Common use of PERSONNEL AND SUBCONTRACTORS Clause in Contracts

PERSONNEL AND SUBCONTRACTORS. 5.1. The Processor imposes a confidentiality obligation with respect to the Data on the individuals whom it will authorise to process such Data and its safeguards as well as an obligation to keep the standards of personal data protection specified in the GDPR and in this Agreement. 5.2. The Processor may sub-entrust specific Data processing operations to other processors (hereinafter, the “Sub-Processor”) by way of a written sub-entrustment agreement pursuant to the Controller’s general consent referred to in Article 28(2) of the GDPR. 5.3. A list of Sub-processors approved by the Controller, i.e. against which the Controller did not object, is attached hereto as Schedule 1 – List of Approved Sub-Processors. 5.4. In order to entrust the processing of Data to Sub-Processors not appearing on the List of Approved Sub-Processors, the Processor must first give notice thereof to the Controller. The Controller may object to such changes within three days of receiving such a notice. The Controller’s statement of objection must be made in writing or in a documentary form in order to be valid. If the Controller does not object within the time limit mentioned above, the changes referred to above will be deemed approved by the Controller. 5.5. In the event that the Data is further entrusted for processing to other entities, the Processor undertakes to impose on such entities the same obligations regarding data protection and confidentiality as well as their safeguards as those imposed on the Processor under this Agreement.