Journalshow Advertising Services Agreement

This Journalshow Advertising Services Agreement (“Agreement”) is entered into between Journalshow, Inc. on behalf of itself and its affiliates (“Journalshow”) and the entity accepting this Agreement (“Signatory”), and governs Signatory’s access to and use of the Journalshow advertising service (the “Ad Service”). When Signatory uses the Ad Service on its own behalf it is an “Advertiser.” When Signatory uses the Ad Service on behalf of a third party, Signatory is an “Agency” and that third party is an “Advertiser.” The parties agree as follows:

1. The Ad Service

(a) Advertiser authorizes Journalshow to place the advertisements, related technology and any other content that Advertiser provides in connection with the Ad Service (“Ad Content”) on any Journalshow or third party product or property made available in connection with the Ad Service (“Ad Service Properties”). Advertiser is solely responsible for (i) Ad Content, (ii) any website, application or other destination to which Ad Content directs users (“Destinations”), (iii) services and products offered on Ad Content and Destinations (“Advertiser Products”), (iv) its use of the Ad Service (e.g. bidding and targeting decisions) and (v) any legally required disclosures or labeling in connection with the Ad Content.

(b) Advertiser grants Journalshow and its users a non-exclusive, royalty-free, transferable, sub-licensable, worldwide license to use, store, display, reproduce, modify, create derivative works, perform, and distribute Ad Content on the Ad Service Properties. Nothing in this Agreement will restrict other legal rights Journalshow may have to Ad Content (for example, under other licenses).

(c) Advertiser represents and warrants that (i) it has all necessary rights to grant the licenses in Section 1(b), (ii) the Ad Content will not violate any applicable law or regulation, infringe any third party intellectual property rights, contain any material which may be harmful, abusive, obscene, threatening, defamatory, or otherwise infringe the Policies (as defined in Section 2), and (iii) that it has the necessary authority to enter into this Agreement. Advertiser will comply with all laws applicable to Advertiser’s use of the Ad Service and the Ad Content, Destinations, and Advertiser Products.

(d) If Advertiser collects data (including Ad Data as defined in Exhibit A) from end users that is used with an Ad Service feature (for example, conversion tracking), Advertiser must provide clear notice to each end user and obtain any legally-required consent from each end user for the collection, sharing and use of that data by Advertiser and Journalshow. If Advertiser uses Journalshow technology that stores and accesses cookies or other information on an end user’s device, Advertiser must clearly disclose, and obtain end user consent for, that activity where required by law. Advertiser will ensure that any personal data obtained from end users is processed and transferred in compliance with applicable data protection laws and regulations, and will follow all reasonable directions from Journalshow related to such compliance.

(e) Journalshow and Advertiser will each comply with the Journalshow Data Sharing Addendum attached as Exhibit A, the Joint Controller Addendum attached as Exhibit B, the State-Specific Data Terms attached as Exhibit C, and the Ad Data Terms located at policy.Journalshow.com/ad-data-terms.

(f) Agency represents and warrants that it: (i) is the authorized agent of Advertiser, and (ii) has the legal authority to enter into the Agreement, bind Advertiser under this Agreement, and use the Ad Service, each on behalf of Advertiser. Agency will be liable for Advertiser’s obligations under this Agreement to the extent Agency (i) fails to bind Advertiser to this Agreement or (ii) breaches its representations and warranties in this Section 1(f). Journalshow may share information about Agency’s use of the Ad Service on behalf of an Advertiser with that Advertiser.

(g) Agency and Advertiser each represents and warrants that it will comply with all applicable laws, including any anti-bribery or anti-corruption laws, export controls or sanctions in performance of this Agreement. Failure by Agency and Advertiser to comply with such applicable laws shall constitute a material breach of this Agreement. Agency and Advertiser each represents and warrants that: (i) it and its Affiliates are not: (1) located, resident or incorporated in territories subject to comprehensive or significant US economic or trade sanctions, including currently: Cuba, Crimea, Iran, North Korea, Syria, Crimea, the Donetsk or Luhansk Regions of Ukraine, or Russia ("Sanctioned Territories"); (2) persons or entities owned or controlled by or acting on behalf of the governments of Cuba, Iran, North Korea, Syria or Venezuela; (3) persons designated under national, regional or multilateral trade or financial sanctions under applicable laws and regulations, including but not limited to persons designated on the United States Department of the Treasury, Office of Foreign Assets Control’s (“OFAC”) List of Specially Designated Nationals and Other Blocked Persons, the OFAC Sectoral Sanctions Identification List, United States Department of Commerce Denied Parties List, Entity List or Unverified List, the United Nations Financial Sanctions Lists, or the European Union or United Kingdom HM Treasury Consolidated Lists of Financial Sanctions Targets, in force from time to time; or (4) any entity that is 50% or more owned or otherwise controlled by any of the foregoing (collectively, “Restricted Persons”); (ii) It shall not do anything which would cause Journalshow to be in breach of applicable economic or trade sanctions.

(h) For clarity, Journalshow’s Business Terms of Service (journalshow.com/business/termofservice

), along with any additional terms between Advertiser and Journalshow, govern Advertiser’s use of any Journalshow website, product, or service other than the Advertising Service. In the case of a conflict between this Agreement and any other agreement between Advertiser and Journalshow, this Agreement will supersede and govern for the Ads Service.

(i) Research and Testing. From time to time, we may conduct research to develop, test, and improve the Ad Services. This may include, but is not limited to, analyzing data we have about our Advertisers and their usage of the Ad Service Properties.

2. Policies

Advertiser’s use of the Ad Service is subject to the Ad Service policies made available to Advertiser (“Policies”), including Journalshow’s Community guidelines (policy.Journalshow.com/community-guidelines),Advertising Guidelines (policy.Journalshow.com/advertising-guidelines), and Brand Guidelines (business.Journalshow.com/brand-guidelines). Journalshow may modify Policies from time to time. Advertiser authorizes Journalshow to review any Destination, including by automated means, to provide the Ad Service and to determine compliance with Policies. Advertiser will not, and will not authorize any third party to, (i) generate automated, fraudulent or otherwise invalid impressions, clicks, or other user actions, or (ii) use any automated means or form of scraping or data extraction to access information relating to the Ad Service, except as expressly permitted by Journalshow. Advertiser acknowledges that Journalshow has the right, but not the obligation, to monitor Ad Content. Journalshow may reject or remove Ad Content (i) where it reasonably suspects or becomes aware such Ad Content infringes any (a) applicable laws, (b) regulations or third-party rights, or (c) Policies, or (ii) for any reason. In addition, Journalshow may (i) suspend or terminate Advertiser’s participation in the Ad Service if it believes in good faith that Advertiser is in breach of applicable laws, regulations, this Agreement, or Policies and (ii) modify or cancel the Ad Service at any time. Advertiser will not break or circumvent an Ad Service security measure or provide Ad Content that contains, or connects to, malware, spyware, unwanted software, or any other malicious code.

3. Payment

(a) General. Advertiser will pay all charges incurred in connection with the Ad Service based on the applicable billing metric (e.g. impressions, engagements, clicks or other metrics) (“Charges”). Charges will be based solely on Journalshow’s measurements and are exclusive of taxes. Advertiser will pay all applicable taxes and other government charges. To the maximum extent permitted by law, Advertiser waives all claims related to Charges not disputed in writing 60 days after the applicable invoice or credit card charge. Journalshow may extend, revise, or revoke credit and invoice billing to Advertiser at any time in Journalshow’s sole discretion.

(b) Payment. If Advertiser submits its credit card information for payment, Advertiser authorizes Journalshow to obtain pre-authorization and charge Advertiser’s credit card for Charges. Advertiser is solely responsible for any additional fees (e.g. overage fees) resulting from the use of the credit card for payment. If Journalshow approves Advertiser for invoice billing, Journalshow will invoice Advertiser monthly and Advertiser will pay all Charges Net 30 days from its receipt of an invoice, provided Journalshow may charge Advertiser’s credit card, if submitted, for late unpaid invoices. Late payments will bear interest at a rate of 1.5% per month or the highest rate permitted by law, whichever is less. Advertiser will pay reasonable expenses and attorney’s fees Journalshow incurs in collecting late payment.

(c) Agency Liability. If Agency uses the Ad Service on behalf of an Advertiser to which Journalshow has extended credit, and Journalshow relies on such Advertiser’s credit limit for Agency’s use of the Ad Service, then Journalshow will hold Agency liable for Charges solely to the extent Agency has received payment from the Advertiser. Journalshow reserves the right to seek payment directly from the Advertiser in the event Agency does not pay the Charges in accordance with Section 3(b). If (i) Journalshow cannot extend an Advertiser credit, (ii) Journalshow has extended Agency credit, and (iii) Agency elects in writing for Journalshow to rely on Agency’s credit limit for Agency’s use of the Ad Service on behalf of an Advertiser, then: Journalshow will hold Agency and the Advertiser jointly and severally liable for Charges Agency incurs in respect of such Advertiser, and Journalshow reserves the right to collect payment directly from Agency or Advertiser.

(d) API Partners. If Advertiser uses the Ad Service through an approved third-party service provider (an “API Partner”), Advertiser acknowledges that Journalshow cannot comply with any budget limits set by Advertiser and API Partner, and Advertiser will be responsible for all Charges incurred through an API Partner notwithstanding any budget limits

4. CPM Makegood

For campaigns involving guaranteed CPM deliverables, if the campaign’s final actual

impressions are below the agreed upon levels, the parties will use commercially reasonable

efforts to agree upon the conditions of a makegood flight. Journalshow cannot guarantee the

delivery of auction-based deliverables so makegoods will not be available.

5. Confidentiality

No party will disclose another party’s Confidential Information to a third party except (i) to affiliates, contractors and agents who need to know it and who have agreed in writing to confidentiality obligations at least as protective as this Agreement, (ii) as required by law after using reasonable efforts to provide advance notice of such disclosure, or (iii) with the disclosing party’s consent. “Confidential Information” means information disclosed by a party to the other party under this Agreement that is marked confidential or would reasonably be considered confidential under the circumstances, and excludes any information that (i) is or becomes public, through no fault of the recipient, (ii) was rightfully acquired by or already known to the recipient without an existing confidentiality obligation, or (iii) is independently developed by the recipient.

6. Disclaimer

To the extent permitted by applicable law, the Ad Service is provided on an "as is" basis without warranty of any kind, whether express or implied. Journalshow SPECIFICALLY DISCLAIMS ANY AND ALL WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. Advertiser acknowledges that third parties may generate user activity on Ad Content for prohibited or improper purposes, and any credits or refunds for such activity are at Journalshow’s sole discretion.

7. Limitation of Liability

EXCEPT FOR A PARTY’S GROSS NEGLIGENCE OR WILLFUL MISCONDUCT, ITS OBLIGATIONS UNDER SECTION 8 (INDEMNITY), AND ITS BREACHES OF SECTION 5 (CONFIDENTIALITY) AND THE LAST SENTENCE OF SECTION 2, TO THE FULLEST EXTENT PERMITTED BY LAW: (A) NO PARTY WILL BE LIABLE UNDER THIS AGREEMENT FOR ANY DAMAGES OTHER THAN DIRECT DAMAGES (SUCH AS SPECIAL OR PUNITIVE DAMAGES), AND (B) EXCEPT FOR AGENCY OR ADVERTISER’S PAYMENT OBLIGATIONS UNDER THIS AGREEMENT, NO PARTY’S AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THIS AGREEMENT WILL EXCEED THE AMOUNT PAID OR PAYABLE BY ADVERTISER TO Journalshow IN THE NINETY (90) DAYS BEFORE THE DATE OF THE ACTIVITY FIRST GIVING RISE TO THE CLAIM.

8. Indemnity

(a) By Advertiser. Advertiser will indemnify, defend and hold harmless Journalshow and its officers, directors, employees, agents and affiliates, against any and all liabilities, damages, losses, costs and expenses (including legal fees) (“Losses”) arising from or related to any third-party allegation or legal proceeding (any “Claim”) arising from or related to: (i) the Ad Content, Destinations or Advertiser Products; (ii) breach of this Agreement; (iii) breach of any applicable laws; and (iv) Advertiser’s gross negligence or willful misconduct.

(b) By Agency. Agency will indemnify, defend and hold harmless Journalshow and its officers, directors, employees, agents and affiliates, against any and all Losses arising from or related to any Claim arising from or related to Agency’s breach of Sections 1(f) and 1(g).

(c) General. The party seeking indemnification will promptly notify the indemnifying party of the Claim and cooperate with the indemnifying party in defending the claim. The indemnifying party has full control and authority over the defense, except that: (a) any settlement requiring the party seeking indemnification to admit liability or to pay any money will require that party's prior written consent, such consent not to be unreasonably withheld or delayed; and (b) the party seeking indemnification may join in the defense with its own counsel at its own expense. THE INDEMNITIES ABOVE ARE A PARTY'S ONLY REMEDY UNDER THIS AGREEMENT FOR VIOLATION BY ANOTHER PARTY OF A THIRD PARTY'S INTELLECTUAL PROPERTY RIGHTS.

9. Term / Cancellation

(a) Campaigns involving auction-based deliverables may be canceled at any time prior to the auction.

(b) Campaigns involving guaranteed CPM deliverables may be canceled after the campaign start date with 14 days’ written notice.

(c) Journalshow may modify this Agreement at any time. The modified Agreement will be posted at a URL available through Advertiser’s Ad Service account, will not apply retroactively, and will become effective 7 days after posting except for changes made for legal reasons, which will become effective immediately.

(d) Either party may terminate this Agreement at any time with notice to the other party, but any continued Advertiser use of the Ad Service will be subject to the then-current Ad Service terms posted at a URL made available through Advertiser’s Ad Service account.

(e) Sections 1 (The Ad Service), 2 (Policies), 3 (Payment), 5 (Confidentiality), 7 (Limitation of Liability), 8 (Indemnity), 9 (Term/Cancellation), and 10 (General) will survive termination of this Agreement.

10. General

(a) The parties will resolve any claim, dispute, or controversy (excluding claims for injunctive or other equitable relief) arising from or relating to this Agreement (“Disputes”) by binding arbitration by the American Arbitration Association (“AAA”) under the Commercial Arbitration Rules and Supplementary Procedures for Consumer Related Disputes then in effect for the AAA, except as provided in this Agreement. Unless the parties agree otherwise, the arbitration will be conducted in San Francisco, California. Each party will be responsible for paying any AAA filing, administrative and arbitrator fees (“Fees”) in accordance with AAA rules, except that Journalshow will pay Advertiser’s reasonable Fees if Advertiser’s claim for damages does not exceed $75,000 and is non-frivolous according to Federal Rule of Civil Procedure 11(b). The arbitrator has exclusive authority to resolve any dispute relating to the interpretation, applicability, or enforceability of this Section 10(a). Any judgment on the arbitrator’s award may be entered in any court of competent jurisdiction. Nothing in this Section 10(a) will prevent either party from seeking injunctive or other equitable relief for matters related to confidentiality, data security, intellectual property or unauthorized access to the Ad Service. ALL DISPUTES MUST BE BROUGHT IN A PARTY’S INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING. UNLESS THE PARTIES AGREE OTHERWISE, THE ARBITRATOR MAY NOT CONSOLIDATE A PARTY’S DISPUTE WITH THE DISPUTE OF A THIRD PARTY. EACH PARTY WAIVES ITS RIGHT TO A TRIAL BY JURY OR TO PARTICIPATE IN A CLASS ACTION.

(b) NOTHING IN THIS AGREEMENT IS INTENDED TO LIMIT A PARTY’S NON-WAIVABLE STATUTORY RIGHTS. If any provision of this Agreement is found invalid, illegal or unenforceable, the remainder of the Agreement will remain in full force and effect.

(c) Failure to enforce any provision of this Agreement will not constitute a waiver.

(d) Except for modifications to this Agreement by Journalshow under Section 9(c), any amendments to this Agreement must be in writing, executed by the parties and expressly state that they are amending this Agreement.

(e) Except as expressly stated in this Agreement, there are no third-party beneficiaries to this Agreement.

f) All notices must be in writing (including email). Notices of termination and breach must be sent to the other party’s legal department. The email address for Journalshow’s legal department is [email protected]. All other notices may be sent to a party’s regular point of contact. Notice will be treated as given on receipt.

(g) No party will be liable for inadequate performance to the extent caused by a condition beyond the party's reasonable control.

(h) No party may assign any part of this Agreement without the other party’s written consent except to an affiliate or in a change of control. Any other attempt to assign is void

(i) This Agreement does not create any agency, partnership, or joint venture between the parties.

Last updated: April 2025

EXHIBIT A: Journalshow Data Sharing Addendum

This Journalshow Data Sharing Addendum ("DSA") supplements and is part of the Journalshow Advertising Services Agreement between Journalshow and Signatory (“Agreement”). The parties agree as follows:

1. Definitions. Unless otherwise defined below, all capitalized terms used in this DSA will have the meanings given to them in the Agreement:

"Ad Data" means the personal data that one party receives from the other specifically in connection with Signatory's access to and use of the Ad Service.

"controller" means a party that determines the means and purposes of processing personal data.

"Data Protection Law" means:

(a) the ePrivacy Directive, including the applicable national implementation(s);

(b) the Data Protection Regulation;

(c) the UK Data Protection Regulation;

(d) Law 13,709/2018 (General Data Protection Law) of Brazil;

(e) State Privacy Law (as defined in Exhibit C); and

(f) any other privacy, data protection or similar law or requirement that may apply to either party;

and, in each case, any replacement law, directive or regulation imposing equivalent obligations.

"Data Protection Regulation" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and any delegated or implemented acts adopted by the European Commission under that regulation, and any replacement directive or regulation imposing equivalent obligations.

"Data Security Measures" means appropriate technical and organizational measures to protect Ad Data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, access, or processing.

"EEA" means the European Economic Area.

"ePrivacy Directive" means Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector as amended by Directive 2009/136/EC, and any replacement directive or regulation imposing equivalent obligations.

“GDPR” means the Data Protection Regulation and the UK Data Protection Regulation.

"personal data" has the meaning given to it in Data Protection Law and also includes “personal information” or a similar term.

"processing" has the meaning given to it in Data Protection Law and "process", "processes" and "processed" will be interpreted accordingly.

"UK Data Protection Regulation" means the Data Protection Regulation as amended and incorporated into English and Welsh, Scottish and Northern Irish law under the UK European Union (Withdrawal) Act 2018, and applicable secondary legislation thereunder.

2. Scope and Roles. This DSA applies to all processing of Ad Data between the parties in connection with the Ad Service. For the Joint Processing of EEA, Swiss, and UK data subjects’ personal data described in the Joint Controller Addendum, attached below as Exhibit B, the parties are joint controllers and the terms of the Joint Controller Addendum shall additionally apply. For all other processing, each party acts as an independent controller with respect to the Ad Data which it processes.

3. Compliance with Data Protection Law. Journalshow and Signatory will each comply with their obligations in respect of processing Ad Data under applicable Data Protection Law and/or, where relevant, the applicable national implementation(s) of Data Protection Law. Each party shall have the right to take reasonable and appropriate steps to help ensure that the other party uses Ad Data in a manner consistent with the party's obligations under Data Protection Law. The parties shall discuss in good faith what steps these shall be when a party seeks to exercise such rights.

4. Purpose. Signatory will only process Ad Data in connection with its use of the Ad Service and for such other purposes as permitted by applicable law, including Data Protection Law. Journalshow will only process Ad Data in connection with its provision of the Ad Service and as permitted by applicable law, including Data Protection Law.

5. Security. Each party will implement Data Security Measures; provided that, at a minimum, Signatory agrees to provide at least the same level of privacy protection for Ad Data as is required under applicable Data Protection Law and/or, where relevant, the applicable national implementation(s) of Data Protection Law. Data Security Measures will be evaluated and updated on an ongoing basis to reflect advancements in technical and organizational measures available. Signatory will notify Journalshow in writing of any substantial changes to Data Security Measures.

6. Personnel. Each party will impose contractual obligations on those of its personnel, agents or subcontractors who it authorizes to access Ad Data, including obligations regarding confidentiality, data protection and data security, at least at the same level of protection as is required under applicable Data Protection Law.

7. Transfers. Each party will ensure that, if it transfers Ad Data outside the EEA, Switzerland, the UK, Brazil or other jurisdiction where applicable Data Protection Law so requires to a country not recognized by the European Commission or by applicable data protection authority as providing an adequate level of protection for personal data, that transfer will be covered by a valid derogation or a recognized compliance standard under applicable Data Protection Law for the lawful transfer of personal data outside that particular jurisdiction. If Signatory transfers Ad Data to Journalshow, Journalshow Europe Ltd. is the recipient of any Ad Data originating in the EEA, Switzerland and/or the UK, and Journalshow, Inc. is the recipient of all Ad Data originating anywhere else.

8. Point of Contact. Each party will provide the other party with a point of contact within its organization authorized to respond to enquiries in respect of the processing of Ad Data by that party contemplated by this DSA.

9. Assistance with enquiries. If (i) a party is obliged under Data Protection Law to provide information in response to an enquiry from a data subject or an authority about the processing of Ad Data by that party; and (ii) it is not possible for that party to provide sufficient information in order to discharge its obligations without the involvement of the other party, then, upon the first party's written request and provided that the requesting party reimburses the other party for the costs arising from such assistance, the other party will provide it with reasonable assistance so that it may make the information available.

10. Noncompliance. If Signatory determines that it can no longer comply with this DSA: (i) Signatory shall promptly (and in no case later than five (5) business days after making such determination) notify Journalshow; (ii) Journalshow shall have the right to terminate the Agreement without penalty upon notice to Signatory; and (iii) Signatory will cease processing the Ad Data or take other reasonable and appropriate steps to remediate the situation.

11. Disclosure. Signatory authorizes Journalshow to provide this DSA and a copy of the relevant privacy provisions of the Agreement to any authority as required by law.

12. Survival. Sections 1-10 of this DSA shall survive termination of this DSA for so long as Signatory has custody, control or possession of the Ad Data. Sections 11 and 12 shall survive indefinitely.

EXHIBIT B: Journalshow Joint Controller Addendum

This Journalshow Joint Controller Addendum ("JCA") is between Journalshow and Signatory (or “you”) and supplements and forms part of the Journalshow Advertising Services Agreement between Journalshow and Signatory ("Agreement"). The parties agree as follows:

1. Definitions. Unless otherwise defined below, all capitalized terms used in this JCA will have the meanings given to them in the Agreement (including the DSA).

“Activity Data” has the meaning given to it in the Ad Data Terms (policy.Journalshow.com/ad-data-terms).

“Joint Processing” means the collection and transmission of Activity Data by you to Journalshow Europe through an authorized Ad Service feature (an “Ad Data Feature”), and includes the collection and transmission of Activity Data by the Journalshow Tag, a Journalshow API, or another Ad Service feature that lets you share Activity Data. Joint Processing does not include the subsequent processing of Activity Data by Journalshow.

"Journalshow Europe", “us”, or "we" means Journalshow Europe Ltd., 3rd Floor, Waterloo Exchange, Waterloo Road, Dublin 4, Ireland.

References to "Data Subject", "Joint Controller", "Personal Data Breach" and "Processor" in this JCA have the meanings set out in the GDPR.

2. This JCA applies only to the processing of personal data within the scope of the GDPR.

3. Journalshow Europe and you are Joint Controllers in accordance with Article 26 of the GDPR with respect to the Joint Processing.

4. The Joint Processing is subject to the provisions of this JCA. They apply to all activities in which the parties, their employees or their Processors are involved in the Joint Processing.

5. Journalshow Europe’s and your responsibilities for compliance with the obligations under the GDPR with regard to the Joint Processing are determined as follows:

6. All other responsibilities for compliance with obligations under the GDPR regarding the Joint Processing remain with each party individually.

7. This JCA does not grant you any right to request the disclosure of Personal Data of any Journalshow Europe user that is processed in connection with Journalshow Europe’s services.

8. Data Subjects can exercise their rights under Articles 15-21 of the GDPR with regard to their Personal Data processed by Journalshow Europe directly against Journalshow Europe. If Data Subjects exercise their rights under the GDPR with regard to the Joint Processing against you, or you are contacted by a supervisory authority with regard to the Joint Processing, each a "Request", you will forward all relevant information regarding such Request to us promptly using [email protected] but within a maximum of seven (7) calendar days of such Request. Journalshow Europe agrees to answer Requests from Data Subjects in accordance with our obligations under this JCA. You agree to take all reasonable endeavours in a timely manner to cooperate with us in answering any such Request. You are not authorised to act or answer on Journalshow Europe’s behalf.

9. If any portion of this JCA is found to be unenforceable, the remaining portion will remain in full force and effect. If we fail to enforce any portion of this JCA, it will not be considered a waiver. Any amendment to or waiver of these terms requested by you must be made in writing and signed by us. If there is a conflict between this JCA and the Journalshow Data Sharing Addendum, this JCA will supersede.

EXHIBIT C: U.S. State-Specific Data Terms

These State-Specific Data Terms (“State Terms”) supplement and are part of the Journalshow Advertising Services Agreement between Journalshow and Signatory (“Agreement”). The parties agree as follows:

1. Definitions. Unless otherwise defined below, all capitalized terms used in these State Terms will have the meanings given to them in the Agreement, Ad Data Terms (policy.Journalshow.com/ad-data-terms), and DSA (together, “Ad Terms”).

“LDP Data” means conversion data subject to State Privacy Law transmitted to Journalshow with the Journalshow limited data processing technical signal (“LDP Signal”) enabled (further information at https://help.Journalshow.com/en/business/article/limited-data-processing).

“LDP Services” means advertising-related Processing that qualifies as a Business Purpose, including Processing for purposes of auditing; security and integrity; debugging; short-term; transient uses; analytics; providing advertising or marketing services that do not include Cross-Contextual Behavioral Advertising, Targeted Advertising, or profiling, where such activity is prohibited for a processor under applicable State Privacy Law; internal research; and efforts to improve quality and safety; and other purposes for which processors are permitted to process personal data under State Privacy Law. LDP Services include, for example, measurement, and fraud detection and prevention.

“State Privacy Law” means, as applicable:

1. California Consumer Privacy Act of 2018, as amended, including as amended by the California Privacy Rights Act of 2020, and all implementing regulations (“CCPA”);

2. the Colorado Privacy Act, Colo. Rev. Stat. § 6-1-1301 et seq.;

3. Connecticut’s Act Concerning Data Privacy and Online Monitoring, Pub. Act No. 22015;

4. After January 1, 2025, the Delaware Personal Data Privacy Act, Del. Code §12D-101 et seq.;

5. the Florida Data Privacy and Security, ss. 501.701-501.721, Florida Statutes

6. After January 1, 2026, the Indiana Consumer Data Protection, Ind. Code §24-15-1-1 et seq.;

7. After January 1, 2025, the Iowa’s Act Relating to Consumer Data Protection, Iowa Code §715D.1 et seq.;

8. After January 1, 2026, the Kentucky Consumer Data Act, House Bill 15

9. After October 1, 2025, the Maryland Online Data Privacy Act of 2024;

10. After July 31, 2025, the Minnesota Consumer Data Policy;

11. the Montana Consumer Data Privacy Act;

12. the Nebraska Data Privacy Act;

13. the New Jersey Senate Bill 332;

14. the New Hampshire Expectation of Privacy;

15. the Oregon Consumer Privacy Act;

16. After January 1, 2026, the Rhode Island Data Transparency and Privacy Protection Act, Rhode Island General Laws Title 6, Chapter 6-48.1;

17. After July 1, 2025, the Tennessee Information Protection Act, Tenn. Code Ann. § 47-18-3201 et seq.;

18. the Texas Data Privacy and Security Act, Tex. Bus. & Com. Code § 541.001 et seq.; and

19. the Utah Consumer Privacy Act, Utah Code Ann. § 13-61-101 et seq.; and

20. Virginia’s Consumer Data Protection Act, Va. Code Ann. § 59.1-571 et seq. (“VCDPA”);

21. any and all implementing regulations associated with (1) to (20) above; and

22. any data privacy or data protection laws modeled on any of the foregoing, each as may be in effect and applicable to the processing hereunder

The terms “business purpose,” “consumer”, “commercial purpose”, “cross-context behavioral advertising,” “personal data,” “personal information,” “process,” “processing,” “processor,” “sale,” “sell,” “share,” “service provider,” and “targeted advertising,” “third party,” have the meanings given in applicable State Privacy Law. As used herein, references to “processor” shall include “service provider,” references to “personal data” shall include “personal information,” and references to “controller” shall include “business.” Capitalized terms not defined here have the definitions given to them in the Ad Terms.

2. Scope and Roles of the Parties. Section 3 of these State Terms applies when Journalshow receives Ad Data subject to the CCPA as a Third Party. Section 4 of these State Terms applies when Journalshow receives LDP Data, in which case Journalshow will operate as a Processor to Signatory. Section 5 sets out Signatory’s obligations under these State Terms.

3. CCPA Third Party Terms.

a) This Section 3 applies solely to Personal Information that is subject to the CCPA. Terms capitalized in this Section 3 but not otherwise defined in the Agreement shall have the meanings given to such terms in the CCPA.

b) Pursuant to this Agreement Signatory may make available certain Personal Information to Journalshow for the sole purpose of Journalshow using that Personal Information to inform which advertisements are shown to users on Journalshow, to measure the effectiveness of ads on Journalshow, to report on the effectiveness of such ads, and other purposes outlined and permitted in the Agreement, and Journalshow will only use the Personal Information for such purpose. Journalshow will comply with applicable obligations under the CCPA, including by providing the same level of privacy protection to the Personal Information as required by Signatory under the CCPA.

c) Signatory has the right to take reasonable and appropriate steps to ensure that Journalshow uses Personal Information provided pursuant to this Agreement in a manner consistent with Signatory’s obligations under the CCPA, including by reviewing materials generally made available by Journalshow for such purposes, such as Help Center articles, within 12 months as of the date of Signatory’s request.

d) Upon reasonable written notice, Signatory has the right to take reasonable and appropriate steps necessary to stop or remediate unauthorized use of Personal Information by Journalshow.

e) Journalshow will notify Signatory if it makes a determination that it can no longer meet its obligations under the CCPA. If Signatory reasonably believes that Journalshow is using Personal Information in an unauthorized manner, Signatory has the right to notify Journalshow of such belief via [email protected], and the parties will work together to remediate the allegedly violative activities, if necessary.

4. Processor Terms.

a) Journalshow offers the LDP Signal, which allows Signatory to control when Journalshow will act as a processor with respect to LDP Data. This Section 4 applies to the extent Signatory makes available to Journalshow LDP Data.

b) Signatory discloses such LDP Data to Journalshow solely for the purposes of performing the LDP Services. Signatory instructs Journalshow to process LDP Data for such purposes.

c) Journalshow will not (i) sell or share such LDP Data; or (ii) process such LDP Data for purposes of targeted advertising.

d) Journalshow will assist Signatory in meeting certain obligations under State Privacy Law with respect to LDP Data, including by (i) providing Signatory tools or other means to enable it to process consumer rights requests received pursuant to State Privacy Laws; (ii) contributing to data protection impact assessments where required by State Privacy Laws, by providing information about Journalshow’s standard practices (e.g., help center articles); (iii) implementing reasonable security procedures and practices appropriate to the nature of such LDP Data designed to protect such LDP Data from unauthorized or illegal access, destruction, use, modification, or disclosure in accordance with State Privacy Law.

e) Journalshow will treat the LDP Data as confidential and ensure that individuals who process it are subject to an appropriate obligation of confidentiality.

f) Journalshow will delete the LDP Data at Signatory’s instruction upon conclusion of the Ad Terms, unless further retention is required by law. Journalshow will process the LDP Data for however long the Ads Terms remain in effect.

g) Upon Signatory’s request, Journalshow will make available to Signatory the information Journalshow determines is reasonably necessary to enable Signatory to evaluate Journalshow’s compliance with its obligations under this Section 4 (Processor Terms) with respect to LDP data.

h) If Journalshow engages a subprocessor to process LDP Data, Journalshow will:

1. Ensure it has a written agreement in place with such subprocessor that obligates the subprocessor to comply with terms at least as restrictive as those set forth in this Section 4; and

2. To the extent required by State Privacy Laws, provide Signatory (1) notice of the planned engagement of any new subprocessor; and (2) an opportunity to object.

i) If LDP Data is subject to the CCPA, Journalshow will also:

1. Notify Signatory without undue delay if Journalshow determines it can no longer meet its obligations under the CCPA with respect to LDP Data.

2. Not retain, use, or disclose such LDP Data outside of the direct business relationship with Signatory or for any purpose, including Commercial Purposes, other than the for the purposes set forth in Section 4(b) above, unless otherwise permitted by the CCPA.

3. If Signatory reasonably believes that Journalshow is processing LDP Data subject to the CCPA in an unauthorized manner, Signatory may notify Journalshow of such belief by email at the email address stated in the Ad Terms, and the parties will work together in good faith to remediate any such alleged unauthorized processing, if necessary.

5. Signatory Obligations.

a) Signatory is and will remain solely responsible for its compliance with State Privacy Law, including through its use of the LDP Services. Signatory is solely responsible for designating the state of residence of the individual for whose data the LDP Signal is used.

b) Signatory acknowledges that Journalshow offers the LDP Services solely with respect to LDP Data subject to State Privacy Law and that Journalshow does not offer LDP Services or otherwise commit to restricted data processing for conversion data from individuals in states other than those subject to State Privacy Law.

c) If Signatory offers or has committed, directly or indirectly, to honoring opt-out requests from individuals in jurisdictions other than states subject to State Privacy Law or with respect to data other than conversion data (collectively, “Excluded Data”), Signatory will not disclose or otherwise make available to Journalshow, directly or indirectly, any Excluded Data.

d) Signatory will provide notices and choices as required by applicable law (including, without limitation State Privacy Laws) sufficient to cover processing by Journalshow as contemplated in these State Terms.

e) To the extent Journalshow discloses any de-identified data to Signatory, Signatory will (i) not attempt to re-identify such data; (ii) use reasonable administrative, technical, and organizational measures to prevent any such reidentification or inadvertent release of such data; and (iii) publicly commit to maintain such data in de-identified form and not to attempt to re-identify such data.

6. Changes to These Terms. Journalshow may change these State Terms without notice in the event of changes to applicable State Privacy Law (including the issuance of a regulation, court order or governmental guidance relating to State Privacy Law) or changes to the LDP Services.

Last Updated: August 2026