Common use of Subprocessor Clause in Contracts

Subprocessor. 8.1 The Supplier shall meet the requirements specified in Article 28(2) and (4) GDPR in order to engage a Subprocessor. The Customer hereby grants the Supplier a general authorisation to engage Subprocessors. 8.2 Where the Supplier engages a Subprocessor for carrying out specific Processing activities on behalf of the Customer, the same data protection obligations as set out in the Data Processing Agreement shall be imposed on that Subprocessor by way of a contract or other legal act under EU or Member State law, in particular providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that the Processing will meet the requirements of this Data Processing Agreement and the GDPR. 8.3 The Supplier will inform the Customer of any intended changes concerning the addition or replacement of Subprocessors. The Customer is entitled to object to such changes. Such objections may only be attributable to objective grounds, such as the security of the Processing under the Data Processing Agreement. Should the Customer make such objection and the Supplier does not accept to replace the Subprocessor in question, the Supplier shall be entitled to additional compensation from the Customer for the costs incurred due to the fact that the Subprocessor in question cannot be used by the Supplier. The Supplier also has the right to terminate the Agreement and / or this Data Processing Agreement in whole or in part (e.g. insofar as they pertain to a particular add-on service) with thirty (30) days’ prior notice. 8.4 The Supplier shall upon request of the Customer provide the Customer (and if requested, Customer’s customers that are controllers) with an accurate and up-to-date record regarding the Subprocessors engaged by the Supplier for the Processing of Personal Data, contact information to the Subprocessors as well as the geographic location of such Processing. 8.5 A list of the Subprocessors engaged by the Supplier at the date of the Agreement is attached to this Data Processing Agreement as Appendix 2.

Subprocessor. 8.1 The Supplier shall meet the requirements specified in Article 28(2) and (4) GDPR in order to engage a Subprocessor. The Customer hereby grants the Supplier a general authorisation to engage Subprocessorsthe Subprocessors reflected in 8.5. 8.2 Where the Supplier engages a Subprocessor for carrying out specific Processing activities on behalf of the Customer, the same data protection obligations as set out in the Data Processing Agreement shall be imposed on that Subprocessor by way of a contract or other legal act under EU or Member State law, in particular providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that the Processing will meet the requirements of this Data Processing Agreement and the GDPR. 8.3 The Supplier will inform the Customer of any intended changes concerning the addition or replacement of SubprocessorsSubprocessors no later than 60 days prior to such changes. The Customer is entitled to object to such changes. Such objections may only be attributable to objective grounds, such as the security of the Processing under the Data Processing Agreement. Should the Customer make such objection and the Supplier does not accept to replace the Subprocessor in question, the Supplier shall be entitled to additional compensation from the Customer for the costs incurred due to the fact that the Subprocessor in question cannot be used by the Supplier. The Supplier Each Party also has the right to terminate the Agreement and / or this Data Processing Agreement in whole or in part (e.g. insofar as they pertain to a particular add-on service) with thirty (30) days’ prior notice. 8.4 The Supplier shall upon request of the Customer provide the Customer (and if requested, Customer’s customers that are controllers) with an accurate and up-toupto-date record regarding the Subprocessors engaged by the Supplier for the Processing of Personal Data, contact information to the Subprocessors as well as the geographic location of such Processing. 8.5 A list of the Subprocessors engaged by the Supplier at the date of the Agreement is attached to this Data Processing Agreement as Appendix 2.