TABOOLA’S CCPA SERVICE PROVIDER TERMS FOR ADVERTISERS

To ensure that Taboola has adequate contractual terms in place with our Advertisers (“Advertiser” or “You”) under the California Consumer Privacy Act of 2018 (the “CCPA”), Taboola has made public these CCPA Service Provider Terms (the “CCPA Terms”).

As used herein, “Personal Information” has the meaning ascribed under the CCPA or other Applicable Law, and “Applicable Law” means all laws, regulations, standards, regulatory guidance, and self-regulatory guidelines that may apply with respect to Personal Information. Applicable Laws include but are not limited to the CCPA.

As a vendor that provides services to You, Taboola confirms that we will not collect, access, retain, use, disclose, and/or otherwise process Personal Information that You provide to us outside of the direct business relationship between You and Taboola or for any purpose other than fulfilling our obligations to You, which include providing campaign analytics, conversion tracking, and retargeting, under and in accordance with the Agreement. “Agreement” shall mean, collectively, the agreement(s), including any orders, statements of work, schedules, exhibits, addenda and any amendments thereto, pursuant to which Taboola performs services for You. In no event shall Taboola attempt to link, identify, or otherwise create a relationship between Personal Information that you provide to us and non-Personal Information or any other data without Your express authorization. Taboola confirms that we have not and shall not sell Personal Information (as defined under Applicable Law) or otherwise disclose Personal Information for a commercial purpose. Taboola may disclose Personal Information that You provide pursuant to the Agreement to a third-party service provider in order to provide the services described in the Agreement, provided that Taboola shall ensure that any such third-party is bound by all obligations necessary under Applicable Law.

To assist You in complying with Your CCPA obligations to respond to requests to delete or access Personal Information, Taboola’s Data Subject Access Request Portal, available at https://accessrequest.taboola.com, allows users who interact with our content discovery platform to exercise their rights in real time (based on device identifiers, as Taboola does not hold any names, email addresses, or other identifiable data).

The provisions of these CCPA Terms are effective solely to the extent the CCPA applies. You are solely liable for Your compliance with the CCPA in your use of Taboola’s services. In the event of changes to the CCPA or issuance of applicable regulation, court order, or governmental guidance relating to the CCPA, Taboola may change these CCPA Terms, if such change does not have a material adverse impact on You, as reasonably determined by Taboola, with respect to exemptions from “sales” under the CCPA.

In case of any inconsistency or conflict between these CCPA Terms and those of any applicable Taboola Data Processing Addendum (“DPA”) in place between You and Taboola, the DPA shall control with regard to Personal Information of individuals located in the European Economic Area.