{"component": "clause", "props": {"groups": [{"samples": [{"hash": "dB2y4R5uJMt", "uri": "/contracts/dB2y4R5uJMt#sub-processing", "label": "Call Off Contract", "score": 36.5523605347, "published": true}, {"hash": "h1HIvDX8hv3", "uri": "/contracts/h1HIvDX8hv3#sub-processing", "label": "Call Off Contract", "score": 36.550994873, "published": true}, {"hash": "hmzdQlWYyUu", "uri": "/contracts/hmzdQlWYyUu#sub-processing", "label": "Call Off Contract", "score": 36.5318260193, "published": true}], "snippet_links": [{"key": "in-respect-of", "type": "clause", "offset": [5, 18]}, {"key": "processing-of-personal-data", "type": "clause", "offset": [23, 50]}, {"key": "by-a-third-party", "type": "clause", "offset": [61, 77]}, {"key": "on-behalf-of", "type": "definition", "offset": [78, 90]}, {"key": "a-party", "type": "clause", "offset": [91, 98]}, {"key": "adequate-due-diligence", "type": "clause", "offset": [132, 154]}, {"key": "to-ensure", "type": "clause", "offset": [175, 184]}, {"key": "capable-of", "type": "definition", "offset": [196, 206]}, {"key": "providing-the", "type": "clause", "offset": [207, 220]}, {"key": "level-of-protection", "type": "clause", "offset": [221, 240]}, {"key": "the-personal-data", "type": "definition", "offset": [245, 262]}, {"key": "required-by", "type": "definition", "offset": [269, 280]}, {"key": "the-contract", "type": "definition", "offset": [281, 293]}, {"key": "evidence-of", "type": "definition", "offset": [307, 318]}, {"key": "other-party", "type": "clause", "offset": [345, 356]}, {"key": "where-reasonably", "type": "clause", "offset": [357, 373]}, {"key": "in-place", "type": "definition", "offset": [429, 437]}, {"key": "the-third-party", "type": "definition", "offset": [443, 458]}, {"key": "as-required", "type": "clause", "offset": [459, 470]}, {"key": "applicable-data-protection-legislation", "type": "definition", "offset": [477, 515]}], "size": 469, "snippet": "10.1 In respect of any Processing of Personal Data performed by a third party on behalf of a Party, that Party shall:\n(a) carry out adequate due diligence on such third party to ensure that it is capable of providing the level of protection for the Personal Data as is required by the contract, and provide evidence of such due diligence to the other Party where reasonably requested; and\n(b) ensure that a suitable agreement is in place with the third party as required under applicable Data Protection Legislation.", "hash": "239f48f4731ed297168bfbf0fb4dc8d0", "id": 1}, {"samples": [{"hash": "kzSYP4FCW1K", "uri": "/contracts/kzSYP4FCW1K#sub-processing", "label": "Master Service Agreement", "score": 36.3541488647, "published": true}, {"hash": "eeRImAcxfI8", "uri": "/contracts/eeRImAcxfI8#sub-processing", "label": "Master Service Agreement", "score": 35.8251113892, "published": true}], "snippet_links": [{"key": "partner-personal-data", "type": "definition", "offset": [71, 92]}, {"key": "prior-to-an", "type": "clause", "offset": [121, 132]}, {"key": "adequate-assurances", "type": "definition", "offset": [219, 238]}, {"key": "the-sub", "type": "clause", "offset": [244, 251]}, {"key": "similar-to", "type": "definition", "offset": [302, 312]}, {"key": "the-obligations", "type": "clause", "offset": [313, 328]}, {"key": "set-out", "type": "definition", "offset": [332, 339]}, {"key": "in-this-addendum", "type": "clause", "offset": [340, 356]}, {"key": "agreement-or", "type": "definition", "offset": [406, 418]}, {"key": "personal-data-transfer", "type": "definition", "offset": [453, 475]}, {"key": "relevant-times", "type": "definition", "offset": [487, 501]}, {"key": "agreement-executed", "type": "clause", "offset": [524, 542]}, {"key": "the-engagement", "type": "clause", "offset": [580, 594]}, {"key": "a-personal", "type": "clause", "offset": [627, 637]}, {"key": "transfer-of-supply", "type": "clause", "offset": [643, 661]}, {"key": "execution-of-this-addendum", "type": "clause", "offset": [700, 726]}, {"key": "the-companies", "type": "definition", "offset": [795, 808]}, {"key": "where-a-sub", "type": "clause", "offset": [878, 889]}, {"key": "data-protection-obligations", "type": "clause", "offset": [921, 948]}, {"key": "the-performance", "type": "clause", "offset": [1014, 1029]}, {"key": "to-the-same-extent", "type": "definition", "offset": [1065, 1083]}, {"key": "terms-of", "type": "clause", "offset": [1145, 1153]}, {"key": "in-the-agreement", "type": "clause", "offset": [1199, 1215]}, {"key": "obligations-of-the", "type": "clause", "offset": [1248, 1266]}, {"key": "new-sub", "type": "definition", "offset": [1343, 1350]}, {"key": "written-notice", "type": "definition", "offset": [1450, 1464]}, {"key": "receipt-of", "type": "clause", "offset": [1498, 1508]}, {"key": "commercially-reasonable-efforts", "type": "definition", "offset": [1587, 1618]}, {"key": "to-provide", "type": "clause", "offset": [1619, 1629]}, {"key": "level-of-service", "type": "definition", "offset": [1654, 1670]}, {"key": "obligations-under-the-agreement", "type": "clause", "offset": [1827, 1858]}, {"key": "associated-with", "type": "definition", "offset": [1983, 1998]}, {"key": "related-to", "type": "clause", "offset": [2002, 2012]}, {"key": "termination-of-the-agreement", "type": "clause", "offset": [2030, 2058]}, {"key": "in-connection-with", "type": "clause", "offset": [2060, 2078]}, {"key": "the-provisions", "type": "clause", "offset": [2151, 2165]}, {"key": "prior-consent", "type": "definition", "offset": [2183, 2196]}, {"key": "by-supply-partner", "type": "clause", "offset": [2197, 2214]}, {"key": "the-processing", "type": "clause", "offset": [2269, 2283]}, {"key": "to-the-extent", "type": "clause", "offset": [2350, 2363]}, {"key": "sole-discretion", "type": "definition", "offset": [2381, 2396]}, {"key": "the-service", "type": "clause", "offset": [2414, 2425]}, {"key": "in-relation-to", "type": "clause", "offset": [2493, 2507]}, {"key": "required-level", "type": "definition", "offset": [2508, 2522]}, {"key": "contracting-agreement", "type": "definition", "offset": [2562, 2583]}, {"key": "based-on", "type": "definition", "offset": [2593, 2601]}, {"key": "data-protection-agreement", "type": "clause", "offset": [2614, 2639]}, {"key": "applicable-personal-data", "type": "definition", "offset": [2665, 2689]}, {"key": "transfer-mechanisms", "type": "clause", "offset": [2690, 2709]}, {"key": "by-dt", "type": "clause", "offset": [2766, 2771]}, {"key": "on-behalf-of", "type": "definition", "offset": [2820, 2832]}, {"key": "responsible-to", "type": "clause", "offset": [2872, 2886]}, {"key": "obtain-regulatory-approvals", "type": "clause", "offset": [2887, 2914]}, {"key": "the-relevant", "type": "clause", "offset": [2920, 2932]}, {"key": "as-required-by", "type": "clause", "offset": [3007, 3021]}, {"key": "data-protection-laws", "type": "clause", "offset": [3022, 3042]}], "size": 22, "snippet": "7.1. DT engages Sub-Processors to perform certain Processing of Supply Partner Personal Data on Supply Partner\u2019s behalf. Prior to an engagement with a Sub-Processor, DT: (i) Carries out reviews and requires or receives adequate assurances that the Sub-Processor complies with obligations substantially similar to the obligations as set out in this Addendum; and (ii) ensures that a Statutory Data Transfer Agreement or such other appropriate methods of Personal Data transfer are at all relevant times incorporated into the agreement executed between DT and the Sub-Processor, if the engagement with the Sub-Processor involves a Personal Data Transfer of Supply Partner Personal Data,.\n7.2. Upon the execution of this Addendum, Supply Partner hereby gives DT Supply Partner\u2019s approval to engage the companies detailed at \u2587\u2587\u2587\u2587://\u2587\u2587\u2587.\u2587\u2587.\u2587\u2587\u2587/subprocessors as Sub- Processors.\n7.3. Where a Sub-Processor fails to fulfill its data protection obligations or statements, DT will remain fully liable to Supply Partner for the performance of the Sub-Processor's obligations to the same extent that DT would be liable to Supply Partner directly under the terms of this Addendum, except as otherwise set forth in the Agreement, if DT would have performed the obligations of the Sub-Processor.\n7.4. DT will inform Supply Partner of DT\u2019s engagement with a new Sub-Processor. Supply Partner may object to the use of new or additional Sub-Processor by sending DT a written notice within five (5) business days of receipt of said notice. If Supply Partner objects to the new Sub-Processor, DT will make commercially reasonable efforts to provide Supply Partner the same level of Service without the use of such Sub-Processor. Notwithstanding, Supply Partner\u2019s objection and the results thereof will not amend, alter or reduce Supply Partner\u2019s obligations under the Agreement. Supply Partner will not be entitled to any refund and will hold DT harmless from and against any claims, suits and demands associated with or related to Supply Partner\u2019s termination of the Agreement, in connection with Supply Partner\u2019s objection to a new Sub-Processor.\n7.5. Notwithstanding the provisions here above (e.g. prior consent by Supply Partner), Supply Partner hereby authorizes DT to sub-contract the Processing to Sub-Processors based outside of Supply Partner\u2019s jurisdiction, to the extent necessary, at DT sole discretion, to duly perform the Service on condition that the Sub-Processors provide sufficient guarantees in relation to required level of data protection, e.g. through a sub-contracting agreement which is based on a Statutory Data Protection Agreement , or based on such other applicable Personal Data Transfer mechanisms. Any such Statutory Data Protection Agreement concluded by DT will be treated as if concluded in the name and on behalf of Supply Partner. Supply Partner will be responsible to obtain regulatory approvals from the relevant Supervising Authorities and to perform any submissions and registrations, as required by Data Protection Laws.", "hash": "456c80093172bf0157c640aa1dd17412", "id": 5}, {"samples": [{"hash": "e7hwEWr1n1X", "uri": "/contracts/e7hwEWr1n1X#sub-processing", "label": "Data Processing Agreement", "score": 32.5818099976, "published": true}, {"hash": "kjoaqidR0wq", "uri": "/contracts/kjoaqidR0wq#sub-processing", "label": "Data Processing Agreement", "score": 31.9385204315, "published": true}, {"hash": "bA0X57ogmpY", "uri": "/contracts/bA0X57ogmpY#sub-processing", "label": "Data Processing Agreement", "score": 31.672996521, "published": true}], "snippet_links": [{"key": "data-importer", "type": "clause", "offset": [4, 17]}, {"key": "processing-operations", "type": "clause", "offset": [51, 72]}, {"key": "on-behalf-of", "type": "definition", "offset": [83, 95]}, {"key": "data-exporter", "type": "clause", "offset": [100, 113]}, {"key": "consent-of-the", "type": "clause", "offset": [158, 172]}, {"key": "obligations-under-the", "type": "clause", "offset": [229, 250]}, {"key": "written-agreement", "type": "definition", "offset": [331, 348]}, {"key": "where-the-sub", "type": "clause", "offset": [483, 496]}, {"key": "data-protection-obligations", "type": "clause", "offset": [527, 554]}, {"key": "the-performance", "type": "clause", "offset": [653, 668]}], "size": 33, "snippet": "The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the sub-processor which imposes the same obligations on the sub-processor as are imposed on the data importer under the Clauses. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor\u2019s obligations under such agreement.", "hash": "f6c89a9da7b4d40a1e2122e5a11701ea", "id": 3}, {"samples": [{"hash": "bDiUMKDfC4J", "uri": "/contracts/bDiUMKDfC4J#sub-processing", "label": "Master Software & Services Agreement", "score": 32.9267120361, "published": true}, {"hash": "496iMNQ4MDX", "uri": "/contracts/496iMNQ4MDX#sub-processing", "label": "Master Software & Services Agreement", "score": 32.9267120361, "published": true}, {"hash": "28YnMmg8U7R", "uri": "/contracts/28YnMmg8U7R#sub-processing", "label": "Enterprise Software License & Services Agreement", "score": 32.0918121338, "published": true}], "snippet_links": [{"key": "data-importer", "type": "clause", "offset": [9, 22]}, {"key": "processing-operations", "type": "clause", "offset": [56, 77]}, {"key": "on-behalf-of", "type": "definition", "offset": [88, 100]}, {"key": "consent-of-the", "type": "clause", "offset": [163, 177]}, {"key": "obligations-under-the", "type": "clause", "offset": [234, 255]}, {"key": "written-agreement", "type": "definition", "offset": [336, 353]}, {"key": "where-the-sub", "type": "clause", "offset": [489, 502]}, {"key": "data-protection-obligations", "type": "clause", "offset": [533, 560]}, {"key": "the-performance", "type": "clause", "offset": [659, 674]}, {"key": "written-contract", "type": "clause", "offset": [747, 763]}, {"key": "provide-for-a", "type": "definition", "offset": [823, 836]}, {"key": "party-beneficiary-clause", "type": "clause", "offset": [843, 867]}, {"key": "clause-3", "type": "clause", "offset": [884, 892]}, {"key": "data-subject", "type": "definition", "offset": [913, 925]}, {"key": "claim-for-compensation", "type": "definition", "offset": [951, 973]}, {"key": "paragraph-1", "type": "clause", "offset": [989, 1000]}, {"key": "clause-6", "type": "clause", "offset": [1004, 1012]}, {"key": "successor-entity", "type": "definition", "offset": [1163, 1179]}, {"key": "obligations-of-the-data-exporter", "type": "clause", "offset": [1209, 1241]}, {"key": "by-operation-of-law", "type": "definition", "offset": [1274, 1293]}, {"key": "liability-of-the-sub", "type": "clause", "offset": [1312, 1332]}, {"key": "provisions-relating-to", "type": "clause", "offset": [1421, 1443]}, {"key": "for-sub", "type": "clause", "offset": [1468, 1475]}, {"key": "the-contract", "type": "definition", "offset": [1490, 1502]}, {"key": "the-law", "type": "clause", "offset": [1551, 1558]}, {"key": "member-state", "type": "definition", "offset": [1566, 1578]}, {"key": "a-list", "type": "definition", "offset": [1704, 1710]}, {"key": "processing-agreements", "type": "definition", "offset": [1718, 1739]}, {"key": "pursuant-to-clause", "type": "clause", "offset": [1802, 1820]}, {"key": "a-year", "type": "definition", "offset": [1864, 1870]}, {"key": "available-to", "type": "definition", "offset": [1890, 1902]}, {"key": "data-protection-supervisory-authority", "type": "definition", "offset": [1923, 1960]}], "size": 89, "snippet": "11.1 The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the sub-processor which imposes the same obligations on the sub- processor as are imposed on the data importer under the Clauses. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor\u2019s obligations under such agreement.\n11.2 The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Such third-party liability of the sub-processor shall be limited to its own processing operations under the Clauses.\n11.3 The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established, namely ........................................\n11.4 The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter\u2019s data protection supervisory authority.", "hash": "ca3f1dc06199cf1f9804cafdb5e77ed1", "id": 2}, {"samples": [{"hash": "cE2BzJjnXBn", "uri": "/contracts/cE2BzJjnXBn#sub-processing", "label": "Data Processing Agreement", "score": 33.1758117676, "published": true}, {"hash": "koMNxxAfGMv", "uri": "/contracts/koMNxxAfGMv#sub-processing", "label": "Data Processing Agreement", "score": 32.8555374146, "published": true}, {"hash": "jpjccJ5IeiX", "uri": "/contracts/jpjccJ5IeiX#sub-processing", "label": "Data Processing Agreement", "score": 32.444934845, "published": true}], "snippet_links": [{"key": "customer-agrees-that", "type": "clause", "offset": [5, 25]}, {"key": "customer-data", "type": "clause", "offset": [74, 87]}, {"key": "the-sub", "type": "clause", "offset": [110, 117]}, {"key": "by-customer", "type": "clause", "offset": [176, 187]}], "size": 8, "snippet": "9.1. Customer agrees that MailerLite may engage Sub-Processors to Process Customer Data on Customer's behalf. The Sub-Processors currently engaged by MailerLite and authorized by Customer are listed in the Annex.", "hash": "5819f6a77023afe1720a63f03f6777c0", "id": 8}, {"samples": [{"hash": "bUo0eXxcVAY", "uri": "/contracts/bUo0eXxcVAY#sub-processing", "label": "Data Processing Agreement", "score": 35.298412323, "published": true}, {"hash": "8wU3LIJL8V7", "uri": "/contracts/8wU3LIJL8V7#sub-processing", "label": "Master Services Agreement", "score": 26.6659812927, "published": true}, {"hash": "lllfdPQ0v9p", "uri": "/contracts/lllfdPQ0v9p#sub-processing", "label": "Data Processing Agreement", "score": 25.9609851837, "published": true}], "snippet_links": [{"key": "in-accordance-with", "type": "definition", "offset": [90, 108]}, {"key": "this-section-7", "type": "clause", "offset": [109, 123]}, {"key": "date-of-this", "type": "clause", "offset": [309, 321]}, {"key": "new-sub", "type": "definition", "offset": [354, 361]}, {"key": "notice-of-any", "type": "clause", "offset": [388, 401]}, {"key": "appointment-to", "type": "clause", "offset": [407, 421]}, {"key": "in-writing", "type": "definition", "offset": [506, 516]}, {"key": "the-proposed", "type": "clause", "offset": [549, 561]}, {"key": "processing-of-controller-personal-data", "type": "clause", "offset": [638, 676]}, {"key": "reasonable-steps", "type": "clause", "offset": [683, 699]}, {"key": "written-explanation", "type": "clause", "offset": [814, 833]}, {"key": "steps-taken", "type": "clause", "offset": [841, 852]}, {"key": "notice-to-the", "type": "clause", "offset": [985, 998]}, {"key": "other-party", "type": "clause", "offset": [999, 1010]}, {"key": "with-immediate-effect", "type": "clause", "offset": [1015, 1036]}, {"key": "to-the-extent", "type": "clause", "offset": [1062, 1075]}, {"key": "to-the-services", "type": "clause", "offset": [1092, 1107]}, {"key": "terminating-party", "type": "clause", "offset": [1176, 1193]}, {"key": "liability-for", "type": "clause", "offset": [1213, 1226]}, {"key": "with-respect-to", "type": "clause", "offset": [1250, 1265]}, {"key": "prior-to-the", "type": "clause", "offset": [1314, 1326]}, {"key": "privacy-policies", "type": "definition", "offset": [1440, 1456]}, {"key": "to-ensure", "type": "clause", "offset": [1473, 1482]}, {"key": "provide-the", "type": "clause", "offset": [1527, 1538]}, {"key": "level-of-protection", "type": "clause", "offset": [1539, 1558]}, {"key": "required-by", "type": "definition", "offset": [1588, 1599]}, {"key": "the-arrangement", "type": "clause", "offset": [1633, 1648]}, {"key": "the-processor", "type": "definition", "offset": [1657, 1670]}, {"key": "the-sub", "type": "clause", "offset": [1675, 1682]}, {"key": "written-contract", "type": "clause", "offset": [1710, 1726]}, {"key": "set-out", "type": "definition", "offset": [1834, 1841]}, {"key": "requirements-of-applicable-law", "type": "clause", "offset": [1867, 1897]}, {"key": "the-controller", "type": "clause", "offset": [1943, 1957]}, {"key": "the-performance", "type": "clause", "offset": [1962, 1977]}], "size": 8, "snippet": "7.1. Controller authorizes Processor to appoint (and permits each Sub Processor appointed in accordance with this Section 7 to appoint) Sub Processors in accordance with this Section 7.\n7.2. Processor may continue to use those Sub Processors already engaged by Processor as identified to Controller as of the date of this DPA.\n7.3. Processor may appoint new Sub Processors and shall give notice of any such appointment to Controller. If, within seven (7) days of such notice, Controller notifies Processor in writing of any reasonable objections to the proposed appointment, Processor shall not appoint the proposed Sub Processor for the Processing of Controller Personal Data until reasonable steps have been taken to address the objections raised by Controller and Controller has been provided with a reasonable written explanation of the steps taken. Where such steps are not sufficient to relieve Controller's reasonable objections, each of Controller or Processor may, by written notice to the other party and with immediate effect, terminate the Agreement to the extent that it relates to the Services requiring the use of the proposed Sub Processor. In such event, the terminating party shall not bear any liability for such termination.\n7.4. With respect to each new Sub Processor, Processor shall:\n7.4.1. Prior to the Processing of Controller Personal Data by Sub Processor, take reasonable steps (for instance by way of reviewing privacy policies as appropriate) to ensure that Sub Processor is committed and able to provide the level of protection for Controller Personal Data required by this DPA; and\n7.4.2. ensure that the arrangement between the Processor and the Sub Processor is governed by a written contract, including terms that offer a materially similar level of protection for Controller Personal Data as those set out in this DPA and meet the requirements of Applicable Law.\n7.5. Processor shall remain fully liable to the Controller for the performance of any Sub Processor's obligations.", "hash": "6214094bd8df5590c937b95371f01b12", "id": 10}, {"samples": [{"hash": "6R7hv6bjadJ", "uri": "/contracts/6R7hv6bjadJ#sub-processing", "label": "Subscriber Terms and Conditions", "score": 26.4113616943, "published": true}, {"hash": "bK1glW0bZvu", "uri": "/contracts/bK1glW0bZvu#sub-processing", "label": "Subscriber Terms and Conditions", "score": 26.295003891, "published": true}], "snippet_links": [{"key": "the-controller", "type": "clause", "offset": [4, 18]}, {"key": "the-appointment", "type": "clause", "offset": [37, 52]}, {"key": "use-of-sub", "type": "clause", "offset": [57, 67]}, {"key": "the-processor", "type": "definition", "offset": [92, 105]}, {"key": "the-provision-of-the-services", "type": "clause", "offset": [110, 139]}, {"key": "the-sub", "type": "clause", "offset": [165, 172]}, {"key": "set-out", "type": "definition", "offset": [186, 193]}, {"key": "annex-5", "type": "clause", "offset": [197, 204]}, {"key": "wolters-kluwer-group", "type": "definition", "offset": [259, 279]}, {"key": "clause-5", "type": "definition", "offset": [468, 476]}, {"key": "in-connection-with", "type": "clause", "offset": [504, 522]}, {"key": "in-case", "type": "clause", "offset": [558, 565]}, {"key": "written-authorization", "type": "definition", "offset": [671, 692]}, {"key": "provided-that", "type": "clause", "offset": [721, 734]}, {"key": "concerning-the", "type": "clause", "offset": [801, 815]}, {"key": "replacement-of", "type": "clause", "offset": [828, 842]}, {"key": "cch-oneclick", "type": "definition", "offset": [920, 932]}, {"key": "the-gdpr", "type": "definition", "offset": [939, 947]}, {"key": "responsible-for", "type": "clause", "offset": [1058, 1073]}, {"key": "from-time-to-time", "type": "clause", "offset": [1114, 1131]}, {"key": "reasonable-basis", "type": "definition", "offset": [1157, 1173]}, {"key": "notify-the", "type": "clause", "offset": [1261, 1271]}, {"key": "in-writing", "type": "definition", "offset": [1291, 1301]}, {"key": "after-receipt-of", "type": "clause", "offset": [1317, 1333]}, {"key": "in-the-event-the", "type": "clause", "offset": [1360, 1376]}, {"key": "reasonable-efforts", "type": "definition", "offset": [1497, 1515]}, {"key": "available-to", "type": "definition", "offset": [1524, 1536]}, {"key": "a-change-in", "type": "definition", "offset": [1552, 1563]}, {"key": "s-ervices", "type": "clause", "offset": [1568, 1577]}, {"key": "commercially-reasonable", "type": "definition", "offset": [1593, 1616]}, {"key": "change-to", "type": "definition", "offset": [1617, 1626]}, {"key": "use-of-the-services", "type": "clause", "offset": [1661, 1680]}, {"key": "processing-of-personal-data-by", "type": "clause", "offset": [1690, 1720]}, {"key": "reasonable-period-of-time", "type": "clause", "offset": [1882, 1907]}, {"key": "the-services-agreement", "type": "clause", "offset": [2022, 2044]}, {"key": "without-liability", "type": "clause", "offset": [2049, 2066]}, {"key": "notice-to-the", "type": "clause", "offset": [2296, 2309]}, {"key": "data-protection-obligations", "type": "clause", "offset": [2389, 2416]}, {"key": "the-contract", "type": "definition", "offset": [2474, 2486]}, {"key": "in-particular", "type": "clause", "offset": [2538, 2551]}, {"key": "technical-and-organizational-security-measures", "type": "clause", "offset": [2599, 2645]}, {"key": "as-specified", "type": "clause", "offset": [2646, 2658]}, {"key": "annex-4", "type": "clause", "offset": [2662, 2669]}, {"key": "to-the-extent", "type": "clause", "offset": [2671, 2684]}, {"key": "services-provided-by", "type": "clause", "offset": [2758, 2778]}, {"key": "transfers-of-personal-data", "type": "clause", "offset": [2839, 2865]}, {"key": "european-economic-area", "type": "definition", "offset": [2898, 2920]}, {"key": "member-states", "type": "clause", "offset": [2942, 2955]}, {"key": "third-countries", "type": "clause", "offset": [2975, 2990]}, {"key": "applicable-data-protection-law", "type": "definition", "offset": [3040, 3070]}, {"key": "privacy-shield", "type": "definition", "offset": [3129, 3143]}, {"key": "standard-contractual-clauses", "type": "clause", "offset": [3215, 3243]}, {"key": "the-transfer-of-personal-data", "type": "clause", "offset": [3248, 3277]}, {"key": "model-clauses", "type": "clause", "offset": [3357, 3370]}, {"key": "approved-by", "type": "clause", "offset": [3397, 3408]}, {"key": "the-european-commission", "type": "clause", "offset": [3409, 3432]}, {"key": "valid-from", "type": "clause", "offset": [3437, 3447]}, {"key": "the-performance", "type": "clause", "offset": [3614, 3629]}, {"key": "damages-and-claims", "type": "clause", "offset": [3770, 3788]}, {"key": "instructions-to", "type": "definition", "offset": [3822, 3837]}, {"key": "the-provisions-of-this", "type": "clause", "offset": [3858, 3880]}, {"key": "a-third-party", "type": "clause", "offset": [3964, 3977]}, {"key": "process-controller", "type": "clause", "offset": [3981, 3999]}, {"key": "pursuant-to-a", "type": "definition", "offset": [4016, 4029]}, {"key": "the-third-party", "type": "definition", "offset": [4073, 4088]}], "size": 27, "snippet": "(a) The Controller hereby authorizes the appointment and use of Sub-processor(s) engaged by the Processor for the provision of the Services. The Controller approves the Sub-processor(s) set out in Annex 5.\n(b) The Controller acknowledges and agrees that: (i) Wolters Kluwer group may be retained as Sub- processors; and (ii) the Processor and Wolters Kluwer group respectively may engage third-party Sub- processors (and permit each Sub-Processor appointed under this clause 5 to appoint sub-processors) in connection with the provision of the Services.\n(c) In case the Processor intends to engage new or additional Sub-processors, the Controller hereby provides general written authorization for the Processor to do so, provided that the Processor shall inform the Controller of any intended changes concerning the addition or replacement of any Sub-processor (\"Sub-processor Notice\") such notice to be provided though CCH OneClick or on the GDPR page at \u2587\u2587\u2587\u2587\u2587://\u2587\u2587\u2587.\u2587\u2587\u2587.\u2587\u2587.\u2587\u2587/softwaresupport/2015/home.asp (\u201cSub-processor List Website\u201d). The Controller is responsible for visiting the Sub-processor List Website from time to time. If the Controller has a reasonable basis to object to the use of any such new or additional Sub-processor, the Controller shall notify the Processor promptly in writing within 14 days after receipt of the Sub-processor Notice. In the event the Controller objects to a new or additional Sub-processor, and that objection is not unreasonable, the Processor will use reasonable efforts to make available to the Controller a change in the S ervices or recommend a commercially reasonable change to the Controller\u2019s configuration or use of the Services to avoid Processing of Personal Data by the objected-to new or additional Sub-processor without unreasonably burdening the Controller. If the Processor is unable to make available such change within a reasonable period of time, which shall not exceed ninety (90) days, the Controller may terminate (notwithstanding any contrary provision in the Services Agreement and without liability to the Controller) the affected part of the Services Agreement with respect only to those Services which cannot be provided by the Processor without the use of the objected-to new or additional Sub-processor by providing written notice to the Processor.\n(d) The Processor and/or Wolters Kluwer group shall impose the same data protection obligations as set out in this DPA on any Sub-processor by contract. The contract between the Processor and the Sub- processor shall in particular provide sufficient guarantees to implement the Technical and Organizational Security Measures as specified in Annex 4, to the extent such Technical and Organizational Security Measures are relevant for the services provided by the Sub-processor. The Controller agrees that in respect of transfers of Personal Data under this DPA from the EU, the European Economic Area (\u201cEEA\u201d) and/or their Member States and Switzerland to Third Countries, to the extent such transfers are subject to the Applicable Data Protection Law, the Processor shall secure the transfer under the EU- US Privacy Shield pursuant to Decision 2016/1250/EU (\u201cPrivacy Shield\u201d), the terms of the Standard Contractual Clauses for the Transfer of Personal Data to Processors Established in Third Countries pursuant to Decision 2010/87/EU (\u201cModel Clauses\u201d) or such other mechanism approved by the European Commission and valid from time to time.\n(e) The Processor and/or Wolters Kluwer group shall choose the Sub-processor(s) diligently.\n(f) The Processor shall remain liable to the Controller for the performance of the Sub-processor\u2019s obligations, should the Sub-processor fail to fulfil its obligations. However, the Processor shall not be liable for damages and claims that ensue from the Controller\u2019s instructions to Sub-processors.\n(g) The provisions of this clause 5 shall not apply to the extent Controller instructs the Processor to allow a third party to Process Controller\u2019s Personal Data pursuant to a contract that Controller has directly with the third party.", "hash": "a4da263bc5776ac650a55feb06e6ac64", "id": 4}, {"samples": [{"hash": "6bckgkmUPd", "uri": "/contracts/6bckgkmUPd#sub-processing", "label": "Master Service Agreement", "score": 26.2676258087, "published": true}, {"hash": "dnj6LEiiKIZ", "uri": "/contracts/dnj6LEiiKIZ#sub-processing", "label": "Master Service Agreement", "score": 25.8076667786, "published": true}, {"hash": "fdYc8UWL8mN", "uri": "/contracts/fdYc8UWL8mN#sub-processing", "label": "Publisher Terms and Conditions", "score": 24.9178638458, "published": true}], "snippet_links": [{"key": "processing-of-your-personal-data", "type": "clause", "offset": [52, 84]}, {"key": "prior-to-an", "type": "clause", "offset": [101, 112]}, {"key": "adequate-assurances", "type": "definition", "offset": [173, 192]}, {"key": "the-sub", "type": "clause", "offset": [198, 205]}, {"key": "similar-to", "type": "definition", "offset": [256, 266]}, {"key": "the-obligations", "type": "clause", "offset": [267, 282]}, {"key": "set-out", "type": "definition", "offset": [286, 293]}, {"key": "execution-of-this-dpa", "type": "clause", "offset": [320, 341]}, {"key": "consent-to", "type": "clause", "offset": [370, 380]}, {"key": "the-companies", "type": "definition", "offset": [388, 401]}, {"key": "where-a-sub", "type": "clause", "offset": [472, 483]}, {"key": "data-protection-obligations", "type": "clause", "offset": [515, 542]}, {"key": "the-performance", "type": "clause", "offset": [600, 615]}, {"key": "to-the-same-extent", "type": "definition", "offset": [651, 669]}, {"key": "terms-of", "type": "clause", "offset": [723, 731]}, {"key": "in-the-agreement", "type": "clause", "offset": [772, 788]}, {"key": "obligations-of-the", "type": "clause", "offset": [824, 842]}, {"key": "new-sub", "type": "definition", "offset": [909, 916]}, {"key": "you-may-object", "type": "clause", "offset": [928, 942]}, {"key": "written-notice", "type": "definition", "offset": [1017, 1031]}, {"key": "commercially-reasonable-efforts", "type": "definition", "offset": [1089, 1120]}, {"key": "to-provide", "type": "clause", "offset": [1121, 1131]}, {"key": "obligations-under-the-agreement", "type": "clause", "offset": [1297, 1328]}, {"key": "the-provisions", "type": "clause", "offset": [1350, 1364]}, {"key": "prior-consent", "type": "definition", "offset": [1382, 1395]}, {"key": "the-processing", "type": "clause", "offset": [1448, 1462]}, {"key": "european-economic-area", "type": "definition", "offset": [1505, 1527]}, {"key": "to-the-extent", "type": "clause", "offset": [1535, 1548]}, {"key": "sole-discretion", "type": "definition", "offset": [1569, 1584]}, {"key": "the-service-providers", "type": "clause", "offset": [1635, 1656]}, {"key": "in-relation-to", "type": "clause", "offset": [1687, 1701]}, {"key": "required-level", "type": "definition", "offset": [1702, 1716]}, {"key": "privacy-shield-certification", "type": "clause", "offset": [1752, 1780]}, {"key": "according-to", "type": "definition", "offset": [1781, 1793]}, {"key": "commission-decision", "type": "clause", "offset": [1797, 1816]}, {"key": "contracting-agreement", "type": "definition", "offset": [1837, 1858]}, {"key": "based-on", "type": "definition", "offset": [1868, 1876]}, {"key": "standard-contractual-clauses", "type": "clause", "offset": [1881, 1909]}, {"key": "the-eu", "type": "clause", "offset": [1932, 1938]}, {"key": "february-2010", "type": "clause", "offset": [1975, 1988]}, {"key": "the-transfer-of-personal-data", "type": "clause", "offset": [2025, 2054]}, {"key": "third-countries", "type": "clause", "offset": [2084, 2099]}, {"key": "model-contract-clauses", "type": "definition", "offset": [2131, 2153]}, {"key": "other-applicable", "type": "clause", "offset": [2174, 2190]}, {"key": "transfer-mechanisms", "type": "clause", "offset": [2209, 2228]}, {"key": "by-fyber", "type": "clause", "offset": [2272, 2280]}, {"key": "on-behalf-of", "type": "definition", "offset": [2330, 2342]}, {"key": "responsible-to", "type": "clause", "offset": [2361, 2375]}, {"key": "obtain-regulatory-approvals", "type": "clause", "offset": [2376, 2403]}, {"key": "data-protection-authorities", "type": "definition", "offset": [2422, 2449]}, {"key": "required-by-law", "type": "definition", "offset": [2456, 2471]}], "size": 9, "snippet": "4.1 Fyber engages sub-processors to perform certain Processing of your Personal Data on your behalf. Prior to an engagement with a sub-processor, Fyber requires or receives adequate assurances that the sub-processor complies with obligations substantially similar to the obligations as set out in this DPA.\n4.2 Upon the execution of this DPA, you hereby give Fyber your consent to engage the companies detailed at \u2587\u2587\u2587\u2587://\u2587\u2587\u2587.\u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587/subprocessors as sub-processors.\n4.3 Where a sub-processor fails to fulfill its data protection obligations or statements, Fyber will remain fully liable to you for the performance of the sub-processor's obligations to the same extent that Fyber would be liable to you directly under the terms of this DPA, except as otherwise set forth in the Agreement, if Fyber would have performed the obligations of the sub-processor.\n4.4 Fyber will inform you of its engagement with a new sub-processor. You may object to the use of new or additional sub-processor by promptly sending Fyber a written notice. If you object to the new sub-processor, Fyber will make commercially reasonable efforts to provide you the same level of Service(s) without the use of such sub-processor. Notwithstanding, your objection and the results thereof will not amend, alter or reduce your obligations under the Agreement.\n4.5 Notwithstanding the provisions here above (e.g. prior consent by you), you hereby authorize Fyber to sub-contract the Processing to service providers based outside of the European Economic Area (EEA), to the extent necessary, at Fyber sole discretion, to duly perform the Service(s) on condition that the service providers provide sufficient guarantees in relation to required level of data protection, e.g. through a Privacy Shield certification according to EU Commission Decision 2016/1250, or a sub-contracting agreement which is based on the standard contractual clauses launched by virtue of the EU Commission Decision 2010/87/EU of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC (the \u201cModel Contract Clauses\u201d), or based on such other applicable trans-border data transfer mechanisms. Any such Model Contract Clauses concluded by Fyber shall be treated as if concluded in the name and on behalf of you. You shall be responsible to obtain regulatory approvals from the relevant data protection authorities, when required by Law.", "hash": "d62c52220c7536fc4ae98534dc1c7c3f", "id": 7}, {"samples": [{"hash": "3b5U14erSIO", "uri": "/contracts/3b5U14erSIO#sub-processing", "label": "Software Service Agreement", "score": 33.3537406921, "published": true}, {"hash": "iDAKwlFGGZ6", "uri": "/contracts/iDAKwlFGGZ6#sub-processing", "label": "Terms and Conditions for Software Service", "score": 26.8056125641, "published": true}, {"hash": "cpqdtaF3lKl", "uri": "/contracts/cpqdtaF3lKl#sub-processing", "label": "Terms and Conditions for Software Service", "score": 26.4469547272, "published": true}], "snippet_links": [{"key": "the-service", "type": "clause", "offset": [0, 11]}, {"key": "infrastructure-services", "type": "clause", "offset": [25, 48]}, {"key": "a-sub", "type": "clause", "offset": [77, 82]}, {"key": "the-provider", "type": "definition", "offset": [101, 113]}, {"key": "data-processing-addendum", "type": "definition", "offset": [142, 166]}], "size": 8, "snippet": "The Service rests on the infrastructure services of Amazon (AWS) who acts as a sub-pro- cessor under the Provider\u2019s control. A GDPR compliant data processing addendum is incorporated in the agree- ment between AWS and the Provider. The Provider will inform You of any changes of sub-processors.", "hash": "c430c5db809af9343e8fb607b6bfbf3b", "id": 9}, {"samples": [{"hash": "iX12sGl9VVz", "uri": "/contracts/iX12sGl9VVz#sub-processing", "label": "Order Form", "score": 35.4051895142, "published": true}, {"hash": "d6EV2xNxeDn", "uri": "/contracts/d6EV2xNxeDn#sub-processing", "label": "Framework Agreement", "score": 35.0526237488, "published": true}, {"hash": "kEeeylf7UGH", "uri": "/contracts/kEeeylf7UGH#sub-processing", "label": "Framework Agreement", "score": 35.041595459, "published": true}], "snippet_links": [{"key": "in-respect-of", "type": "clause", "offset": [0, 13]}, {"key": "processing-of-personal-data", "type": "clause", "offset": [18, 45]}, {"key": "by-a-third-party", "type": "clause", "offset": [56, 72]}, {"key": "on-behalf-of", "type": "definition", "offset": [73, 85]}, {"key": "a-party", "type": "clause", "offset": [86, 93]}], "size": 11, "snippet": "In respect of any Processing of Personal Data performed by a third party on behalf of a Party, that Party shall:", "hash": "134531a9b7e88cc88576948c0f1a4f58", "id": 6}], "next_curs": "ClcSUWoVc35sYXdpbnNpZGVyY29udHJhY3RzcjMLEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IhdzdWItcHJvY2Vzc2luZyMwMDAwMDAwYQyiAQJlbhgAIAA=", "clause": {"title": "Sub-Processing", "children": [["sub-processor-obligations", "Sub-processor Obligations"], ["authorised-sub-processors", "Authorised Sub-processors"], ["authorized-sub-processors", "Authorized Sub-processors"], ["appointment-of-sub-processors", "Appointment of Sub-Processors"], ["oktas-sub-processors", "Okta\u2019s Sub-processors"]], "parents": [["criminal-damage", "Criminal damage"], ["general", "General"], ["miscellaneous", "Miscellaneous"], ["general-provisions", "General Provisions"], ["data-protection", "Data Protection"]], "size": 1271, "id": "sub-processing", "related": [["transaction-processing", "Transaction Processing", "Transaction Processing"], ["subprocessing", "Subprocessing", "Subprocessing"], ["sub-processor", "Sub-processor", "Sub-processor"], ["order-processing", "Order Processing", "Order Processing"], ["data-processing", "Data Processing", "Data Processing"]], "related_snippets": [], "updated": "2026-06-09T04:45:18+00:00", "also_ask": ["What controls or limitations should be negotiated to restrict sub-processor selection?", "Which notification and approval mechanisms are essential for sub-processing arrangements?", "How can liability for sub-processor breaches be effectively allocated and enforced?", "What are the key differences in sub-processing requirements under major data protection laws (e.g., GDPR vs. CCPA)?", "What evidence is needed to demonstrate due diligence and compliance in court if a sub-processor causes a data breach?"], "drafting_tip": "Specify conditions for engaging sub-processors to ensure data protection; require prior written consent to maintain control; mandate flow-down of obligations to safeguard compliance.", "explanation": "The Sub-Processing clause governs the conditions under which a party, typically a data processor, may engage third parties (sub-processors) to handle data on behalf of the original data controller. It usually requires the processor to obtain prior authorization\u2014either general or specific\u2014from the controller before appointing sub-processors, and mandates that sub-processors adhere to the same data protection obligations as the primary processor. This clause ensures that data remains protected throughout the processing chain and addresses the risk of unauthorized or inadequate handling of data by third parties."}, "json": true, "cursor": ""}}