Yuno's Terms and Conditions

Last Update: December 12, 2024. 

‍

These terms and conditions (hereinafter referred to as "Terms and Conditions” ) are entered between Yuno USA LLC, a company incorporated under the laws of the State of Delaware with registration number (EIN) 99-2511682 (hereinafter referred to as "Yuno"), that  operates  as a Software-as-a-Service (SaaS) provider through which it will provide a platform offering different payment methods, fraud prevention providers, and integrates all types of existing solutions in the payment industry (hereinafter referred to as the "Services") to the business client (hereinafter referred to as the "Company"), the individual or legal entity that, through the signature of a purchase order or any similar document (“Agreement"), contracts and acquires the Services provided by Yuno.

‍

Yuno's Offers

‍

1.1. Offers. Subject to the terms of these Terms and Conditions, Yuno will make available to the Company certain software as a service ("SaaS") offers, as described in each Purchase Order and to the authorized users of the Company (each, a "User"). These Terms and Conditions, together with the Purchase Order (as defined in the Purchase Order), shall collectively be referred to herein as the "Agreement". Each Purchase Ordersets forth (a) the nature of the Services provided by Yuno that have been selected and acquired by the Company, (b) if the Services will be provided on a trial basis and the duration of such trial, if applicable ("Trial Period"), (c) the period during which the Services will be provided on a non-trial basis (each, a "Subscription Period"), (d) the number of Users authorized to use the Services, (e) the Service Level Agreements described in Annex A of the Service Level Agreements ("Service Levels"), and (f) the fees for the Services per Subscription Period ("Subscription Fees").

‍

1.1.1. Notwithstanding any contrary term in these Terms and Conditions, (i) to the extent that there is a conflict between the terms and conditions of a Purchase Order and the terms and conditions of this Agreement, the Purchase Order will prevail, and (ii) the Company is responsible for the acts and omissions in the use of the Services.

‍

1.2. API Access. Yuno will make commercially reasonable efforts to promptly provide the Company with access to Yuno’s Application Programming Interface (API), which is part of the Services. Yuno will host the API, and the Company will access it through the Services. The Company acknowledges that the API and API functionality (a) are only available through the Services, (b) are not available separately, and (c) are subject to the terms and conditions of this Terms and Conditions. The Company shall not access or use, or attempt to access or use, the API separately from the Services.

‍

2. Service Levels. Yuno will make commercially reasonable efforts to comply with the Service Level Agreementss described in Annex A of Service Levels ("Service Level Agreementss"), which is an integral part of these Terms and Conditions. The support conditions and Service Level Agreementss are incorporated into these Terms and Conditions by reference.

‍

3. Usage Requirements. The Company is responsible for maintaining the confidentiality of its passwords, identifications, and other credentials and login information of its Users (collectively, "Passwords"), and the Company agrees that Yuno has no responsibility with respect to the use of any Password. The Company acknowledges that the Passwords are personal. The Company must immediately notify Yuno if it has reason to believe that the security of the Company's account has been compromised or if any unauthorized person has accessed any of the Services.

‍

Fees and Payment Terms

‍

4.1. Subscription Fees. The Company will pay Yuno the Subscription Fees in accordance with the payment terms set forth in the applicable Purchase Order. Subscription Fees do not include taxes, which will be charged as applicable. Unless otherwise specified in the Purchase Order, Yuno will invoice the Company for Subscription Fees monthly in arrears. The Company will pay all amounts invoiced by Yuno within thirty (30) days from the date of such invoice, and all payments must be made in US dollars by wire transfer in immediately available funds to an account designated by Yuno.

‍

4.2. Interest and Additional Terms. Late payment interest will accrue at a rate of one and a half percent (1.5%) per month, or the highest rate permitted by U.S. law, specially the state of New York, whichever is lower, from the due date of such amount until the date of full payment. The Company will be responsible for and will pay all applicable taxes on all license fees and similar fees applicable to the provision of the Services, excluding only taxes based solely on Yuno's gross or net income.

‍

4.2.1. If the Company is required to deduct or withhold taxes from the payment of the Subscription Fee invoice, it may deduct this amount from the applicable Subscription Fee to the extent that it is paid as a tax withholding in compliance with the applicable laws. The Company will not be required to reimburse Yuno for the deduction amount, provided that it submits a valid tax receipt within ninety (90) days from the invoice issuance date. Failure to provide this tax receipt within the specified period will result in all fees, including the deduction amount, becoming immediately due, and non-payment of these fees may result in the suspension or cancellation of the Services.

‍

Notwithstanding any term to the contrary in this Terms and Conditions, (a) Yuno shall not be obligated to issue any refund for paid Subscription Fees, and (b) Yuno, at its sole discretion, may modify its prices during any Subscription Period, provided that the modifications only become effective from the Subscription Period immediately following the current one.

‍

General Terms

‍

5. Acceptance of the Terms and Conditions. The individual accepting these Terms and Conditions on behalf of the Company, represents and warrants that they have sufficient authority to represent and bind the Company to comply with the provisions herein.

‍

6. Liability and Indemnification. The Company shall be entirely responsible for: (i) Payment of salaries and labor entitlements of its employees, as well as payment to its contractors; (ii) Any harm caused to third parties by its actions or omissions or those of its dependents; (iii) Any breach of its obligations under these Terms and Conditions.

‍

6.1. Exclusion of Damages. Except for (a) breach of sections 10. (restrictions) or 11. (confidentiality) or (b) infringement, misappropriation, or violation of any intellectual property rights of either party, or (c) indemnification obligations of either party as set forth in section 6 (liability and indemnification), neither party shall be liable for any loss of profits or any indirect, special, incidental, reliance, or consequential damages of any kind, regardless of the form of action, whether in contract, tort (including negligence), strict liability, or otherwise, even if advised of the possibility of such damages in advance.

‍

6.2. Liability Limits. Except in cases of (a) breach of sections 10. (restrictions) or 11. (confidentiality), (b) infringement, misappropriation, or violation of any intellectual property rights of either party, or (c) indemnification obligations of either party as set forth in section 6.3. (indemnification), the total liability of each party to the other shall not exceed the subscription fees actually paid by the Company to Yuno during the subscription period in which the damages occurred. Furthermore, notwithstanding any term to the contrary in this Terms and Conditions, (i) the sole and exclusive remedy for any breach of the terms or conditions of the Service Level Agreementss shall be the credits provided under the mentioned Service Levels, and (ii) Yuno shall not be liable for any disclosure, unauthorized use, and/or unauthorized access to any Company data, other data, or other information.

‍

6.3. Indemnification. Each Party, at its own expense, will defend the other Party, its affiliates, and their respective directors, officers, employees, consultants, and agents ("Entity Parties") against any claim and will indemnify the Entity Parties from any related loss that results from or arises in connection with (a) any alleged or actual breach of this Terms and Conditions, including, (b) any data of the other Party, (c) any act or omission by the Party with respect to the Services, or (d) any violation of applicable laws, rules, or regulations by the Party or any person or entity acting on behalf of the Party.. The indemnifying party's obligations under this Section 6.3 (Indemnification) are conditioned upon the indemnified party (i) providing written notice of the claim to the indemnifying party promptly upon becoming aware of it, and (iii) providing reasonable cooperation to the indemnifying party and assistance in the defense or settlement of the claim.

‍

7. Intellectual Property Rights. Except as expressly provided in these Terms and Conditions, nothing herein shall be deemed to transfer, assign, or convey any intellectual and/or industrial property rights or other proprietary rights from one party to the other. Under no circumstances shall these Terms and Conditions be construed as transferring, in any form, the technology owned by Yuno USA LLC., its parent, subsidiaries, and/or affiliated companies. It is clarified that Yuno retains all intellectual property rights associated with its platform, including but not limited to (i) Software architecture; (ii) API design; (iii) Proprietary algorithms and (iv) User interface elements.

‍

8. Independence of the Parties. The Company and Yuno are independent contractors, and nothing in these Terms and Conditions is intended to or creates any joint venture, partnership, or employer/employee relationship between the parties. Consequently, the parties will independently fulfill their obligations to third parties (in labor, social security, and tax matters).

‍

9. Force Majeure. Neither party shall be liable for any delay or failure to perform these Terms and Conditions that results directly or indirectly from an act of God or force majeure. "Force Majeure" or “Act of God” shall mean all causes or events beyond the control of either party that cannot be foreseen or that, if foreseen, could not be avoided, and that occur after acceptance of these Terms and Conditions and prevent, delay, or hinder the performance of a party's obligations.

‍

10. Restrictions. Except as expressly authorized by these Terms and Conditions, the Company shall not (a) modify, disclose, alter, translate, or create derivative works from the Services (or any of their components); (b) license, sublicense, resell, distribute, lease, rent, lend, transfer, assign, or otherwise dispose of the Services (or any of their components); (c) use the Services to store or transmit viruses, software routines, or other code designed to allow unauthorized access, disable, erase, or otherwise harm software, hardware, or data, or to perform any other harmful action; (d) copy, frame, or mirror any part or content of the Services; (e) build a competitive product or service, or copy any feature or function of the Services; (f) interfere with or disrupt the integrity or performance of the Services; (g) attempt to gain unauthorized access to the Services or related systems or networks; (h) disclose to any third party any performance information or analysis related to the Services; (i) remove, alter, or obscure any proprietary notice on the Services, including copyright notices; (j) disclose or make available the passwords provided by Yuno to the Company or Users; (k) create or maintain any copy of any Content, except to print or download insubstantial amounts of Content for the intended use of the Services; (l) reverse engineer, decompile, disassemble, decrypt, redesign, reverse assemble, reverse compile, or otherwise translate, create or attempt to create the source code of the Services or their structural framework (in whole or in part), or engage in any process intended to determine the source code of the Services; (m) circumvent or attempt to circumvent any technological protection measures designed to restrict access or use of any part of the Services or their functionality; (n) undertake any action that imposes an unreasonable or disproportionately large load on the Services; (o) use the Services for any purpose that is illegal in any way or advocates for illegal activity; or (p) cause or permit any third party to do any of the foregoing.

‍

11. Confidentiality. Any technical, commercial, financial, strategic, legal, and/or any other nature of information related to the present and future business operations of the involved parties in these Terms and Conditions, disclosed and/or delivered in writing between them, expressly indicating that such information is confidential or that a person at the time of disclosure may reasonably presume under the specific circumstances in which the disclosure occurred, that such information is confidential, shall be considered confidential information. The duty of confidentiality established in this provision shall be valid for the duration of these Terms and Conditions and binding on the parties, or while there are Agreements in effect and for up to two (2) years following their termination.

‍

12. Dispute Resolution. Any controversy or dispute arising out of these Terms and Conditions or their execution shall first be attempted to be resolved by direct negotiation between the parties. If thirty (30) calendar days have elapsed since the emergence of the dispute without resolution, any dispute arising out of or in connection with these Terms and Conditions, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by arbitration administered by the American Arbitration Association ("AAA") in accordance with the Arbitration Rules of the AAA for the time being in force, which rules are deemed to be incorporated by reference in this clause. The seat of arbitration shall be in New York. The Tribunal shall consist of one arbitrator. The language of arbitration shall be English. The Company agrees that, notwithstanding any law to the contrary, any claim or cause of action arising out of or related to the use of the Services or these Terms and Conditions must be filed within one (1) year after such claim arose or it shall be forever barred.

‍

13. Personal Data Protection. Within the framework of these Terms and Conditions, the Parties shall ensure compliance with all applicable federal and state data protection and privacy laws, including the California Consumer Privacy Act (CCPA), the Gramm-Leach-Bliley Act (GLBA), and the Delaware Data Breach Notification Law (collectively, the "Personal Data Regulation"). Yuno shall process personal data solely for the purposes of providing the Services under this Agreement, implementing reasonable technical and organizational measures to safeguard personal data against unauthorized access, disclosure, or destruction. In the event of a data breach, Yuno shall notify the Company within 72 hours of discovery and provide relevant details to enable the Company to comply with its legal obligations. The Company is responsible for obtaining necessary consents and ensuring lawful use of personal data

‍

13.1 Company Data. Between the parties and subject to the limited grant established in this Section 13.1 (Company Data), the Company owns all company data. During the term of this Terms and Conditions, the Company grants Yuno a non-exclusive, royalty-free, worldwide, sublicensable right and license to reproduce, modify, and store all electronic data or information provided by the Company to Yuno through the Services or in connection with them ("Company Data") solely in connection with the Services. Before granting Yuno access to the Company Data, the Company has obtained (a) all necessary rights and consents to grant Yuno the rights set forth in this Terms and Conditions with respect to such Company Data, and (b) all Company Data has been collected, stored, transferred, processed, collected, disclosed, and otherwise handled in accordance with all applicable laws, regulations, and rules, including, among others, regulations applicable to the processing and security of Personal Data.

‍

13.2 Yuno's Analytical Data. The Company acknowledges and agrees that Yuno may monitor, collect, use, and store anonymous and aggregated statistics about the use of the Services and/or the individuals/entities interacting with the Services (collectively, "Yuno's Analytical Data").

‍

14. General Provisions. (i) Binding Agreement. These Terms and Conditions contain clear, express, and enforceable obligations and therefore constitute a binding contract enforceable under Delaware law; (ii) Partial Nullity and Non-Waiver of Rights. In the event that any provision of these Terms and Conditions is deemed void, illegal, or unenforceable, the validity, legality, and enforceability of the remaining provisions shall not be affected or limited in any way. The failure or delay of either party to exercise any of the powers or rights granted in these Terms and Conditions, or to demand compliance with them, shall not be construed as a waiver of such rights or powers, nor shall it affect the overall or partial validity of the Terms and Conditions, nor the right of the respective party to subsequently exercise such powers or rights, unless otherwise provided by law or contract. (iii) Assignment of Terms and Conditions. The Company may not assign in whole or in part the execution of these Terms and Conditions to a third party, nor the obligations and rights derived therefrom. However, Yuno may assign its rights and obligations under these Terms and Conditions to another entity within its same corporate group, whether a subsidiary or affiliate, provided that written notice is provided to the Company in advance. (iv) Entire Agreement. These Terms and Conditions exclusively represent the will of the parties and supersede any verbal or written agreement, express or implied, that exists or may exist between them regarding the subject matter of these Terms and Conditions. (v) Taxes. Except as specifically agreed in these Terms and Conditions, each party shall be responsible for payments of taxes imposed by Applicable Law in connection with the execution and performance of these Terms and Conditions. (vi) Availability, Security, and Stability. Yuno does not guarantee the availability or uptime of the API or its Service. In the event of instability or major technical issues, Yuno shall not be liable to the Company, but will make its best efforts to stabilize its operation and pay the corresponding service credits as set forth in the Service Level Agreements. (vii) Declaration of Origin of Funds and Terrorism Financing. The Company declares that its income comes from lawful activities, is not included in lists for the control of money laundering and terrorism financing, managed by any national or foreign authority including the Office of Foreign Assets Control (OFAC) list maintained by the U.S. Department of Treasury, and consequently undertakes to be responsible for all damages that may be caused as a result of this assertion. Accordingly, Yuno may deprive the Company of the use of the Services if the Company is included in the list of the Office of Foreign Assets Control - OFAC issued by the United States Treasury Department, the list of the United Nations, and other public lists related to the issue of money laundering and terrorism financing. (viii) Business Ethics and Anti-Corruption. The Company undertakes to implement internal control mechanisms to prevent acts of corruption in negotiations. Accordingly, it undertakes not to directly or indirectly receive or offer to Yuno's employees, directors, or subordinates: (i) sums of money, (ii) any object of pecuniary value, or (iii) other benefit or advantage, in exchange for: (a) performing, (b) omitting, or (c) delaying, any act related to the exercise of their functions. The Company declares and warrants that both the Company and its officials, employees, directors, or subcontractors comply with anti-corruption standards, including, but not limited to, those contained in Singapore's Prevention of Corruption Act (Cap. 241), the U.S. Foreign Corrupt Practices Act of 1977, the UK Bribery Act 2010, or those that amend, substitute, regulate, or develop it, as well as those national and international regulations relating to the prevention of fraud, bribery, corruption, money laundering, and terrorism. Likewise, the Company declares and warrants that neither it nor its officials, employees, directors, or subcontractors are subject to investigations, accusations, or processes related to the violation of anti-corruption standards and that it has not been subject to criminal, disciplinary, or contractual sanctions arising from the violation of such regulation. The Company undertakes to comply with anti-corruption laws and declares that any breach constitutes a violation of these Terms and Conditions, entitling Yuno exclusively to deprive the Company of the use of the Services. Similarly, the Company undertakes to notify Yuno of any notification associated with an investigation, proceeding, sanction, or similar, initiated against it or against any of its officials, employees, directors, or subcontractors, within twenty-four (24) hours following the date on which it becomes aware of the notification of the investigation. (ix) Payments for Tangible or Intangible Benefits. The parties agree that they shall not be obligated to pay to any title, any sum of money to the other party, for tangible or intangible benefits acquired under the use of the Services that are not expressly defined in these Terms and Conditions or in any Agreement between the parties. (xi) Applicable Law and Jurisdiction. For the interpretation and fulfillment of these Terms and Conditions, the parties submit to the laws of the State of New York. For all legal purposes, the contractual jurisdiction shall be the State of New York.

‍

15.1 Amendment. Yuno reserves the right to unilaterally revise or amend the provisions herein through an addendum, which shall be communicated electronically or published on the Yuno's website. Should the Company disagree with the revised terms, it may request the termination of this Terms and Conditions. Otherwise, the continued use of the Services shall be deemed as acceptance of the revised terms.

‍

Termination, Rescission, and Effects of Termination

16.1 Term. The initial term of these Terms and Conditions shall be as specified in the applicable Purchase Order ("Initial Term"). These Terms and Conditions shall automatically renew for successive periods equal to the Initial Term (each, a "Renewal Term") unless either party provides written notice of non-renewal at least ninety (90) days prior to the end of the then-current Initial Term or Renewal Term.

16.2 Termination for Cause. Either party may terminate these Terms and Conditions immediately upon written notice if the other party commits a material breach of any provision of these Terms and Conditions and such breach remains uncured for thirty (30) days following written notice thereof.

‍

ANNEX A - SERVICE LEVEL AGREEMENTS

‍

The service level agreements for Premium and Standard Services are available at the following link: Yuno's SLA's

‍

ANNEX B - PROVISIONS APPLICABLE TO THE DATA PROCESSING AGREEMENT

‍

FIRST. DEFINITIONS. For the purposes of this Annex and the Terms and Conditions to which it is appended, the following terms in uppercase, in singular or plural, interchangeably, shall have the meanings as set forth herein:

‍

Annex: This Data Processing Agreement Annex.

‍

Controller: A natural or legal person who determines the purposes and means of processing personal data; in this Annex, the "Company".

‍

Data Subject Rights: The rights of individuals under the applicable U.S. federal and state laws, including rights of access, correction, and data portability.

‍

Personal Data: Any information concerning an identified or identifiable natural person as defined under applicable U.S. laws, including but not limited to the California Consumer Privacy Act (CCPA).

‍

Personal Data Regulation: Any and all applicable U.S. federal and state laws, including but not limited to the CCPA, its subsidiary legislation, guidelines issued by the CCPA, and any other applicable data protection laws and regulations.

‍

Personal Data Regulator: Competent authority related to the Processing of the Personal Data related to Personal Data Regulation

‍

Privacy Notice: A physical, electronic, or any other format document generated by the Controller that is made available to the data subject prior to the processing of their Personal Data.

‍

Processing: The obtaining, use, disclosure, or storage of Personal Data, by any means. Use encompasses any action of access, handling, exploitation, transfer, or disposition of Personal Data.

‍

Processor: In this Annex, it refers to "Yuno".

‍

Services: Those set forth in Clause 1 of the Terms and Conditions.

‍

Terms and Conditions: The Agreement relating to the provision of Software as a Service ("SaaS"), entered into between Yuno and the Company.

‍

SECOND. OBJECTIVE. The purpose of this Annex is to formalize the rights and obligations of the Parties regarding the Processing of Personal Data that they must carry out for the fulfillment and execution of the Terms and Conditions, and, in particular, to precisely and documentarily define those stages of the Processing of Personal Data in which Yuno will act as Processor on behalf of the Company.

‍

THIRD. SCOPE OF THE PERSONAL DATA PROCESSING AGREEMENT. The Parties agree that through this Annex, they will comply with the requirements of the applicable U.S. federal and state data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), Delaware Data Breach Notification Law, and any other applicable laws and its associated regulations regarding the relationship between data controllers and data processors. If Yuno, acting as Processor, processes information of the Company (Controller) containing Personal Data, or in any other way processes Personal Data on behalf of the Company (Controller) in relation to the fulfillment of the obligations provided in the Terms and Conditions, all provisions of this Annex shall apply to the Parties. The Processor acknowledges that all rights, obligations, and interests in the Personal Data belong to the Company, except for those rights, obligations, and interests established in the applicable Personal Data Regulation that are the responsibility of the Processor.

‍

FOURTH. CONTROLLER'S OBLIGATIONS. The Controller agrees, undertakes, and guarantees that:

a. The Processing of Personal Data, including its Transmission, is carried out and will be carried out in accordance with the provisions of the applicable Personal Data Regulation and does not violate the applicable provisions of said regulations.

b. They have instructed Yuno (Processor) to process, on behalf of the Controller, the Personal Data necessary for the fulfillment of the Terms and Conditions and will continue to instruct the Processor on such Processing during the validity of the Terms and Conditions and this Annex, in accordance with the applicable Personal Data Regulation.

c. They have obtained from the corresponding Data Subjects the legally required consent to carry out the Processing of their Personal Data, in accordance with the provisions of the applicable Personal Data Regulation.

‍

FIFTH. PROCESSOR'S OBLIGATIONS. Under this Annex and without prejudice to what is established in the rest of its clauses and in the Terms and Conditions of which it is a part, Yuno expressly undertakes as follows:

a. As a Processor, to follow the instructions of the Company for the Processing of Personal Data necessary for the fulfillment and execution of the Terms and Conditions and the provision of the Services.

b. To process the information provided by the Company in accordance with applicable Personal Data Regulation when such information contains Personal Data. Yuno will be subject to applicable Personal Data Regulation as a Processor and must process personal data in accordance with the provisions of this Annex and the Privacy Notices made available to Data Subjects by the Company.

c. To act with the utmost diligence, skill, probity, and good faith to fulfill the Purposes, in such a way that the rights, image, prestige, or reputation of the Company are not harmed at any time.

d. To provide the Company, when requested, with any information related to the information and/or Personal Data communicated by the Company to Yuno.

e. To adopt and implement sufficient and necessary administrative, physical, and technical security measures for the protection of the Personal Data subject to processing.

f. To immediately notify the Controller if any of the following cases occur:

- If required by the applicable Personal Data Regulator or any other competent authority to communicate or disclose the Personal Data subject to Processing unless such notification constitutes a violation of a legal provision regarding the confidentiality of an investigation;

- If there is a Personal Data Security Breach related to the Personal Data processed on behalf of the Company; or

- If they receive a request to exercise Data Subject Rights, directly submitted by a Data Subject, in which case they must refrain from processing such request unless expressly instructed otherwise by the Company in writing.

g. To provide the Company, within 5 (five) business days, with any requirement from the applicable Personal Data Regulator or other competent authority related to the Processing of the Personal Data covered by this Annex and, in particular, those related to the Security Measures adopted for their Processing.

h. In the event of subcontracting a Subprocessor, to comply with the provisions of Clause Seven of this Annex.

‍

SIXTH. OBLIGATIONS APPLICABLE UPON TERMINATION OF SERVICES. The Parties agree that, upon termination of the provision of the Services, the Company may instruct Yuno (and any Subprocessors, as applicable) to, at its option:

1. Return to the Company the Personal Data subject to Processing, including any copies thereof, and the Personal Data that have been processed as a result of the fulfillment of the Terms and Conditions, or
2. Destroy all Personal Data, including any copies thereof, and Personal Data processed as a result of the fulfillment of the Terms and Conditions, requiring in this case a certificate from the Processor specifying the method of destruction employed and, if applicable, the identity of the service provider responsible for the destruction.

In both cases, Yuno may retain a copy of the Personal Data necessary to comply with applicable Personal Data Regulator or Personal Data Regulation requiring such retention by a Processor, for any purpose expressly provided for by such legislation. In such cases, the Processor guarantees to the Company the blocking and confidentiality of the retained Personal Data, and undertakes to refrain from using them for any subsequent processing.

SEVENTH. HIRING OF SUBPROCESSORS. The Processor shall ensure that any Subprocessors it hires adhere to the same obligations regarding the protection of Personal Data established for it under this Annex. Additionally, it shall conduct a prior assessment on information security in accordance with its internal procedures, in order to verify that the Personal Data will be kept safe and confidential.

In such cases, the Processor shall enter into a Data Processing Agreement with each and every corresponding Subprocessor. These Data Processing Agreements shall be in writing and shall contain, at a minimum, the same obligations regarding the protection of Personal Data established between the Parties. The same agreements shall establish that any claim, cost, loss, damage to third parties, or liability incurred and arising directly or indirectly from the breach of the Subprocessor's obligations shall be borne exclusively by the Subprocessor. The Processor shall maintain an updated record of all Data Processing Agreements entered into with Subprocessors.

‍

EIGHTH. SECURITY MEASURES AND POINT OF CONTACT. The Processor shall implement all Security Measures that are appropriate to protect the Personal Data in accordance with the applicable Personal Data Regulation. Additionally, the Processor shall:

1. Have a point of contact who shall be responsible for: (i) keeping the Company informed of all Security Measures implemented to protect the Personal Data, and (ii) assisting the Company in responding to any requests from the Data Subjects or any requirements from the applicable Personal Data Regulator related to the Personal Data processed under this Annex.
2. Keep the Company's Data Protection Department informed and updated about the identity and contact information of the person referred to in the immediate preceding paragraph.
3. Ensure that the point of contact referred to in paragraph (a) expeditiously provides the information required by the Company as regulated by this Annex, taking into account the deadlines provided by the applicable Personal Data Regulation and its associated regulations.
4. Except as otherwise provided by applicable law, refrain from responding to requests from Data Subjects related to the exercise of their rights under the applicable Personal Data Regulation. In such cases, the person referred to in paragraph (a) shall immediately notify the Company of the receipt of any request or requirement.

‍

NINTH. PERSONAL DATA SECURITY BREACHES. Yuno shall notify the Company of any Personal Data Security Breach related to the Personal Data subject to this Annex that may occur at any stage of the Processing under its responsibility or under the responsibility of a Subprocessor, as applicable. For these purposes, and in order for the Company to have the necessary information and documentation to act in accordance with the applicable Personal Data Regulation, if the Processor suffers a Personal Data Security Breach related to such Personal Data, it shall notify the occurrence of the Personal Data Security Breach to the Company as soon as it has technical confirmation of the same, and in any event within 72 hours of becoming aware of the breach, providing the Company, at least, with the following information:

1. The nature of the incident (including information about the circumstances in which it occurred).
2. The Personal Data compromised.
3. The corrective actions taken immediately upon confirming the occurrence of the Personal Data Security Breach.
4. Any information that enables the Company to comply with its notification obligations under the applicable Personal Data Regulation.
5. The means through which more information about the Personal Data Security Breach can be obtained, in order to inform the Data Subjects of any relevant information in this regard.

‍

TENTH. DURATION. This Annex shall have the same duration as the Terms and Conditions under which it was entered into, commencing its validity on the date of its signature. However, either Party may communicate to the other its intention to terminate this Annex by prior written notice with 60 (sixty) calendar days' notice before the effective termination date, without the need for any judicial or extrajudicial declaration or procedure and without liability to the Parties by the termination of the Agreement. In the latter case, the Parties agree to document the processing of Personal Data and the obligations that correspond to them in accordance with the Terms and Conditions.

‍

ELEVENTH. BREACH AND TERMINATION. In the event of a breach by either Party of any obligation under this Annex, the affected Party shall send written notice to the breaching Party granting it a period of 15 (fifteen) business days from the receipt of the notice to remedy such breach. If the breach persists after the aforementioned period has elapsed, the affected Party may terminate this Annex without any liability and without the need for prior judicial declaration, or demand the enforcement of such unfulfilled obligations through judicial means. In both cases, the breaching Party shall be liable for damages caused by such breach to the affected Party.

‍

TWELFTH. INDEMNIFICATION. The Parties acknowledge and agree that any claim, cost, loss, damage to third parties, or liability incurred directly or indirectly from the breach of this Annex or the provisions of the applicable Personal Data Regulation, shall be assumed by the breaching Party.

‍

THIRTEENTH. FORCE MAJEURE. Neither Party shall be liable for any delay or failure in its obligations under this Annex when directly caused by force majeure. In such event, the breaching Party shall notify the affected Party within 2 (two) business days following the occurrence of force majeure, to reschedule the compliance with this Annex.

‍

FOURTEENTH. ASSIGNMENT. Neither Party may assign or transfer its rights and obligations under this Annex to any third party without the prior written consent of the other Party, and provided that the applicable legal provisions and regulations under applicable law are complied with. The provisions of the preceding paragraph do not apply to the subcontracting of services regulated by Clause Seven of this Annex, which shall be carried out, if applicable, in accordance with the provisions of this Annex.

‍

FIFTEENTH. AMENDMENTS. The Parties agree that they may not modify the obligations assumed through this Annex, unless necessary to adapt it to new provisions or regulations under applicable law, subsequent to the date of its execution. This does not preclude the Parties from adding new clauses or annexes, provided that none of them contradicts the original provisions of the Terms and Conditions and of this Annex, and is entered into by prior written agreement.

‍

SIXTEENTH. AUTONOMY OF PROVISIONS. The Parties agree that the nullity, invalidity, illegality, and/or any other defect in the provisions of this Annex shall only affect said provision; therefore, it shall not affect the other provisions agreed herein, which shall retain their binding force under applicable law.

‍

SEVENTEENTH. HEADINGS. The Parties expressly state and acknowledge that the headings and titles established at the beginning of each clause are merely for identification purposes; therefore, they shall not be considered as restricting or limiting elements regarding the content or the legal effects or scopes thereof.

‍

EIGHTEENTH. APPLICABLE LAW AND JURISDICTION. This Annex shall be construed in accordance with the laws of the State of Delaware. Any disputes arising under this Annex shall be resolved in accordance with the arbitration provisions outlined in the Terms and Conditions.