ANNEX I 1. List Of Parties Data exporter(s): (if applicable) Name: Address: Contact person’s name, position and contact details: Role (controller/processor): Controller Data importer(s): Name: RELAYTO LIMITED Registered Address: One Commerce Center, 1201 Orange St. #600, New Castle County, Delaware, 19899, United States Contact person’s name, position and contact details: Alex Shevelenko [email protected] Role (controller/processor): Processor 2. Description Of Transfer Categories of data subjects whose personal data is transferred: Employees and collaborators of the Controller Categories of personal data transferred: e-mail and name and/or surname No sensitive data transferred. The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis): Continuous The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period: 12 months 3. Competent Supervisory Authority ANNEX II Technical And Organizational Measures Including Technical And Organizational Measures To Ensure The Security Of The Data EXPLANATORY NOTE: The technical and organizational measures must be described in specific (and not generic) terms. See also the general comment on the first page of the Appendix, in particular on the need to clearly indicate which measures apply to each transfer/set of transfers. 37 of 54