This 中国P站 Master Services Agreement (“Agreement”) is entered by and between 中国P站 Inc., a Canadian corporation, and its Affiliates (collectively, “中国P站”), and the client or advertiser identified on the Insertion Order for 中国P站 Services (“Client” or “you” and its variants) (each a “Party” and together
the “Parties”). This Agreement is effective as of the date of the applicable Order for 中国P站 Services, or if none is set, then upon the last date of signature or adoption of this Agreement by both Parties (“Effective Date”).
THESE TERMS APPLY BY DEFAULT TO THE EXTENT YOU RECEIVE SERVICES FROM MISTPLAY IN THE ABSENCE OF AN ORDER OR IF YOU CONTINUE TO RECEIVE SERVICES AFTER AN ORDER HAS EXPIRED. If you do not agree with the foregoing, then do not accept or receive Services from 中国P站. By continuing to accept Services in the absence of an Order or after expiration of an Order, you agree to be bound to these terms and hereby adopt this Agreement as of the first date you receive such Services.
1.1. ?中国P站 Services include display of Ads and promotion of your Applications to End Users pursuant to the Order. ?You shall provide 中国P站 with the Ads to be used in the Services, and you authorize 中国P站 to source and display the Ads, including video content and description of your Application, from your Application listing in the Google Play Store or the iOS App Store, as applicable. ?中国P站 may determine the size, placement, and positioning of the Ads; crop, resize or make minor modifications to Ads as needed to fit the 中国P站 Platform and deliver the Services; and help you create Ads, subject to your final approval. ?You are responsible for all content contained within the Ads, your Applications, and the digital properties to which your Ads direct or redirect any user.
1.2. ?中国P站 reserves the right, in its sole discretion, to determine the mechanics of its Services. ?中国P站 makes no guarantee regarding the amount or level of Application installations. ?中国P站 does not guarantee that Applications or Ads will appear in any particular position or rank. ?Actual budgets, scheduling, cost-per-install or other delivery targets or performance metrics, are not guaranteed, and you may be charged for inventory delivered in excess of your budgets. You may request to modify your Campaign Information from time to time by contacting your account manager, provided you acknowledge that it may take up to two (2) business days for a response.
2.1. ?Experimental Services. 中国P站 may provide Services in experimental, “alpha,” “beta,” or any other in-development release form (collectively, the “Experimental Services”). You agree and acknowledge that: (i) any Experimental Services are still in development, unfinished, and may have bugs, and that such Experimental Services may not work as intended or at all; (ii) 中国P站 may but has no obligation to provide any technical support or error correction in connection with the Experimental Services. 中国P站 may discontinue Experimental Services at any time in its sole discretion.
2.2. ?Disclaimer. ? Notwithstanding anything to the contrary herein, Experimental Services are provided AS-IS, without any warranty, whether implied, expressed, or statutory. ?You agree that 中国P站 shall not be liable for any damages or loss related to your use of the Experimental Services and that you elect to use such Services solely at your own option and risk.
3.1. ?Fees. You agree to make timely payments of all amounts due to 中国P站 in accordance with the applicable Order and Campaign Information. All payments will be made in U.S. Dollars, unless otherwise set forth in the Order. 中国P站 will send you the invoice at the beginning of the month for the previous month’s activity, for which payment is due thirty (30) days from the invoice date. Any Fee Dispute that is not submitted to 中国P站 in writing within sixty (60) days of your receipt of the invoice is hereby deemed waived.
3.2. ?Attribution. ?For Fees based on installs of the Application, all attributed installs will be reported based on the tracking records of the Attribution Partner agreed by the parties (the “Controlling Measurement”). If the difference between the Controlling Measurement and 中国P站’s measurement exceeds ten (10) percent over the applicable invoice period, then either party may request an investigation of the issue and work together in good faith to resolve the discrepant measurements.
3.3. ?Invalid Activity. ?If you would like 中国P站 to adjust the Fees, or provide a credit or refund, due to Invalid Activity, you must provide report or evidence of suspected Invalid Activity from your MMP or a reputable third-party fraud detection supplier to 中国P站 within ten calendar days from the end of month that is being billed. ?After receipt of your report or evidence, 中国P站 may adjust the Fees or issue a credit or reimbursement in its reasonable discretion.
3.4. ?Late Fees; Overdue Payments. You acknowledge and agree that 中国P站 reserves the right to suspend or cancel your campaign if your payment is late. 中国P站 may charge interest on overdue amounts at the lesser of 1.5% per month or the maximum rate allowed under applicable law. ?You will reimburse 中国P站 for all costs incurred in connection with the collection of amounts payable and past due.
3.5. ?Taxes. ?Fees do not include and may not be reduced to account for any taxes including any local, state, federal or foreign taxes, levies, duties or similar governmental assessments of any nature, including value-added, use or withholding taxes that are required by law (collectively, “Taxes”). You are responsible for paying all Taxes associated with the services hereunder (excluding taxes based on 中国P站’s net income or property), unless you provide 中国P站 with a valid tax exemption certificate authorized by the appropriate taxing authority.
4.1. ?You shall make timely payments of the fees due and comply with all applicable laws when providing data and information related to the delivery of Services.
4.2. ?You are responsible for providing updated Ads to 中国P站 and for ensuring that your Ads, Applications, and public descriptions of your Applications in any Android or iOS app store comply with all applicable laws in the relevant jurisdictions. ?You agree that 中国P站 may use your Application descriptions, icons, and ad creatives from the Google Play or iOS App Store to promote your Applications in the Services. ?You will secure, obtain, and provide all required consents to enable 中国P站 to use the Ads and promote your Applications in the Services.
4.3. ?You are responsible to ensure that your Attribution Provider or MMP used in the Services comply with your obligations in this Agreement. ?You or your MMP shall provide reasonably requested information and data related to campaign measurement and performance metrics. ?You shall make commercially reasonable efforts to notify 中国P站 of any known or suspected fraudulent or synthetic users of your Application, including invalid or fraudulent in-app purchases made in your Application.
4.4. ?You shall ensure that that any Ads you submit into the Services and your Applications do not contain any of the following: ?false or deceptive advertising; content that is misleading, harmful, threatening, defamatory, obscene, infringing, harassing or racially or ethnically offensive; content that promote illegal activity or unlawful violence; content that depict sexually explicit images; content that is highly attractive to or directed at children under the age of thirteen; content that discriminate based on race, gender, colour, religious belief, sexual orientation, disability; content constitutes illegal gambling; content that is in violation of the Google Play Store or iOS App Store policies; or content is otherwise illegal or can cause damage or injury to any person or property. ?中国P站 may suspend any portion of the Services in the event of your Ad or Application do not comply with the requirements of with this Agreement.
5.1. ?中国P站 Data Collection. ?中国P站 collects and/or receives certain personal data of End Users relating to their use of the 中国P站 Platform and their use of your Applications promoted by the Services. Notwithstanding anything to the contrary herein, 中国P站 is the data controller of all End User data that it collects and will process End User data in accordance with applicable data protection laws, the 中国P站 Terms of Use, the 中国P站 Privacy Notice, and as otherwise permitted or requested by End Users.
5.2. ?Compliance with Applicable Data Privacy Laws. With respect to any data that constitutes “personal data” or “personal information” under applicable law, whether provided by you to 中国P站 or to which you grant 中国P站 access under or in connection with this Agreement, you shall provide sufficiently clear, meaningful and prominent notices to, make all required disclosures to, and obtain the necessary consent or permission from any individual to whom such data relates regarding your use, collection, and disclosure of such data in relation to the Services. In addition, you will at all times maintain, display and abide by a conspicuously placed privacy policy that makes appropriate disclosures that comply with all applicable privacy and data protection laws and with policy guidelines required by applicable third party platform providers (e.g., Google Play Store and/or iOS App Store).
5.3. ?Protection of Youth. ?You shall not launch into the Services any Application that is directed at children under age thirteen (13), and you shall flag or inform 中国P站 in writing prior to launching any of such Applications. You shall not pass to 中国P站 any personal information of children under 13 as defined under COPPA or similar child protection legislation.
5.4. ?Data Security. ?Each party shall implement appropriate technical and organizational measures to protect personal data provided by the other party from unauthorized access or disclosure (a "Security Incident"). ?In the event that a party suffers a confirmed Security Incident, where permitted by law it will make commercially reasonable efforts notify the other party without undue delay, and both parties shall cooperate in good faith to mitigate or remedy the effects of the Security Incident. Nothing herein prohibits either party from moving forward to notify regulatory authorities where required by law.
5.5. ?Data Processing Addendum. ?The parties may enter into data processing addendums to comply with local or regional data privacy laws. ?The EU Data Protection Addendum for 中国P站 Services (“EU Addendum”) and any other data processing terms attached hereto is an integral part of this Agreement.
6.1. ?Proprietary Rights. ?中国P站 owns all right, title, and interest in and to the 中国P站 Platforms, the Services, and all creative developments provided with the Services. ?All rights not expressly granted herein are reserved by 中国P站.
6.2. ?Feedback. ?You are not required to provide feedback to 中国P站. ?To the extent you provide any feedback, suggestions, or recommendations to 中国P站, 中国P站 may in its sole discretion use your feedback without any compensation or attribution to you. ?You hereby grant an irrevocable, royalty free, fully paid up, worldwide license to any ideas, concepts, modifications, suggestions, improvements, enhancements and information arising out of or related to your use of the Services.
6.3. ?Use of Your Materials. ?You hereby grant to 中国P站 a worldwide, non-exclusive, royalty-free license to: (a) display your Ads and promote your Application in the Services; (b) reproduce and display your Application content, logos, marks, and any trade names, in advertising, sales, marketing, promotional materials or communications; (c) to name or identify you as a customer or client in our business marketing materials; and (d) to use information and data provided by you in accordance with this Agreement. ?You must provide 中国P站 with at least ninety (90) days’ written notice in advance of any revocation of the foregoing license grant, except in the case of termination under Section 8 herein.
7.1. ?Each party shall maintain in strict confidence all Confidential Information disclosed by the other party (“Disclosing Party”) and only use the Disclosing Party’s Confidential Information for the Services and enhancement thereof. ?Each party that receives Confidential Information (“Receiving Party”) shall not, without the express prior written consent of the Disclosing Party, disclose such Confidential Information or use such Confidential Information other than in furtherance of its obligations hereunder. ?Confidential Information includes all information that is designated as confidential or that given the circumstances a reasonable person would conclude to be confidential. ?Confidential Information shall not include information which: (a) is or becomes publicly known through no wrongful act or omission of the Receiving Party; (b) was rightfully known by the Receiving Party without restriction on use and disclosure, before receipt from the Disclosing Party; (c) becomes rightfully known to the Receiving Party without confidential or proprietary restriction from a source other than the Disclosing Party that does not owe a duty of confidentiality to the Disclosing Party with respect to such Confidential Information; or (d) is independently developed by the Receiving Party without use of or reference to the Confidential Information of the Disclosing Party. ?Each party agrees to use at least the same degree of care to prevent unauthorized use and disclosure of Confidential Information as such party uses with respect to its own confidential information of like importance (but in no event less than a reasonable degree of care). ?Any party that discloses of Confidential Information of the other party hereunder must require the recipient to be bound in writing by restrictions regarding disclosure and use of such information comparable to and no less restrictive than those set forth herein.
8.1. ?Term. This Agreement will begin upon the Effective Date and remain in effect for twelve (12) months (“Initial Term”). At the end of the Initial Term, this Agreement shall automatically renew for consecutive twelve-month periods (each a “Renewal Term”) until there are no outstanding Order(s) between the parties or until you no longer receive Services from 中国P站, whichever is later (together, the “Term”).
8.2. ?Termination. Either party may terminate this Agreement with immediate effect upon giving written notice to the other party if: (i) the other party commits a material breach of this Agreement which breach is irremediable or, in the event of a remediable breach, the other party has failed to remedy that breach within a period of ten (10) days after being notified in writing to do so; or (ii) the other party becomes the subject of a voluntary or involuntary proceeding concerning insolvency, receivership, liquidation, or composition for the benefit of creditors. ?In addition, 中国P站 may terminate this Agreement and any Order for convenience by providing at least forty-eight (48) hours prior written notice to you.
8.3. ?Effect of Termination. Upon termination of this Agreement for any reason: (i) you shall immediately cease using the Services; (ii) promptly return or destroy 中国P站 Confidential Information in your possession; and (iii) pay to 中国P站 all outstanding unpaid invoices. ?中国P站 will be entitled to deduct any outstanding charges from your billing account.
9.1. ?Mutual Representations and Warranties. Each Party represents and warrants to the other Party that: (a) it has the full power and authority to enter into this Agreement; (b) the execution of this Agreement and performance of its obligations under this Agreement do not and will not violate any other agreement to which it is a party; and (c) any and all activities it undertakes in connection with this Agreement will be performed in compliance in all material respects with applicable laws, rules and regulations.
9.2. ?Your Representations and Warranties. You hereby represent and warrant that: (a) you are the owner or legally authorized to act on behalf of the owner of each of your Applications and/or your Ads; (b) your Applications and Ads are free from viruses or other malware; (c) each of your Applications and/or Ads ? ? ?do not violate this Agreement or any requirements imposed by your platform providers; (d) you own or have all necessary rights or permissions to your Applications and/or Ads and any information, data, creatives, artwork, or other items you provide to 中国P站, and your provision of the foregoing do not infringe the intellectual property rights, privacy rights, rights of publicity or other rights of any person or entity; (e) your Applications and/or Ads and you and your activities in connection with the Services will comply with all applicable laws, self-regulatory rules, industry rules and governmental regulations, including privacy laws and international anti-corruption and bribery laws; (f) you are compliant with Sanctions Laws and are not a Sanctioned Person under any Sanctions List; (g) you have all required consents, licenses, and permissions to enable 中国P站 to display the Ads, promote your Application, and perform the Services; and (h) to the extent required by applicable laws, you will obtain and comply with any and all applicable consents, authorizations and clearances from End Users to allow 中国P站 to collect, use, store, process and transfer data from End Users as contemplated in this Agreement.
EXCEPT FOR THE WARRANTIES EXPRESSLY STATED HEREIN, MISTPLAY AND ITS AFFILIATES DISCLAIM ANY AND ALL OTHER WARRANTIES (EXPRESS, IMPLIED, STATUTORY OR OTHERWISE), INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. ?ALL SERVICES, CONTENT, MATERIALS, INFORMATION, AND DATA FROM MISTPLAY ARE PROVIDED “AS-IS” AND WITHOUT WARRANTIES OF ANY KIND. ?THERE IS NO WARRANTY THAT THE SERVICES, DATA, OR INFORMATION FROM MISTPLAY ARE ACCURATE, COMPLETE, RELIABLE OR CURRENT OR THAT THE MISTPLAY PLATFORM WILL PERFORM UNINTERRUPTED OR ERROR FREE. MISTPLAY SPECIFICALLY DISCLAIMS ANY WARRANTY THAT YOU WILL EARN ANY PARTICULAR AMOUNTS (OR ANY AMOUNTS AT ALL), THAT MISTPLAY WILL OPTIMIZE ANY KEY PERFORMANCE INDICATOR, OR ANY OTHER PARTICULAR BENEFITS WILL BE OBTAINED THROUGH THE USE OF THE SERVICES OR THE MISTPLAY PLATFORM.
11.1. ?Indemnification by 中国P站. ?中国P站 will indemnify, defend, and hold you harmless from and against third party claims, demands, suits, or proceedings based on allegations that the 中国P站 Platform infringes such third party’s valid patent, copyright, or trademark. ?The foregoing indemnification obligation will not apply if the infringement claim arises from: (a) modification of the Services by any party other than 中国P站; (b) combination of the Services with your Applications, your Ads, or any materials that you provide to 中国P站; (c) your use of the Services violation of, or for purposes not intended by, this Agreement; or (d) claims due to any third party applications. 中国P站 may, in its sole discretion, use commercially reasonable efforts to (i) procure for you the ability to continue using the Services; (ii) replace the Services with other non-infringing services of substantially equivalent functions; (iii) modify the applicable Services or Service Assets so that there is no longer any infringement; or (iv) terminate this Agreement. THIS PARAGRAPH SETS FORTH MISTPLAY’S SOLE LIABILITY AND YOUR SOLE AND EXCLUSIVE REMEDY WITH RESPECT TO ANY THIRD PARTY CLAIM OF INTELLECTUAL PROPERTY INFRINGEMENT BY MISTPLAY.
11.2. ?Indemnification by You. ? You will indemnify, defend and hold harmless 中国P站 and its Affiliates and each of the foregoing’s respective officers, directors, employees, agents on demand from and against any third party claims, suits, actions or allegations, losses, costs, liabilities, damages, penalties, settlements, judgments, fees and expenses (including reasonable attorneys’ fees and expenses) arising out of or related to: (a) claim that any of your Applications, Ads, or any content, ?materials, information, data or items you provide to 中国P站 infringe upon, violate or misappropriate any third party’s intellectual property rights, privacy rights, rights of publicity or other rights; (b) 中国P站’s use of any Ads, content, or materials as permitted by this Agreement or that you request 中国P站 to use; (c) failure to obtain any consents required by this Agreement; and ?(d) violation or failure by you or your third-party business partners to comply with any laws or regulations in connection with your Applications, your collection and disclosure of data, or your use of the Services.
11.3. ?General Indemnity Provisions. ?In all cases in which a party seeks indemnification and/or defense hereunder, the indemnitee shall provide the indemnitor with prompt written notice of such Claim, reasonable cooperation and assistance to the indemnitor in connection with such Claims, and full control and authority to investigate, defend and settle such Claims, subject to prior approval by the indemnitee. The indemnification obligations of each party do not apply to the extent that a claim arises out of the other party’s violation of this Agreement.
NEITHER PARTY SHALL BE LIABLE TO THE OTHER PARTY, WHETHER IN CONTRACT OR TORT, FOR INDIRECT, INCIDENTAL, PUNITIVE, SPECIAL OR CONSEQUENTIAL DAMAGES, LOST INCOME, REVENUE OR PROFITS, LOST OR DAMAGED DATA, COST OF PROCURING SUBSTITUTE PRODUCTS OR SERVICES, OR LOSS OF GOODWILL RELATING TO THIS AGREEMENT, WHETHER OR NOT SUCH DAMAGES ARE FORESEEABLE. ?EACH PARTY’S TOTAL AGGREGATE LIABILITY RELATING TO THIS AGREEMENT SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT PAID OR PAYABLE BY YOU TO MISTPLAY IN THE TWELVE (12) MONTH PERIOD PRIOR TO THE EVENT GIVING RISE TO THE CLAIM OR (B) ONE-HUNDRED THOUSAND U.S. DOLLARS ($100,000.00). ?THE FOREGOING EXCLUSIONS AND LIMITATIONS DO NOT APPLY TO YOUR PAYMENT OBLIGATIONS, A PARTY’S INDEMNIFICATION OBLIGATIONS IN SECTION 11, A PARTY’S MISAPPROPRIATION OR DISCLOSURE IN BREACH OF CONFIDENTIALITY OBLIGATIONS IN SECTION 7, OR GROSS NEGLIGENCE OR WILFUL MISCONDUCT.
13.1. ?Non-Poaching of 中国P站 Employees: You agree and acknowledge that during the term of this Agreement and for a period of one (1) year following its termination or expiration, you shall not solicit, entice, persuade or induce any individual who is then, or has been at any time during the term of this Agreement, an employee, consultant, or contractor of 中国P站, to terminate their employment or engagement with 中国P站, or to become employed or engaged directly by the Client or any of Client’s Affiliates, without the prior written consent of 中国P站. In the event that you breach this section 13.1, you shall pay to 中国P站, as liquidated damages and not as a penalty, a sum equivalent to one year's base salary or contract fee, whichever is applicable, that the said employee, consultant, or contractor, was earning at the time of their termination or transition into employment or engagement with the Client. You hereby agree that this sum reasonably represents the loss that would be suffered by 中国P站 due to the training, knowledge, skills, and experience of the said employee, consultant, or contractor. The parties understand and agree that money damages may not be a sufficient remedy for any breach of this section 13.1 by you and that as such, 中国P站 shall be entitled to seek specific performance and injunctive or other equitable relief as a remedy for any such breach, in addition to any and all other rights and remedies available at law or in equity.
13.2. Governing Law; Jurisdiction. This Agreement and the relationship between the parties will be governed by and construed in accordance with the laws of the State of New York, United States of America, without regard to or application of conflict of laws rules or principles. The United Nations Convention on Contracts for the International Sale of Goods will not apply. ?The parties agree to submit to the exclusive jurisdiction of the state and federal courts in the City and State of New York, United States of America, and hereby waive any and all jurisdictional and venue defenses otherwise available. YOU AND MISTPLAY AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING. Notwithstanding the foregoing, either party may bring an action in any court to enforce its intellectual property or other proprietary rights (including to seek injunctive relief) or otherwise to seek temporary, preliminary or other expedited or provisional injunctive relief.
13.3. ?Notices. ?Notices to you will be sent by email to the address you provide 中国P站. Notices to 中国P站 will be sent by email at legal@mistplay.com; provided, however, that any notice to 中国P站 concerning contract breach, indemnification or any other legal concern (collectively, the “Legal Notices”) will also be made in writing and delivered by hand delivery, or by internationally recognized overnight courier service, or by prepaid, certified mail return receipt requested to 1001 Robert-Bourassa, Suite 200, Montreal (QC), H3B 0A7, Canada, Attn: Legal Department. Notices will be effective upon receipt; provided that notices sent by email will be effective as of the email date absent receipt by the sender of a bounce back or error message, and provided, further, that Legal Notices to 中国P站 will be effective only if made and delivered in the manner expressly set forth above.
13.4. ?Entire Agreement; Survival. ?This Agreement, together with the applicable Order, set forth the entire agreement between you and 中国P站 relating in any way to the Services and supersede any and all prior terms and agreements (whether written or oral) with respect to that subject matter. In the event of a conflict between this Agreement and any Order, the terms and conditions of the Order will prevail. All sections that by their nature apply after this Agreement ends will survive any termination or cancellation of this Agreement.
13.5. ? Force Majeure. ?Except for payment of fees, neither party shall be responsible for failure to perform any obligations hereunder due to a cause beyond its reasonable control, including, without limitation, an act of God, terrorism, fire, civil disturbance, war, rebellion, earthquake, flood and similar occurrences, provided that performance shall resume as soon as possible after the cause no longer prevents performance.
13.6. ?Independent Contractors. ?中国P站 and you are independent contractors, and neither 中国P站 nor you are an agent, representative or partner of the other.
13.7. ?Remedies; Severability. ?All remedies available to either Party for breach of this Agreement under this Agreement, at law, or in equity, are cumulative and nonexclusive. ?If any provision of this Agreement is determined to be invalid, illegal, or unenforceable in any respect under any applicable law, then such provision will be severed and replaced with a new provision that most closely reflects the original intention of the parties, and the remaining provisions will remain in full force and effect.
13.8. ?Assignment. ?This Agreement, and any rights and licenses granted hereunder, may not be transferred or assigned by you, except in the case of a merger, acquisition, or sale of substantially all of your assets.
13.9. ?No Third-Party Beneficiaries. ?Nothing in this Agreement shall be deemed or interpreted to create any third-party beneficiaries or confer any rights in any third parties.
13.10. ?Applications Launch.?You shall notify 中国P站 in writing (email acceptable) at all relevant times, including but not limited to before the launch of Services hereunder of any states, provinces, or jurisdictions where your Applications are unavailable for install. Provided that you meet this obligation, 中国P站 will use commercially reasonable efforts to prevent your Ads from being displayed to End Users located in such states, provinces, or jurisdictions.
By executing an Order incorporating these terms, or by using the 中国P站 Services in the absence of a signed Order or after an Order has expired, 中国P站 and Client has agreed to the terms of this Agreement, effective as of the same date of the Order or the start of the Services, whichever is earlier.
This EU Data Processing Addendum for 中国P站 Services (“EU Addendum”) is applicable only to the extent you (or your MMP) export to 中国P站 personal data that is protected or otherwise regulated by European Data Protection Law (defined below). Capitalized terms used in this Addendum shall have the meaning given to them in the main body of the Agreement unless otherwise defined in this Addendum
2.1 "controller", "processor", "data subject", "personal data", “personal data breach”, and "processing" (and "process") have the meanings given in applicable EU Data Protection Law.
2.2 "EU Data Protection Law" means as applicable to a party in its Processing of Data: (i) Regulation 2016/679 (the European General Data Protection Regulation (“GDPR”); (ii) the EU e-Privacy Directive (Directive 2002/58/EC) (“e-Privacy Directive”); (iii) all national implementations of (i) and (ii); (iv) the Swiss Federal Data Protection Act of 19 June 1992 and its corresponding ordinances (“Swiss DPA“); and (v) in respect of the United Kingdom, GDPR as it forms part of United Kingdom law pursuant to Section 3 of the European Union (Withdrawal) Act 2018 and the Data Protection Act 2018 the (together, “UK Privacy Law“); in each case, as may be amended, superseded or replaced from time to time.
2.3 “GDPR” means the EU General Data Protection Regulation 2016/679, as amended or updated.
2.4 “Restricted Transfer” means: (i) where the GDPR applies, a transfer of Personal Data from the European Economic Area to a country outside of the European Economic Area which is not subject to an adequacy determination by the European Commission; (ii) where the UK Privacy Law applies, a transfer of Personal Data from the United Kingdom to any other country which is not based on adequacy regulations pursuant to section 17A of the United Kingdom Data Protection Act 2018; and (iii) where the Swiss DPA applies, a transfer of Personal Data to a country outside of Switzerland which is not included on the list of adequate jurisdictions published by the Swiss Federal Data Protection and Information Commissioner.
2.5 “Standard Contractual Clauses” or “SCCs” means Module 1 (Controller to Controller) of the contractual clauses annexed to the European Commission’s Implementing Decision 2021/914 of 4 June 2021 located at .
2.6 “UK Addendum” means the International Data Transfer Addendum (version B1.0) to the EU Commission Standard Contractual Clauses issued by UK Information Commissioners Office under S.119(A) of the UK Data Protection Act 2018, as amended, superseded or replaced from time to time.
3.1 Control/Application of the EU Addendum. ?In the event of any conflict or discrepancy among the SCCs, the Order, the Agreement, and the terms and conditions of this EU Addendum, the following order of precedence will apply: (a) the SCCs (where applicable), (b) this EU Addendum (where applicable), (c) the Order, and (d) the remainder of the Agreement.
3.2 Governing Law. This EU Addendum will be governed by the laws of the applicable jurisdiction. ?In all other cases, this EU Addendum will be governed by the laws of the jurisdiction set forth in the Agreement.
3.3 Relationship of the Parties. ?The parties acknowledge and agree in connection with the processing of personal data, each party (a) is an independent controller of the personal data under EU Data Protection Law; (b) will individually determine the purposes and means of its processing of personal data; and (c) will comply with the obligations applicable to it under EU Data Protection Law with respect to the personal data.
3.4 Scope of Processing. ?Unless otherwise and separately agreed between the parties, the parties agree and understand that: (i) in connection with the Services, 中国P站 may collect or otherwise receive data (including Personal Data) about or related to end users as more particularly described in Annex A of this EU Addendum (collectively, “Data”); (ii) 中国P站 may use Tracking Technologies provided by your MMP in order to collect certain Data; and (iii) 中国P站 may process the Data for the purposes contemplated by the Agreement and for any other purposes described in the 中国P站 Privacy Notice.
3.5 Prohibited Data Sharing. ?Client shall not include or launch any Application on to the 中国P站 Platform or into the Services such Application is directed at any data subject that is deemed a child under applicable privacy or consumer protection laws of the country in which the child resides. Client shall not pass to 中国P站 any Personal Data of any data subject that is deemed a child under such laws.
3.6 Co-operation; Data Subject Rights. ?The parties shall, on request, provide each other with all reasonable and timely assistance (at their own expense) and co-operation to enable the other party to comply with its obligations under EU Data Protection Law, including cooperation in order to enable the other party to respond to: (i) any request from a data subject to exercise any of its rights under European Data Protection Law (including its rights of access, correction, objection, erasure and data portability, as applicable) in relation to the Data; and (ii) any other correspondence, enquiry or complaint received from a data subject, regulator or other third party in connection with the processing of the Data (“Correspondence”). Each party shall promptly inform the other if it receives any Correspondence directly from a data subject in relation to the Data. Subject to obligations of confidentiality and polices on disclosure of information, where a party has a concern that the other party has not complied with this EU Addendum, the parties agree to exchange information to ascertain the cause of such non-compliance and take reasonable steps to remediate.
3.7 Noncompliance. ?If Client is unable to comply with its consent and notice obligations under the Agreement (including this EU Addendum) in respect of the Data, Client shall promptly notify 中国P站.
3.8 Transfers of Personal Data
4.1 中国P站 may update the terms of this EU Addendum from time to time, as may be required to comply with EU Data Protection Law, applicable regulation, court order, or regulatory guidance. If Client objects to any such change, Client may terminate the Agreement by giving thirty (30) days prior written notice to 中国P站.
By executing an Order incorporating the Agreement, or by using the 中国P站 Services in the absence of a signed Order or after an Order has expired, 中国P站 and Client has agreed to the terms of this EU Addendum, effective as of the same date of the Order or the start of the Services, whichever is earlier.
Data exporter(s):
Name: Client or advertiser name set forth in the Order
Address: as set forth in the Order
Contact person’s name, position and contact details: ?as set forth in the Order
Activities relevant to the data transferred under these Clauses: billing and attribution; for ad campaign reporting, metrics, and optimization
Date: as set forth in the Order
Signature: ?as set forth in the Order
Role (controller/processor): Controller Data importer(s): 中国P站 Inc.
Address: 1001 Robert-Bourassa, Suite 200, Montreal (QC), H3B 0A7, Canada
Contact person’s name, position and contact details:
Deirdre Sheridan <privacy@mistplay.com>, General Counsel and Chief Privacy Officer.
Activities relevant to the data transferred under these Clauses:
Data importer’s ad campaign measurement, providing platform game or app discovery services, and operating a loyalty rewards program, in accordance with data importer’s terms of service and privacy notice.
Date: as set forth in the Order
Signature:_ as set forth in the Order
Role (controller)/processor): Controller
Categories of data subjects whose personal data is transferred
Categories of personal data transferred
Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures.
The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis).
Nature of the processing
Purpose(s) of the data transfer and further processing
The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period
中国P站 retains personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:
For transfers to (sub-) processors, also specify subject matter, nature and duration of the processing
The competent supervisory authority will be (i) for Personal Data protected by the GDPR, determined in accordance with Clause 13 of the Standard Contractual Clauses; (ii) for Personal Data protected by the Swiss DPA, the Federal Data Protection and Information Commissioner (“FDPIC”); and (iii) for Personal Data protection by UK Privacy Law, the Information Commissioners Office (the “ICO”).
List of sub-processors available in the 中国P站 Privacy Notice or upon request to privacy@mistplay.com.
The technical and organizational measures implemented by data importer (including any relevant certifications) to maintain an appropriate level of security taking into account the nature, scope, context and purposes of the processing, and the risks for the rights and freedoms of natural persons, are as follows:
Actively manage (inventory, track, and correct) all hardware devices on the network so that only authorized devices are given access, and unauthorized and unmanaged devices are found and prevented from gaining access.
Actively manage (inventory, track, and correct) all software on the network so that only authorized software is installed and can execute, and unauthorized and unmanaged software is detected and removed.
Establish, implement, and actively manage (track, report on, and correct) the security configuration of laptops, servers, and workstations using a rigorous configuration management and change control process in order to prevent attackers from exploiting vulnerable services and settings.
Continuously acquire, assess, and act on new information in order to identify vulnerabilities, and to remediate and minimize the window of opportunity for attackers.
Track, control, prevent, and correct the use, assignment, and configuration of administrative privileges on computers, networks, and applications.
Collect, manage, and analyze audit logs of events that could help detect, understand, or recover from an attack. Verify logs periodically to propose remediation efforts, if necessary, in accordance with good industry practice.
Minimize the attack surface and the opportunities for attackers to manipulate human behavior through their interaction with web browsers and e-mail systems.
Control the installation, spread, and execution of malicious code at multiple points in the enterprise, while optimizing the use of automation to enable rapid updating of defense, data gathering, and corrective action.
Manage (track, control, and correct) the ongoing operational use of ports, protocols, and services on networked devices in order to minimize windows of vulnerability available to attackers.
Properly back up critical information with a proven methodology for timely recovery of Personal Data in the event of a physical or technical incident. Maintain emergency and contingency plans for the facilities and systems that process Personal Data.
Establish, implement, and actively manage (track, report on, and correct) the security configuration of network infrastructure devices using a rigorous configuration management and change control process in order to prevent attackers from exploiting vulnerable services and settings.
Detect, prevent, and correct the flow of information transferring networks of different trust levels with a focus on security-damaging data.
Prevent data exfiltration, mitigate the effects of exfiltrated data, and ensure the privacy and integrity of Personal Data or other sensitive information.
Track, control, prevent, correct, and secure access to critical assets (e.g., information, resources, systems) according to the formal determination of which persons, computers, and applications have a need and right to access these critical assets based on an approved classification. Pseudonymise Personal Data where possible.
Track, control, prevent, and correct the security use of wireless local area networks (LANS), access points, and wireless client systems.
Actively manage the lifecycle of system and application accounts – their creation, use, dormancy, deletion – in order to minimize opportunities for attackers to leverage them.
Identify the specific knowledge, skills, and abilities needed to support defense of the enterprise; develop and execute an integrated plan to assess, identify and remediate gaps, through policy, organizational planning, training, and awareness programs for all functional roles in the organization.
Manage the security lifecycle of all in-house developed and acquired software in order to prevent, detect, and correct security weaknesses.
Protect the Data, by developing and implementing an incident response infrastructure (e.g., plans, defined roles, training, communications, management oversight). Maintains a record of incidents with a description of the breach, the time period, the consequences of the breach, the name of the reporter, and to whom the breach was reported, and the procedure for recovering data.
Test the overall strength of an organization’s defences (technology, processes, and people) by simulating the objectives and actions of an attacker. Undertake penetration tests at appropriate intervals to ensure the integrity and confidentiality of the relevant systems.
Embed the knowledge and capabilities to ensure that the data subject rights can be fully complied with in a timely manner. Ensure that Personal Data can be fully and irreversibly deleted where required.
Implement and maintain encryption or functionally equivalent technology in accordance with good industry practice to protect Personal Data. This includes measures for the protection of data during transmission and storage. Ensure strong authentication mechanisms, such as two-factor authentication or industry standard password protection practices. Store passwords in a way that makes them unintelligible while they are in force and renew passwords regularly.
Implement, maintain and continually evaluate at regular intervals, reasonable and appropriate physical, technical and organizational measures to ensure the ongoing integrity, confidentiality and availability of Data, and the resilience of systems and services Processing Personal Data, as appropriate to the nature and scope of Partner’s business. This includes ensuring data minimisation and data quality.
Ensure that relevant teams, including IT, IS and cybersecurity, have implemented a security program with effective governance and management structures to protect Personal Data. This shall include senior management oversight and up to date policies and frameworks which can demonstrate accountability. This may include relevant certifications or assurances.
Protect any physical locations where Data may be stored, including by staff training, physical barriers, access control validation (e.g. access cards), CCTV, logs, security personnel and other acceptable physical security mechanisms.