Common use of Pursuant to Art Clause in Contracts

Pursuant to Art. 5.1., the Data Processor has a general authorisation to engage Sub-processors provided that the Data Processor: a) provides the Data Controller with prior information as to the identity of the Sub-processors as described in the List of Sub-processors and notify the Data Controller of any update in the List of Sub-processors so that the Data Controller may object to the engagement of such Sub-processors; b) enters into agreements with the Sub-processors containing the same obligations concerning the Processing of Client Personal Data as set out in this DPA; c) exercises appropriate due diligence in selecting the Sub-processors and remains responsible for Sub- processors’ compliance with the obligations set forth in this DPA; d) at the Data Controller’s request, the Data Processor provides the Data Controller with reasonable information as to actions and measures the Data Processor and its Sub-processors have undertaken to practically comply with the provisions set forth in this DPA.

Pursuant to Art. 5.1., the Data Processor Register has a general authorisation to engage Sub-processors provided that the Data ProcessorRegister: a) provides the Data Controller Client with prior information as to the identity of the Sub-processors as described in the List of Sub-processors and notify the Data Controller Client of any update in the List of Sub-processors so that the Data Controller Client may object to the engagement of such Sub-processors; b) enters into agreements with the Sub-processors containing the same obligations concerning the Processing of Client Personal Data as set out in this DPA; c) exercises appropriate due diligence in selecting the Sub-processors and remains responsible for Sub- processors’ compliance with the obligations set forth in this DPA; d) at the Data ControllerClient’s request, the Data Processor Register provides the Data Controller Client with reasonable information as to actions and measures the Data Processor Register and its Sub-processors have undertaken to practically comply with the provisions set forth in this DPA.

Pursuant to Art. 5.1., the Data Processor AMEN has a general authorisation to engage Sub-processors provided that the Data ProcessorAMEN : a) provides the Data Controller Client with prior information as to the identity of the Sub-processors as described in the List of Sub-processors and notify the Data Controller Client of any update in the List of Sub-processors so that the Data Controller Client may object to the engagement of such Sub-processors; b) enters into agreements with the Sub-processors containing the same obligations concerning the Processing of Client Personal Data as set out in this DPA; c) exercises appropriate due diligence in selecting the Sub-processors and remains responsible for Sub- processors’ compliance with the obligations set forth in this DPA; d) at the Data ControllerClient’s request, the Data Processor AMEN provides the Data Controller Client with reasonable information as to actions and measures the Data Processor AMEN and its Sub-processors have undertaken to practically comply with the provisions set forth in this DPA.

Pursuant to Art. 5.1., the Data Processor AMEN has a general authorisation to engage Sub-processors provided that the Data ProcessorAMEN: a) provides the Data Controller Client with prior information as to the identity of the Sub-processors as described in the List of Sub-processors and notify the Data Controller Client of any update in the List of Sub-processors so that the Data Controller Client may object to the engagement of such Sub-Sub- processors; b) enters into agreements with the Sub-processors containing the same obligations concerning the Processing of Client Personal Data as set out in this DPA; c) exercises appropriate due diligence in selecting the Sub-processors and remains responsible for Sub- Sub-processors’ compliance with the obligations set forth in this DPA; d) at the Data ControllerClient’s request, the Data Processor AMEN provides the Data Controller Client with reasonable information as to actions and measures the Data Processor AMEN and its Sub-processors have undertaken to practically comply with the provisions set forth in this DPA.