SpeedyGlobalSign

SpeedyGlobalSign sign platform service agreement

Release date: "March" "5th", 2025

Effective Date: "March" "5th" 2025

The Speedy GlobalSign Platform (hereinafter referred to as the "Platform") provides third-party electronic contracting services for registered users. The services of theSpeedy GlobalSign Platform include but are not limited to the electronic signature and verification of various data messages or electronic contracting files on theSpeedy GlobalSign Platform through the digital certificate you hold, and the storage, extraction and management of signed data messages or electronic contracting files.

The electronic contracting technology adopted by our company complies with the laws of the Hong Kong Special Administrative Region and relevant regulations, and the data messages or electronic contracting files formed by it comply with Hong Kong laws and have the same legal effect as paper files. Using our company's everything must be signed platform The service can greatly improve the overall management level of personal affairs and enterprises, and realize the online signing, storage, extraction, management and other functions of contracting.

1. Agreement Statement

1.1 This Agreement has marked the terms that have or may have a material relationship with your rights and interests, and the terms that have or may have an exemption or limitation of liability for the Company.

1.2 You confirm that you have fully read, understood and accepted all the contents of this agreement before you register as a user of this service and before you accept this service. Once you use this service, you agree to follow all the provisions of this agreement. If you do not agree to any contents of this agreement or cannot correctly understand the terms in this agreement, please do not check or agree to this agreement for follow-up operations. At the same time, you promise to abide by the laws, regulations, rules and other government normative documents of the Hong Kong Special Administrative Region of the People's Republic of China.

1.3 You agree that the Company has the right to formulate and modify this agreement from time to time as needed, and publish it on this website (https://www.speedyglobalsign.com.cn) without separate notice to you. All changes are subject to this website The latest published content shall prevail; If you continue to use this service after the content of this agreement is changed, it means that you have fully read, understood and accepted the revised content of this agreement, and will also use this service in accordance with the revised content of this agreement; If you do not agree with the amended agreement, you should stop using this service.

1.4 The content of this agreement includes the text of the agreement and all kinds of rules, announcements or notices that have been published by the platform. All rules are an integral part of the agreement and have the same legal effect as the text of the agreement.

2. Definition and explanation

2.1 Everything must sign an account

Refers to the unique account of the Shibishan platform that you obtain by registering yourself on this platform or by opening an account on your behalf through the interface of a third-party platform, so that you can use the various services of this platform. You can use the mobile phone number or e-mail address used for my registration, by entering the password, backfilling the SMS verification code, etc., log in to this platform to use or inquire about the electronic signature services provided to you.

2.2 This platform

Unless otherwise stipulated in this agreement, it refers to https://www.speedyglobalsign.com.cn and related mobile clients.

2.3 Electronic Certification Service Agency (CA Agency)

Means a certification authority recognized by the Government of the Hong Kong Special Administrative Region under the Electronic Transactions Ordinance.

2.4 Digital certificate

Index certificate is an electronic record that can identify one when conducting online transactions. According to the Electronic Transactions Ordinance (Cap. 553), electronic or digital signatures have the same legal status as signatures on paper files.

2.5 Electronic signature

Refers to the data contained in electronic form in a data message, attached to identify the signatory and indicate that the signatory approves of its contents.

2.6 Data messages

Refers to information generated, sent, received or stored by electronic, optical, magnetic or similar means.

3. Accept the content

3.1 When you agree to accept this agreement and use the services of this platform, you are a natural person with full capacity for civil rights and civil conduct as stipulated by law, and can independently bear civil liabilities (within the territory of the People's Republic of China, Hong Kong, Macau, China)), and You are at least 16 years old, or a legal person or other organization legally carrying out business activities or other businesses in mainland China, Hong Kong, and Macau, China; The content of this agreement is not excluded by the laws of your country or region. If the aforementioned conditions are not met, you should immediately terminate your registration or stop using this platform service. When you use this platform service, you should judge by yourself whether the other party has full capacity for civil conduct. And decide by yourself whether to sign data messages or electronic contracting files with the other party, and you should bear all risks related to this.

3.2 You understand and acknowledge that all electronic contracting files under your account in which the signatory parties to the data message or electronic contracting files have completed electronic signatures have legal effect. You will perform the relevant obligations of the electronic contracting files in accordance with the contents of the electronic contracting files and in accordance with the law. Exercise rights related to electronic contracting files.

3.3 You understand and agree to be responsible for the account you hold on this platform, and only you can use this account. This account is non-transferable and cannot be inherited.

3.4 You know and agree that the Company is a third-party electronic contracting service provider and does not intervene in any business activities between you and your contracting party. The Company does not have the ability to control the contracting party to perform its obligations under data messages or electronic contracting files. The Company cannot and will not control the contracting parties to perform their obligations under the agreement. The Company does not bear any legal responsibility or joint and several legal liability for any disputes between you and your contracting party regarding the content and implementation of the contract.

3.5 You understand and agree that in the process of using the services of this platform, the company or related parties of electronic contracting may obtain relevant personal information through active or passive means. You agree that the company will handle it in accordance with the personal information protection policy published on this website.

3.6 You understand and agree that the information you fill in during registration or transmit through third-party platforms (such as name, ID number, etc.) is an important basis for you to apply for a digital certificate, and fully guarantee the authenticity, accuracy, and completeness of the information. Once you check the contents of agreeing to "Everything Must Sign Digital Certificate Service Agreement", This means that you agree to comply with the relevant obligations stipulated in the "Everything Must Sign Digital Certificate Service Agreement" published by the company, and the company will produce your digital certificate based on your registration information.

3.7 You understand and agree that after the company makes a digital certificate for you, it will be hosted in theSpeedy GlobalSign platform system. Every call of the digital certificate under your name will obtain your general authorization or separate consent to ensure that the digital certificate is only under your control. Electronic signature.

3.8 You understand and agree that the digital certificate owned and controlled by you is an important tool for signing electronic contracting documents on this platform, And you recognize that you have the obligation to properly keep the digital certificate that you own and control and the mobile phone and email bound to the Shibi Sign account. The user will have a unique key that is the same as the authentication server (usually placed in the hardware token). During authentication, the user must send his user name and a randomly generated message encrypted with the key (challenge) to the authentication server. If the server can use the encrypted message (response) received by pairing the shared key, the user's identity can be authenticated. For your digital certificate hosted and saved by this platform, you need to enter the authorization verification code (sent by this platform to your mobile phone and email bound to your account on this platform) or face recognition before using the digital certificate, so as to ensure that the signing operation is performed by myself and you have proprietary and control over the digital certificate. You understand and agree that when you receive the authorized signing verification code from your mobile phone and email bound to your account on this platform, the verification code will be confidential.

3.9 You confirm that you understand that the loss of the mobile phone and email bound to the digital certificate or Shibisign account may bring adverse consequences to you or your contracting party. Therefore, for any reason that may or has endangered the security of your digital certificate, you should immediately Get in touch with the company through the contact information published on the Shibisign platform. The adverse consequences caused by not being informed by you in time because the digital certificate is not properly kept by you or the security of the digital certificate is threatened have nothing to do with the company.

3.10 You know and agree that when you use this service, the Company will store the data messages or electronic contracting files generated by you free of charge for 5 years, and the starting time of storage is the time when the data messages or electronic contracting files are created. After the expiration, the Company has no obligation to permanently store all kinds of data messages or electronic contracting files for you or your related parties. If you or your related parties fail to save the relevant data messages or electronic contracting files in time, the Company will not bear any losses caused by you or your related parties.

4. Usage rules

4.1 When you use the services of this platform, you must abide by various national laws, regulations, rules and government normative documents, and accept the relevant agreements, rules, regulations, procedures and practices of this platform. Any possible violation of national laws, regulations, regulations and government normative documents (including but not limited to infringement of any third-party copyright, patent, trademark, trade secret, privacy, reputation or other rights) or any unauthorized use of this platform (including but not limited to unauthorized access to the undisclosed systems of this platform, Improper use of passwords and any content of the platform, etc.).

4.2 You are independently responsible for the authenticity, accuracy, immediacy, completeness and legality of all information published through this platform (including but not limited to personal information, commercial information, and forms including but not limited to text and pictures). At the same time, the information you publish shall not contain any viruses, camouflage destruction programs, computer worms, timer bombs or other computer programs that deliberately destroy, maliciously interfere with, secretly intercept or encroach on any system, data or personal data.

4.3 You agree to authorize this platform to provide your signature information to your electronic signature counterparty, and agree that this platform service will be exempt from any legal liability arising from the information without changing the substance of the information you provide. You agree With the consent of the signatory counterparty, Provide the company with its necessary signature information (including but not limited to name, contact number, email address, ID number, etc.). You are responsible for the authenticity of this information. The platform is not responsible for any disputes or losses caused by the untrue and incomplete information you provide.

4.4 You confirm that if you sign documents on this platform on behalf of other organizations or individuals, the necessary signature information you provide to this platform (including but not limited to organization certification materials, seals, personal identification information, contact telephone numbers, etc.) You have obtained the legal authorization of the organization or individual, and you shall ensure that the above information is complete, true and up-to-date. You shall be responsible for any losses, damages and other adverse consequences arising from your failure to comply with this paragraph.

4.5 Your actual use of the electronic signature service on this platform is deemed to be that you agree that you have reached an agreement with your signing counterparty on the signing of the electronic file and agree to use an electronic signature to complete the signing of the file, and you recognize the signature generated during the signing process electronic data.

4.6 In view of the special form of electronic contracting, according to Schedule 1 and Article 3 of the Electronic Transactions Ordinance, the service of this platform does not apply to data messages or electronic contracting files involving the following contents: (a) wills, wills change attachments or the conclusion, execution, modification, revocation, restoration or correction of any other instrument of testamentary nature.; (b) the creation, execution, alteration or revocation of a trust (other than a concessionary trust, an implied trust and a legally constituted trust).; (c) the conclusion, execution, alteration or revocation of a power of attorney; (d) enter into, execute or enter into and execute an instrument required to be stamped or endorsed under the Stamp Duty Ordinance, other than a transaction document to which an agreement under section 5A of that Ordinance relates. (e) Any transfer, assignment, mortgage or statutory charge under the Conveyancing and Property Ordinance, any other contract relating to the disposal of immovable property or interests in immovable property, or any other contract to achieve such disposal. (f) Other circumstances in which electronic documents are not applicable as stipulated by laws and administrative regulations. Therefore, you are not allowed to sign the above legal documents on this platform. If you upload and sign the above legal documents on this platform If the above-mentioned contract is invalid according to the law, this platform will not assume any responsibility.

4.7 The content of this platform may involve other websites owned, controlled or operated by third parties (hereinafter referred to as "third-party websites"). This platform cannot guarantee and has no obligation to guarantee the authenticity and validity of the information on the third-party websites. You should use the third-party websites in accordance with the relevant agreements and rules of the third-party websites, not in accordance with this agreement. The content, products, advertisements and any other information of the third-party websites are at your sole discretion and risk, and have nothing to do with this platform.

5. Notice and delivery

5.1 Notification method: The terms of this agreement and any other agreements, announcements or other notices about your use of this platform account and services, you agree that this platform uses electronic means to notify you. Electronic means include but are not limited to email, or Announcement on this platform website or cooperative website, or wireless communication device notification, etc.

5.2 Notice delivery: If the notice on the website of this platform is made by publicity, it will be deemed to have been delivered once it is publicized on this website. Besides, other exclusive notices issued to you personally will be sent by this platform to the e-mail or mobile phone number provided by this platform when you register or change the user information after registration, and once sent, it will be deemed to have been delivered. Please pay close attention to your e-mail and SMS information in your mobile phone.

5.3 Notification content: You agree that this platform will use the contact information you registered on this platform to contact you and deliver relevant information to you, including but not limited to administrative notices, product-related information, and notifications about your use of this platform's services. Reminder/operation verification code, and possible targeted advertisements, etc.

6. Service content and objects

6.1 The service content of this platform is subject to the official website https://www.speedyglobalsign.com.cn and the content of its affiliated web pages.

6.2 This agreement is aimed at all registered users of this platform.

7. Fees

7.1 The service of this platform is a paid service. For specific service types and prices, you can log on to the official website of Shibichan and its page content or consult customer service staff for price details.

7.2 You can enjoy the corresponding service content only after you pay the company for the service you applied for according to the payment requirements of this platform.

7.3 The Company has the right to unilaterally adjust the service price standard and payment conditions according to the actual situation.

7.4 If you have activated the corresponding platform service, you will not be affected by the adjustment of the service price during this period until the service is activated until it expires and renews or the balance is exhausted.

7.5 If you request to terminate the service before the expiration of the service period, the service fee will not be refunded.

8. Service start and end date

The service start date of theSpeedy GlobalSign platform is calculated from 0:00 the next day after the company receives the customer information and approves it (subject to Beijing time); The termination date of this service is determined according to the service period agreed by the user.

9. Disclaimer

9.1 You are obliged to provide your true, up-to-date and complete information when registering, and ensure that your email address, contact telephone number and other content are up-to-date, valid and secure. True, up-to-date, valid and complete. If you provide any incorrect, false, outdated or incomplete information, or this website has reasonable grounds to suspect that you provide incorrect, false, outdated or incomplete information, this website has the right to suspend or terminate your account and refuse you to use some or all services of this website.

9.2 Under the following circumstances, this platform has the right to suspend or terminate the provision of some or all services to you without any responsibility:

(1) In the absence of charging you by the Platform, the Platform may, in its sole and sole discretion, terminate your use of the Services on reasonable grounds (including but not limited to, if you have violated the literal meaning and spirit of this Agreement, or if you have acted in a manner inconsistent with the literal meaning and spirit of this Agreement).

(2) The Platform may immediately issue a warning, suspend or terminate your account, delete any existing information about you, and any other information you display on the Website when any of the following circumstances occurs: a You violate this Agreement; b The Platform cannot verify or authenticate any information you provide to the Platform; c This platform believes that your actions may cause you, other users of this platform or third-party service providers who provide services through this platform to incur any legal liability; d If it is found that you are engaged in fraud and other illegal activities involving the website, this platform has the right to suspend or terminate your services. For items a, b, and c, this platform does not restrict users from taking relevant remedial measures.

(3) The platform will not be responsible for the results of the suspension or termination measures stipulated in this agreement.

(4) Due to the instability of the Internet itself, this platform cannot guarantee that the service will not be interrupted at all. The platform cannot operate normally due to the following conditions, preventing you from using any of the platform services or affecting the use of the platform services in any way, this platform is not responsible, including but not limited to:

A During the shutdown of this platform for maintenance.

b The telecommunications equipment fails and cannot transmit data.

c Service interruption or delay of this platform caused by hacking attacks, technical adjustments or failures of network providers, payment channels or banking problems, etc.

d Due to force majeure factors such as typhoons, earthquakes, tsunamis, floods, power outages, wars, terrorist attacks, etc., the platform's service obstacles cannot be performed.

5. Any losses caused by your fault, including but not limited to: improper operation, forgetting or disclosing the password or verification code, the password being cracked by others, the computer system you use being invaded by a third party, and malicious intentions of others when you entrust others to sign on behalf of others This platform does not assume any responsibility for losses caused by improper operation.

10. Obligation to compensate

10.1. You will defend, indemnify and hold us, our affiliates, officers, directors, employees, suppliers, consultants and agents harmless from any and all third-party claims, liabilities, damages and expenses (including but not limited to attorneys' fees) arising out of or related to: (a) your use of the Platform Services, if any third-party claims or liabilities arising from your use of the Platform Services, you are required to defend and indemnify the Platform Party.; (b) you breach these Terms or; (c) you infringe any intellectual property or other rights of any person or entity; (d) the nature and substance of all files, data or other content you upload to this platform. If the content you upload is illegal or infringes the rights of others, resulting in third parties filing claims against the platform, you will be responsible for compensation; Or (e) any product or service purchased by you, if you purchased a product or service through the Platform and the product or service resulted in a claim by a third party, you are liable for compensation.

10.2. We reserve the exclusive right to resolve, compromise and pay any and all claims or causes of action against us without your prior consent. We reserve the right to exclusively defend and control, at your expense, any matter requiring you to indemnify us, and you agree to cooperate with us in defense of these claims. You agree not to settle any matter for which we are named as a defendant and/or for which you are liable to indemnify without our prior written consent. We will use reasonable efforts to notify you of any such claim, action or procedure when we become aware of it.

11. User Personal Information Protection

Please refer to the "Legal Notice and Personal Information Protection Policy" of this platform for details.

12. Intellectual Property Statement

All content on this platform, including but not limited to text, pictures, software, audio, video, data, design, source code, is owned by the company in accordance with the law (including but not limited to trademark rights, patent rights, copyrights, etc.). Without the written consent of the company, No one is allowed to use (including but not limited to printing, copying, disseminating, displaying, downloading, etc.) the program or content of this platform without authorization. Otherwise, our company will pursue its legal responsibility in accordance with the law.

13. Application of Law and Dispute Resolution

The validity, interpretation, modification, execution and dispute resolution of this agreement shall be governed by the laws of the Hong Kong Special Administrative Region. If there are no relevant legal provisions, reference shall be made to general international business practices and/or industry practices. Disputes arising from this agreement shall be resolved through friendly negotiation as much as possible. If negotiation fails, it shall be handled in accordance with the laws of the Hong Kong Special Administrative Region, and the dispute or dispute shall be submitted to the Hong Kong International Arbitration Center for arbitration.

14. Others

14.1. This agreement will come into effect from the date when you agree and successfully register as a user of this platform. Unless this platform terminates this service agreement or you lose your qualification as a user of this website, this service agreement will always be valid. The termination of this service agreement does not exempt users from the obligations and responsibilities of this service agreement or other relevant agreements, rules.

14.2 Users have signed other agreements with the Company regarding the use of the third-party electronic contracting services of theSpeedy GlobalSign platform. If there is a conflict between the contents of this agreement and other agreements, the contents of other agreements will prevail. Any provision of this agreement is completely or partially invalid or non-enforceable for whatever reason, and the remaining provisions of this agreement shall remain valid and binding.

14.3 The headings in this Agreement are for convenience only and do not have any separate legal effect.

14.4 The Company has the final right to interpret this service agreement and reserves the right to update this agreement at any time. The updated agreement will be published on this platform and will take effect from the date of publication. Users should regularly check the updates of this agreement. If Users By continuing to use the services of this platform, you agree to accept the updated agreement content.

14.5 Contact information

If you have any questions about this Agreement, you can contact us at:

E-mail: [service@sicpay.com]

Mailing address: Unit E, 22/F, Block A, Billion Centre, 1 Wang Kwong Road, Kowloon Bay, Hong Kong

Company Name: Guanfu Consumer Finance Information Technology Co., Ltd

Contact Department: [Operations Department]

Schedule 1 Data Processing Addendum

This Data Processing Addendum ("DPA") is entered into between [Insert applicable Customer entity] ("Customer") on behalf of itself and its affiliates and [Insert ISV name] ("Vendor") and shall be effective on the date both parties have executed the DPA ("Effective Date").  

Recitals

1. Vendor has entered into an End User Licence Agreement with Customer (the "Services Agreement") pursuant to which the Vendor has agreed to provide certain services to Customer as more particularly described in the Services Agreement ("Services"). In providing the Services, Vendor may Process Personal Data controlled by Customer or its customers.
2. As part of its privacy notices and contractual arrangements, Customer has provided certain assurances to its customers, candidates, contacts, employees, and/or partners to ensure the appropriate protection of Personal Data when Customer engages third party vendors. Customer’s engagement of Vendor is conditioned upon Vendor’s agreement to this DPA.

IT IS AGREED:

1. Definitions:  The following terms shall have the following meanings:
   1. 1. 1. "Applicable Privacy Laws" means any and all national, international, federal, state and other privacy and data protection laws that apply to the Processing of Personal Data that is the subject of this DPA;
         2. "Controller" means an entity that determines the purposes and means of the Processing of Personal Data;
         3. "Data Subject" means an identified or identifiable individual;
         4. "Personal Data" means any information relating to an identified or identifiable individual (including any information that falls within the scope of "Personal Data", "personal information", or "personally identifiable information", as defined under Applicable Privacy Laws);
         5. "Processing" (and "Process") means any operation or set of operations performed on Personal Data; and
         6. "Processor" means an entity that Processes Personal Data on behalf of a Controller.
2. Relationship of the parties:  Customer (either as a Controller, or as a Processor acting on behalf of a third party Controller, such as an enterprise customer of Customer) appoints Vendor (as a Processor or sub-Processor, as applicable) to Process the Personal Data described in Appendix 1 ("Customer Data") in order to provide Services pursuant to the Services Agreement.  
3. Purpose limitation:  Vendor shall Process Customer Data as a Processor (or sub-Processor, as applicable) as necessary to perform its obligations under the Services Agreement, and as more particularly described in Appendix 1. In doing so, it shall Process Customer Data strictly in accordance with the documented instructions of Customer, except where and to the extent otherwise required by law(s) applicable to Vendor provided that such law(s) are not incompatible with Applicable Privacy Laws.  In no event shall Vendor Process Customer Data for its own purposes or those of any third party.  Vendor shall immediately inform Customer if in its opinion, an instruction of Customer infringes Applicable Privacy Laws or any other applicable laws.
4. International transfers:  Vendor shall not Process Customer Data (nor permit Customer Data to be Processed) in a territory that is different to the territory in which Vendor is established, unless it has obtained prior written authorisation from Customer and takes such measures as are necessary to ensure the transfer of Customer Data to, and Processing of Customer Data in, the recipient territory complies with Applicable Privacy Laws.
5. Security:  Vendor shall implement appropriate technical and organisational measures to protect Customer Data from and against (a) accidental unauthorised or unlawful destruction, and (ii) loss, unauthorised copying, alteration, unauthorised disclosure or disposal of, or access to Customer Data (a "Security Incident").  At a minimum, such measures shall include those identified in Appendix 2.  
6. Security Incidents: Vendor shall report any Security Incident (including suspected Security Incident) without undue delay to Customer and, at no additional cost, provide such assistance as Customer may reasonably require for the purposes of complying with its obligations under applicable law relating to the incident.  Vendor shall further take all such measures and actions as are necessary to remedy or mitigate the effects of the Security Incident and shall keep Customer informed of all developments in connection with the Security Incident.  Vendor shall not report any Security Incidents to any other third party, except where and to the extent required by law(s) applicable to Vendor (and, where so required, Vendor shall notify Customer prior to making such report, unless legally prohibited from doing so).
7. Sub-Processing: Vendor shall not subcontract any Processing of Customer Data to a third party sub-Processor without the prior written consent of Customer.  Notwithstanding this, Customer consents to Vendor engaging third party sub-Processors to Process Customer Data provided that: (i) Vendor provides at least 30 days' prior notice of the addition or removal of any sub-Processor (including details of the Processing it performs or will perform) [which may be given by posting details of such addition or removal at the following URL: [insert URL]]; (ii) Vendor imposes data protection terms on any sub-Processor it appoints that protect Customer Data to the same standard provided for by this DPA; and (iii) Vendor remains fully liable for any breach of this DPA that is caused by an act, error or omission of its sub-Processor. A list of approved sub-Processors as at the Effective Date is attached at Appendix 3, and Vendor shall maintain and provide updated copies of this list to Customer when it adds or removes sub-Processors in accordance with this DPA.  If Customer refuses to consent to Vendor's appointment of a third party sub-Processor on grounds relating to the protection of Customer Data, then either Vendor will not appoint the sub-Processor or Customer may elect to suspend or terminate the Services Agreement without penalty.
8. Cooperation and Data Subjects' rights:  Vendor shall at no additional cost provide to Customer all reasonable and timely assistance (including by appropriate technical and organisational measures) to enable Customer to respond to: (i) any request from a Data Subject to exercise any of its data protection rights (including its rights of access, correction, objection, erasure and data portability etc., in accordance with Applicable Privacy Laws); and (ii) any other correspondence, enquiry or complaint received from a Data Subject, regulator or other third party in connection with the Processing of Customer Data. In the event that any such request, correspondence, enquiry or complaint is made directly to Vendor, Vendor shall promptly inform Customer providing full details of the same without responding, except where and to the extent require by law(s) applicable to the Vendor.
9. Confidentiality of Processing:  Vendor shall ensure that any person that it authorises to Process Customer Data (including Vendor's staff, agents and sub-Processors) (an "Authorised Person") shall be subject to a strict duty of confidentiality (whether a contractual duty or a statutory duty), and shall not permit any person to Process Customer Data who is not under such a duty of confidentiality. Vendor shall ensure that all Authorised Persons Process Customer Data only as necessary for the Permitted Purpose.
10. Data Protection Impact Assessment [Can be deleted if GDPR or UK GDPR does not apply]:  If Vendor believes or becomes aware that its Processing of Customer Data is likely to result in a high risk to the data protection rights and freedoms of Data Subjects, it shall promptly inform Customer. Vendor shall provide Customer with all such reasonable and timely assistance as Customer may require in order to conduct a data protection impact assessment in accordance with Applicable Privacy Laws including, if necessary, to assist Customer to consult with its relevant data protection authority.
11. Deletion or return of Customer Data:  Upon termination or expiry of the Services Agreement, Vendor shall (at Customer's election) destroy or return to Customer all Customer Data (including all copies of Customer Data) in its possession or control (including any Customer Data subcontracted to a third party for Processing) and provide a confirmation/statement to Customer in written.  
12. Audit [This clause is mandatory if GDPR is applicable. It is not legally required under US or Singapore law]:  Vendor shall permit, at no additional cost, Customer (or its appointed third party auditors) to audit Vendor's compliance with this DPA, and shall make available to Customer all information, systems and staff necessary for Customer (or its third party auditors) to conduct such audit.
13. Indemnity:  Vendor shall indemnify Customer any and any of their officers, directors, employees, consultants, agents and other representatives from and against all losses, costs, harm, expenses (including reasonable legal fees and costs, interparty damages and settlement amounts), liabilities or damage ("Damage") suffered or incurred as a result of any data incident involving Customer’s data, breach of this DPA or of applicable law by Vendor or its sub-contractors, provided that: (i) Customer gives the Vendor prompt notice of any circumstances of which it is aware that give rise to an indemnity claim under this Clause; and (ii) Customer takes reasonable steps and actions to mitigate any ongoing Damage it may suffer as a consequence of the Vendor's breach.
14. Jurisdiction-specific terms:  The parties acknowledge that Appendix 4 sets out certain jurisdiction-specific terms and conditions, organised by country or region under section headings, that reflect the requirements of local privacy and data protection laws that may apply to Vendor's Processing of the Customer Data pursuant to the Services Agreement.  Accordingly, both parties agree that they shall comply with their relevant section of Appendix 4 that apply to the Processing of Customer Data pursuant to the Services Agreement.
15. Relationship between the Services Agreement and this DPA: The parties intend and agree that this DPA shall be incorporated into, and form an integral part of, the Services Agreement.  Accordingly, with effect from the Effective Date, this DPA shall amend the Services Agreement to the extent necessary to incorporate this DPA into the Services Agreement.  Except where expressly stated otherwise in this DPA, this DPA shall be subject to the terms and conditions of the Services Agreement (excluding any exclusions or limitations of liability) in full.  To the extent there is any conflict or inconsistency between this DPA and the Services Agreement, the terms of this DPA shall prevail.  Further, to the extent there is any conflict or inconsistency between the body and appendices of this DPA, the appendices shall prevail.

Signed by the parties or their duly authorised representatives: