REPRESENTATION OF HDS SAFEGUARDS

<style> .table-scroll{width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch} .table-scroll>table{width:max-content;min-width:920px;max-width:1400px} </style> <p>No transfers of personal health data to countries outside the European Economic Area.</p> <p>The table below lists the subprocessors that may access data from outside the European Economic Area, together with the safeguards implemented.</p> <p>This allows the Client to verify that health data are stored exclusively within the European Economic Area and that any potential remote access from third countries is properly framed and documented.</p> <div class="table-scroll"> <table align="left" style="border-collapse:collapse;table-layout:auto;margin-bottom:20px;margin-left:auto;margin-right:auto;border:1px solid #99acc2"> <tr> <td style="width:12%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">Business name of the actor</p> </td> <td style="width:9%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">Role in the hosting service (Host/processor of the Host)</p> </td> <td style="width:8%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">HDS certified (yes / no / exempted)</p> </td> <td style="width:8%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">SecNumCloud 3.2 qualified</p> </td> <td style="width:9%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">Hosting activities in which the player is involved</p> </td> <td style="width:29%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors (Requirement No 29 of the HDS framework)</p> </td> <td style="width:25%;padding:6px;background-color:#015b5b;vertical-align:middle;overflow-wrap:break-word"> <p style="color:#fff;margin:0;padding:0">Host or processor subject to a risk of access to personal health data from countries outside the European Economic Area, imposed by the legislation of a third country in breach of EU law (Requirement no 30 of the HDS framework)</p> </td> </tr> <tr> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Semble Technology Limited &amp; Semble France SAS</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Host</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>1, 2, 3, 4, 5, 6</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"> <p>Yes, covered by an adequacy decision within the meaning of Article 45 of the GDPR: United Kingdom Commission Implementing Decision (EU) 2025/167 of 21 December 2025 on the adequate protection of personal data by the United Kingdom under Regulation (EU) 2016/679 of the European Parliament and of the Council.</p> </td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No</p></td> </tr> <tr> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Amazon Web Services EMEA SARL</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Processor</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>1, 2</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No, no access to data from a country outside the European Economic Area</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes, United States</p></td> </tr> <tr> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>MongoDB UK Limited</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Processor</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>3, 4</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No, no access to data from a country outside the European Economic Area</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes, United States</p></td> </tr> <tr> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Google Cloud EMEA Limited</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Processor</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>6</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>No, no access to data from a country outside the European Economic Area.</p></td> <td style="padding:6px;vertical-align:middle;border:1px solid #015b5b;overflow-wrap:break-word"><p>Yes, United States</p></td> </tr> </table> </div>