Extra Service Terms For Vodafone Business Surveillance (VBS) Service

Extra Service Terms for Managed Installation ServiceVersion Date: 17 September 20201.StructureStructure: These Extra Service Terms form part of the Service Terms for the Vodafone Business Surveillance Servicewhen Customer orders the Managed Installation Optional Service Element. If there is a conflict between them, these ExtraService Terms will supersede the Vodafone Business Surveillance Service Terms, but only for the Managed InstallationOptional Service Element.2.Service Terms2.1Managed Installation: A customer can request for a managed install, this will be charged by a daily rate and will includesite surveys and installers to visit and install the set up.2.2Site Survey: A site survey is a pre-requisite for a managed install to ensure that the solution is compatible within thecurrent infrastructure. A site survey is a scoping activity to establish the initial customer requirement and provide detailsurrounding the installation process and advise of any additional equipment necessary.3.Conditions of Use3.1Prior to any Site Survey being undertaken, the Charge for such survey and proposed timing of the site visit will be agreedin writing with the Customer. Where Vodafone or a subcontractor attends an arranged Site Survey but is unable to completesaid survey due to Customer refusal or inability to provide site access, that Site Survey and any subsequent rescheduledSite Survey shall be chargeable to the Customer at full price as detailed in the Commercial Terms.3.2Site Surveys are generally required if the solution is more complex, or if the Customer in unable/unwilling to provide thenecessary scoping information.3.3The Customer shall provide consent (and obtain any consent, authorisation, licence or acknowledgement (as relevant), inwriting, from any third party that may be impacted or has an interest in property/infrastructure that may be impacted by theServices) to Vodafone or its subcontractors prior to the Installation Services commencing.3.4Prior to accepting an Order for the Installation Service Vodafone may conduct a Site Survey and charge Customer for aSite Visit at the rates set out in the Order and/or Commercial Terms. After the Site Visit, Vodafone will confirm theInstallation Charges.3.5Vodafone shall notify the Customer of any property or infrastructure that will be impacted by the Installation Services beforesuch Services commence. The Customer shall provide consent (and any obtains a consent, authorisation, licence oracknowledgement (as relevant), in writing, from any third party that may be impacted or has an interest inproperty/infrastructure that may be impacted by the Services) to Vodafone or its subcontractors prior to the InstallationServices commencing.3.6Vodafone shall communicate with the Customer technical contact upon completion of Installation Services, containing logindetails and basic information regarding the Business Surveillance Service, and confirm there are no issues with theInstallation Services. If the Customer does not raise any issues, then the Vodafone’s standard acceptance testing criteriashall be deemed to have been met.3.7The acceptance testing criteria will be defined in the Statement of Work. If there is no Statement of Work for the Customer,the acceptance testing criteria should be deemed to be the successful transmission of any camera video to the VodafoneBusiness Surveillance Server and the ability for the Customer to view the footage through their login to the Server.Page 4 of 8

Extra Service Terms for Vodafone Business HeatDetection Ultra Duo and Ultra ServiceVersion Date: 17 September 20201.StructureStructure: These Extra Service Terms form part of the Service Terms for the Vodafone Business Heat Detection Servicewhen Customer orders the Vodafone Business Heat Detection Service Element. If there is a conflict between them, theseExtra Service Terms will supersede the Vodafone Business Surveillance Extra Service Terms, but only for the VodafoneBusiness Heat Detection Optional Service Element. In connection with the Service Customer may purchase optionalService Elements as described in the Extra Service Terms.2.Service Terms2.1Vodafone Business Heat Detection Ultra & Ultra Duo Service Summary: The Vodafone Business Heat Detection Ultra& Ultra Duo Service is a solution to measure skin surface temperature and send notification when the temperaturemeasurement exceeds the pre-set threshold. The encoder sits within an enclosure interface unit which connects to theLaptop and Camera to stream the video footage to the Business Surveillance Viewing Applications on a PC or mobiledevice using Global Managed IoT Connectivity. The solution can also be configured to send push notifications or emailswhen the temperature exceeds the set threshold.2.2The Service comprises of the following Core Service Elements: (i) Vodafone Business Heat Detection Kit (ii) EnclosureInterface (including the Vodafone Business Surveillance Encoder) (iii) Vodafone Business Heat Detection Applications2.3When specifically set out in the Statement of Work, Commercial Terms and/or Order, the Service comprises of additionalservice elements (“Optional Service Elements”): (i) training (ii) managed installation.3.Conditions of Use3.1Mandatory Accompanying Services: In order to receive the Service, Customer must purchase and maintain the following“Mandatory Accompanying Services: a) the Global Managed IoT Connectivity and Global IoT Devices Services and b)Vodafone Business Surveillance Service. If Customer fails to purchase or maintain the Mandatory Accompanying Services,Vodafone may terminate the Service and charge Customer any applicable Recovery Charge.3.2Customer Prerequisites: Customer does not have to provide CCTV Camera when using the Business SurveillanceService accompanied with the Heat Detection Service.3.3Vodafone Business Surveillance Encoder: The customer will use the Vodafone Business Surveillance IP210X Encoderto connect to the Laptop which will be the hub to the Vodafone Business Heat Detection kit.3.4Vodafone Business Heat Detection Kit (Ultra & Ultra Duo):3.4.1 The Heat Detection Kit measures the skin surface temperature and connects to the Vodafone Business Surveillanceapplications to send notifications when the temperature measurement exceeds the set threshold. The Vodafone BusinessHeat Detection Kit consists of the following elements: a) Camera b) Enclosure Interface c) Laptop d) Accessories3.4.2 The specific Heat Detection Kit variant (Ultra or Ultra Duo) purchased to the service shall be set out in the CustomerAgreement.3.4.3 Customer shall ensure that the Laptop provided as part of the Heat Detection Kit is only used for the purpose of the Service.3.5Connectivity: The encoder will be used to connect the Vodafone Business Heat Detection Kit to the Vodafone BusinessSurveillance Server using the Global Managed IoT Connectivity. Only IP210X Encoders that have been tested byVodafone will be able to connect and stream footage to the Server.3.6Customer Device Hardware: Customer shall ensure Customer Device Hardware always meets the MinimumSpecification and will maintain Customer Device Hardware in accordance with the manufacturer’s guidelines. If theCustomer provides any of its own equipment, this will not form part of the Service3.7Designated Country:3.7.1 The Customer shall only use the Service in a Designated Country.3.7.2 Customer shall only use the Equipment in countries in which the Equipment has been certified for use in accordance withapplicable product safety, Sanctions and Trade laws.3.7.3 The Vodafone Business Heat Detection Ultra & Ultra Duo Service is currently being rolled out globally and may not beavailable in some locations. The Service rollout in individual countries is subject to Vodafone’s confirmation. If Vodafonedetects that a Customer is attempting to access a service in countries where the Service has not been provisioned to use,or Vodafone reasonably considers that the service is not regulatory compliant in a country where Customer is attemptingto access the Service, Vodafone may disable access to such service for that device.3.8Restriction on use:3.8.1 The Customer may not resell, distribute, provide, or sub-licence the Services to any third party.Page 5 of 8

3.8.2 Unless provided by Vodafone as part of the Service, Vodafone is not responsible for any content, goods, or services thatare accessed, downloaded, or transmitted by Customer through use of the Services.3.8.3 The Customer shall use the service in line with the user guideline instructions, Customer Operation Manual, andconfiguration sheet delivered with the Heat Detection Kit.3.8.4 The Service should only be used indoors.3.8.5 The Service shall not be used in public spaces, e.g.: on public transport unless otherwise agreed in the CustomerAgreement and expressly permitted by Applicable Law.3.8.6 When the Service is provided in the USA the following additional user restrictions apply: the Service a) is not cleared andnot approved by FDA, b) should only be used to measure only one subject’s temperature at a time, c) uses visible thermalpatterns that are only intended for locating the points from which to extract the thermal measurement. Public health officials,through their experience with the Heat Detection Kit in the particular environment of use, should determine the significanceof any elevated skin surface temperature based on measurement of the Heat Detection Kit.3.8.7 Any hardware purchased as part of Service is not an Active Diagnostic or Medical Device. The Service is a passive, rapidpreliminary screening solution, and it is not suitable for medical diagnosis. The Customer shall use the Service as a firststep in identifying whether people have an elevated skin surface temperature and not as a test for COVID-19, or any otherhealth condition or disease. The outcome of the heat detection should be further confirmed using secondary, standardclinical evaluation methods.3.9Liability: Vodafone excludes all liability of any kind if Customer uses the Service for testing for COVID-19 or any otherhealth condition or disease.3.10Security Obligations:3.10.1 Customer is responsible for the use of any user names, personal identification numbers and passwords used with theVodafone Business Heat Detection Kit, and Customer shall ensure that they are kept confidential, secure and not madeavailable to unauthorised persons. Vodafone does not guarantee the security of the Service in case of unauthorised orunlawful access or uses the service.3.10.2 Customer will: (a) take reasonable steps with entities it controls in line with commercial good practice to limit misuse of orthreat to the Service, Equipment or Network; c) notify Vodafone of any Customer security issues which are likely tomaterially adversely impact the Network; (d) address any misuse or threat identified by Vodafone through theimplementation of appropriate security or user controls and (e) seek prior approval from Vodafone before running anysecurity tests, vulnerability scans or penetration tests on Equipment or Services.3.10.3 Customer shall exercise all reasonable efforts and implement all necessary security controls to ensure the security of theEquipment and Service.3.11Third Party Provider: Vodafone will use a Third-Party Provider or Vodafone Group Company that has the necessaryauthority to provide any element of the Service if required by Applicable Law. Vodafone may novate any CustomerAgreement as required in order to comply with Applicable Law.3.12Warranty:3.12.1 Vodafone shall provide a 12 month warranty from the date the Vodafone Business Heat Detection Kit is delivered to theCustomer. Customer may purchase an extended OEM warranty under the terms and conditions specified by the OEM priorto the expiry of the 12 month period.3.12.2 If Equipment fails to meet the applicable product specifications within the warranty period, Customer shall notify the faultto Vodafone. On receipt of such notice, provided the fault is for reasons unconnected with Customer’s or any User’s acts,omissions or misuse (including failure to follow the manufacturer’s guidelines), Vodafone shall repair or replace (atVodafone’s discretion) the faulty Equipment. Vodafone shall deliver replacement Equipment which is of same or superiorquality as the original Equipment to the original delivery address. Vodafone will charge the appropriate Charges for shippingof the faulty and replacement Equipment. To the maximum extent permitted by law, these are Customer’s exclusiveremedies for any failure to meet this warranty.3.12.3 If Customer returns Equipment after the warranty period has expired, then Vodafone will charge the appropriate Chargesfor any repair or replacement.3.12.4 Unless expressly set out in the Customer Agreement in no event will Vodafone provide on-site maintenance or generalsupport to the Service.3.12.5 Customer is responsible for wiping the data from the faulty Equipment before return.3.13Data Protection:3.13.1 Customer is the Controller for all the personal data collected by the Service, including but not limited to the video footagedata. Vodafone is neither the Controller nor the Processor for the data collected by the Service. Vodafone does not processany personal data included in the video footage, and should not have any liability in relation to collection, use andprocessing of such data.3.13.2 Vodafone is the Controller for Account Data used to access Vodafone Business Heat Detection Ultra & Ultra Duo Services.Data Protection Terms when Vodafone is Data Controller apply, including local terms, as applicable.3.13.3 Customer obligations as Data Controller:(a)Customer is responsible for complying with Applicable Privacy Law when using the Service, including but not limited to anyobligation to notify individual data subjects about the use of the Heat Detection Camera, to collect any requiredauthorizations before using the Service to ensure the lawful basis to collect the data related to the Service, to ensurePage 6 of 8

transparent installation of the service, to comply with data retention and minimization obligations and to conduct securityassessment and implement security controls.(b)Customer shall not use the Services for the purposes of generating biometrics as per facial recognition, and shall notprovide Vodafone with any information that directly or indirectly identifies individuals captured in the video footage.(c)Customer shall indemnify Vodafone for any amounts paid or payable to a third party or a relevant Authority resulting froma breach by Customer of the obligations in this clause 3.14.3.(d)Streaming of video footage by the Customer for the purpose of viewing the footage outside the country where images arecollected is not in scope for the Service. If the Customer triggers such streaming it is Customer’s responsibility to complywith any data transfer obligations under Applicable Laws.4.Support and Service Levels4.1Applicability: The Global Managed IoT Connectivity and Global IoT Devices Service Support and Service Levels apply tothe Vodafone Business Heat Detection Ultra & Ultra Duo Service.5.DefinitionsThe following definitions apply to these Extra Service Terms in addition to the definitions contained in the rest of theCustomer Agreement:5.1.1 Account Data means user names, personal identification numbers and passwords provided by Customer to Vodafone toset up access to the Service.5.1.2 Active Diagnostic Device is an active device that, whether used alone or in combination with another medical device, isintended to supply information for the purpose of detecting, monitoring or treating a physiological condition, state of health,illness or congenital deformity.5.1.3 Medical Device means any instrument, apparatus, implement, machine, appliance, implant, reagent for in vitro use,software, material or other similar or related article, intended by the manufacturer to be used, alone or in combination, forhuman beings, for one or more of the specific medical purpose(s) of: (i) diagnosis, prevention, monitoring, treatment oralleviation of disease, (ii) diagnosis, monitoring, treatment, alleviation of or compensation for an injury, (iii) investigation,replacement, modification, or support of the anatomy or of a physiological process, (iv) supporting or sustaining life, controlof conception, (v) disinfection of medical devices (vi) providing information by means of in vitro examination of specimensderived from the human body; and does not achieve its primary intended action by pharmacological, immunological ormetabolic means, in or on the human body, but which may be assisted in its intended function by such means5.1.4 COVID 19 is a disease caused by a strain of Coronavirus.5.1.5 Customer Device Hardware in the context of these Extra Service Terms means a Device not purchased from Vodafone.5.1.6 Designated Country shall be set out in the Customer Agreement5.1.7 Equipment means the hardware and related software Customer must have to use the Service.5.1.8 CCTV Camera is a Camera provided by the Customer which connects to the encoder.5.1.9 FDA means United States Food and Drug Administration.5.1.10 SSD Storage is a solid-state storage device that uses integrated circuit assemblies to store data persistently, typicallyusing flash memory, and functioning as secondary storage in the hierarchy of computer storage.5.1.11 Third Party Provider means a third party contracted by Vodafone that provides part of the Service or that provides servicethat connects to the Service.5.1.12 Vodafone Business Surveillance Encoder is an IP210X encoder which transmits camera stream to the server andoptionally records archive footage to a connected disk.5.1.13 Vodafone Business Surveillance Server receives a video stream from encoder and distributes it to the viewingapplications.5.1.14 Vodafone Business Surveillance Viewing Application receives video stream from the server and can be used to controlencoder functions.Page 7 of 8

6.Technical components of the Vodafone Business Heat Detection Ultra Duo Service7.Technical components of the Vodafone Business Heat Detection Ultra ServicePage 8 of 8

Devices Service Terms, but only for the Vodafone Business Surveillance Optional Service Element. 2. Service Terms 2.1 Vodafone Business Surveillance Service Summary: The Vodafone Business Surveillance Service is a solution to monitor Customer's buildings. The Service allows an encoder to be connected to any CCTV camera to access footage.