Common use of Appointment of Subprocessors Clause in Contracts

Appointment of Subprocessors. 8.1. The Data Controller hereby consents to and generally authorizes the engagement of Subprocessors by the Data Processor. Currently, and depending on the choice of Services, the Data Processor has engaged the Subprocessor(s) set forth in Schedule 3 whose engagement is hereby authorized by the Data Controller. 8.2. The Data Processor shall provide notification of a new Subprocessor to the Data Controller before authorizing the new Subprocessor to Process Personal Data in connection with the provision of the Services. In order to exercise its right to object to Data Processor’s use of a new Subprocessor, the Data Controller shall notify the Data Processor promptly in writing within ten (10) days of receipt of the Data Processor’s notice. In the event the Data Controller objects to a new Subprocessor, and that objection is duly substantiated and not unreasonable, the Data Processor will use reasonable efforts to make available to the Data Controller a change in the Services or, in the alternative, recommend a commercially reasonable change to Data Controller’s configuration or use of the Services to avoid Processing of Personal Data by the contested new Subprocessor without unreasonably burdening the Data Controller. If the Data Processor is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, the Data Controller may terminate the relevant portion(s) of the Services which cannot be provided by the Data Processor without the use of the contested new Subprocessor by providing written notice to the Data Processor. 8.3. Any such Processing by a Subprocessor shall be done pursuant to a written agreement that is no less restrictive than this Addendum. Such written agreement will require the Subprocessor to Process the Personal Data only to provide the Services specified in the written agreement and not Process the Personal Data for its own purposes. 8.4. No Processing by a Subprocessor will release the Data Processor from its responsibility for its obligations under this Addendum, and the Data Processor will be fully liable to the Data Controller for the work and activities of each of its Subprocessors subject to the limitations of the Service Agreement.

Appointment of Subprocessors. 8.1. 8.1 The Data Controller hereby consents to and generally authorizes the engagement of Subprocessors by the Data Processor. Currently, and depending on the choice A current list of Services, Subprocessors – which may be updated by the Data Processor has engaged from time to time – can be found under the Subprocessor(s) set forth link to the “WiseTech Global Group – Subprocessors list”, which is included in Schedule 3 whose engagement is hereby authorized by the Data Controllerto this Addendum. 8.2. 8.2 The Data Processor shall provide notification of a new Subprocessor to the Data Controller before authorizing the new Subprocessor to Process Personal Data in connection with the provision of the Services. In order to exercise its right to object to Data Processor’s use of a new Subprocessor, the Data Controller shall notify the Data Processor promptly in writing within ten (10) days of receipt of the Data Processor’s notice. In the event the Data Controller objects to a new Subprocessor, and that objection is duly substantiated and not unreasonable, the Data Processor will use reasonable efforts to make available to the Data Controller a change in the Services or, in the alternative, recommend a commercially reasonable change to Data Controller’s configuration or use of the Services to avoid Processing of Personal Data by the contested new Subprocessor without unreasonably burdening the Data Controller. If the Data Processor is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, the Data Controller may terminate the relevant portion(s) of the Services which cannot be provided by the Data Processor without the use of the contested new Subprocessor by providing written notice to the Data Processor. 8.3. 8.3 Any such Processing by a Subprocessor shall be done pursuant to a written agreement that is no less restrictive than this Addendum. Such written agreement will require the Subprocessor to Process the Personal Data only to provide the Services specified in the written agreement and not Process the Personal Data for its own purposes. 8.4. 8.4 No Processing by a Subprocessor will release the Data Processor from its responsibility for its obligations under this Addendum, and the Data Processor will be fully liable to the Data Controller for the work and activities of each of its Subprocessors subject to the limitations of the Service Agreement.

Appointment of Subprocessors. 8.1. The Data Controller hereby consents to and generally authorizes the engagement of Subprocessors by the Data Processor. Currently, and depending on the choice of Services, the Data Processor has engaged the Subprocessor(s) set forth in Schedule 3 whose engagement is hereby authorized by the Data Controller. 8.2. The Data Processor shall provide notification of a new Subprocessor to the Data Controller before authorizing the new Subprocessor to Process Personal Data in connection with the provision of the Services. In order to exercise its right to object to Data Processor’s use of a new Subprocessor, the Data Controller shall notify the Data Processor promptly in writing within ten (10) days of after receipt of the Data Processor’s notice. In the event the Data Controller objects to a new Subprocessor, and that objection is duly substantiated and not unreasonable, the Data Processor will use reasonable efforts to make available to the Data Controller a change in the Services or, in the alternative, recommend a commercially reasonable change to Data Controller’s configuration or use of the Services to avoid Processing of Personal Data by the contested new Subprocessor without unreasonably burdening the Data Controller. If the Data Processor is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, the Data Controller may terminate the relevant portion(s) of the Services which cannot be provided by the Data Processor without the use of the contested new Subprocessor by providing written notice to the Data Processor. 8.3. Any such Processing by a Subprocessor shall be done pursuant to a written agreement that is no less restrictive than this Addendum. Such written agreement will require the Subprocessor to Process the Personal Data only to provide the Services specified in the written agreement and not Process the Personal Data for its own purposes. 8.4. No Processing by a Subprocessor will release the Data Processor from its responsibility for its obligations under this Addendum, and the Data Processor will be fully liable to the Data Controller for the work and activities of each of its Subprocessors subject to the limitations of the Service Agreement.