Common use of SUB-PROCESSORS (SUBCONTRACTORS Clause in Contracts

SUB-PROCESSORS (SUBCONTRACTORS. 6.1 The Customer acknowledges and agrees that (a) Iron Mountain’s affiliates or parent companies may be retained as sub-processors; and that (b) Iron Mountain and its’ affiliates or parent companies respectively may engage the third-party sub-processors listed in Appendix 2 to process personal data for the indicated scope of services. Customer understands that Iron Mountain’s global sub-processors will only be applied in the RM, Scanning and Legacy service lines, when the scanned images taken of the Customer’s Articles, as well as the electronically available inventory listings/data related to the stored Customer assets are processed by these entities (see Section 5.1). 6.2 In case of any additions or change to the current list, Iron Mountain shall notify the Customer in advance - indicating the name, country location, and subcontracted service of the proposed new sub-processor. Unless Customer objects in writing within 15 calendar days of being informed about Iron Mountain’s use of a new sub-processor, Iron Mountain may apply the new sub-processor for the indicated data processing activities. If Customer made an objection within the given timeline, Iron Mountain will use reasonable efforts to change the Services to avoid processing of the personal data by the “objected-to” new sub-processor. If Iron Mountain is unable to implement such changes within 60 calendar days, the Customer within further 60 calendar days from Iron Mountain’s notice (or – if Iron Mountain failed to reply – from the expiry of the 60 calendar days available for Iron Mountain’s notice) may terminate the Agreement. If Customer fails to send such a termination notice to the Iron Mountain within this deadline, this can be considered as consent to the application of the proposed sub-processor.

SUB-PROCESSORS (SUBCONTRACTORS. 6.1 The Customer acknowledges and agrees that (a) Iron Mountain’s affiliates or parent companies may be retained as sub-processors; and that (b) Iron Mountain and its’ affiliates or parent companies respectively may engage the third-party sub-processors listed in Appendix 2 3 to process personal data for the indicated scope of services. Customer understands that Iron Mountain’s global sub-processors will only be applied in the RM, RM and Scanning and Legacy service lines, when the scanned images taken of the Customer’s Articles, as well as the electronically available inventory listings/data related to the stored Customer assets are processed by these entities (see Section 5.1). 6.2 In case of any additions or change to the current list, Iron Mountain shall notify the Customer in advance - indicating the name, country location, and subcontracted service of the proposed new sub-processor. Unless Customer objects in writing within 15 calendar days of being informed about Iron Mountain’s use of a new sub-processor, Iron Mountain may apply the new sub-processor for the indicated data processing activities. If Customer made an objection within the given timeline, Iron Mountain will use reasonable efforts to change the Services to avoid processing of the personal data by the “objected-to” new sub-processor. If Iron Mountain is unable to implement such changes within 60 calendar days, the Customer within further 60 calendar days from Iron Mountain’s notice (or – if Iron Mountain failed to reply – from the expiry of the 60 calendar days available for Iron Mountain’s notice) may terminate the Agreement. If Customer fails to send such a termination notice to the Iron Mountain within this deadline, this can be considered as consent to the application of the proposed sub-processor.