Playbook of Additional Terms
for Bonterms Data Protection Addendum v.2 (DPA)

• * These examples show how to add Additional Terms to the Bonterms Data Protection Addendum (Version 2.0) (DPA).
• * The DPA is available in Attachment, Signable and Cover Page Versions and is incorporated into a "Main Agreement" identified by the parties.
• * Additional Terms are entered in the "DPA Details" section of the Signable and Attachment Versions or the Cover Page if using the Cover Page Version.
• * You can delete, replace or add to provisions of the Bonterms DPA.
• * These are examples only. Have legal counsel review before using.

Replace the definition of “Specified Notice Period” in Section 1 (Definitions) with the following:

“Specified Notice Period” means ___.

Add to the end of Section 4.4 (Objection to New Subprocessors):

If, during the process described in this Section 4.4, Customer notifies Provider that in no event may Customer Personal Data be Processed by the proposed new Subprocessor, then Provider will ensure such result, but Provider may also terminate the affected portion of the Service as described in Section 4.4(b) as if such termination had been elected by Customer.

Replace Section 10.1(a) (Cross-Border Data Transfers) with the following:

Provider (and its Affiliates) will Process and transfer Customer Personal Data only within [the EEA / the United States / specify region(s)], except (i) as necessary to provide the Service in response to Customer Instructions or (ii) as required by applicable law.

Add the following to Exhibit B (Region-Specific Terms):

B. [REGION]

[Insert the definitions and obligations applicable to the identified region or law.]