Common use of Requirements for Subprocessor Engagement Clause in Contracts

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪ (a) ensure via a written contract that: ▪ (i) the Subprocessor only accesses and uses Customer Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendment) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google as described in Section 10.2 (Transfers of Data Out of the EEA); and

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪ (a) a. ensure via a written contract that: ▪ (i) i. the Subprocessor only accesses and uses Customer Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendment) and any the Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google Solution, as described in applicable under Section 10.2 (Transfers of Data Out of the EEAData); and

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪  (a) ensure via a written contract that: ▪  (i) the Subprocessor only accesses and uses Customer Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendment) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google as described in Section 10.2 (Transfers of Data Out of the EEA); and

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪ (a) : a. ensure via a written contract that: ▪ (i) : i. the Subprocessor only accesses and uses Customer Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendment) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google as described in Section 10.2 (Transfers of Data Out of the EEAAddendum); and ii. if required under Applicable Privacy Laws, the data protection obligations described in this Addendum are imposed on the Subprocessor (as may be b. remain fully liable for all obligations subcontracted to, and all acts and omissions of, the Subprocessor.

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪ (a) ensure via a written contract that: ▪ (i) the Subprocessor only accesses and uses Customer Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendmentthese Terms); and if the GDPR applies to the processing of Customer Personal Data, the data protection obligations set out in Article 28(3) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google of the GDPR, as described in Section 10.2 (Transfers of Data Out of these Terms, are imposed on the EEA)Subprocessor; andand remain fully liable for all obligations subcontracted to, and all acts and omissions of, the Subprocessor.

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪ (a) a. ensure via a written contract that: ▪ (i) i. the Subprocessor only accesses and uses Customer Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendment) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google as described in Section 10.2 (Transfers of Data Out of the EEAData); and

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Google will: ▪ (a) ● ensure via a written contract that: ▪ (i) ○ the Subprocessor only accesses and uses Customer Personal Data to the extent required to perform the obligations subcontracted to it, and does so in accordance with the applicable Agreement (including this Data Processing Amendmentthese Terms) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Google Privacy Shield; and ○ if the GDPR applies to the processing of Customer Personal Data, the data protection obligations set out in Article 28(3) of the GDPR, as described in Section 10.2 (Transfers of Data Out of these Terms, are imposed on the EEA)Subprocessor; andand ● remain fully liable for all obligations subcontracted to, and all acts and omissions of, the Subprocessor.