PROPIEDAD INTELECTUAL, LA RESPONSABILIDAD TOTAL ACUMULADA DE CADA PARTE EN VIRTUD DE ESTE ACUERDO NO EXCEDERÁ EL MAYOR DE LOS SIGUIENTES MONTOS: a) EL TOTAL DE LOS PAGOS EFECTUADOS O POR EFECTUARSE EN CONCEPTO DE PARTICIPACIÓN SOBRE LOS INGRESOS AL PARTNER DURANTE LOS DOCE (12) MESES ANTERIORES AL HECHO QUE DÉ ORIGEN A LA RESPONSABILIDAD, O b) VEINTE MIL DÓLARES ESTADOUNIDENSES (USD 20,000) O SU EQUIVALENTE EN MONEDA DE LOS ESTADOS UNIDOS DE AMÉRICA

‍

15. DISPOSICIONES GENERALES

‍

15.1. Relación entre las Partes. La relación entre las Partes conforme a este Acuerdo es exclusivamente la de contratistas independientes. Nada en este Acuerdo deberá interpretarse como la creación de una agencia, sociedad, empresa conjunta, relación laboral o fiduciaria entre las Partes. Ninguna de las Partes tendrá autoridad para obligar a la otra ni para asumir compromisos en su nombre

‍

15.2. No exclusividad y actividades competitivas. Este Acuerdo permite a Yuno colaborar con otros referenciadores o atender directamente a sus propios clientes. El Partner acepta que, durante la vigencia del presente Acuerdo y por un período de doce (12) meses después de su terminación, no deberá: a) participar en ninguna actividad comercial que compita con los servicios de enrutamiento de pagos de Yuno ni con servicios relacionados, dentro del Territorio, ya sea como propietario, empleado, consultor o bajo cualquier otra figura; b) celebrar acuerdos de referidos o comisiones con competidores de Yuno; c) solicitar o prestar servicios a los clientes de Yuno con fines relacionados con servicios competidores. El Partner se obliga a informar de inmediato por escrito a Yuno sobre cualquier relación o actividad que pueda representar un conflicto de interés. Yuno podrá terminar este Acuerdo de inmediato si, a su juicio razonable, dichas relaciones representan un riesgo para sus intereses comerciales.

‍

15.3. Cesión. Ninguna de las Partes podrá ceder, transferir ni delegar sus derechos u obligaciones conforme a este Acuerdo sin el consentimiento previo y por escrito de la otra Parte, el cual no deberá ser negado de forma irrazonable. Cualquier cesión realizada en violación a esta disposición será nula. Este Acuerdo será vinculante para las Partes y sus respectivos cesionarios y sucesores autorizados

‍

15.4. Fuerza mayor. Ninguna de las Partes será responsable por el incumplimiento o demora en el cumplimiento de sus obligaciones cuando esto sea resultado de causas fuera de su control razonable, incluyendo, sin limitarse a ello, actos de fuerza mayor, guerras, terrorismo, pandemias, desastres naturales o actos de autoridades gubernamenta

‍

15.5. Notificaciones. Toda notificación requerida o permitida conforme a este Acuerdo deberá realizarse por escrito y se considerará efectivamente entregada cuando: a) sea entregada personalmente; b) sea recibida por correo electrónico o fax; c) hayan transcurrido tres (3) días desde su envío por correo certificado o registrado, con franqueo pagado y acuse de recibo. Las notificaciones deberán enviarse a las direcciones indicadas en el preámbulo del Acuerdo o a aquellas que las Partes designen por escrito

‍

15.6. Modificaciones. Yuno se reserva el derecho de modificar, enmendar o complementar estos Términos y Condiciones en cualquier momento, a su entera discreción. Yuno notificará al Partner con anticipación sobre cualquier cambio material. Dicha notificación podrá realizarse mediante correo electrónico enviado a la dirección registrada del Partner (según lo indicado en la Asociación con Reparto de Ingresos o en el registro del programa), mediante publicación en el sitio web de Yuno o en el portal del programa de referidos, o por cualquier otro medio razonable de comunicación. La “Fecha de Entrada en Vigor” al inicio de estos Términos y Condiciones indicará la fecha de su última actualización

La participación continua del Partner en el programa de referidos, la presentación de nuevos referidos o la aceptación de pagos por Participación sobre los Ingresos después del periodo de notificación correspondiente constituirá aceptación plena y sin reservas de los Términos y Condiciones modificados. Si el Partner no acepta los nuevos términos, su único recurso será dar por terminado este Acuerdo mediante notificación escrita a Yuno antes de la fecha de entrada en vigor de las modificaciones y cesar toda actividad relacionada con referidos

‍

15.7. Divisibilidad. Si alguna disposición de este Acuerdo fuera declarada inválida, ilegal o inaplicable por un tribunal competente, dicha disposición se considerará separada del resto, sin que ello afecte la validez o exigibilidad de las demás disposiciones del Acuerdo

‍

15.8. Ley aplicable, jurisdicción y resolución de disputas. Este Acuerdo y cualquier disputa derivada de su interpretación, ejecución o formación (incluyendo disputas no contractuales) se regirá por las leyes internas de la República de Colombia sin aplicar normas sobre conflictos de leyes. Cualquier acción legal o procedimiento relacionado con este Acuerdo que no esté sujeto a arbitraje se someterá exclusivamente a los tribunales federales o estatales ubicados en el Estado de Delaware. Cada Parte acepta irrevocablemente la jurisdicción exclusiva de dichos tribunales. Toda controversia o diferencia generada con ocasión del presente Acuerdo o su ejecución, se intentará resolver en primera instancia mediante arreglo directo entre las Partes. Si transcurridos treinta (30) días calendario de surgida la controversia ésta no se ha resuelto, se intentará conciliación ante cualquier Centro de Conciliación autorizado de la ciudad de Bogotá D.C. Si en esta instancia no se logra resolver la diferencia, las Partes se someterán a los tribunales competentes de la ciudad de Bogotá D.C.

‍

15.9. Acuerdo íntegro. Este Acuerdo (incluyendo estos Términos y Condiciones y la Asociación con Reparto de Ingresos correspondiente, así como los anexos expresamente incorporados) constituye el acuerdo completo entre el Partner y Yuno con respecto a su objeto, y sustituye todos los acuerdos, entendimientos y comunicaciones previas o contemporáneas, ya sean orales o escritas, relacionadas con el mismo. En caso de conflicto entre estos Términos y Condiciones y una Asociación con Reparto de Ingresos, prevalecerán los términos de dicha Asociación únicamente respecto del Partner y el compromiso específico al que se refiera, siempre que haya sido aceptada formalmente por Yuno

‍

15.10. Renuncia. Ninguna renuncia a una disposición de este Acuerdo será válida salvo que se establezca expresamente por escrito y sea aceptada por la Parte que otorga la renuncia. La falta de ejercicio o el retraso en el ejercicio de cualquier derecho, recurso o facultad conforme a este Acuerdo no constituirá renuncia al mismo. Asimismo, el ejercicio parcial de cualquier derecho o facultad no impedirá su ejercicio posterior o el ejercicio de cualquier otro derecho

‍

15.11. Idioma. Estos Términos y Condiciones han sido redactados en idioma inglés. En caso de que Yuno proporcione una traducción a otro idioma, prevalecerá la versión en inglés en caso de conflicto o ambigüedad

‍

ANEXO A

‍
DISPOSICIONES APLICABLES AL ENCARGO Y TRANSFERENCIA DE DATOS PERSONALES
CLÁUSULAS

‍

PRIMERA. DEFINICIONES. A efectos del presente Anexo y del Acuerdo del que forma parte, los siguientes términos en mayúscula, en singular o plural, indistintamente, tendrán el significado aquí establecido:

a)Responsable: persona física o moral de carácter privado que decide sobre el tratamiento de datos personales; en este documento “Yuno” o la “Empresa”, según sea el caso y en los términos definidos en la sección correspondiente del presente Anexo.
b) Encargado: en el presente Anexo, y cuando así sea especificado, se refiere a “Yuno”.
c)Anexo: El presente Anexo de Encargo y Transferencia de Datos Personales.
d)Aviso de Privacidad: Documento físico, electrónico o en cualquier otro formato generado por el Responsable que es puesto a disposición del titular, previo al tratamiento de sus Datos Personales,
e) Acuerdo: El Acuerdo celebrado entre Yuno y la Empresa,
f) Finalidades: Las establecidas en la Cláusula 1 (Objeto) del Acuerdo,
g) LFPD: la Ley Federal de Protección de Datos Personales en Posesión de Particulares,
h) RLFPD: el Reglamento de la Ley Federal de Protección de Datos Personales en Posesión de Particulares,
i) Regulación de Datos Personales: En su conjunto, la LFPD, el RLFPD y cualquier otra disposición aplicable a la Empresa relativa a la protección de datos personales, las bases de datos que las contengan y/o a la protección de titulares de datos personales.
j)Responsable Transferente: aquel Responsable que comunica Datos Personales a otro Responsable, en el presente Anexo, y cuando así sea especificado, se refiere a la Empresa,
k)Responsable Receptor: aquel Responsable que recibe Datos Personales de otro Responsable, en el presente Anexo y cuando así sea especificado, se refiere a Yuno.
l) Datos Personales: cualquier información concerniente a una persona física identificada o identificable.
m) Tratamiento: La obtención, uso, divulgación o almacenamiento de Datos Personales, por cualquier medio. El uso abarca cualquier acción de acceso, manejo, aprovechamiento, transferencia o disposición de Datos Personales.
n) Remisión de Datos Personales: las comunicaciones de datos personales realizadas entre la Empresa (Responsable) y Yuno (Encargado), para el cumplimiento de las Finalidades del Acuerdo.
o) Subencargado: cualquier encargado contratado por el Encargado o por cualquier otro subencargado del Encargado que conviene en recibir Datos Personales exclusivamente destinados a las actividades de Tratamiento de Datos Personales que deben realizarse por cuenta del Responsable.
p) INAI: el Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales,
q)  Derechos ARCO: los derechos de acceso, rectificación, cancelación y oposición previstos por la LFPD y el RLFPD.
r) Medidas de Seguridad: en su conjunto, las medidas de seguridad administrativas, técnicas y físicas que permitan proteger los Datos Personales contra daño, pérdida, alteración, destrucción o el uso, acceso o tratamiento no autorizado.
s) Vulneración de Seguridad de Datos Personales: en cualquier fase del Tratamiento de Datos Personales: a)La pérdida o destrucción no autorizada de Datos Personales o Bases de Datos; b) El robo, extravío o copia no autorizada de Datos Personales o Bases de Datos; c) El uso, acceso o tratamiento no autorizado de Datos Personales o Bases de Datos, o d) El daño, la alteración o modificación no autorizada de Datos Personales o Bases de Datos.

‍

SEGUNDA. OBJETO. El presente Anexo tiene por objeto la formalización de los derechos y obligaciones de las Partes en relación con el Tratamiento de Datos Personales que deben efectuar para el cumplimiento y ejecución del Acuerdo y, en particular, definir de manera precisa y documentada aquellas fases del Tratamiento de Datos Personales en que Yuno actuará como Encargado de la Empresa o como Responsable Receptor, según sea el caso y en los términos definidos en la sección correspondiente del presente Anexo.

‍

ENCARGO DE DATOS PERSONALES
REMISIÓN Y TRATAMIENTO

‍

TERCERA. ALCANCE DEL ENCARGO DE DATOS PERSONALES. Las Partes conviene que a través del presente Anexo darán cumplimiento al requisito de “cláusulas contractuales” u “otro instrumento jurídico” que debe existir entre el Responsable y el Encargado, al que se refiere artículo 51 del RLFPD. Si Yuno, en su carácter de Encargado, trata información de la Empresa (Responsable) que contiene Datos Personales, o de cualquier otra forma trata Datos Personales por cuenta de la Empresa (Responsable) en relación con el cumplimiento de las obligaciones previstas en el Acuerdo, todas las disposiciones de la presente sección serán aplicables a las Partes. El Encargado reconoce que todos los derechos, obligaciones e intereses sobre los Datos Personales corresponden a la Empresa, con excepción de aquellos derechos, obligaciones e intereses establecidos en la LFPD y el RLFPD a cargo del Encargado.

‍

CUARTA. OBLIGACIONES DEL RESPONSABLE. El Responsable acuerda, se obliga y garantiza que:

a) El Tratamiento de los Datos Personales, incluyendo su Remisión, se realiza y se realizará conforme a las disposiciones de la Regulación de Datos Personales y que este no viola las disposiciones aplicables de dicha normativa.
b) Ha instruido al Yuno (Encargado) para que trate, por cuenta del Responsable, los Datos Personales necesarios para el cumplimiento del Acuerdo y continuará instruyendo al Encargado sobre dicho Tratamiento durante la vigencia del Acuerdo y del presente Anexo, de conformidad con la Regulación de Datos Personales.
c) Ha obtenido de los Titulares correspondientes el consentimiento legalmente exigido para llevar a cabo el Tratamiento de sus Datos Personales, de conformidad con las disposiciones de la Regulación de Datos Personales.

‍

QUINTA. OBLIGACIONES DEL ENCARGADO. En virtud del presente Anexo y sin perjuicio de lo establecido en el resto de sus cláusulas y en el propio Acuerdo del que es parte, Yuno se obliga de manera expresa a lo siguiente:

a)En su condición de Encargado, seguir las instrucciones de la Empresa para el Tratamiento de los Datos Personales necesarios para el cumplimiento las Finalidades establecidas en el Acuerdo.
b)Tratar la información proporcionada por la Empresa de conformidad con la normativa aplicable y, en particular, de conformidad con la Regulación de Datos Personales cuando dicha información contenga Datos Personales. Yuno será un sujeto regulado por la LFPD en su carácter de Encargado y deberá tratar los datos personales conforme a lo convenido en este Anexo y en los Avisos de Privacidad que hayan sido puestos a disposición de los Titulares por parte de la Empresa.
c)Actuar con la mayor diligencia, pericia, probidad y buena fe para el cumplimiento de las Finalidades, en tal forma que en ningún momento se perjudiquen los derechos, la imagen, el prestigio ni la reputación de la Empresa.
d)Proporcionar a la Empresa, en el momento en que este lo requiera, cualquier información que le sea solicitada y que guarde relación con la información y/o Datos Personales comunicados por la Empresa a Yuno.
e)Adoptar e implementar las medidas de seguridad administrativas, físicas y técnicas suficientes y necesarias para la protección de los Datos Personales objeto de encargo.
f)Notificar de inmediato al Responsable si concurre cualquiera de los siguientes casos:

a.  Si es requerido por una autoridad competente para comunicar o revelar los Datos Personales objeto de Tratamiento, salvo que dicha notificación constituya violación de una disposición legal relativa a la confidencialidad de una investigación;

b. Si ocurre una Vulneración de Seguridad de Datos Personales en relación con los Datos Personales que trata por cuenta de la Empresa; o

c.  Si recibe una solicitud de ejercicio de Derechos ARCO, presentada directamente por un Titular de Datos Personales, en cuyo caso deberá abstenerse de tramitar dicha solicitud, salvo indicación expresa en contrario comunicada por la Empresa de forma escrita.

g) Proporcionará a la Empresa, dentro del plazo de 5 (cinco) días hábiles, cualquier requerimiento de autoridad competente relacionado con el Tratamiento de los Datos Personales objeto del presente Anexo y, en particular, aquellos relacionados con las Medidas de Seguridad adoptadas para su Tratamiento.
h)En caso de llevar a cabo la contratación de un Subencargado, cumplir con las disposiciones de la Cláusula Séptima del presente Anexo.

‍

SEXTA. OBLIGACIONES APLICABLES A LA TERMINACIÓN DE LOS SERVICIOS. Las Partes acuerdan que, a la terminación del Acuerdo, la Empresa podrá instruir a Yuno (y a los Subencargados, en su caso) para que, a su elección:(i)Devuelva(n) a la Empresa los Datos Personales objeto de Encargo, incluidos cualquier tipo de copias y los Datos Personales que hayan sido procesados como resultado del cumplimiento de las Finalidades del Acuerdo, o (ii) Destruya(n) todos los Datos Personales, incluidos cualquier tipo de copias y Datos Personales procesados como resultado del cumplimiento de las Finalidades del Acuerdo, exigiendo en este caso un certificado al Encargado, en el cual especifique el método de destrucción empleado y, en su caso, la identidad del prestador de servicios encargado de la destrucción.

En ambos casos, Yuno podrá conservar copia de los Datos Personales indispensables para cumplir con disposiciones legales o reglamentarias vigentes que exijan tal conservación por parte de un Encargado, para cualquier finalidad expresamente prevista por dicha legislación. En tales casos, el Encargado garantiza a la Empresa el bloqueo y confidencialidad de los Datos Personales conservados, y que se abstendrá de usarlos para cualquier tipo de tratamiento subsecuente.

‍

SÉPTIMA. CONTRATACIÓN DE SUBENCARGADOS. El Encargado deberá asegurarse que el o los Subencargados que contrate se adhieran a las mismas obligaciones sobre protección de Datos Personales establecidas para él bajo el presente Anexo. Además, deberá realizar una evaluación previa en materia de seguridad de la información conforme a sus procedimientos internos, con el fin de verificar que los Datos Personales se mantendrán seguros y confidenciales.  En tales casos, el Encargado deberá celebrar un Convenio de Encargo de Tratamiento de Datos Personales con todos y cada uno de los Subencargados correspondientes. Dichos convenios de Encargo de Tratamiento de Datos Personales deberán constar por escrito y contener, al menos, las mismas obligaciones sobre protección de Datos Personales establecidas entre las Partes. Los mismos convenios deberán establecer que cualquier reclamación, costo, pérdida, daño a terceros o responsabilidad contraída y que se derive directa o indirectamente del incumplimiento de las obligaciones del Subencargado será asumida exclusivamente por éste. El Encargado deberá mantener un registro actualizado de todos los Convenios de Encargo de Tratamiento de Datos Personales que celebre con Subencargados.

‍

OCTAVA. MEDIDAS DE SEGURIDAD Y PERSONA DE CONTACTO. El Encargado deberá implementar todas las Medidas de Seguridad que resulten apropiadas para proteger los Datos Personales. Además, el Encargado deberá:

a)Contar con una persona de contacto que será responsable de: (i) mantener informada a la Empresa de todas las Medidas de Seguridad implementadas para proteger los Datos Personales, y (ii) asistir a la Empresa para responder a cualquier solicitud de los Titulares o a cualquier requerimiento del INAI relacionados con los Datos Personales objeto de Tratamiento bajo este Anexo.
b)Mantener informado y actualizado al Departamento de Datos Personales de la Empresa sobre la identidad e información de contacto de la persona a que se refiere el inciso inmediato anterior.
c)Asegurar que la persona de contacto a que se refiere el inciso a) proporcione de forma expedita la información requerida por la Empresa que regula el presente Anexo, tomando en cuenta los plazos previstos por la Regulación de Datos Personales.
d)Salvo disposición legal aplicable en contrario, abstenerse de dar contestación a solicitudes de los Titulares de Datos Personales relacionadas con el ejercicio de sus Derechos ARCO. En tales casos, la persona a que se refiere el inciso a) deberá comunicar de inmediato a la Empresa la recepción de cualquier solicitud o requerimiento.

‍

NOVENA. VULNERACIONES DE SEGURIDAD DE DATOS PERSONALES. Yuno deberá comunicar a la Empresa cualquier Vulneración de Seguridad relacionada con los Datos Personales objeto del presente Anexo, que pudiese ocurrir en cualquier fase del Tratamiento bajo su responsabilidad o bajo la responsabilidad de un Subencargado, en su caso.

Para tales efectos, y con el objeto de que la Empresa cuente con la información y documentación necesaria para actuar conforme lo dispuesto por la Regulación de Datos Personales, si el Encargado sufre una Vulneración de Seguridad relacionada con dichos Datos Personales, deberá comunicar la ocurrencia de la Vulneración de Seguridad a la Empresa tan pronto tenga confirmación técnica de la misma, trasladando a esta último, al menos, la siguiente información:

a)La naturaleza del incidente (incluyendo la información sobre las circunstancias en que éste ocurrió).
b)Los Datos Personales comprometidos.
c)Las acciones correctivas que hubiese realizado de forma inmediata, una vez haya confirmado que ocurrió la Vulneración de Seguridad de Datos Personales.
d)Cualquier información que permita a la Empresa comunicar a los Titulares las medidas que puedan adoptar para proteger sus intereses.
e)Los medios a través de los cuales podrá obtener más información sobre la Vulneración de Seguridad, para poder informar a los Titulares cualquier información relevante al respecto.

‍

TRANSFERENCIAS DE DATOS PERSONALES

‍

DÉCIMA. ALCANCE DE LA TRANSFERENCIA. Ambas partes reconocen y acuerdan que, exclusivamente respecto de los datos personales requeridos para procesar pagos electrónicos, incluyendo los datos de tarjeta de crédito y/o débito de los terceros que Yuno recabe para la ejecución del Acuerdo, Yuno actuará en su calidad de Responsable, respetando en todo momento las disposiciones aplicables de la Regulación de Datos Personales y poniendo a disposición de los Titulares su propio aviso de privacidad, comprometiéndose a tratarlos exclusivamente para el cumplimiento de las Finalidades del Acuerdo y conforme a lo establecido en dicho aviso.

Cualquier otra actividad de Tratamiento o categoría de Datos Personales de terceros que Yuno recabe de tiempo en tiempo para cumplir con sus obligaciones al amparo del Acuerdo y este Anexo, serán tratadas por Yuno como Encargado de Datos Personales, en los términos a que se refiere la sección “ENCARGO DE DATOS PERSONALES” del presente Anexo.

Fuera de los supuestos antes mencionados, las Partes conviene que, a través del presente Anexo, darán cumplimiento al artículo 73 del RLFPD, regulando su relación como Responsable Transferente y Responsable Receptor, respectivamente y cuando así corresponda de acuerdo con el tipo de Finalidad que corresponda cumplir a Yuno.

En concreto, las Partes acuerdan cumplir con las siguientes obligaciones cuando la prestación de los servicios previstos en el Acuerdo requiera que la Empresa (Responsable Transferente) comunique a Yuno (Responsable Receptor) Datos Personales sobre los cuales este último tomará decisiones de Tratamiento y Medidas de Seguridad:

a)Identificación de Bases de Datos. El Responsable Receptor determinará los Datos Personales que el Responsable Transferente deberá comunicarle, así como la forma de entregar dicha información.
b)Licitud de las transferencias. El Responsable Transferente deberá informar mediante el correspondiente Aviso de Privacidad y, de ser necesario, recabar el consentimiento exigible de los Titulares, antes de efectuar cualquier Transferencia de Datos Personales hacia el Responsable Receptor. El Responsable Receptor se obliga a respetar todas y cada una de las obligaciones que pudieran corresponderle como “receptor de datos personales” con arreglo a las disposiciones de Regulación de Datos Personales.
c)Medidas de Seguridad. Las Partes acuerdan que el Responsable Receptor deberá implementar Medidas de Seguridad que permitan proteger los Datos Personales contra daño, pérdida, alteración, destrucción o el uso, acceso o Tratamiento no autorizado, y cualesquiera otras que le fueren impuestas por o en cumplimento de la Regulación de Datos Personales en cada caso, habida cuenta del estado de la tecnología, la naturaleza de los datos almacenados y los riesgos a los que estén expuestos.
d) Derechos de los Titulares. En relación con los Datos Personales que sean transferidos al Responsable Receptor por parte del Responsable Transferente, cada Parte será responsable de atender las solicitudes de los Titulares sobre el ejercicio de los Derechos ARCO previstos por la Regulación de Datos Personales.
e)Contenido y Comunicación de Avisos de Privacidad. La firma del presente Anexo y del Acuerdo constituye prueba del conocimiento que el Responsable Receptor tiene sobre la existencia y contenido de los Avisos de Privacidad Integrales que regulan el Tratamiento de los Datos Personales que el Responsable Transferente le transferirá. Tales Avisos de Privacidad deberán ser respetados por el Responsable Receptor conforme a las disposiciones de la LFPD, el RLFPD y cualquier otra disposición que resulte aplicable al Tratamiento de los Datos Personales de los Titulares que el Responsable Transferente transfiera al Responsable Receptor para el cumplimiento del Acuerdo y este Anexo.
f)El Responsable Transferente garantiza y se obliga a que sus Avisos de Privacidad Integrales que regulen el Tratamiento de Datos Personales que sean o puedan ser objeto de Transferencia hacia el Responsable Receptor incluirán información clara y específica sobre la transferencia de Datos Personales hacia destinatarios como el Responsable Receptor, para finalidades compatibles con el objeto del Acuerdo:

‍

DÉCIMA PRIMERA. DURACIÓN. El presente Anexo tendrá la misma duración que el Acuerdo por razón del cual fue celebrado, comenzando su vigencia en la fecha de su firma. No obstante, cualquiera de las Partes podrá comunicar a la otra su voluntad de concluir el presente Anexo mediante previo aviso por escrito con 60 (sesenta) días naturales de anticipación a la fecha efectiva de terminación, sin necesidad de declaración o procedimiento judicial o extrajudicial alguno y sin responsabilidad para las Partes. En este último caso, las Partes acuerdan documentar el tratamiento de los Datos Personales y las obligaciones que al respecto les correspondan de conformidad con el Acuerdo.

‍

DÉCIMA SEGUNDA. INCUMPLIMIENTO Y RESCISIÓN. En caso de incumplimiento de cualquiera de las Partes a cualquier obligación a su cargo conforme al presente Anexo, la parte afectada deberá enviar a la parte infractora una notificación por escrito otorgándole un plazo de 15 (quince) días hábiles contados a partir de la recepción de la notificación para subsanar dicho incumplimiento. En caso de que el incumplimiento persista una vez transcurrido el plazo antes mencionado, la parte afectada podrá rescindir el presente Anexo sin responsabilidad alguna y sin necesidad de declaración judicial previa, o bien, exigir el cumplimiento forzoso de dichas obligaciones incumplidas por la vía judicial. En ambos casos, la parte infractora quedará obligada al pago de los daños y perjuicios que dicho incumplimiento hubiere ocasionado a la parte afectada.

‍

DÉCIMA TERCERA. INDEMNIZACIÓN. La Partes reconocen y convienen que cualquier reclamación, costo, pérdida, daño a terceros o responsabilidad contraída y que se derive directa o indirectamente del incumplimiento del presente Anexo o de las disposiciones de la Regulación de Datos Personales, será asumida por la parte infractora.

‍

DÉCIMA CUARTA. CASO FORTUITO O FUERZA MAYOR. Ninguna de las Partes será responsable de cualquier retraso o incumplimiento en sus obligaciones conforme al presente Anexo, cuando éste sea originado directamente por caso fortuito o fuerza mayor. En tal evento, la parte infractora que llegue a incumplir deberá notificarlo a la parte afectada dentro de los 2 (dos) días hábiles siguientes al evento de caso fortuito o fuerza mayor, para reprogramar el cumplimiento del presente Anexo.

‍

DÉCIMA QUINTA. CESIÓN. Ninguna de las Partes podrá ceder y/o transmitir de forma alguna sus derechos y obligaciones de este Anexo a ningún tercero, salvo previo consentimiento por escrito de la otra parte, y siempre que se cumplan con las disposiciones y ordenamientos legales aplicables. Las disposiciones del párrafo anterior no son aplicables a la subcontratación de servicios regulada por la Cláusula Séptima del presente Anexo, la cual se deberá efectuar, en su caso, conforme a lo dispuesto en el presente Anexo.

DÉCIMA SEXTA. MODIFICACIONES. Las Partes acuerdan que no podrán modificar las obligaciones asumidas a través de este Anexo, salvo que ello sea necesario para

adaptarlo a nuevas disposiciones o regulaciones, posteriores a la fecha de su celebración. Lo anterior no impide que las Partes puedan añadir cláusulas nuevas o Anexos, siempre y cuando ninguno de ellos contradiga las disposiciones originales del Acuerdo y de este Anexo, y se celebre mediante previo acuerdo por escrito.

‍

DÉCIMA SÉPTIMA. AUTONOMÍA DE LAS DISPOSICIONES. Las Partes convienen que la nulidad, invalidez, ilegalidad y/o cualquier otro vicio en las disposiciones del presente Anexo, sólo afectará a dicha disposición; por lo que no afectará a las demás disposiciones aquí pactadas, las cuales, conservarán su fuerza vinculativa.

‍

DÉCIMA OCTAVA. ENCABEZADOS. Las Partes manifiestan y reconocen expresamente que los encabezados y títulos establecidos al inicio de cada cláusula son meramente identificativos; por lo que de ninguna manera podrán ser considerados como elemento de restricción o limitación sobre el contenido o los efectos o alcances legales de las mismas.

‍

DÉCIMA NOVENA. LEY APLICABLE Y JURISDICCIÓN. El presente Anexo se regirá por la legislación federal vigente aplicable en los Estados Unidos Mexicanos. Para la interpretación, ejecución y cumplimiento de este Anexo las Partes se someten a la jurisdicción de los tribunales con competencia de la ciudad de Bogotá D.C., haciendo renuncia expresa a cualquier otro fuero o jurisdicción que por razón de sus domicilios presentes o futuros o por cualquier otra causa pudiera corresponderles.

‍

Last Updated Date ("Effective Date"): July 8, 2025

‍

These YUNO PARTNERSHIP - TERMS AND CONDITIONS (hereinafter "Terms and Conditions") govern the relationship between SMART ROUTING PTE. LTD. ("Yuno"), a company incorporated under the laws of Singapore, registered under No. 202438195M with its principal place of business in 1 RAFFLES PLACE #34-04, ONE RAFFLES PLACE, SINGAPORE (048616), and any entity or individual that participates in Yuno's referral program by submitting a duly completed Revenue Share Partnership Schedule (hereinafter “Partnership Schedule”) that references these Terms and Conditions, or by otherwise being accepted by Yuno into its referral program (the "Referrer").

‍

By submitting a Partnership Schedule to Yuno, or by otherwise participating in Yuno's referral program (e.g., by submitting referrals that are accepted by Yuno under the program), the Referrer signifies its unconditional acceptance of and agreement to be bound by these Terms and Conditions, as they may be amended by Yuno from time to time in accordance with Section 11.6 herein. These Terms and Conditions, together with the applicable Partnership Schedule, constitute the entire agreement between Yuno and the Referrer regarding the referral program.

‍

WHEREAS:

‍

1. Yuno is engaged in the business of providing smart payment routing solutions and related services (hereinafter "Yuno's Services").
2. The Referrer desires to participate in Yuno's referral program by referring potential clients to Yuno in exchange for compensation, subject to the terms herein.
3. Yuno desires to allow such referrals and incentivize them through a revenue sharing arrangement under these Terms and Conditions and as further detailed in an applicable Partnership Schedule.

‍

NOW, THEREFORE, for good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, Yuno and the Referrer (each a "Party" and collectively the "Parties") agree as follows:   

‍

1. DEFINITIONS AND INTERPRETATION

1.1. Definitions:

• "Agreement" means these Terms and Conditions, together with any applicable Partnership Schedule(s) executed or agreed to by the Referrer and Yuno, and any Schedules or Exhibits attached thereto or incorporated by reference.
•  "Confidential Information" has the meaning ascribed to it in Section 6.
• "Intellectual Property Rights" has the meaning ascribed to it in Section 7.
• "Partnership Schedule" means any schedule executed between Yuno and Referrer that incorporates these Terms and Conditions by reference, including the initial Partnership Schedule and any subsequent schedules that may be executed during renewals or amendments.
• “Sanctioned Entity” means any individual or entity listed on sanctions maintained by the UN, OFAC, EU, UK OFSI, or other authority applicable to either Party.
• “Applicable AML Laws” means FATF Recommendations and any national legislation governing AML/CFT in the Territory (e.g., Colombian Law 2195/2022, Brazilian Law 9.613/1998, U.S. Bank Secrecy Act).
• “Applicable ABC Laws” means the U.S. FCPA, UK Bribery Act 2010, Ley 2195/2022 (CO), Ley General de Responsabilidades Administrativas (MX), and any other anti-corruption legislation binding the Parties.

‍

1.2. In this Agreement, unless the context otherwise requires: (a) references to Sections, Exhibits, and Schedules are to sections of, and exhibits and schedules to, this Agreement; (b) headings are for convenience only and do not affect interpretation; (c) the singular includes the plural and vice versa; (d) references to any gender includes all genders; (e) "including" and similar words do not imply any limitation; (f) references to any party include that party's successors and permitted assigns; (g) references to any document are references to that document as amended, consolidated, supplemented, novated, or replaced; (h) references to any law are references to that law as amended, consolidated, supplemented, or replaced.

‍

2. REFERRAL PARTNERSHIP

‍

2.1. Subject to the terms and conditions of this Agreement, upon acceptance, Yuno appoints the Referrer, and the Referrer accepts such appointment, as a non-exclusive referrer of potential clients for Yuno's Services.

‍

2.2. Scope of Referral Activities: The specific scope of referral activities, including any targets, specific services to be referred, and applicable Territory, shall be detailed in the Partnership Schedule. The Referrer shall only promote Yuno's Services as set forth in this Agreement and the applicable Partnership Schedule.

‍

3. OBLIGATIONS

‍

3.1. Referrer's Obligations: The Referrer shall, in performing its obligations under this Agreement: 

(a) conduct all activities in a professional manner consistent with industry standards and in accordance with any guidelines or instructions provided by Yuno; 

(b) make only such representations, warranties, or guarantees concerning Yuno's services as are contained in Yuno's official documentation or are otherwise authorized in writing by Yuno; 

(c) promptly inform Yuno of any complaints, concerns, or feedback received from potential clients or Referred Clients that may impact Yuno’s reputation, operations, or client relationships; 

(d) comply at all times with Applicable Laws. Including but not limited to: AML Laws, Applicable ABC Laws, and Data-Protection Laws. Conduct sanctions screening on Prospects before introducing them to Yuno; and maintain documentary evidence of such checks for five (5) years.; 

(e) obtain and maintain all necessary licenses, permits, and authorizations required to perform its obligations under this Agreement and provide evidence of such compliance upon request by Yuno; 

(f) not engage in any deceptive, misleading, illegal, or unethical practices that may be detrimental to Yuno reputation, operations, or the integrity of its services; 

(g) not modify any materials or documentation provided by Yuno without Yuno's prior written consent; 

(h) not make any representations regarding Yuno's services that are inconsistent with Yuno's official documentation or marketing materials, and avoid any unauthorized claims or commitments; 

(i) provide comprehensive and proactive support throughout the onboarding and activation phases (implementation and post-go-live phase) , providing tailored, hands-on assistance to facilitate a smooth, successful, and efficient implementation process to ensure full alignment with operational requirements, mitigate potential risks, and promote the successful integration of the solution into the client's systems and workflows, including but not limited to: (i) assisting during the onboarding process to ensure seamless integration; (ii) providing technical and operational guidance to the Referred Client during pre- and post-go-live phases; (ii) maintaining accurate records of all referrals, including efforts undertaken to support sales closures.

(j) Exercise best efforts to position Yuno favorably to relevant Referred Clients to facilitate the acquisition of Yuno’s services and promote long-term client relationships

(k) Provide Yuno with all necessary and relevant information to achieve the objectives of this Agreement. This includes submitting relevant details regarding Referred Clients through email, written reports, portals, or other mutually agreed methods;

(l) Acknowledge that Yuno retains sole discretion in deciding whether to enter into contracts with potential Prospects, following thorough due diligence and compliance reviews;

(m) During the pre-implementation phase, pre-qualify Referred Clients based on internal program assessments, including but not limited to: * Requirements Assessment; * Risk Management; * Due Diligence Documentation; * Technical Feasibility Review; * Quality Assurance Measures;

(n) Upon confirming a Referred Client’s suitability, collaborate with Yuno and the Referred Client during the implementation phase, acting as a co-program manager. The Referrer may independently manage Referred Clients if necessary and, when called upon, co-manage Referred Clients post-go-live for the duration of the program’s lifecycle;

(o) Report to Yuno as promptly as practicable with details of any potential Referred Client introductions. Such reports shall include sufficient details to facilitate Yuno’s evaluation and must be provided in a format mutually agreed upon by the parties, whether through regular mail, email, or other electronic means.

‍

3.2. Yuno's Obligations: Yuno shall, in performing its obligations under this Agreement: 

(a) designate and appoint a qualified Business Development (BD) or a representative who will be responsible for engaging in close collaboration with the Referrer to strategize, coordinate, and facilitate the successful closure of sales opportunities; 

(b) provide the Referrer with reasonable support and information necessary for the performance of its obligations under this Agreement; 

(c) maintain the quality and availability of its services in accordance with industry standards; 

(d) process all referrals in a timely and professional manner; (e) provide reasonable notice to the Referrer of any material changes to its services or referral programs that may affect the Referrer's activities under this Agreement;

(f) Compensate the Referrer for successful Referred Clients in accordance with the Revenue Share terms detailed in the applicable Partnership Schedule and these Terms and Conditions, if applicable.

‍

3.3. Anti-Bribery & Corruption. Referrer shall (i) comply with Applicable ABC Laws; (ii) maintain adequate procedures to prevent bribery; (iii) not offer, promise or give anything of value to improperly influence any person; (iv) immediately report suspected violations to Yuno Ethics & Compliance; (v) keep accurate books; (vi) acknowledge breach is material and permits immediate termination.

‍

3.4. Anti-Money Laundering. Referrer represents and warrants that neither it, its owners, nor any Prospect it introduces is a Sanctioned Entity or engaged in ML/TF. Referrer must (a) screen Prospects against sanctions lists before referral; (b) update Yuno if sanctions status changes; (c) cooperate with Yuno’s KYC/KYB requests (incl. KYB forms) within ten (10) business days; (d) maintain AML policies consistent with FATF standards.

‍

4. COMPENSATION. 

‍

4.1. Yuno shall pay the Referrer a Revenue Share as specified in the applicable Partnership Schedule. Entitlement to Revenue Share is contingent upon the Referrer's full compliance with this Agreement. Payment terms, including invoicing procedures, currency, and any minimum thresholds for payment, shall be specified in the Partnership Schedule. Unless otherwise specified, Yuno will calculate and remit due payments. Yuno shall not be obligated to pay any Revenue Share if the Referrer is in breach of this Agreement, or for referrals obtained through misrepresentation, or in violation of any applicable laws or Yuno's policies. Yuno may, in addition to other remedies, offset any amounts owed by Referrer to Yuno against any Revenue Share payable. 

‍

5. TERM AND TERMINATION

5.1. This Agreement shall commence on the date specified in the Partnership Schedule ("Effective Date") and shall continue for an Initial Term as specified in the Partnership Schedule (the "Initial Term"), if any. If no Initial Term is specified, the Agreement shall continue on an at-will basis. If an Initial Term is specified, thereafter, this Agreement may be renewed as set forth in the Partnership Schedule or, if not specified, shall continue on an at-will basis, unless terminated earlier in accordance with this section

‍

5.2. Termination for Cause. Either Party may terminate this Agreement immediately upon written notice to the other Party if: (a) the other Party commits a material breach of any term of this Agreement and (if such breach is remediable) fails to remedy that breach within thirty (30) days after receipt of notice in writing to do so; (b) the other Party commits a series of persistent breaches which together constitute a material breach; (c) the other Party becomes insolvent, enters into liquidation, enters into any arrangement with its creditors, or has a receiver or administrator appointed over any of its assets; (d) the other Party ceases or threatens to cease carrying on business.

‍

5.3. Termination for Convenience. After the Initial Term, either Party may terminate this Agreement for convenience upon ninety (90) days' prior written notice to the other Party.

‍

5.4. Additional Termination Rights. Either Party ("Terminating Party") may terminate this Agreement immediately upon written notice to the other Party ("Non-Terminating Party") if the Non-Terminating Party: (a) engages in any fraudulent, deceptive, or unethical practices; (b) makes any unauthorized representations or warranties regarding the Terminating Party's services (or, in the case of the Referrer terminating, regarding Yuno's services as per the scope of this Agreement); (c) (i) in the case of Yuno terminating, if the Referrer becomes a competitor of Yuno or becomes affiliated with a competitor of Yuno; or (ii) in the case of the Referrer terminating, if Yuno engages in actions that directly and materially undermine the Referrer's primary business activities through competitive actions not contemplated by this Agreement; (d) actions or omissions could reasonably be expected to damage the Terminating Party's reputation or business relationships.

‍

5.5. Effect of Termination. Upon termination or expiration of this Agreement: (a) all rights and licenses granted under this Agreement shall immediately terminate; (b) each Party shall return or destroy all Confidential Information of the other Party; (c) the Referrer shall cease all referral activities and use of Yuno's materials; (d) Yuno shall pay any undisputed Revenue Share amounts validly accrued and payable to the Referrer strictly for Referred Clients that fully qualified prior to the effective date of termination, in accordance with the payment terms; (e) For Referred Clients who entered into a service agreement with Yuno prior to the effective date of termination and for whom the Referrer is otherwise eligible for Revenue Share, Yuno shall continue to pay Revenue Share for such Referred Clients for a period of three (3) months following the effective date of termination (the "Tail Period"), provided that the termination was not due to Referrer's material breach or fraudulent conduct as outlined in Sections 5.2 or 5.4(a), and provided the Referred Client remains a client of Yuno in good standing.

‍

5.6. 5.6. Survival. The following provisions shall survive termination or expiration of this Agreement: Sections 1 (Definitions and Interpretation), 5.5 (Effect of Termination), 5.6 (Survival), 6 (Confidentiality), 7 (Intellectual Property), 12 (Representations and Warranties), 13 (Indemnification), 14 (Limitation of Liability), and 15 (General Provisions).

6. CONFIDENTIALITY. 

‍

6.1 For the purposes of this Agreement, Confidential Information means any and all non-public information, whether communicated orally or in written, electronic, or other form, disclosed by one Party (the "Disclosing Party") to the other Party (the "Receiving Party") that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information includes, but is not limited to, technical data, trade secrets, know-how, research, product plans, services, customer lists and customers (including details of Referred Clients beyond what is strictly necessary for the Referrer's performance), prospects, markets, software, developments, inventions, processes, formulas, technology, designs, drawings, engineering, hardware configuration information, marketing strategies, financial data, pricing information, or other business information of the Disclosing Party. Yuno's Confidential Information specifically includes Yuno's Services architecture and unpublished documentation. The Referrer's Confidential Information may include specific, non-public information about its business operations or referred clients that it shares with Yuno for the purpose of this Agreement and is clearly marked or identified as confidential.

‍

6.2. Exclusions: Confidential Information shall not include any information which the Receiving Party can demonstrate: (a) Was publicly known and made generally available prior to the time of disclosure by the Disclosing Party; (b) Becomes publicly known and made generally available after disclosure by the Disclosing Party to the Receiving Party through no action or inaction of the Receiving Party or any of its Representatives in breach of this Agreement; (c) Was already in the possession of the Receiving Party at the time of disclosure by the Disclosing Party, without any confidentiality obligations attached thereto; (d) Was obtained by the Receiving Party from a third party without a breach of such third party’s obligations of confidentiality and without the Receiving Party having knowledge that such third party was under an obligation of confidentiality to the Disclosing Party with respect to such information; or (e) Was independently developed by the Receiving Party without use of or reference to any Confidential Information of the Disclosing Party.   

‍

6.3. Mutual Confidentiality Obligations: Each Party (as a "Receiving Party") shall: (a) Hold all Confidential Information of the other Party (the "Disclosing Party") in strict confidence; (b) Use the Disclosing Party's Confidential Information solely for the purpose of performing its obligations or exercising its rights under this Agreement (the "Permitted Purpose"); (c) Not disclose any Confidential Information of the Disclosing Party to any third person except with the Disclosing Party's prior written consent or as expressly permitted under Section 6.4 of this Agreement; (d) Take all reasonable measures to protect the confidentiality and avoid the unauthorized use, disclosure, publication, or dissemination of the Disclosing Party's Confidential Information, including implementing appropriate technical and organizational security measures. Such measures shall be at least as protective as those the Receiving Party uses for its own confidential information of like importance, but in no event less than a reasonable standard of care; (e) Promptly notify the Disclosing Party in writing of any actual or suspected unauthorized use, disclosure, access to, or loss of the Disclosing Party's Confidential Information of which it becomes aware; (f) Cooperate with the Disclosing Party in any action the Disclosing Party may take to protect its Confidential Information or remedy any unauthorized disclosure.

‍

6.4. Permitted Disclosures: The Receiving Party may disclose Confidential Information of the Disclosing Party: (a) To its employees, officers, directors, legal counsel, auditors, or financial advisers ("Representatives") who have a bona fide need to know such Confidential Information for the Permitted Purpose, provided that such Representatives are bound by written confidentiality obligations (or professional ethical duties) no less restrictive than those contained herein. The Receiving Party shall be responsible for any breach of these confidentiality terms by its Representatives; (b) As required by applicable law, court order, or any governmental or regulatory authority with jurisdiction over the Receiving Party, provided that the Receiving Party, where legally permissible and practicable, gives the Disclosing Party prompt written notice of such requirement prior to disclosure and an opportunity to contest or seek confidential treatment or a protective order for such information, and reasonably cooperates with the Disclosing Party in such efforts. The Receiving Party shall only disclose the minimum amount of Confidential Information required to comply with such legal requirement.

‍

6.5. Return or Destruction: Upon either Party's written request, or upon termination or expiration of this Agreement (whichever is earlier), each Party shall promptly, and in any event within thirty (30) days, (a) return to the other Party all documents and tangible materials containing that Party's Confidential Information, and (b) securely erase or destroy all electronic copies of that Party's Confidential Information in its possession or control. Each Party shall provide written certification of such destruction upon request. Notwithstanding the foregoing, each Party may retain copies of Confidential Information (i) to the extent required by applicable law or regulatory authorities, or (ii) that are maintained as part of its automated backup or archival systems from which deletion is not reasonably practicable, provided that any such retained Confidential Information shall remain subject to all confidentiality obligations under this Agreement for as long as it is retained.

‍

7. INTELLECTUAL PROPERTY

‍

7.1. For the purposes of this Agreement, Intellectual Property Rights means all intellectual property rights and industrial property rights recognized in any jurisdiction worldwide, whether registered or unregistered, including any application or right of application for such rights. This includes but is not limited to copyright and related rights, database rights, confidential information, trade secrets, know-how, business names, trade names, trademarks, service marks, get-up, logos, domain names, rights in goodwill or to sue for passing off, unfair competition rights, patents, petty patents, utility models, semi-conductor topography rights, and rights in designs.

‍

7.2. Ownership: (a) Yuno's Intellectual Property: As between the Parties, Yuno and/or its licensors own and shall retain all right, title, and interest in and to Yuno's Services, Yuno's trademarks, trade names, logos, service marks, Yuno's Confidential Information, Yuno's website, marketing materials provided by Yuno, and all Intellectual Property Rights related thereto, including any modifications, enhancements, or derivative works thereof ("Yuno IP"). All derivative works created using Yuno IP shall be the exclusive property of Yuno. (b) Referrer's Intellectual Property: As between the Parties, the Referrer and/or its licensors own and shall retain all right, title, and interest in and to the Referrer's trademarks, trade names, logos, service marks, Referrer's Confidential Information, the Referrer's website, any marketing materials independently developed and owned by the Referrer, and all Intellectual Property Rights related thereto ("Referrer IP"). (c) No Transfer Other Than Licensed Rights: Nothing in this Agreement shall constitute or be construed as a transfer or assignment of any Intellectual Property Rights from one Party to the other, except for the limited licenses expressly granted herein. Each Party acknowledges that it acquires no rights in the other Party's Intellectual Property Rights other than the limited rights granted by this Agreement. (d) Feedback: If Referrer provides any suggestions, ideas, improvements, or other feedback to Yuno regarding Yuno IP ("Feedback"), Yuno shall have a royalty-free, worldwide, transferable, sublicensable, irrevocable, perpetual license to use or incorporate into the Yuno IP any such Feedback. Referrer shall have no obligation to provide Feedback.  

‍

7.3. License Grants: (a) License from Yuno to Referrer: Subject to the terms and conditions of this Agreement, Yuno grants to the Referrer a non-exclusive, non-transferable, non-sublicensable, revocable license during the Term of this Agreement to use Yuno's trademarks, trade names, and marketing materials that Yuno may provide from time to time ("Yuno Marks"), solely for the purpose of performing its obligations and exercising its rights under this Agreement in identifying itself as a Yuno referral partner and in referring potential clients to Yuno. The Referrer shall strictly comply with any trademark usage guidelines provided by Yuno and shall not modify or alter any of Yuno's Marks or materials without Yuno's prior written consent. All goodwill arising from the use of Yuno Marks by the Referrer shall inure to the sole benefit of Yuno. (b) License from Referrer to Yuno (If Applicable): If, and only to the extent, the Referrer provides Yuno with any of the Referrer IP (such as Referrer's logos or trademarks, "Referrer Marks") for use in connection with this Agreement (e.g., for mutually agreed co-marketing activities or for Yuno to identify the Referrer as a partner), the Referrer hereby grants Yuno a non-exclusive, non-transferable, non-sublicensable (except to Yuno's agents or subcontractors for the purpose of fulfilling Yuno's obligations), royalty-free, worldwide, revocable license during the Term to use such Referrer Marks solely for the specific purposes mutually agreed in writing by the Parties or as necessary for Yuno to fulfill its obligations under this Agreement. Yuno shall use such Referrer Marks in accordance with any reasonable trademark usage guidelines provided in writing by the Referrer. All goodwill arising from the use of Referrer Marks by Yuno shall inure to the sole benefit of the Referrer.

‍

7.4. Restrictions on Use of Intellectual Property: Each Party (as a "Licensee") agrees that it shall not, with respect to the other Party's (as a "Licensor") Intellectual Property Rights: (a) Use the Licensor's Intellectual Property Rights in any manner that could damage, disparage, tarnish, or dilute the value or reputation of such rights or the Licensor; (b) Register or attempt to register, or assist any third party in registering or attempting to register, any trademarks, trade names, domain names, or social media handles that are identical or confusingly similar to the Licensor's Marks, unless expressly authorized in writing by the Licensor; (c) Challenge or assist others in challenging the Licensor's ownership or the validity of the Licensor's Intellectual Property Rights or the registration or enforceability thereof (this sub-clause applies particularly to the Referrer with respect to Yuno IP); (d) Engage in any conduct that could constitute infringement, misappropriation, or unfair competition with respect to the Licensor's Intellectual Property Rights; (e) Except as expressly permitted herein, copy, modify, adapt, translate, reverse engineer, decompile, disassemble, or create derivative works based on the Licensor's Intellectual Property Rights (this restriction applies particularly to any software or technology provided by Yuno); (f) Remove, alter, or obscure any proprietary notices (including copyright and trademark notices) on or in any materials provided by the Licensor.

‍

7.5. Notification of Infringement: Each Party shall promptly notify the other Party in writing if it becomes aware of any actual or suspected infringement, misappropriation, or unauthorized use of the other Party's Intellectual Property Rights related to the subject matter of this Agreement. Each Party agrees to cooperate reasonably with the other Party, at the other Party's reasonable request and expense, in any investigation or enforcement action the other Party may choose to take against such infringing activities. Neither Party is obligated to take any action against infringers, but the Party owning the IP shall have the sole right to control any such action.

‍

8. DATA PROTECTION

‍

8.1. Compliance with Applicable Law. Each Party shall comply with its respective obligations under all Applicable Law concerning Personal Data in connection with this Agreement.

‍

8.2. Referrer’s Obligations for Referred Client Data. The Referrer represents and warrants that, with respect to any Personal Data of potential or actual Referred Clients that it provides to Yuno or otherwise processes in connection with this Agreement:

a) it has a valid lawful basis for collecting, processing, and transferring such Personal Data to Yuno for the purposes contemplated by this Agreement, including obtaining any necessary consents from data subjects where required by Applicable Law;

b) it has provided all necessary notices to data subjects regarding the processing of their Personal Data and its transfer to Yuno, in accordance with Applicable Law; and

c) it will not provide any Personal Data to Yuno that is not strictly necessary for the purpose of the referral or as otherwise agreed in the Partnership Schedule.

‍

8.3. Yuno’s Use of Personal Data. Yuno shall process Personal Data received from the Referrer in accordance with its publicly available Privacy Policy (a current version of which is available at https://www.y.uno/privacy and Applicable Law. For the purpose of this Agreement, where Referrer provides Personal Data of Referred Clients to Yuno, each Party acts as an independent Data Controller with respect to such Personal Data it processes.

‍

8.4. Data Security. Each Party shall implement and maintain appropriate technical and organizational measures to protect Personal Data in its possession or control against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, consistent with industry standards and Applicable Law.

‍

8.5. International Transfers. If Referrer transfers Personal Data from a jurisdiction that restricts cross-border data transfers (such as the European Economic Area or the United Kingdom) to Yuno located in a jurisdiction not deemed adequate by the originating jurisdiction’s authorities, Referrer warrants that it has implemented appropriate safeguards for such transfer as required by Applicable Law (e.g., Standard Contractual Clauses or data subject consent where permissible and appropriate for a Controller-to-Controller transfer).

‍

9. ANTI-BRIBERY AND CORRUPTION

‍

9.1. Compliance. The Referrer represents, warrants, and covenants that it shall comply, and shall ensure its owners, directors, officers, employees, agents, and any other third parties acting on its behalf in connection with this Agreement (collectively, "Referrer Representatives") comply, with all Applicable Law relating to anti-bribery and anti-corruption, including but not limited to the U.S. Foreign Corrupt Practices Act, the UK Bribery Act 2010, and any applicable local anti-corruption laws in the jurisdictions where it operates or performs activities under this Agreement.

‍

9.2. Prohibited Conduct. The Referrer and Referrer Representatives shall not, directly or indirectly, offer, promise, give, authorize, solicit, or accept any pecuniary or other advantage, gift, payment, consideration, or benefit of any kind which is or could be construed as an illegal or corrupt practice (including but not limited to bribes or facilitation payments) to or from any person or entity (including any Government Official or any employee or representative of a commercial entity) for the purpose of obtaining or retaining business, securing an improper advantage, or influencing any act or decision in connection with the activities under this Agreement or Yuno's business. A "Government Official" includes any officer or employee of a government at any level, or any department, agency, or instrumentality thereof, or of a public international organization, or any person acting in an official capacity for or on behalf of any such government or department, agency, or instrumentality, or for or on behalf of any such public international organization, as well as any political party, party official, or candidate for public office.

‍

9.3. Books and Records. Referrer shall maintain accurate books, records, and accounts in connection with its activities under this Agreement, reflecting all transactions in reasonable detail, and in accordance with generally accepted accounting principles.

‍

9.4. Notification. Referrer shall immediately notify Yuno in writing of any credible allegations, investigation, or suspected or actual breach of this Section 9.

‍

9.5. Termination. Yuno may terminate this Agreement immediately upon written notice to the Referrer if Yuno determines, in its reasonable discretion, that the Referrer has breached any provision of this Section 9.

‍

10. SANCTIONS AND ANTI-MONEY LAUNDERING (AML) COMPLIANCE

‍

10.1. Sanctions Compliance. The Referrer represents, warrants, and covenants that: (a) neither it, nor its owners, directors, officers, or (to its knowledge) employees or Referrer Representatives involved in this Agreement, is an individual or entity ("Person") that is, or is owned or controlled by Persons that are: (i) the subject or target of any sanctions administered or enforced by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC), the U.S. Department of State, the United Nations Security Council, the European Union, His Majesty’s Treasury of the United Kingdom, or other relevant sanctions authorities (collectively, "Sanctions"); or (ii) located, organized, or resident in a country or territory that is, or whose government is, the subject or target of Sanctions (including, without limitation, Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk People’s Republic, and Luhansk People’s Republic regions of Ukraine); (b) it will not, directly or indirectly, use any funds received from Yuno under this Agreement, or lend, contribute, or otherwise make available such funds to any Person, in any manner that would result in a violation of Sanctions by any Party; and (c) it will not refer to Yuno any prospective client that is known by Referrer to be subject to Sanctions or otherwise involved in activities that would violate Sanctions.

‍

10.2. AML Compliance. Referrer shall conduct its business in compliance with all Applicable Law concerning anti-money laundering and counter-terrorist financing. Referrer shall not knowingly engage in any transaction or refer any prospective client that is involved in or facilitates money laundering, terrorist financing, or other illegal activities.

‍

10.3. Notification and Termination. Referrer shall immediately notify Yuno in writing if it becomes aware of any breach of this Section. Yuno may terminate this Agreement immediately upon written notice to the Referrer if Yuno determines, in its reasonable discretion, that the Referrer has breached any provision of this Section 10 or that continuing the relationship with the Referrer could expose Yuno to Sanctions violations or AML risks.

‍

11. AUDIT RIGHTS

‍

11.1. Upon reasonable prior written notice (not less than ten (10) business days, unless a shorter period is required due to a suspected material breach or regulatory requirement), Yuno or its designated independent auditor (who shall be subject to confidentiality obligations no less restrictive than those in this Agreement) shall have the right, during normal business hours and no more than once per calendar year (unless a material breach is reasonably suspected or a regulatory body requires more frequent audits), to audit the Referrer’s records, processes, and documentation directly related to its compliance with its material obligations under this Agreement, including but not limited to obligations under Sections 8 (Data Protection), 9 (Anti-Bribery and Corruption), and 10 (Sanctions and AML Compliance). Referrer shall provide reasonable cooperation and access to relevant information and personnel in connection with such audits. Audits shall be conducted in a manner that minimizes unreasonable disruption to Referrer’s business operations. If an audit reveals a material breach by the Referrer, the Referrer shall, without prejudice to Yuno’s other rights or remedies, promptly take corrective actions at its own expense, and if the breach is significant, Referrer shall bear the reasonable, documented, out-of-pocket costs of such audit.

‍

12. REPRESENTATIONS AND WARRANTIES

‍

12.1. Mutual Representations and Warranties. Each Party represents and warrants to the other Party that: (a) it has full power and authority to enter into and perform its obligations under this Agreement; (b) this Agreement constitutes legal, valid, and binding obligations of such Party; (c) the execution and performance of this Agreement does not violate any other agreement or obligation to which such Party is bound; (d) it shall comply with all applicable laws and regulations in performing its obligations under this Agreement; (e) it has obtained and shall maintain all necessary licenses, permissions, and consents required to perform its obligations under this Agreement; (f) it has the requisite knowledge, skills, and resources to perform its obligations under this Agreement in a professional manner; (g) it shall not make any representations or warranties regarding the other Party or its services except as expressly authorized in writing by that other Party; (h) it shall not engage in any deceptive or unethical practices that could damage the other Party's reputation or business relationships.

‍

13. INDEMNIFICATION

‍

13.1. Mutual Indemnification. Each Party (as an "Indemnifying Party") shall indemnify, defend, and hold harmless the other Party, its officers, directors, employees, agents, and affiliates (as an "Indemnified Party") from and against any and all losses, damages, liabilities, claims, actions, judgments, settlements, interest, awards, penalties, fines, costs, or expenses of whatever kind, including reasonable attorneys' fees and the costs of enforcing any right to indemnification under this Agreement (collectively, "Losses"), arising out of or resulting from: (a) any breach by the Indemnifying Party of any of its representations, warranties, covenants, or obligations under this Agreement; (b) any negligent or willful acts or omissions of the Indemnifying Party, its employees, or agents in connection with its performance under this Agreement; (c) any claim that the Indemnifying Party's activities, services, or materials furnished or used in connection with this Agreement infringe upon or misappropriate any third party's intellectual property rights; provided, however, that the Indemnifying Party shall have no obligation under this subsection (c) to the extent such a claim is based upon or arises from (i) the Indemnified Party's unauthorized modification or use of the Indemnifying Party's services or materials, or (ii) specifications or materials provided by the Indemnified Party and used by the Indemnifying Party as directed; or (d) any claim arising from the Indemnifying Party's failure to comply with applicable laws or regulations in connection with its obligations or performance under this Agreement.

‍

13.2. Indemnification Procedure. The Party seeking indemnification shall promptly notify the indemnifying Party in writing of any claim for which indemnification is sought. The indemnifying Party shall have control over the defense and settlement of any such claim, provided that any settlement requiring any action or admission by the indemnified Party shall require such Party's prior written consent.

‍

14. LIMITATION OF LIABILITY

‍

14.1. Exclusion of Indirect Damages. EXCEPT FOR BREACH OF CONFIDENTIALITY OBLIGATIONS OR INTELLECTUAL PROPERTY RIGHTS, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, OR BUSINESS OPPORTUNITY, WHETHER BASED ON CONTRACT, TORT, OR ANY OTHER LEGAL THEORY, EVEN IF SUCH PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

‍

14.2. Liability Cap. EXCEPT FOR INDEMNIFICATION OBLIGATIONS, BREACH OF CONFIDENTIALITY OBLIGATIONS, OR INTELLECTUAL PROPERTY RIGHTS, EACH PARTY'S TOTAL CUMULATIVE LIABILITY UNDER THIS AGREEMENT SHALL NOT EXCEED THE GREATER OF (A) THE TOTAL AMOUNT OF REVENUE SHARE PAYMENTS MADE OR PAYABLE TO THE REFERRER DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY, OR (B) USD 20,000 OR THE EQUIVALENT IN UNITED STATES  DOLLARS.

‍

15. GENERAL PROVISIONS

‍

15.1. Independent Contractors. The relationship between the Parties is that of independent contractors. Nothing in this Agreement shall be construed as creating any agency, partnership, joint venture, or other form of joint enterprise, employment, or fiduciary relationship between the Parties.

‍

15.2. Non-Exclusivity and Competitive Activities. While this Agreement permits Yuno to engage other referrers or clients directly, the Referrer agrees that during the term of this Agreement and for twelve (12) months thereafter, it shall not: (a) engage in any business that competes with Yuno's payment routing or related services in the Territory, whether as owner, employee, consultant, or in any other capacity; (b) enter into any referral or commission arrangements with Yuno's competitors; (c) solicit or service any of Yuno's clients for competing services. The Referrer shall immediately disclose in writing any payment industry relationships or activities that could reasonably create a conflict of interest. Yuno may terminate this Agreement immediately if, in its reasonable judgment, such relationships threaten its business interests.

‍

15.3. Assignment. Neither Party may assign, transfer, or delegate any of its rights or obligations under this Agreement without the prior written consent of the other Party, which consent shall not be unreasonably withheld. Any attempted assignment in violation of this Section shall be void. This Agreement shall be binding upon and inure to the benefit of the Parties and their respective permitted successors and assigns.

‍

15.4. Force Majeure. Neither Party shall be liable for any failure or delay in performance under this Agreement due to circumstances beyond its reasonable control, including but not limited to acts of God, war, terrorism, pandemic, natural disasters, or governmental actions.

‍

15.5. Notice. All notices required or permitted under this Agreement shall be in writing and shall be deemed effective upon: (a) personal delivery; (b) when received by email or facsimile transmission; or (c) three days after mailing by certified or registered mail, postage prepaid, return receipt requested. Notices shall be sent to the addresses set forth in the preamble or to such other address as either Party may specify in writing.

‍

15.6. Amendment and Modification. Yuno reserves the right to amend, modify, or supplement these Terms and Conditions at any time in its sole discretion. Yuno will provide the Referrer a prior notice of any material changes. Such notice may be provided by sending an email to the email address the Referrer has on file with Yuno (as provided in the Partnership Schedule or program registration), by posting a notification on Yuno's website or referral program portal, or by any other reasonable means of communication. The "Effective Date" at the top of these Terms and Conditions will indicate the date of the latest revision. The Referrer's continued participation in the referral program, submission of new referrals, or acceptance of Revenue Share payments after the expiry of such notice period will constitute the Referrer's unconditional acceptance of the amended Terms and Conditions. If the Referrer does not agree to the amended terms, the Referrer's sole and exclusive remedy is to terminate this Agreement by providing written notice to Yuno prior to the effective date of the amendments, and cease all referral activities.

‍

15.7. Severability. If any term or provision of this Agreement is found by a court of competent jurisdiction to be invalid, illegal, or unenforceable, such invalidity, illegality, or unenforceability shall not affect any other term or provision of this Agreement or invalidate or render unenforceable such term or provision in any other jurisdiction.

‍

15.8. Governing Law, Jurisdiction, and Dispute Resolution. This Agreement and any disputes or claims arising out of or in connection with its subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with the internal laws of Singapore, without giving effect to any choice or conflict of law provision or rule that would cause the application of the laws of any jurisdiction. Any legal suit, action, or proceeding arising out of or related to this Agreement or the services provided hereunder, which is not subject to arbitration as set forth below, shall be instituted exclusively in the courts of Singapore. Each Party irrevocably submits to the exclusive jurisdiction of such courts in any such suit, action, or proceeding. Any dispute, controversy, or claim arising out of or relating to this Agreement, including the formation, interpretation, breach, or termination thereof, shall be resolved by final and binding arbitration administered by the Singapore International Arbitration Centre (“SIAC") under its Arbitration Rules then in effect. The seat, or legal place, of arbitration shall be Singapore. The arbitration shall be conducted by a single arbitrator, and the language of the arbitration shall be English. Judgment on the award rendered by the arbitrator may be entered in any court having jurisdiction thereof.

‍

15.9. Entire Agreement. This Agreement (comprising these Terms and Conditions and the applicable, accepted Partnership Schedule, along with any schedules or exhibits explicitly incorporated) constitutes the sole and entire agreement between the Referrer and Yuno with respect to the subject matter hereof and supersedes all prior and contemporaneous understandings, agreements, representations, and warranties, both written and oral, with respect to such subject matter. In the event of any conflict between these Terms and Conditions and an Partnership Schedule, the terms of the Partnership Schedule shall prevail with respect to that specific Referrer and that specific engagement, provided such Partnership Schedule is duly accepted by Yuno

‍

15.10. No Waiver: No waiver by either Party of any provision of this Agreement shall be effective unless explicitly set forth in writing and acknowledged by the waiving Party. No failure to exercise, or delay in exercising, any right, remedy, power, or privilege arising from this Agreement shall operate or be construed as a waiver thereof; nor shall any single or partial exercise of any right, remedy, power, or privilege hereunder preclude any other or further exercise thereof or the exercise of any other right, remedy, power, or privilege.   

‍

15.11. Language: These Terms and Conditions are prepared in English. If Yuno provides a translation into any other language, the English language version shall prevail in case of any conflict or ambiguity.

‍

ANNEX A

‍
PROVISIONS APPLICABLE TO THE ASSIGNMENT AND TRANSFER OF PERSONAL DATA

‍

CLAUSES 

FIRST. DEFINITIONS. For the purposes of this Annex and the Agreement of which it forms part, the following capitalized terms, whether singular or plural, shall have the meanings set forth herein:

a) Responsible Party: natural or legal person of a private nature that decides on the processing of personal data; in this document, “Yuno” or the “Company”, as applicable, in the terms defined in the corresponding section of this Annex. In this Annex, Responsible Party shall have the same meaning as a ‘data controller’ under the Personal Data Regulations.-

b) In charge: in this Annex, and when specified, refers to “Yuno”.

c) Annex: This Annex on the Assignment and Transfer of Personal Data.

d) Privacy Notice: Physical, electronic, or in any other format document generated by the Responsible Party that is made available to the data subject, prior to the processing of their Personal Data.

e) Agreement: The Agreement entered into between Yuno and the Company.

f) Purposes: Those established in Clause 1 (Purpose) of the Agreement.

g) LFPD: the Federal Law on Protection of Personal Data Held by Private Parties.

h) RLFPD: the Regulations of the Federal Law on Protection of Personal Data Held by Private Parties.

i) Personal Data Regulation: Collectively, the LFPD, the RLFPD, and any other provision applicable to the parties regarding the protection of Personal Data, databases containing them, and/or the protection of personal data holders.

j) Transferring Responsible Party: the Responsible Party that communicates Personal Data to another Responsible Party; in this Annex, and when specified, refers to the Company.

k) Receiving Responsible Party: the Responsible Party that receives Personal Data from another Responsible Party; in this Annex and when specified, refers to Yuno.

l) Personal Data: any information concerning an identified or identifiable natural person.

m) Processing: The obtaining, use, disclosure, or storage of Personal Data, by any means. The use includes any action of access, management, exploitation, transfer, or disposal of Personal Data.

n) Transfer of Personal Data: the communications of personal data made between the Company (Responsible Party) and Yuno (In charge), for the fulfillment of the Purposes of the Agreement.

o) Sub-processor: any processor contracted by the Processor (Yuno) or by any other sub-processor of the Processor that agrees to receive Personal Data exclusively intended for the Processing of Personal Data activities to be carried out on behalf of the Responsible Party.

p) INAI: the National Institute of Transparency, Access to Information, and Protection of Personal Data.

q) ARCO Rights: the rights of access, rectification, cancellation, and opposition provided by the LFPD and the RLFPD.

r) Security Measures: collectively, the administrative, technical, and physical security measures that allow the protection of Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

s) Database: The ordered set of Personal Data concerning an identified or identifiable individual.

t) Personal Data Security Breach: at any stage of the Processing of Personal Data:

a. Unauthorized loss or destruction of Personal Data or Databases;

b. Theft, loss, or unauthorized copying of Personal Data or Databases;

c. Unauthorized use, access, or processing of Personal Data or Databases; or

d. Damage, alteration, or unauthorized modification of Personal Data or Databases.

 u) Merchant: means the Merchants as defined in the main Agreement above, whose end user’s Personal Data is processed. 

‍

SECOND. OBJECT.

‍

This Annex aims to formalize the rights and obligations of the Parties in connection with the Processing of Personal Data that must be carried out for the fulfillment and execution of the Agreement and, in particular, to define precisely and document those phases of the Processing of Personal Data in which Yuno will act as ‘Processor’ for the Company or as Receiving Responsible Party, as the case may be, and in the terms defined in the corresponding section of this Annex.

PERSONAL DATA PROCESSING

TRANSFER AND PROCESSING

THIRD. SCOPE OF PERSONAL DATA PROCESSING

‍

The Parties agree that through this Annex they will comply with the requirement of “contractual clauses” or “other legal instrument” that must exist between the Responsible Party and the Processor, referred to in article 51 of the RLFPD.

If Yuno, in its capacity as Processor, processes information of the Company (Responsible Party) containing Personal Data, or otherwise processes Personal Data on behalf of the Company (Responsible Party) in connection with the fulfillment of the obligations provided for in the Agreement, all the provisions of this section will be applicable to the Parties.

The Processor acknowledges that all rights, obligations, and interests over Personal Data correspond to the Company, except for those rights, obligations, and interests established in the LFPD and RLFPD that are conferred upon the Processor.

FOURTH. OBLIGATIONS OF THE RESPONSIBLE PARTY.

‍

The Responsible Party agrees, undertakes, and guarantees that:

a) The Processing of Personal Data, including its Transfer, is carried out and will be carried out in accordance with the provisions of the Personal Data Regulation and that this does not violate the applicable provisions of such regulation.

b) Has instructed Yuno (Processor) to process, on behalf of the Responsible Party, the Personal Data necessary for the fulfillment of the Agreement and will continue instructing the Processor on such Processing during the Term of the Agreement and of this Annex, in accordance with the Personal Data Regulation.

c) Has obtained from the corresponding Data Subjects the legally required consent to carry out the Processing of their Personal Data, in accordance with the provisions of the Personal Data Regulation.

FIFTH. OBLIGATIONS OF THE PROCESSOR.

‍

Under this Annex and without prejudice to the provisions of the rest of its clauses and the Agreement itself of which it is part, Yuno expressly undertakes the following:

a) In its capacity as Processor, follow the instructions of the Company for the Processing of the Personal Data necessary for the fulfillment of the Purposes established in the Agreement.

b) Process the information provided by the Company in accordance with the applicable regulations and, in particular, in accordance with the Personal Data Regulation when such information contains Personal Data. Yuno will be a subject regulated by the LFPD in its capacity as Processor and must process the Personal Data in accordance with the provisions of this Annex and the Privacy Notices that have been made available to the Data Subjects by the Company or the Merchant (as applicable).

c) Act with the utmost diligence, expertise, probity, and good faith for the fulfillment of the Purposes, in such a way that at no time the rights, image, prestige, or reputation of the Company are harmed.

d) Provide the Company, at the time it requires it, with any information requested and related to the information and/or Personal Data communicated by the Company to Yuno.

e) Adopt and implement sufficient and necessary administrative, physical, and technical security measures for the protection of the Personal Data subject to processing.

f) Notify the Responsible Party (the Company) immediately if any of the following cases occur:

a. If it is required by a competent authority to communicate or disclose the Personal Data subject to Processing, unless such notification constitutes a violation of a legal provision relating to the confidentiality of an investigation;

b. If a Personal Data Security Breach occurs in connection with the Personal Data it processes on behalf of the Company; or

c. If it receives a request for the exercise of ARCO Rights (the rights of Access, Rectification, Cancellation and Objection), presented directly by a Data Subject, in which case it must refrain from processing such request, except express contrary indication communicated by the Company in writing.

g) Provide the Company, within a period of 5 (five) business days, with any requirement from a competent authority related to the Processing of the Personal Data subject to this Annex and, in particular, those related to the Security Measures adopted for its Processing.

h) In the event of hiring a Sub-processor, comply with the provisions of Clause Seven of this Annex.

SIXTH. OBLIGATIONS APPLICABLE TO THE TERMINATION OF THE SERVICES.

‍

The Parties agree that, upon termination of the Agreement, the Company may instruct Yuno (and Sub-processors, if applicable) to, at its choice:

(i) Return to the Company the Personal Data subject to processing, including any copies and Personal Data that have been processed as a result of the fulfillment of the Purposes of the Agreement, or

(ii) Destroy all Personal Data, including any copies and Personal Data processed as a result of the fulfillment of the Purposes of the Agreement, demanding in this case a certificate from the Processor, specifying the method of destruction used and, if applicable, the identity of the service provider in charge of the destruction.

In both cases, Yuno as a Processor may retain a copy of the Personal Data essential to comply with current legal or regulatory provisions that require such retention by a Processor, for any purpose expressly provided by such legislation. In such cases, the Processor guarantees to the Company the blocking and confidentiality of the retained Personal Data, and that it will refrain from using them for any subsequent processing.

SEVENTH. CONTRACTING OF SUB-PROCESSORS.

‍

The Processor must ensure that the Sub-processors it hires adhere to the same obligations regarding the protection of Personal Data established for it under this Annex. In addition, it must carry out a prior evaluation in information security matters according to its internal procedures, in order to verify that Personal Data will be kept secure and confidential.

In such cases, the Processor must enter into a Personal Data Processing Assignment Agreement with each and every one of the corresponding Sub-processors. Such Personal Data Processing Assignment Agreements must be in writing and contain at least the same obligations regarding the protection of Personal Data established between the Parties. The same agreements must establish that any claim, cost, loss, damage to third parties, or liability incurred and directly or indirectly arising from the breach of the obligations of the Sub-processor will be assumed exclusively by the latter. The Processor must maintain an updated registry of all the Personal Data Processing Assignment Agreements it enters into with Sub-processors.

EIGHTH. SECURITY MEASURES AND CONTACT PERSON.

‍

The Processor must implement all Security Measures that are appropriate to protect Personal Data.

In addition, the Processor must:

a) Have a contact person who will be responsible for: (i) keeping the Company informed of all the Security Measures implemented to protect Personal Data, and (ii) assisting the Company to respond to any request from the Data Subjects or any requirement from the INAI related to the Personal Data subject to Processing under this Annex.

b) Keep the Personal Data Department of the Company informed and updated about the identity and contact information of the person referred to in the immediately preceding subparagraph.

c) Ensure that the contact person referred to in subparagraph a) provides the information required by the Company that regulates this Annex promptly, taking into account the deadlines provided by the Personal Data Regulation.

d) Unless applicable legal provision to the contrary, refrain from responding to requests from Personal Data Subjects related to the exercise of their ARCO Rights. In such cases, the person referred to in subparagraph a) must immediately communicate to the Company the receipt of any request or requirement.

NINTH. PERSONAL DATA SECURITY BREACHES.

‍

Yuno must communicate to the Company any Personal Data Security Breach related to the Personal Data subject to this Annex, that could occur at any stage of the Processing under its responsibility or under the responsibility of a Sub-processor, if applicable. The communication must be made immediately upon receiving information about the breach.

For such purposes, and so that the Company has the necessary information and documentation to act in accordance with the provisions of the Personal Data Regulation, if the Processor suffers a Personal Data Security Breach related to such Personal Data, it must communicate the occurrence of the Personal Data Security Breach to the Company as soon as it has a confirmation of the same, transferring to the latter, at least, the following information:

a) The nature of the incident (including information about the circumstances in which it occurred).

b) The compromised Personal Data.

c) The corrective actions it immediately took, once it confirmed that the Personal Data Security Breach occurred.

d) Any information that allows the Company/its Merchants to communicate to the Data Subjects the measures they may adopt to protect their interests.

e) The means through which more information about the Personal Data Security Breach can be obtained, to be able to inform the Data Subjects of any relevant information in this regard.

PERSONAL DATA TRANSFERS

TENTH. SCOPE OF THE TRANSFER

‍

Both parties recognize and agree that, exclusively with respect to Personal Data required to process electronic payments, including credit and/or debit card data of third parties that Yuno collects for the execution of the Agreement, Yuno will act in its capacity as Responsible Party, respecting at all times the applicable provisions of the Personal Data Regulation and making its own privacy notice available to the Data Subjects, committing to process them exclusively for the fulfillment of the Purposes of the Agreement and in accordance with the provisions of said notice.

Any other Processing activity or category of Personal Data of third parties that Yuno collects from time to time to comply with its obligations under the Agreement and this Annex will be treated by Yuno as Processor of Personal Data, in the terms referred to in the section "PERSONAL DATA PROCESSING" of this Annex.

Outside the aforementioned cases, the Parties agree that, through this Annex, they will comply with article 73 of the RLFPD, regulating their relationship as Transferring Responsible Party and Receiving Responsible Party, respectively, and when applicable according to the type of Purpose that Yuno must fulfill.

Specifically, the Parties agree to comply with the following obligations when the provision of the services provided for in the Agreement requires that the Company (Transferring Responsible Party) communicates to Yuno (Receiving Responsible Party) Personal Data on which the latter will make decisions on Processing and Security Measures:

A. Identification of Databases. The Receiving Responsible Party will determine the Personal Data that the Transferring Responsible Party must communicate to it, as well as the way to deliver such information.

B. Lawfulness of transfers. The Transferring Responsible Party must inform through the corresponding Privacy Notice and, if necessary, obtain the consent required from the Data Subjects, before enabling the Transferring Responsible Party (where it is the Company) carrying out any Transfer of Personal Data to the Receiving Responsible Party.

The Receiving Responsible Party undertakes to respect each and every one of the obligations that may correspond to it as "recipient of personal data" under the provisions of the Personal Data Regulation.

C. Security Measures. The Parties agree that the Receiving Responsible Party must implement Security Measures that allow the protection of Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or Processing, and any other measures that may be imposed by or in compliance with the Personal Data Regulation in each case, taking into account the state of the technology, the nature of the stored data, and the risks to which they are exposed.

D. Rights of Data Subjects. In relation to Personal Data that are transferred to the Receiving Responsible Party by the Transferring Responsible Party, each Party will be responsible for attending to the requests of the Data Subjects regarding the exercise of the ARCO Rights provided by the Personal Data Regulation.

E. Content and Communication of Privacy Notices. The signing of this Annex and the Agreement constitutes proof of the knowledge that the Receiving Responsible Party has about the existence and content of the Comprehensive Privacy Notices that regulate the Processing of the Personal Data that the Transferring Responsible Party will transfer to it. Such Privacy Notices must be respected by the Receiving Responsible Party in accordance with the provisions of the LFPD, the RLFPD, and any other provision applicable to the Processing of the Personal Data of the Data Subjects that the Transferring Responsible Party transfers to the Receiving Responsible Party for the fulfillment of the Agreement and this Annex.

F. The Transferring Responsible Party guarantees and undertakes that its Comprehensive Privacy Notices regulating the Processing of Personal Data that may be or may be subject to Transfer to the Receiving Responsible Party will include clear and specific information about the transfer of Personal Data to recipients such as the Receiving Responsible Party, for purposes compatible with the purpose of the Agreement:

G. The Transferring Responsible Party shall ensure that all personal data transferred to the Receiving Responsible Party is in full compliance with the requirements of the GDPR, including the use of appropriate safeguards for international data transfers of European citizens' data. The Transferring Responsible Party agrees to incorporate by reference the Standard Contractual Clauses (SCCs), Model Four, as approved by the EU Commission, to ensure the adequate protection of personal data during the transfer to the Receiving Responsible Party entity, provided the Transferring Responsible Party is a data processor and the Receiving Responsible Party is a data controller. The Receiving Responsible Party entity will treat this data in compliance with the obligations outlined under the SCCs or any other legal instrument used to safeguard the data transfer.

G. The Parties acknowledge that, under the structure of services provided pursuant to this Agreement and Annex, the Personal Data involved in the Processing activities generally originates from the end users of the Merchant (Data Controller), and is processed by Yuno (as Data Processor on behalf of the Merchant), and in certain cases is communicated to the Receiving Responsible Party (the Company) for the purposes of enabling payment orchestration through its systems.

To the extent that the Receiving Responsible Party processes such Personal Data as an independent Data Controller—for example, to fulfill its own regulatory or legal obligations, including anti-money laundering (AML) or fraud prevention duties—it shall enter into a direct contractual arrangement with the relevant Merchant (Data Controller) clearly defining the scope of such Processing, and shall ensure full compliance with the applicable Personal Data Regulation, including Regulation (EU) 2016/679 (the "GDPR") where applicable.

In the absence of a documented agreement between the Merchant and the Receiving Responsible Party that explicitly defines the latter as an independent Data Controller for the relevant Processing, such Processing shall be deemed to be performed by the Receiving Responsible Party acting as a Sub-processor to Yuno, in accordance with Clause Seven of this Annex and under the documented instructions of the Merchant.

In any case involving the transfer of Personal Data subject to the GDPR from Yuno (acting as Processor) to the Receiving Responsible Party (acting as Controller), and where such transfer qualifies as a restricted international data transfer under Chapter V of the GDPR, the Parties agree that the transfer shall be governed by Module Four (Processor to Controller) of the Standard Contractual Clauses (SCCs) adopted by the European Commission through Implementing Decision (EU) 2021/914, which are hereby incorporated by reference. The Receiving Responsible Party undertakes to comply with all obligations applicable to it as data importer under such SCCs or any alternative lawful transfer mechanism adopted in accordance with the GDPR.

For all other transfers or onward disclosures of Personal Data, the Receiving Responsible Party shall remain fully responsible for ensuring that it complies with its obligations as a data recipient under the applicable Personal Data Regulation, and in particular, for respecting the terms of the Privacy Notices issued by the Merchant to the Data Subjects.

‍

ELEVENTH. DURATION.

‍

This Annex will have the same duration as the Agreement Term, beginning its validity on the Effective Date of its signing. However, either Party may communicate to the other its intention to terminate this Annex by prior written notice with 60 (sixty) calendar days' notice prior to the effective date of termination, without the need for a declaration or judicial or extrajudicial procedure and without liability to the Parties. In the latter case, the Parties agree to document the treatment of Personal Data and the obligations that correspond to them in accordance with the Agreement.

TWELFTH. BREACH AND TERMINATION.

‍

In case of breach by any of the Parties to any obligation under this Annex, the affected party must send a written notice to the breaching party, granting a period of 15 (fifteen) business days from receipt of the notice to remedy said breach. If the breach persists once the aforementioned period has elapsed, the affected party may terminate this Annex without any liability and without the need for a prior judicial declaration, or demand the forced compliance of said unfulfilled obligations through judicial proceedings. In both cases, the breaching party will be liable for the damages and losses caused to the affected party by said breach.

THIRTEENTH. INDEMNIFICATION.

‍

The Parties recognize and agree that any claim, cost, loss, damage to third parties, or liability incurred and directly or indirectly arising from the breach of this Annex or the provisions of the Personal Data Regulation will be assumed by the breaching party. Each PartyYuno agrees and acknowledges that it will be liable to compensate the other PartyCompany for any and all losses, claims, liabilities, damages, costs, expenses (including attorney’s fees), regulatory fines, and penalties that the PartyCompany incurs on account of a breach of Personal Data that has occurred due to Yuno’s acts or omissions in course of processing of such data.

FOURTEENTH. FORCE MAJEURE.

‍

Neither Party will be responsible for any delay or failure in their obligations under this Annex when it is directly caused by force majeure or fortuitous event. In such an event, the breaching party that fails to comply must notify the affected party within 2 (two) business days following the event of force majeure or fortuitous event, to reschedule compliance with this Annex.

FIFTEENTH. ASSIGNMENT.

‍

Neither Party may assign and/or transfer in any way their rights and obligations under this Annex to any third party, except with the prior written consent of the other party, and provided that they comply with the applicable legal provisions and regulations.

The provisions of the previous paragraph are not applicable to the subcontracting of services regulated by Clause Seven of this Annex, which must be carried out, if applicable, in accordance with the provisions of this Annex.

SIXTEENTH. MODIFICATIONS.

‍

The Parties agree that they may not modify the obligations assumed through this Annex, except when it is necessary to adapt it to new provisions or regulations, subsequent to the date of the new provisions coming into force. The foregoing does not prevent the Parties from adding (through written agreement) new clauses or Annexes, provided that none of them contradicts the original provisions of the Agreement and this Annex, and is added by prior written agreement.

SEVENTEENTH. AUTONOMY OF THE PROVISIONS.

‍

The Parties agree that the nullity, invalidity, illegality, and/or any other defect in the provisions of this Annex will only affect said provision; therefore, it will not affect the other provisions agreed herein, which will retain their binding force.

EIGHTEENTH. HEADINGS.

‍

The Parties expressly state and acknowledge that the headings and titles established at the beginning of each clause are merely identifying; therefore, they may not be considered as an element of restriction or limitation on the content or the legal effects or scopes thereof.

NINETEENTH. APPLICABLE LAW AND JURISDICTION.

‍

This Annex will be governed by the current federal legislation applicable in the United Mexican States. For the interpretation, execution, and compliance of this Annex, the Parties submit to the jurisdiction of the federal courts located in Mexico City, expressly waiving any other jurisdiction or jurisdiction that may correspond to them by reason of their present or future domiciles or for any other reason.

‍

YUNO REVENUE SHARE ADDENDUM – TERMS AND CONDITIONS

‍

Last updated date (“Effective Date”): July 8, 2025

These YUNO REFERRAL PROGRAM TERMS AND CONDITIONS (hereinafter, the “Terms and Conditions”) govern the relationship between Yuno Tecnologías S.A.P.I. de C.V. (Yuno), a company incorporated under the laws of the United Mexican States, with principal offices at Calle Cráter 38 Col. Jardines del Pedregal, Alcaldía Álvaro Obregón, Mexico City, CP 01900, and any entity or individual participating in Yuno’s referral program by submitting a Revenue Share Addendum (hereinafter, the “Revenue Share Addendum”) that refers to these Terms and Conditions, or that has been accepted by Yuno as part of its referral program (hereinafter, the “Partner”).

By submitting a Revenue Share Addendum to Yuno, or by participating in any way in Yuno’s referral program (for example, by submitting referrals that are accepted by Yuno under the program), the Partner expressly and unconditionally agrees to be bound by these Terms and Conditions, which may be amended by Yuno pursuant to Section 11.6. These Terms and Conditions, together with the corresponding Revenue Share Addendum, constitute the entire agreement between Yuno and the Partner with respect to the referral program.

Recitals

1. Yuno is engaged in the provision of intelligent payment orchestration services and related services (“Yuno Services”).
2. The Referrer wishes to participate in Yuno’s referral program by referring potential clients to Yuno in exchange for compensation, subject to the terms set forth herein.
3. Yuno wishes to receive such referrals and to provide compensation through a revenue sharing scheme, in accordance with these Terms and Conditions and the applicable Revenue Share Addendum.

Therefore, in consideration of the mutual value and benefits, the Parties agree as follows:

‍

1.  DEFINITIONS AND INTERPRETATION

1.1. Definitions

Unless the context requires otherwise, capitalized terms shall have the following meanings:

• Agreement: Means these Terms and Conditions, together with any applicable Revenue Share Addendum accepted by the Parties, and any other annexes or documents incorporated by reference.
• Confidential Information: Has the meaning set forth in Section 6.
• Intellectual Property Rights: Has the meaning set forth in Section 7.
• Revenue Share Addendum: Any addendum executed between Yuno and the Partner that incorporates these Terms and Conditions by reference, including the initial addendum and any other applicable addendum upon renewal or amendment.
• Sanctioned Entity: Any natural or legal person included on sanctions lists maintained by the UN, OFAC, EU, UK OFSI, or any other authority applicable to either Party.
• Applicable AML Laws: The FATF Recommendations and any national legislation governing money laundering and terrorist financing in the Territory (e.g., Law 2195/2022 in Colombia, Law 9.613/1998 in Brazil, the U.S. Bank Secrecy Act).
• Applicable ABC Laws: Includes, without limitation, the U.S. FCPA, the UK Bribery Act 2010, Law 2195/2022 (CO), the General Law of Administrative Responsibilities (MX), and any other anti-corruption legislation binding on the Parties.

1.2. Interpretation

Unless the context indicates otherwise:

1. references to sections and annexes refer to this Agreement;
2. headings are included for convenience only and do not affect interpretation;
3. the singular includes the plural and vice versa;
4. references to any gender include all genders;
5. the terms “including,” “among others,” or similar expressions do not imply limitation;
6. references to any Party include its authorized successors and assignees;
7. references to any document include it as amended, supplemented, or replaced;
8. references to laws include their amendments, replacements, or applicable regulations.

‍

2.  REFERRAL PARTNERSHIP
   
   1. Appointment.
      Subject to these Terms and Conditions, and once accepted by Yuno, the Partner is designated and accepts such designation as a non-exclusive referrer of potential clients for Yuno Services.
   2. Scope of Referral Activities.
      The specific scope of the Partner’s activities, including objectives, specific services to be referred, and the applicable Territory, shall be detailed in the corresponding Revenue Share Partnership. The Partner may only promote Yuno Services as set forth in these Terms and Conditions and in the applicable Revenue Share Partnership.
3. OBLIGATIONS
   
   1. Partner Obligations

The Partner undertakes to fulfill the following obligations under this Agreement:

1. Perform all activities professionally, in accordance with industry standards and following any instructions or guidelines provided by Yuno.
2. Make only statements, warranties, or representations regarding Yuno Services that are included in Yuno’s official documentation or authorized in writing.
3. Promptly inform Yuno of any complaints, observations, or relevant feedback from prospects or Referred Clients that could affect Yuno’s reputation, operations, or business relationships.
4. Comply at all times with applicable legislation, including without limitation: AML laws, applicable ABC laws, and data protection regulations. The Partner shall conduct sanctions screening on prospects before referring them to Yuno and shall retain documentary evidence of such screenings for at least five (5) years.
5. Obtain and maintain all licenses, permits, and authorizations necessary to fulfill its obligations under this Agreement, and provide evidence of compliance upon Yuno’s request.
6. Refrain from engaging in deceptive, unlawful, or unethical practices that could harm Yuno’s reputation or the integrity of its services.
7. Not modify any materials or documents provided by Yuno without prior written consent.
8. Not make statements about Yuno’s services that contradict its official documentation or marketing materials; avoid any unauthorized claims or commitments.
9. Provide proactive and personalized support during onboarding and implementation phases (pre- and post-activation), including: (i) assistance with technical integration; (ii) operational and technical support before and after go-live; and (iii) accurate tracking of referrals and monitoring of the commercial closure process.
10. Use best efforts to favorably position Yuno with Referred Clients and foster long-lasting business relationships.
11. Provide Yuno with all relevant and necessary information to fulfill the objectives of this Agreement, including pertinent details about Referred Clients through agreed channels (email, reports, portals, etc.).
12. Acknowledge that Yuno reserves absolute discretion to determine whether to enter into agreements with prospects following compliance reviews.
13. Pre-qualify Referred Clients during the pre-implementation phase, considering internal eligibility criteria, including but not limited to: (i) requirements assessment; (ii) risk management; (iii) due diligence documentation; (iv) technical feasibility review; (v) quality assurance validations.
14. Once the Referred Client’s eligibility has been validated, actively collaborate with Yuno and the Client during implementation, acting as program manager and, if necessary, co-managing the Client throughout the service lifecycle.
15. Promptly report to Yuno any contact with Referred Clients, providing sufficient information for their evaluation in the format agreed upon by the Parties (email, report, electronic medium, etc.).
    
    

2. Yuno Obligations: Yuno undertakes the following obligations under this Agreement:

1. Designate a qualified Business Development representative or equivalent, who will be responsible for working closely with the Partner to coordinate, plan, and facilitate the successful closure of business opportunities.
2. Provide the Partner with reasonably necessary support and information so that the Partner can fulfill its obligations under this Agreement.
3. Maintain the quality and availability of Yuno Services in accordance with industry standards.
4. Process all referrals in a professional and timely manner.
5. Provide the Partner with reasonable advance notice of any material changes to Yuno Services or the referral program that may affect the Partner’s activities under this Agreement.
6. Compensate the Partner in accordance with the revenue share terms set forth in the applicable Revenue Share Partnership and these Terms and Conditions, where applicable.

‍

4. Anti-Bribery and Anti-Corruption. The Partner shall: (i) comply with all Applicable ABC Laws; (ii) maintain adequate procedures to prevent acts of bribery; (iii) not offer, promise, or provide anything of value to improperly influence any person; (iv) immediately report any potential violation to Yuno’s Ethics and Compliance channel; (v) keep accurate books and accounting records; (vi) acknowledge that any breach constitutes a material default entitling Yuno to immediately terminate the Agreement.
5. Anti-Money Laundering. The Partner represents and warrants that neither it, nor its owners, nor any Prospect it refers is a Sanctioned Entity or participates in money laundering or terrorist financing activities. The Partner shall: (i) screen Prospects against sanctions lists before referring them; (ii) notify Yuno if the sanctions status of any Prospect changes; (iii) cooperate with Yuno’s requirements related to KYC/KYB processes, including KYB forms, within ten (10) business days; (iv) maintain AML compliance policies consistent with FATF standards.

‍

4. COMPENSATION.
   
   1. Yuno shall pay the Partner a Revenue Share as specified in the applicable Revenue Share Addendum. The Partner’s right to receive such compensation is conditioned upon full compliance with this Agreement. Payment terms—including invoicing procedures, currency, and any minimum payment thresholds—shall be established in the Revenue Share Partnership. Unless otherwise stated, Yuno shall be responsible for calculating and transferring the corresponding payments.
      Los términos de pago —incluyendo procedimientos de facturación, moneda y cualquier umbral mínimo para efectuar pagos— serán establecidos en la Asociación con Reparto de Ingresos. Salvo que se indique lo contrario, Yuno será responsable de calcular y transferir los pagos correspondientes.

Yuno shall not be obligated to pay any Revenue Share in the following cases:

• If the Partner breaches this Agreement;
• If referrals were obtained through false or misleading statements, or in violation of law or Yuno’s policies.

Additionally, Yuno may, without prejudice to other remedies, set off any amounts owed by the Partner against any pending Revenue Share payments.

‍

5. TERM AND TERMINATION 
   
   1. This Agreement shall enter into force on the date indicated in the Revenue Share Addendum (the “Effective Date”) and shall remain in effect for the initial term set forth therein (the “Initial Term”), if any. If no Initial Term is specified, this Agreement shall remain in effect indefinitely.
   2. Upon expiry of the Initial Term, if applicable, the Agreement may be renewed as set forth in the Revenue Share Addendum or, failing that, shall continue in effect indefinitely unless terminated pursuant to this Section.
   3. Termination for Cause: Either Party may terminate this Agreement immediately by written notice to the other Party if:

1. The other Party commits a material breach of any provision of this Agreement and, if such breach is capable of remedy, fails to remedy it within thirty (30) days after receiving written notice thereof;
2. The other Party commits a series of persistent breaches that collectively constitute a material breach;
3. The other Party becomes insolvent, enters into liquidation proceedings, enters into an arrangement with its creditors, or a receiver or administrator is appointed over any of its assets;
4. The other Party ceases or threatens to cease its business operations.

‍

4. Termination for Convenience: Following the expiry of the Initial Term (if any), either Party may terminate this Agreement without cause upon at least ninety (90) days’ prior written notice to the other Party.

‍

5. Additional Termination Rights: Either Party (the “Terminating Party”) may terminate this Agreement immediately by written notice to the other Party (the “Non-Terminating Party”) if:

1. The Non-Terminating Party engages in fraudulent, deceptive, or unethical conduct;
2. The Non-Terminating Party makes unauthorized statements or warranties regarding the Terminating Party’s services (in the case of termination by the Partner, regarding Yuno’s services under the scope of the Agreement);
3. In the case of termination by Yuno: if the Partner becomes a competitor of Yuno or associates with one;
4. In the case of termination by the Partner: if Yuno directly and substantially affects the Partner’s core business activities through competitive actions not contemplated under this Agreement;
5. The Non-Terminating Party engages in acts or omissions that could reasonably harm the Terminating Party’s reputation or business relationships.

‍

6. Effects of Termination: Upon termination or expiry of this Agreement:

1. All rights and licenses granted under this Agreement shall terminate immediately;
2. Each Party shall return or destroy all Confidential Information of the other Party;
3. The Partner shall cease all referral activities and stop using Yuno’s materials;
4. Yuno shall pay the Partner any accrued and undisputed Revenue Share amounts with respect to Referred Clients that qualified before the effective date of termination, in accordance with applicable payment terms;
5. With respect to Referred Clients who entered into a services agreement with Yuno prior to the termination date and for whom the Partner is entitled to Revenue Share, Yuno shall continue paying such share for a period of three (3) months following the termination date (the “Tail Period”), provided that termination did not result from the Partner’s material breach or fraudulent conduct pursuant to Sections 5.2 or 5.4(a), and provided that the Referred Client remains an active Yuno client.

7. Survival: The following provisions shall survive termination or expiry of this Agreement: Sections 1 (Definitions and Interpretation), 5.6 (Effects of Termination), 5.7 (Survival), 6 (Confidentiality), 7 (Intellectual Property), 12 (Representations and Warranties), 13 (Indemnification), 14 (Limitation of Liability), and 15 (General Provisions).

6. CONFIDENTIALITY. 
   
   1. For purposes of this Agreement, “Confidential Information” means all non-public information, whether disclosed orally, in writing, electronically, or by any other means, that is provided by one Party (the “Disclosing Party”) to the other Party (the “Receiving Party”), and that is designated as confidential or that reasonably should be understood to be confidential given its nature and the circumstances of its disclosure. Confidential Information includes, without limitation, technical data, trade secrets, know-how, product or service plans, customer or prospect lists, markets, software, developments, inventions, processes, formulas, technology, designs, drawings, hardware configurations, business strategies, financial information, pricing, and other business information. Yuno’s Confidential Information specifically includes the architecture of Yuno Services and unpublished documentation. The Partner’s Confidential Information may include specific non-public information about its business operations or referred clients that it shares with Yuno for purposes of this Agreement and that is clearly identified as confidential.
   2. Information shall not be considered Confidential Information if the Receiving Party can demonstrate that it: (i) was publicly known and generally available prior to disclosure by the Disclosing Party; (ii) becomes publicly known and generally available after disclosure by the Disclosing Party through no act or omission of the Receiving Party or its Representatives in violation of this Agreement; (iii) was already in the Receiving Party’s possession at the time of disclosure, without any obligation of confidentiality; (iv) was obtained from a third party without breach of any confidentiality obligation by such third party and without the Receiving Party knowing that such third party was bound to confidentiality; and (v) was independently developed by the Receiving Party without using or referencing the Disclosing Party’s Confidential Information.
   3. Mutual Confidentiality Obligations: Each Party, in its capacity as Receiving Party, undertakes to: (i) maintain strict confidentiality of all Confidential Information of the Disclosing Party; (ii) use Confidential Information solely to fulfill its obligations or exercise its rights under this Agreement (the “Permitted Purpose”); (iii) not disclose Confidential Information to third parties without the prior written consent of the Disclosing Party, except as permitted in the following section; (iv) implement appropriate technical and organizational measures to protect Confidential Information and prevent unauthorized use, disclosure, or publication—such measures shall be at least as strict as those used by the Receiving Party to protect its own confidential information of similar importance, and in no case less than a reasonable standard of care; (v) promptly notify the Disclosing Party in writing of any unauthorized use, access, disclosure, or loss of its Confidential Information; (vi) reasonably cooperate with the Disclosing Party to protect its Confidential Information and remedy any unauthorized disclosure.
   4. Permitted Disclosures: The Receiving Party may disclose Confidential Information of the Disclosing Party only: (i) to its employees, officers, directors, attorneys, auditors, or financial advisors (“Representatives”) who have a legitimate need to know such information for the Permitted Purpose, provided that such Representatives are subject to written confidentiality obligations (or professional duties of secrecy) at least as strict as those contained in this Agreement—the Receiving Party shall be liable for any breach of confidentiality by its Representatives; or (ii) when required by law, court order, or competent governmental authority, provided that, to the extent legally and reasonably possible, the Receiving Party notifies the Disclosing Party in writing before making such disclosure, allowing it to object or seek protective measures. The Receiving Party shall limit its disclosure to the minimum information required to comply with such legal obligation.
   5. Return or Destruction: Upon written request by either Party, or upon termination or expiry of this Agreement (whichever occurs first), each Party shall, within thirty (30) days: (a) return to the other Party all tangible documents and materials containing its Confidential Information; and (b) securely delete or destroy all electronic copies of such Confidential Information in its possession or under its control. Each Party shall provide a written certificate of destruction upon request. Notwithstanding the foregoing, each Party may retain copies of Confidential Information that (i) it is required to retain by law or regulation; or (ii) are contained in automated backup copies or archiving systems, provided that their deletion is not reasonably practicable. Such retained Confidential Information shall remain subject to the confidentiality obligations herein for as long as it remains in the Receiving Party’s possession.
7. INTELLECTUAL PROPERTY
   
   1. For purposes of this Agreement, Intellectual Property Rights means all intellectual and industrial property rights recognized in any jurisdiction worldwide, whether registered or unregistered, including any application or right to apply for such rights. This includes, without limitation, copyright and related rights, database rights, confidential information, trade secrets, know-how, trade names, trademarks, service marks, logos, domain names, image rights or rights of action for unfair competition, patents, utility models, semiconductor topography rights, and design rights.
      
      
   2. Ownership: (a) Yuno Intellectual Property: As between the Parties, Yuno and/or its licensors are and shall remain the exclusive owners of all rights, title, and interest in and to Yuno Services, its trademarks, trade names, logos, confidential information, website, marketing materials provided by Yuno, and all related Intellectual Property Rights, including modifications, improvements, or derivative works. Any derivative work created using Yuno’s Intellectual Property shall be the exclusive property of Yuno. (b) Partner Intellectual Property: As between the Parties, the Partner and/or its licensors shall retain all rights, title, and interest in and to its trademarks, trade names, logos, confidential information, website, independently developed marketing materials, and related Intellectual Property Rights. (c) This Agreement does not transfer any intellectual property rights between the Parties, except for the limited licenses expressly granted herein. Each Party acknowledges that it acquires no rights in the other Party’s Intellectual Property, except as expressly permitted under this Agreement. (d) Feedback: If the Partner provides suggestions, ideas, improvements, or other feedback regarding Yuno’s Intellectual Property (“Feedback”), Yuno shall have an irrevocable, worldwide, transferable, sublicensable, perpetual, royalty-free license to use or incorporate such Feedback. The Partner shall not be obligated to provide Feedback.
   3. License Grants: (a) Yuno License to Partner: Subject to the terms of this Agreement, Yuno grants the Partner a non-exclusive, non-transferable, non-sublicensable, revocable license for the duration of this Agreement to use Yuno’s trademarks, trade names, and marketing materials as provided from time to time, solely for the purpose of performing its obligations under this Agreement, identifying itself as a Yuno referral partner, and referring potential clients. The Partner shall comply with Yuno’s brand guidelines as provided and may not modify such trademarks or materials without prior written authorization. All goodwill arising from use of Yuno’s trademarks shall inure exclusively to Yuno’s benefit. (b) Partner License to Yuno (if applicable): To the extent that the Partner provides Yuno with elements of its Intellectual Property (e.g., Partner logos or trademarks) for purposes connected to this Agreement (such as co-marketing activities or partner identification), the Partner grants Yuno a non-exclusive, non-transferable, non-sublicensable (except to its agents or subcontractors for performance of its obligations), worldwide, royalty-free, revocable license to use such trademarks solely for the purposes agreed upon in writing between the Parties or as necessary to fulfill this Agreement. Yuno shall comply with reasonable brand guidelines provided by the Partner. All goodwill arising from use of the Partner’s trademarks shall inure exclusively to the Partner’s benefit.

‍

4. Restrictions on Use of Intellectual Property: Each Party, as licensee, undertakes not to: (a) use the licensor Party’s Intellectual Property in any manner that could damage, disparage, or dilute its value or reputation; (b) register, attempt to register, or assist third parties in registering trademarks, trade names, domain names, or similar identifiers confusingly similar to those of the licensor Party without written authorization; (c) challenge the ownership or validity of the licensor Party’s Intellectual Property Rights or assist third parties in doing so; (d) engage in conduct that may constitute infringement, misappropriation, or unfair competition with respect to the other Party’s Intellectual Property; (e) absent express authorization, copy, modify, adapt, translate, decompile, disassemble, reverse engineer, or create derivative works from the licensor Party’s Intellectual Property, especially with respect to Yuno’s software or technology; (f) remove, alter, or obscure any proprietary notices (including copyright or trademark notices) contained in provided materials.

‍

5. Notification of Infringement: Each Party shall promptly notify the other Party in writing upon becoming aware of any unauthorized use, infringement, or misappropriation of Intellectual Property Rights related to this Agreement. Both Parties undertake to reasonably cooperate, at the request and cost of the rights-owning Party, in any investigation or enforcement action initiated. Neither Party shall be obligated to pursue legal action, but the rights-owning Party shall have the exclusive right to decide whether to do so.

‍

8. DATA PROTECTION
   
   1. Compliance with Applicable Law. Each Party shall comply with its respective obligations under applicable personal data protection legislation in connection with this Agreement.
   2. Partner Obligations Regarding Referred Client Data. The Partner represents and warrants that, with respect to any personal data of Referred Clients (prospective or current) that it provides to Yuno or processes in connection with this Agreement:

1. It has a valid legal basis for the collection, processing, and transfer of such personal data to Yuno, including, where required by applicable law, the consent of the data subjects.
2. It has provided all necessary notices to data subjects regarding the processing and transfer of their data to Yuno, in accordance with applicable law.
3. It shall not provide Yuno with any personal data that is not strictly necessary for the purposes of the referral or as agreed in the Revenue Share Addendum.

‍

3. Yuno’s Use of Personal Data. Yuno shall process personal data received from the Partner in accordance with its current Privacy Policy, available at https://www.y.uno/privacy, and with applicable law. For purposes of this Agreement, when the Partner provides Yuno with personal data of Referred Clients, both Parties shall act as independent data controllers with respect to the data each processes.
4. Data Security. Each Party shall implement and maintain appropriate technical and organizational measures to protect personal data under its possession or control against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, in line with industry standards and applicable law.
5. International Transfers. In the event that the Partner transfers personal data from a jurisdiction that restricts international data transfers (e.g., the European Economic Area or the United Kingdom) to Yuno, located in a jurisdiction not recognized as providing an adequate level of protection by the authorities of the originating country, the Partner warrants that it has implemented the necessary safeguards for such transfer in accordance with applicable law. This may include the use of Standard Contractual Clauses approved by the European Commission or other valid mechanisms where the transfer is between independent data controllers.

9. ANTI-BRIBERY AND CORRUPTION.
   
   1. The Partner represents, warrants, and undertakes that it, its owners, directors, officers, employees, agents, and any third party acting on its behalf in connection with this Agreement (collectively, the Partner’s Representatives) shall comply with all applicable anti-bribery and anti-corruption laws. This includes, without limitation, the U.S. Foreign Corrupt Practices Act (FCPA), the UK Bribery Act 2010, and any anti-corruption law applicable in the jurisdictions in which it operates or performs activities under this Agreement.
   2. Neither the Partner nor its Representatives shall, directly or indirectly, offer, promise, authorize, solicit, or accept any financial benefit or other advantage, payment, gift, or consideration of any kind that may be considered an illegal or corrupt act, including but not limited to bribes or facilitation payments, to or from any person or entity, whether a public official or private sector representative, for the purpose of obtaining or retaining business, securing undue advantages, or influencing decisions related to this Agreement or Yuno’s business. For purposes of this clause, a public official shall mean any officer or employee of a government at any level, agency, instrumentality, or state-owned enterprise, public international organization, political party, candidate, or person acting on behalf of any of the foregoing.
   3. The Partner shall maintain accurate books, records, and accounts with respect to its activities in connection with this Agreement, reflecting in reasonable detail all transactions carried out, in accordance with generally accepted accounting principles.
   4. The Partner undertakes to immediately notify Yuno in writing of any complaint, investigation, suspicion, or actual violation of this Section.
   5. Yuno may terminate this Agreement with immediate effect by written notice to the Partner if it determines, in its reasonable discretion, that the Partner has breached any provision of this Section.

‍

10. SANCTIONS AND ANTI-MONEY LAUNDERING (AML) COMPLIANCE
    
    1. Sanctions Compliance. The Partner represents, warrants, and undertakes that: (a) Neither it, nor its owners, directors, officers, employees, or representatives involved in this Agreement are persons (“Persons”) that are, or are owned or controlled by persons that are: (i) subject to sanctions imposed or administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC), the U.S. Department of State, the United Nations Security Council, the European Union, His Majesty’s Treasury of the United Kingdom, or other competent authorities (collectively, “Sanctions”); or (ii) located, organized, or resident in countries or territories subject to Sanctions (including, without limitation, Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk People’s Republic, and Luhansk People’s Republic regions of Ukraine); (b) It shall not, directly or indirectly, use, lend, contribute, or otherwise make available funds received from Yuno under this Agreement in a manner that would result in a violation of Sanctions by either Party; and (c) It shall not refer to Yuno any prospective client that, to its best knowledge, is subject to Sanctions or involved in activities that could constitute a violation thereof.
    2. Anti-Money Laundering Compliance. The Partner shall conduct its business activities in compliance with all applicable anti-money laundering and counter-terrorist financing laws. The Partner shall knowingly refrain from engaging in any transaction or referring any prospective client that is involved in, or facilitates, money laundering, terrorist financing, or other illegal activities.
    3. Notification and Termination. The Partner shall promptly notify Yuno in writing if it becomes aware of any breach of this Section. Yuno may terminate this Agreement immediately by written notice to the Partner if it determines, in its reasonable discretion, that the Partner has breached any provision of this Section 10 or that maintaining the relationship with the Partner could expose Yuno to Sanctions violation or anti-money laundering risks.
11. AUDIT RIGHTS
    
    1. Yuno, or an independent auditor appointed by Yuno and subject to confidentiality obligations no less strict than those set forth in this Agreement, shall have the right, upon at least ten (10) business days’ prior written notice (except where a shorter period is required due to a suspected material breach or regulatory requirement), to audit the Partner’s records, processes, and documentation directly related to compliance with its material obligations under this Agreement, including, without limitation, obligations set forth in Sections 8 (Data Protection), 9 (Anti-Bribery and Corruption), and 10 (Sanctions and AML Compliance). The Partner shall provide reasonable cooperation and access to relevant information and personnel in connection with such audits. Audits shall be conducted in a manner that minimizes undue disruption to the Partner’s operations. If a material breach by the Partner is identified as a result of an audit, the Partner shall, without prejudice to Yuno’s other rights and remedies, take the necessary corrective measures at its own expense and, if the breach is significant, bear the reasonable, documented, and directly related costs of such audit.
12. REPRESENTATIONS AND WARRANTIES
    
    1. Each Party represents and warrants to the other that: (a) it has full capacity and authority to enter into this Agreement and fulfill the obligations arising therefrom; (b) this Agreement constitutes a legal, valid, and binding obligation of such Party, enforceable in accordance with its terms; (c) the execution and performance of this Agreement does not violate any other agreement or commitment to which such Party is subject; (d) it shall comply with all applicable laws and regulations in the performance of its obligations under this Agreement; (e) it has obtained and shall maintain throughout the term of this Agreement all licenses, permits, and authorizations necessary to fulfill its obligations; (f) it has the knowledge, skills, experience, and resources necessary to perform its obligations professionally under this Agreement; (g) it shall not make representations or provide warranties regarding the other Party or its services without prior written authorization from such Party; and (h) it shall not engage in deceptive or unethical practices that could affect the other Party’s reputation or business relationships.

‍

13.  INDEMNIFICATION
    
    1. Each Party (as “Indemnifying Party”) agrees to indemnify, defend, and hold harmless the other Party, as well as its officers, directors, employees, agents, and affiliates (collectively, the “Indemnified Party”), from and against any losses, damages, liabilities, claims, actions, judgments, settlements, interest, penalties, fines, costs, or expenses of any kind, including reasonable attorneys’ fees and the costs associated with enforcing the right to indemnification under this Agreement (collectively, “Losses”), arising out of or resulting from: (a) any breach by the Indemnifying Party of its representations, warranties, covenants, or obligations set forth in this Agreement; (b) any negligent or willful act or omission by the Indemnifying Party, its employees, or agents in the performance of its obligations under this Agreement; (c) any claim that the activities, services, or materials provided or used by the Indemnifying Party under this Agreement infringe or constitute misappropriation of a third party’s intellectual property rights—provided, however, that the Indemnifying Party shall have no obligation to indemnify under this subsection if the claim arises from: (i) unauthorized modifications or misuse by the Indemnified Party of the services or materials provided by the Indemnifying Party; or (ii) specifications or materials provided by the Indemnified Party and used by the Indemnifying Party in accordance with instructions; and (d) any claim arising from the Indemnifying Party’s failure to comply with applicable laws or regulations in connection with its obligations or operations under this Agreement.

‍

2. The Party seeking indemnification shall promptly notify the Indemnifying Party of any claim subject to indemnification. The Indemnifying Party shall have control over the defense and any settlement of such claim, provided that any settlement that imposes an obligation or admission on the Indemnified Party shall require its prior written consent.

‍

14. LIMITATION OF LIABILITY
    
    1. EXCLUSION OF INDIRECT DAMAGES. EXCEPT IN CASES OF BREACH OF CONFIDENTIALITY OBLIGATIONS OR INTELLECTUAL PROPERTY RIGHTS, NEITHER PARTY SHALL BE LIABLE TO THE OTHER FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING, WITHOUT LIMITATION, LOSS OF PROFITS, DATA, OR BUSINESS OPPORTUNITIES, WHETHER SUCH LIABILITY IS BASED ON CONTRACT, TORT, OR ANY OTHER LEGAL THEORY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    2. LIABILITY CAP. EXCEPT IN CASES OF INDEMNIFICATION OBLIGATIONS, BREACH OF CONFIDENTIALITY OBLIGATIONS, OR VIOLATION OF INTELLECTUAL PROPERTY RIGHTS, THE TOTAL AGGREGATE LIABILITY OF EACH PARTY UNDER THIS AGREEMENT SHALL NOT EXCEED THE GREATER OF: (a) THE TOTAL PAYMENTS MADE OR TO BE MADE AS REVENUE SHARE TO THE PARTNER DURING THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY; OR (b) TWENTY THOUSAND UNITED STATES DOLLARS (USD 20,000) OR ITS EQUIVALENT IN UNITED STATES DOLLARS.

‍

15. GENERAL PROVISIONS
    
    1. Relationship of the Parties. The relationship between the Parties under this Agreement is solely that of independent contractors. Nothing in this Agreement shall be construed as creating an agency, partnership, joint venture, employment, or fiduciary relationship between the Parties. Neither Party shall have authority to bind the other or to assume obligations on its behalf.
    2. Non-Exclusivity and Competitive Activities. This Agreement allows Yuno to collaborate with other referrers or to serve its own clients directly. The Partner agrees that, during the term of this Agreement and for a period of twelve (12) months following its termination, it shall not: (a) engage in any business activity that competes with Yuno’s payment routing services or related services within the Territory, whether as an owner, employee, consultant, or in any other capacity; (b) enter into referral or commission agreements with Yuno’s competitors; or (c) solicit or provide services to Yuno’s clients for purposes related to competing services. The Partner undertakes to promptly notify Yuno in writing of any relationship or activity that may represent a conflict of interest. Yuno may immediately terminate this Agreement if, in its reasonable judgment, such relationships pose a risk to its business interests.

‍

3. Assignment. Neither Party may assign, transfer, or delegate its rights or obligations under this Agreement without the prior written consent of the other Party, which shall not be unreasonably withheld. Any assignment made in violation of this provision shall be null and void. This Agreement shall be binding upon the Parties and their respective authorized assignees and successors.
4. Force Majeure. Neither Party shall be liable for any failure or delay in the performance of its obligations where such failure or delay results from causes beyond its reasonable control, including without limitation acts of God, wars, terrorism, pandemics, natural disasters, or acts of governmental authorities.
5. Notices. All notices required or permitted under this Agreement shall be made in writing and shall be deemed effectively delivered when: (a) delivered personally; (b) received by email or fax; or (c) three (3) days after dispatch by certified or registered mail, postage prepaid, with return receipt requested. Notices shall be sent to the addresses indicated in the preamble of the Agreement or to such addresses as the Parties designate in writing.
6. Amendments. Yuno reserves the right to modify, amend, or supplement these Terms and Conditions at any time, at its sole discretion. Yuno shall provide the Partner with advance notice of any material changes. Such notice may be given by email to the Partner’s registered address (as indicated in the Revenue Share Partnership or in the program registry), by posting on Yuno’s website or referral program portal, or by any other reasonable means of communication. The “Effective Date” at the top of these Terms and Conditions indicates the date of the last update.

The Partner’s continued participation in the referral program, submission of new referrals, or acceptance of Revenue Share payments after the corresponding notice period shall constitute full and unconditional acceptance of the amended Terms and Conditions. If the Partner does not accept the new terms, its sole remedy shall be to terminate this Agreement by written notice to Yuno before the effective date of the amendments and cease all referral activities.

7. Severability. If any provision of this Agreement is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be deemed severed from the remainder, without affecting the validity or enforceability of the remaining provisions of the Agreement.
8. Governing Law, Jurisdiction, and Dispute Resolution. This Agreement and any dispute arising out of its interpretation, performance, or formation (including non-contractual disputes) shall be governed by the internal laws of the United Mexican States, without applying conflict of law rules. Any legal action or proceeding related to this Agreement that is not subject to arbitration shall be submitted exclusively to the federal or state courts located in Mexico City. Each Party irrevocably accepts the exclusive jurisdiction of such courts. Any dispute arising in connection with this Agreement shall first be attempted to be resolved through direct negotiation between the Parties. If, within thirty (30) calendar days of the dispute arising, it has not been resolved, conciliation shall be attempted before any authorized Conciliation Center in Mexico City. If the dispute remains unresolved, the Parties shall submit to the competent courts of Mexico City.
9. Entire Agreement. This Agreement (including these Terms and Conditions, the corresponding Revenue Share Partnership, and any expressly incorporated annexes) constitutes the entire agreement between the Partner and Yuno with respect to its subject matter, and supersedes all prior or contemporaneous agreements, understandings, and communications, whether oral or written, relating to the same. In the event of any conflict between these Terms and Conditions and a Revenue Share Partnership, the terms of such Partnership shall prevail solely with respect to the Partner and the specific commitment to which it refers, provided it has been formally accepted by Yuno.
10. Waiver. No waiver of any provision of this Agreement shall be valid unless expressly made in writing and accepted by the waiving Party. The failure to exercise or delay in exercising any right, remedy, or power under this Agreement shall not constitute a waiver thereof. Furthermore, the partial exercise of any right or power shall not preclude its subsequent exercise or the exercise of any other right.
11. Language. These Terms and Conditions have been drafted in the English language. In the event that Yuno provides a translation into another language, the English version shall prevail in the event of any conflict or ambiguity.

ANNEX A
PROVISIONS APPLICABLE TO THE PROCESSING AND TRANSFER OF PERSONAL DATA
CLAUSES

FIRST. DEFINITIONS. For the purposes of this Annex and the Agreement of which it forms part, the following capitalized terms, in singular or plural indistinctly, shall have the meanings set forth herein:

a) Data Controller: a natural or legal person of a private nature that decides on the processing of personal data; in this document “Yuno” or the “Company”, as applicable and as defined in the corresponding section of this Annex.b) Data Processor: in this Annex, and where so specified, refers to “Yuno”.c) Annex: This Annex on the Processing and Transfer of Personal Data.d) Privacy Notice: A physical, electronic, or other format document generated by the Data Controller and made available to the data subject prior to the processing of their Personal Data.e) Agreement: The Agreement entered into between Yuno and the Company.f) Purposes: Those set forth in Clause 1 (Object) of the Agreement.g) LFPD: the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de Particulares).h) RLFPD: the Regulations of the Federal Law on Protection of Personal Data Held by Private Parties.i) Personal Data Regulation: Collectively, the LFPD, the RLFPD, and any other provision applicable to the Company regarding the protection of personal data, the databases containing such data, and/or the protection of personal data subjects.j) Transferring Controller: the Data Controller that communicates Personal Data to another Data Controller; in this Annex, and where so specified, refers to the Company.k) Receiving Controller: the Data Controller that receives Personal Data from another Data Controller; in this Annex, and where so specified, refers to Yuno.l) Personal Data: any information concerning an identified or identifiable natural person.m) Processing: The collection, use, disclosure, or storage of Personal Data by any means. Use encompasses any action involving access, management, exploitation, transfer, or disposal of Personal Data.n) Remittance of Personal Data: communications of personal data made between the Company (Data Controller) and Yuno (Data Processor) for the fulfillment of the Purposes of the Agreement.o) Sub-processor: any processor engaged by the Data Processor or by any other sub-processor of the Data Processor who agrees to receive Personal Data exclusively intended for processing activities to be carried out on behalf of the Data Controller.p) INAI: the National Institute for Transparency, Access to Information and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales).q) ARCO Rights: the rights of access, rectification, cancellation, and objection provided for in the LFPD and the RLFPD.r) Security Measures: collectively, the administrative, technical, and physical security measures that enable the protection of Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.s) Personal Data Security Breach: at any stage of the Processing of Personal Data: (a) the unauthorized loss or destruction of Personal Data or Databases; (b) the theft, misplacement, or unauthorized copying of Personal Data or Databases; (c) the unauthorized use, access, or processing of Personal Data or Databases; or (d) the unauthorized damage, alteration, or modification of Personal Data or Databases.
b) Encargado: en el presente Anexo, y cuando así sea especificado, se refiere a “Yuno”.
c)Anexo: El presente Anexo de Encargo y Transferencia de Datos Personales.
d)Aviso de Privacidad: Documento físico, electrónico o en cualquier otro formato generado por el Responsable que es puesto a disposición del titular, previo al tratamiento de sus Datos Personales,
e) Acuerdo: El Acuerdo celebrado entre Yuno y la Empresa,
f) Finalidades: Las establecidas en la Cláusula 1 (Objeto) del Acuerdo,
g) LFPD: la Ley Federal de Protección de Datos Personales en Posesión de Particulares,
h) RLFPD: el Reglamento de la Ley Federal de Protección de Datos Personales en Posesión de Particulares,
i) Regulación de Datos Personales: En su conjunto, la LFPD, el RLFPD y cualquier otra disposición aplicable a la Empresa relativa a la protección de datos personales, las bases de datos que las contengan y/o a la protección de titulares de datos personales.
j)Responsable Transferente: aquel Responsable que comunica Datos Personales a otro Responsable, en el presente Anexo, y cuando así sea especificado, se refiere a la Empresa,
k)Responsable Receptor: aquel Responsable que recibe Datos Personales de otro Responsable, en el presente Anexo y cuando así sea especificado, se refiere a Yuno.
l) Datos Personales: cualquier información concerniente a una persona física identificada o identificable.
m) Tratamiento: La obtención, uso, divulgación o almacenamiento de Datos Personales, por cualquier medio. El uso abarca cualquier acción de acceso, manejo, aprovechamiento, transferencia o disposición de Datos Personales.
n) Remisión de Datos Personales: las comunicaciones de datos personales realizadas entre la Empresa (Responsable) y Yuno (Encargado), para el cumplimiento de las Finalidades del Acuerdo.
o) Subencargado: cualquier encargado contratado por el Encargado o por cualquier otro subencargado del Encargado que conviene en recibir Datos Personales exclusivamente destinados a las actividades de Tratamiento de Datos Personales que deben realizarse por cuenta del Responsable.
p) INAI: el Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales,
q)  Derechos ARCO: los derechos de acceso, rectificación, cancelación y oposición previstos por la LFPD y el RLFPD.
r) Medidas de Seguridad: en su conjunto, las medidas de seguridad administrativas, técnicas y físicas que permitan proteger los Datos Personales contra daño, pérdida, alteración, destrucción o el uso, acceso o tratamiento no autorizado.
s) Vulneración de Seguridad de Datos Personales: en cualquier fase del Tratamiento de Datos Personales: a)La pérdida o destrucción no autorizada de Datos Personales o Bases de Datos; b) El robo, extravío o copia no autorizada de Datos Personales o Bases de Datos; c) El uso, acceso o tratamiento no autorizado de Datos Personales o Bases de Datos, o d) El daño, la alteración o modificación no autorizada de Datos Personales o Bases de Datos.

SECOND. OBJECT. The purpose of this Annex is to formalize the rights and obligations of the Parties in relation to the Processing of Personal Data that they must carry out for the performance and execution of the Agreement and, in particular, to precisely and documentarily define those stages of the Processing of Personal Data in which Yuno shall act as Data Processor of the Company or as Receiving Controller, as applicable and as defined in the corresponding section of this Annex.

DATA PROCESSINGREMITTANCE AND PROCESSING
REMISIÓN Y TRATAMIENTO

THIRD. SCOPE OF DATA PROCESSING. The Parties agree that through this Annex they shall comply with the requirement of “contractual clauses” or “other legal instrument” that must exist between the Data Controller and the Data Processor, as referred to in Article 51 of the RLFPD. If Yuno, in its capacity as Data Processor, processes information from the Company (Data Controller) that contains Personal Data, or otherwise processes Personal Data on behalf of the Company (Data Controller) in connection with the performance of the obligations set forth in the Agreement, all provisions of this section shall be applicable to the Parties. The Data Processor acknowledges that all rights, obligations, and interests in and to the Personal Data belong to the Company, except for those rights, obligations, and interests established in the LFPD and the RLFPD on the part of the Data Processor.

FOURTH. OBLIGATIONS OF THE DATA CONTROLLER. The Data Controller agrees, undertakes, and warrants that:

a) The Processing of Personal Data, including its Remittance, is and shall be carried out in accordance with the provisions of the Personal Data Regulation and does not violate the applicable provisions thereof.b) It has instructed Yuno (Data Processor) to process, on behalf of the Data Controller, the Personal Data necessary for the fulfillment of the Agreement and shall continue to instruct the Data Processor regarding such Processing during the term of the Agreement and this Annex, in accordance with the Personal Data Regulation.c) It has obtained from the relevant data subjects the legally required consent to carry out the Processing of their Personal Data, in accordance with the provisions of the Personal Data Regulation.
b) Ha instruido al Yuno (Encargado) para que trate, por cuenta del Responsable, los Datos Personales necesarios para el cumplimiento del Acuerdo y continuará instruyendo al Encargado sobre dicho Tratamiento durante la vigencia del Acuerdo y del presente Anexo, de conformidad con la Regulación de Datos Personales.
c) Ha obtenido de los Titulares correspondientes el consentimiento legalmente exigido para llevar a cabo el Tratamiento de sus Datos Personales, de conformidad con las disposiciones de la Regulación de Datos Personales.

FIFTH. OBLIGATIONS OF THE DATA PROCESSOR. By virtue of this Annex and without prejudice to the provisions set forth in its other clauses and in the Agreement of which it forms part, Yuno expressly undertakes the following:

a) In its capacity as Data Processor, follow the instructions of the Company for the Processing of Personal Data necessary for the fulfillment of the Purposes established in the Agreement.b) Process the information provided by the Company in accordance with applicable regulations and, in particular, in accordance with the Personal Data Regulation when such information contains Personal Data. Yuno shall be a regulated entity under the LFPD in its capacity as Data Processor and shall process personal data in accordance with what has been agreed in this Annex and the Privacy Notices that have been made available to data subjects by the Company.c) Act with the utmost diligence, expertise, probity, and good faith in the fulfillment of the Purposes, in such a way that the rights, image, prestige, and reputation of the Company are not harmed at any time.d) Provide the Company, at its request, with any information requested that is related to the information and/or Personal Data communicated by the Company to Yuno.e) Adopt and implement sufficient and necessary administrative, physical, and technical security measures for the protection of the Personal Data subject to processing.f) Immediately notify the Data Controller if any of the following circumstances arise:g) Provide the Company, within 5 (five) business days, with any request from a competent authority related to the Processing of the Personal Data subject to this Annex and, in particular, those related to the Security Measures adopted for such Processing.h) In the event of engaging a Sub-processor, comply with the provisions of Clause Seven of this Annex.
b)Tratar la información proporcionada por la Empresa de conformidad con la normativa aplicable y, en particular, de conformidad con la Regulación de Datos Personales cuando dicha información contenga Datos Personales. Yuno será un sujeto regulado por la LFPD en su carácter de Encargado y deberá tratar los datos personales conforme a lo convenido en este Anexo y en los Avisos de Privacidad que hayan sido puestos a disposición de los Titulares por parte de la Empresa.
c)Actuar con la mayor diligencia, pericia, probidad y buena fe para el cumplimiento de las Finalidades, en tal forma que en ningún momento se perjudiquen los derechos, la imagen, el prestigio ni la reputación de la Empresa.
d)Proporcionar a la Empresa, en el momento en que este lo requiera, cualquier información que le sea solicitada y que guarde relación con la información y/o Datos Personales comunicados por la Empresa a Yuno.
e)Adoptar e implementar las medidas de seguridad administrativas, físicas y técnicas suficientes y necesarias para la protección de los Datos Personales objeto de encargo.
f)Notificar de inmediato al Responsable si concurre cualquiera de los siguientes casos:

a. If required by a competent authority to communicate or disclose the Personal Data subject to Processing, unless such notification would constitute a violation of a legal provision regarding the confidentiality of an investigation; Si es requerido por una autoridad competente para comunicar o revelar los Datos Personales objeto de Tratamiento, salvo que dicha notificación constituya violación de una disposición legal relativa a la confidencialidad de una investigación;

b. If a Personal Data Security Breach occurs in relation to the Personal Data it processes on behalf of the Company; or Si ocurre una Vulneración de Seguridad de Datos Personales en relación con los Datos Personales que trata por cuenta de la Empresa; o

c. If it receives an ARCO Rights request submitted directly by a data subject, in which case it shall refrain from processing such request, unless expressly instructed otherwise by the Company in writing. Si recibe una solicitud de ejercicio de Derechos ARCO, presentada directamente por un Titular de Datos Personales, en cuyo caso deberá abstenerse de tramitar dicha solicitud, salvo indicación expresa en contrario comunicada por la Empresa de forma escrita.

g) Provide the Company, within 5 (five) business days, with any request from a competent authority related to the Processing of the Personal Data subject to this Annex and, in particular, those related to the Security Measures adopted for such Processing.
h)En caso de llevar a cabo la contratación de un Subencargado, cumplir con las disposiciones de la Cláusula Séptima del presente Anexo.

SIXTH. OBLIGATIONS APPLICABLE UPON TERMINATION OF SERVICES. The Parties agree that, upon termination of the Agreement, the Company may instruct Yuno (and the Sub-processors, if applicable) to, at its election: (i) Return to the Company the Personal Data subject to processing, including any copies thereof and any Personal Data that has been processed as a result of the fulfillment of the Purposes of the Agreement; or (ii) Destroy all Personal Data, including any copies thereof and any Personal Data processed as a result of the fulfillment of the Purposes of the Agreement, in which case the Company may require a certificate from the Data Processor specifying the method of destruction used and, if applicable, the identity of the service provider responsible for the destruction.

In either case, Yuno may retain a copy of the Personal Data that is strictly necessary to comply with applicable legal or regulatory provisions requiring such retention by a Data Processor, for any purpose expressly provided for by such legislation. In such cases, the Data Processor warrants to the Company the blocking and confidentiality of the retained Personal Data, and that it shall refrain from using such data for any subsequent type of processing.

SEVENTH. ENGAGEMENT OF SUB-PROCESSORS. The Data Processor shall ensure that the Sub-processor(s) it engages adhere to the same Personal Data protection obligations established for it under this Annex. In addition, it shall conduct a prior information security assessment in accordance with its internal procedures in order to verify that the Personal Data shall remain secure and confidential. In such cases, the Data Processor shall enter into a Personal Data Processing Agreement with each and every corresponding Sub-processor. Such Personal Data Processing Agreements shall be in writing and shall contain at least the same Personal Data protection obligations established between the Parties. Such agreements shall establish that any claim, cost, loss, third-party damage, or liability incurred that directly or indirectly arises from the Sub-processor’s breach of obligations shall be borne exclusively by the Sub-processor. The Data Processor shall maintain an updated record of all Personal Data Processing Agreements it enters into with Sub-processors.

EIGHTH. SECURITY MEASURES AND CONTACT PERSON. The Data Processor shall implement all Security Measures that are appropriate to protect Personal Data. In addition, the Data Processor shall:

a) Designate a contact person who shall be responsible for: (i) keeping the Company informed of all Security Measures implemented to protect Personal Data; and (ii) assisting the Company in responding to any requests from data subjects or any requirements from INAI related to the Personal Data subject to Processing under this Annex.b) Keep the Company’s Personal Data Department informed and updated regarding the identity and contact information of the person referred to in the preceding subsection.c) Ensure that the contact person referred to in subsection (a) promptly provides the information required by the Company that is regulated by this Annex, taking into account the time limits provided by the Personal Data Regulation.d) Unless otherwise required by applicable law, refrain from responding to requests from data subjects related to the exercise of their ARCO Rights. In such cases, the person referred to in subsection (a) shall immediately notify the Company of the receipt of any request or requirement.
b)Mantener informado y actualizado al Departamento de Datos Personales de la Empresa sobre la identidad e información de contacto de la persona a que se refiere el inciso inmediato anterior.
c)Asegurar que la persona de contacto a que se refiere el inciso a) proporcione de forma expedita la información requerida por la Empresa que regula el presente Anexo, tomando en cuenta los plazos previstos por la Regulación de Datos Personales.
d)Salvo disposición legal aplicable en contrario, abstenerse de dar contestación a solicitudes de los Titulares de Datos Personales relacionadas con el ejercicio de sus Derechos ARCO. En tales casos, la persona a que se refiere el inciso a) deberá comunicar de inmediato a la Empresa la recepción de cualquier solicitud o requerimiento.

NINTH. PERSONAL DATA SECURITY BREACHES. Yuno shall notify the Company of any Security Breach related to the Personal Data subject to this Annex that may occur at any stage of the Processing under its responsibility or under the responsibility of a Sub-processor, if applicable.

For such purposes, and in order to ensure that the Company has the information and documentation necessary to act in accordance with the Personal Data Regulation, if the Data Processor suffers a Security Breach related to such Personal Data, it shall notify the Company of the occurrence of the Security Breach as soon as it has technical confirmation thereof, providing at least the following information:

a) The nature of the incident (including information about the circumstances in which it occurred).b) The Personal Data compromised.c) The corrective actions taken immediately upon confirming that the Personal Data Security Breach occurred.d) Any information that enables the Company to notify data subjects of the measures they may take to protect their interests.e) The means through which additional information about the Security Breach may be obtained, in order to inform data subjects of any relevant information in that regard.
b)Los Datos Personales comprometidos.
c)Las acciones correctivas que hubiese realizado de forma inmediata, una vez haya confirmado que ocurrió la Vulneración de Seguridad de Datos Personales.
d)Cualquier información que permita a la Empresa comunicar a los Titulares las medidas que puedan adoptar para proteger sus intereses.
e)Los medios a través de los cuales podrá obtener más información sobre la Vulneración de Seguridad, para poder informar a los Titulares cualquier información relevante al respecto.

TRANSFERS OF PERSONAL DATA

TENTH. SCOPE OF THE TRANSFER. Both Parties acknowledge and agree that, exclusively with respect to the personal data required for processing electronic payments, including credit and/or debit card data of third parties that Yuno collects for the performance of the Agreement, Yuno shall act in its capacity as Data Controller, at all times complying with the applicable provisions of the Personal Data Regulation and making its own privacy notice available to data subjects, undertaking to process such data exclusively for the fulfillment of the Purposes of the Agreement and in accordance with such notice.

Any other processing activity or category of Personal Data of third parties that Yuno may collect from time to time to fulfill its obligations under the Agreement and this Annex shall be processed by Yuno as a Data Processor, in the terms referred to in the “DATA PROCESSING” section of this Annex.

Outside of the aforementioned cases, the Parties agree that, through this Annex, they shall comply with Article 73 of the RLFPD, regulating their relationship as Transferring Controller and Receiving Controller, respectively, and as applicable in accordance with the type of Purpose that Yuno is to fulfill.

Specifically, the Parties agree to comply with the following obligations when the provision of the services contemplated in the Agreement requires the Company (Transferring Controller) to communicate to Yuno (Receiving Controller) Personal Data over which the latter shall make Processing decisions and implement Security Measures:

a) Database Identification. The Receiving Controller shall determine the Personal Data that the Transferring Controller must communicate to it, as well as the manner in which such information shall be delivered.b) Lawfulness of Transfers. The Transferring Controller shall inform data subjects through the corresponding Privacy Notice and, where necessary, obtain the required consent from data subjects, before carrying out any Transfer of Personal Data to the Receiving Controller. The Receiving Controller undertakes to comply with all obligations that may correspond to it as a “recipient of personal data” pursuant to the provisions of the Personal Data Regulation.c) Security Measures. The Parties agree that the Receiving Controller shall implement Security Measures to protect Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or Processing, as well as any others imposed by or in compliance with the Personal Data Regulation in each case, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed.d) Data Subject Rights. With respect to Personal Data transferred to the Receiving Controller by the Transferring Controller, each Party shall be responsible for attending to data subject requests regarding the exercise of the ARCO Rights provided for in the Personal Data Regulation.e) Content and Communication of Privacy Notices. The execution of this Annex and the Agreement constitutes evidence of the Receiving Controller’s knowledge of the existence and content of the Comprehensive Privacy Notices governing the Processing of Personal Data that the Transferring Controller shall transfer to it. Such Privacy Notices shall be observed by the Receiving Controller in accordance with the provisions of the LFPD, the RLFPD, and any other applicable provision regarding the Processing of the Personal Data of data subjects that the Transferring Controller transfers to the Receiving Controller for the performance of the Agreement and this Annex.f) The Transferring Controller warrants and undertakes that its Comprehensive Privacy Notices governing the Processing of Personal Data that are or may be subject to Transfer to the Receiving Controller shall include clear and specific information regarding the transfer of Personal Data to recipients such as the Receiving Controller, for purposes compatible with the object of the Agreement.
b)Licitud de las transferencias. El Responsable Transferente deberá informar mediante el correspondiente Aviso de Privacidad y, de ser necesario, recabar el consentimiento exigible de los Titulares, antes de efectuar cualquier Transferencia de Datos Personales hacia el Responsable Receptor. El Responsable Receptor se obliga a respetar todas y cada una de las obligaciones que pudieran corresponderle como “receptor de datos personales” con arreglo a las disposiciones de Regulación de Datos Personales.
c)Medidas de Seguridad. Las Partes acuerdan que el Responsable Receptor deberá implementar Medidas de Seguridad que permitan proteger los Datos Personales contra daño, pérdida, alteración, destrucción o el uso, acceso o Tratamiento no autorizado, y cualesquiera otras que le fueren impuestas por o en cumplimento de la Regulación de Datos Personales en cada caso, habida cuenta del estado de la tecnología, la naturaleza de los datos almacenados y los riesgos a los que estén expuestos.
d) Derechos de los Titulares. En relación con los Datos Personales que sean transferidos al Responsable Receptor por parte del Responsable Transferente, cada Parte será responsable de atender las solicitudes de los Titulares sobre el ejercicio de los Derechos ARCO previstos por la Regulación de Datos Personales.
e)Contenido y Comunicación de Avisos de Privacidad. La firma del presente Anexo y del Acuerdo constituye prueba del conocimiento que el Responsable Receptor tiene sobre la existencia y contenido de los Avisos de Privacidad Integrales que regulan el Tratamiento de los Datos Personales que el Responsable Transferente le transferirá. Tales Avisos de Privacidad deberán ser respetados por el Responsable Receptor conforme a las disposiciones de la LFPD, el RLFPD y cualquier otra disposición que resulte aplicable al Tratamiento de los Datos Personales de los Titulares que el Responsable Transferente transfiera al Responsable Receptor para el cumplimiento del Acuerdo y este Anexo.
f)El Responsable Transferente garantiza y se obliga a que sus Avisos de Privacidad Integrales que regulen el Tratamiento de Datos Personales que sean o puedan ser objeto de Transferencia hacia el Responsable Receptor incluirán información clara y específica sobre la transferencia de Datos Personales hacia destinatarios como el Responsable Receptor, para finalidades compatibles con el objeto del Acuerdo:

ELEVENTH. DURATION. This Annex shall have the same duration as the Agreement by reason of which it was entered into, with its term beginning on the date of its execution. Notwithstanding the foregoing, either Party may notify the other of its intention to terminate this Annex upon at least 60 (sixty) calendar days’ prior written notice before the effective date of termination, without the need for any judicial or extrajudicial declaration or proceeding, and without liability to either Party. In the latter case, the Parties agree to document the processing of Personal Data and the corresponding obligations in accordance with the Agreement.

TWELFTH. BREACH AND RESCISSION. In the event of a breach by either Party of any obligation under this Annex, the affected Party shall send the breaching Party a written notice granting it a period of 15 (fifteen) business days from receipt of the notice to remedy such breach. If the breach persists after the aforementioned period has elapsed, the affected Party may rescind this Annex without liability and without the need for a prior judicial declaration, or alternatively demand judicial enforcement of the breached obligations. In either case, the breaching Party shall be obligated to pay the damages and losses caused by such breach to the affected Party.

THIRTEENTH. INDEMNIFICATION. The Parties acknowledge and agree that any claim, cost, loss, third-party damage, or liability incurred that directly or indirectly arises from a breach of this Annex or of the provisions of the Personal Data Regulation shall be borne by the breaching Party.

FOURTEENTH. FORCE MAJEURE. Neither Party shall be liable for any delay or failure in the performance of its obligations under this Annex where such delay or failure is directly caused by an act of God or force majeure. In such event, the affected Party that fails to perform must notify the other Party within 2 (two) business days following the act of God or force majeure event, in order to reschedule the performance of this Annex.

FIFTEENTH. ASSIGNMENT. Neither Party may assign and/or transfer in any manner its rights and obligations under this Annex to any third party, except with prior written consent from the other Party and provided that the applicable legal provisions and requirements are complied with. The provisions of the preceding paragraph do not apply to the subcontracting of services regulated by Clause Seven of this Annex, which shall be carried out, as applicable, in accordance with the provisions of this Annex.

SIXTEENTH. AMENDMENTS. The Parties agree that the obligations assumed through this Annex may not be modified, except to the extent necessary to adapt them to new provisions or regulations enacted after the date of execution. This does not prevent the Parties from adding new clauses or annexes, provided that none of them contradicts the original provisions of the Agreement or this Annex, and that they are executed by prior written agreement.

SEVENTEENTH. SEVERABILITY. The Parties agree that any nullity, invalidity, illegality, and/or other defect in the provisions of this Annex shall affect only such provision; it shall therefore not affect the other provisions agreed herein, which shall retain their binding force.

EIGHTEENTH. HEADINGS. The Parties expressly acknowledge and recognize that the headings and titles set forth at the beginning of each clause are for identification purposes only; accordingly, they shall in no way be considered as a restriction or limitation on the content, legal effects, or scope of such clauses.

NINETEENTH. GOVERNING LAW AND JURISDICTION. This Annex shall be governed by applicable federal legislation in force in the United Mexican States. For the interpretation, performance, and fulfillment of this Annex, the Parties submit to the jurisdiction of the federal courts located in Mexico City, expressly waiving any other jurisdiction or forum to which they may be entitled by reason of their present or future domiciles or for any other reason.