Terms of Use for “Find a DPO” service

Date of Last Revision: 10.09.2019

GDPR Register’s data protection and legal service providers (the “Service Providers” or “you”) directory
service “Find a DPO” (the “Service”) is provided by GDPR Register OÜ. These terms of service
(“Terms”) govern your use of the Service.

By using the Service, you are agreeing to these Terms. Processing of personal data is described in a
Privacy Notice. If you have any questions, please contact us.

1. Using our Service

You may use our Service only if you are a provider of data protection or data protection related legal
services. If you are using the Service on behalf of any entity, then you are agreeing to the Terms on
behalf of that entity.

2. Information on the Service

Our Services display content that you, as a Service Provider, post to the Service. We may review your
posted content to determine whether it violates our Terms, and we may remove or refuse to display
content that we reasonably believe violates Terms or the law. But we do not routinely screen your
content that you publish via our Services. We cannot guarantee the accuracy, adequacy or quality of any
such information, or your qualifications.

3. No formation of an attorney-client relationship

The Service is not the provision of legal services, and providing such information, or corresponding with

or answering questions via the Services, or otherwise using the Services, does not create an attorney-
client relationship between you and GDPR Register, or you and any client. You understand that

questions and answers or other postings to the Services are not confidential and are not subject to
attorney-client privilege.

4. Services provided by Service Provider for clients

The Service is a platform where Service Providers unaffiliated with GDPR Register can offer information
and interact with clients. GDPR Register is the intermediary in such transactions. You must invoice your
clients directly for the services you have provided them. GDPR Register has no liability, either primarily
or secondarily, for paying the Service Provider or collecting any fees on behalf of service provider. The
fees Service Provider collects for such services are to be charged by Service Provider. Furthermore, you
understand that GDPR Register cannot be held responsible for the quality or accuracy of any information
or services provided by you.

5. Premium services for Service Providers

GDPR Register may offer optional subscription services for Service Providers, including, but not limited
to advertising, premium listing, GDPR Register subscription (collectively, the “Premium Services”). By
selecting a Premium Service, you agree to pay GDPR Register the subscription or usage fees (the
“Subscription Fees”) indicated for that service. Premium Services will become effective after receiving of
your payment by GDPR Register.

GDPR Register must receive written notice of your cancellation or reduction in service at least thirty (15)
days in advance of the renewal date on which you wish to make the cancellation or reduction effective.
All cancellations or reductions of advertising services must be received in writing by email
(partners@gdprregister.eu). Subscription Fees for Premium Services are not prorated or refundable. In
no event will a cancellation or reduction in service relieve you of your obligation to pay the Subscription
Fees that are due for the period prior to the effective date of cancellation or reduction in service.

If your payment is late or your account is past due, GDPR Register reserves the right to either suspend
or terminate your Premium Services. Any such suspension or termination will result in the cancellation of
any promotional programs applicable to your Premium Services. You agree to submit any disputes
regarding any charge to your account in writing to GDPR Register within fourteen (14) days of such
charge, otherwise, such dispute will be waived, and such charge will be final and not subject to challenge.

Service may include the publication of advertising or website content you provide to us (the “Service
Content”). You retain all rights in, and are solely responsible for, the Service Content posted on GDPR
Register or websites supported by GDPR Register. You give GDPR Register, our affiliates, providers of
third party services, and subcontractors a non-exclusive, fully-paid, perpetual, royalty-free, transferable,
revocable, worldwide license to use, modify, publicly perform, publicly display, reproduce, and distribute
the Service Content (in whole or in part) in providing the Services.

6. Legal advertising and communications

It is solely the responsibility of Service Provider to ensure that any information or advertisements you
post or place on the GDPR Register website, and any communications Service Provider may have with
prospective clients through the Service, fully complies with all applicable laws and rules of professional
conduct, including those concerning the unauthorized practice of law and those regulating the form,
manner or content of communications with clients, advertising, or other matters.

7. Software

Some of our Premium Services allow you to use GDPR Register’s registry solution (“Software”) which is
governed my GDPR Register’s Terms and Conditions

8. Disclaimers and acknowledgements regarding the use of “Find a DPO” service

GDPR REGISTER DOES NOT SCREEN FOR ACCURACY OR RELIABILITY OF INFORMATION YOU
PROVIDE THROUGH THE SERVICE. TO THE FULLEST EXTENT PERMITTED BY LAW, GDPR
REGISTER MAKES NO WARRANTIES, EITHER EXPRESS OR IMPLIED, ABOUT THE SERVICE. THE
SERVICE IS PROVIDED “AS IS.” GDPR REGISTER ALSO DISCLAIMS ANY WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT.

9. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT SHALL GDPR REGISTER OR ANY
OF THEIR RESPECTIVE DIRECTORS, EMPLOYEES AND AGENTS, BE LIABLE FOR ANY SPECIAL,
INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES,
WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR
OTHER INTANGIBLE LOSSES, RESULTING FROM (A) THE OUTCOME OF ANY LEGAL MATTER;
(B) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICE; (C) ANY
CONDUCT OR CONTENT OF ANY THIRD PARTY RELATING TO THE SERVICE; OR (D)
UNAUTHORIZED ACCESS, USE OR ALTERATION OF LEGAL INFORMATION.
TO THE EXTENT PERMITTED BY LAW, THE TOTAL LIABILITY OF GDPR REGISTER, FOR ANY
CLAIM ARISING OUT OF OR RELATING IN ANY MANNER TO THE USE OF THE SERVICES OR
SERVICE, IS LIMITED TO THE AMOUNT YOU PAID US TO USE THE SERVICES TO WHICH SUCH
CLAIM RELATES IN THE 12 MONTH PERIOD PRECEDING THE FILING OF SUCH CLAIM. IN THE
INTEREST OF CLARITY, THIS LIMITATION ALSO APPLIES TO PREMIUM SERVICES.

10. User posted content & other interactive services or areas

The Service may include interactive areas in which you may post content and information, including user
reviews, questions and answers, comments, photos, and other materials (the “User Content”). You retain
all rights in, and are solely responsible for, the User Content you post to GDPR Register. You are also
solely responsible for your use of such interactive features, and use them at your own risk. By using any
interactive feature, you agree to comply with the GDPR Register’s current Terms. We reserve the right to
remove or modify User Content for any reason, including User Content that we believe violates these
Terms.

When you post User Content to GDPR Register, you give GDPR Register a nonexclusive, royalty-free,
perpetual, irrevocable and fully sublicensable right to use, reproduce, modify, adapt, publish, translate,
create derivative works from, distribute, perform and display such User Content throughout the world in
any media. To the extent such content is attached to a profile on the GDPR Register’s Service, the
foregoing license includes a right to reproduce your profile, and any name, likeness or photograph
contained in such profile.

11. Indemnification

You agree to defend, indemnify and hold harmless GDPR Register and each of their respective
directors, employees from and against any claims, damages, costs, liabilities and expenses (including,
but not limited to, reasonable attorneys’ fees) arising out of or related to any User Content you post, store
or otherwise transmit on or through the Services or your use of or inability to use the Services, including
without limitation any actual or threatened suit, demand or claim arising out of or relating to the User
Content, your conduct, your violation of these Terms or your violation of the rights of any third party.

12. Modifications

GDPR Register may revise these Terms from time to time and we will always post the most up-to-date
version on our website. If we determine, in our sole discretion, that a modification to these Terms
materially affects your rights, we will notify you (by, for example, sending you an email). By using or
continuing to use or access the Services after any revisions have come into effect, you agree to be
bound by the revised Terms.

13. Governing Law and Jurisdiction

In the event of a dispute, controversy or claim arising out of or in relation to these Terms, it shall be
governed by and construed in accordance with the laws of the Republic of Estonia, without giving effect
to any principles of conflicts of law. With Harju County Court having exclusive jurisdiction.

14. Termination

Notwithstanding any of these Terms, GDPR Register reserves the right, without notice and in its sole
discretion, to terminate your license to use the Services, and to block or prevent your access to and use
of the Services. GDPR Register reserves the right to refuse service to anyone for any reason at any time.

15. Entire agreement

These Terms constitute the entire agreement between you and GDPR Register with respect to the
subject matter of these Terms, and supersede and replace any prior version of the Terms. These Terms
create no third party beneficiary rights.

16. Waiver, severability, and assignment

GDPR Register’s failure to enforce a provision of these Terms is not a waiver of its right to do so later. If
any provision of these Terms is found unenforceable, the remaining provisions of the Terms will remain
in full effect and an enforceable Term or Terms will be substituted reflecting our intent as closely as
possible. You may not assign any of your rights under these Terms, and any attempt to do so will be
void. GDPR Register may assign its rights to any of its affiliates or subsidiaries, or to any successor in
interest of any business associated with the Services.

17. Contact information

For general inquiries, to report a technical problem or raise an idea you may contact the GDPR Register
via e-mail at partners@gdprregister.eu