Effective from the 1st of January 2026

1. Introduction and Scope

This Data Processing Agreement (“DPA”) governs Culturequest ApS’ Processing of Personal Data on behalf of customers in connection with the Culturequest services.

This DPA forms part of, and is subject to, the main agreement, order form, online terms of service or similar contract between Culturequest ApS (“Culturequest”, “Processor”, “we”, “us”) and the customer entity (“Customer”, “Controller”) that references or incorporates this DPA (the “Main Agreement”).

By creating an account, placing an order or using the Services, Customer agrees to this DPA, which is effective for as long as Culturequest Processes Personal Data on behalf of Customer.

If there is any conflict between this DPA and the Main Agreement regarding the Processing of Personal Data, this DPA will prevail.

2. Roles and Definitions

2.1 Roles

For the Processing of Personal Data under the Main Agreement:

• Customer is the data controller (or equivalent term under applicable data protection laws), and
• Culturequest is the data processor.

2.2 Definitions

The terms “Personal Data”, “Processing”, “Controller”, “Processor”, “Data Subject”, “Personal Data Breach” and “Supervisory Authority” have the meanings given in the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

• Customer Personal Data means any Personal Data Processed by Culturequest on behalf of Customer under the Main Agreement.
• Data Protection Laws means GDPR and any applicable data protection or privacy laws (including national implementing laws, and where relevant the UK GDPR and UK Data Protection Act).