Common use of Authorized Sub-processors Clause in Contracts

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates and the Authorized Sub- Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. Such List may be updated by Company from time to time on ten (10) days email notice. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company Noteable may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable to engage sub-processors as necessary to perform the Services. 4.2 A list of CompanyNoteable’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. will be made available to Customer, either at a link provided to Customer, via email or through another means made available to Customer. Such List may be updated by Company Noteable from time to time on ten (10) days email noticetime. Noteable may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company Noteable will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company Noteable in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company Noteable from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company Noteable cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to CompanyNoteable. Discontinuation shall not relieve Customer of any fees owed to Company Noteable under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Noteable, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company Noteable will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company Noteable under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with CompanyNoteable, Company Noteable will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into With respect to the Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company Noteable of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company Noteable to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company Noteable beforehand, and that such copies will be provided by the Company Noteable only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates affiliates and the Authorized Sub- Processors identified on the List (as defined below) listed in Exhibit B to this Addendum to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. will be made available to Customer, at a link provided to Customer at ▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇▇.▇▇/en/articles/1944353-data-categories-subcontractors, via email or through another means made available to Customer. Such List may be updated by Company from time to time on ten (10) days email noticetime. Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. Such will be made available to Customer, at the following link: ▇▇▇▇▇://▇▇▇▇▇.▇▇▇/help/gdpr-compliance#third-parties. The List may be updated by Company from time to time on ten (10) days email noticetime. Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into With respect to the Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. will be made available to Customer at ▇▇▇▇▇://▇▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/privacy-policy/subprocessors/ Such List may be updated by Company from time to time on ten time. Company will provide a mechanism to subscribe to notifications (10which may include but are not limited to email) days email noticeof new Authorized Sub-Processors and Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in on Exhibit B. Such List may be updated by Company from time to time on ten (10) days email noticetime. Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten thirty (1030) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company in writing within ten thirty (1030) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-sub- processor may prevent Company from offering the Services to Customer. 4.3 If a Sub-Processor change would cause Company to breach its obligations under the Agreement and this Addendum, Customer reasonably objects to an engagement may terminate the Agreement in accordance with Section 4.2, Sections 7.2 (Defaults) and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use 7.3 (Termination; Other Remedies) of the affected Service by providing written notice to CompanyAgreement. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten 4.5 thirty (30) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.4 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into 4.5 With respect to the Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company Recurly may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) listed at ▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇/legal/privacy/subprocessors to access and process Process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the Processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Recurly to engage sub-processors as necessary to perform the Services. 4.2 A list of CompanyRecurly’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. available at ▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇/legal/privacy/subprocessors. Such List may be updated by Company Recurly from time to time on ten (10) days email noticetime. Customer acknowledges and agrees that it is solely responsible for subscribing to notifications of changes, which notification mechanism will be available through the List, in order to be notified of new Authorized Sub-Processors. Customer also acknowledges and that, aside from updating the List and informing Customer that the List has been updated, Recurly shall have no obligation to inform Customer of any additional Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing Processing of Personal Data, Company Recurly will add such third party to the List and notify Customer via emailList. Customer may reasonably object to such an engagement the addition of a third party to the List on legitimate grounds by informing Company Recurly in writing within ten five (105) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protectionthat the List has been updated. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company Recurly from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company Recurly cannot provide a commercially reasonable alternative within a reasonable period of time, Customer Recurly may discontinue terminate the use of the affected Service by providing written notice to CompanyAgreement or this Addendum. Discontinuation Termination shall not relieve Customer of any fees owed to Company Recurly under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Recurly, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company Processor will enter into a written agreement with the Authorized Sub-Processor imposing the same data protection obligations on the Authorized Sub-Processor data protection obligations comparable to as those imposed on Company Processor under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with CompanyProcessor, Company Processor will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company Processor have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company Processor of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company Processor to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company Recurly beforehand, and that such copies will be provided by the Company Recurly only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates and as well as the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this DPA, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. available to Customer at ▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇▇/resources/trust-centre/sub-processors. Such List may be updated by Company from time to time on ten time. Company will provide a mechanism to subscribe to notifications (10which may include but are not limited to email notifications) days email noticeof new Authorized Sub-Processors and Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer waives any right it may have to receive prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this DPA. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum DPA with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 4.1. Customer acknowledges and agrees that Company UsabilityHub may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this DPA, Customer provides general written authorization to UsabilityHub to engage sub-processors as necessary to perform the Services. 4.2 4.2. A list of CompanyUsabilityHub’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. available to Customer at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/legal/sub-processors. Such List may be updated by Company UsabilityHub from time to time on ten time. UsabilityHub will provide a mechanism to subscribe to notifications (10which may include but are not limited to email) days email noticeof new Authorized Sub-Processors and Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten fourteen (1014) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company UsabilityHub will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Company UsabilityHub in writing within ten fourteen (1014) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company UsabilityHub from offering the Services to Customer. 4.3 4.3. If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company UsabilityHub cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to CompanyUsabilityHub. Discontinuation shall not relieve Customer of any fees owed to Company UsabilityHub under the Agreement. 4.4 4.4. If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten 4.5 Company fourteen (14) days of notice by UsabilityHub, that third party will be deemed an Authorized Sub-Processor for the purposes of this Agreement. 4.5. UsabilityHub will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company UsabilityHub under this Addendum Agreement with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with CompanyUsabilityHub, Company UsabilityHub will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 4.6. If Customer and Company UsabilityHub have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company UsabilityHub of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company UsabilityHub to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company UsabilityHub beforehand, and that such copies will be provided by the Company UsabilityHub only upon request by Customer.

Authorized Sub-processors. 4.1 4.1. Customer acknowledges and agrees that Company Lyssna may (1) engage its Affiliates and as well as the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this DPA, Customer provides general written authorization to Lyssna to engage sub-processors as necessary to perform the Services. 4.2 4.2. A list of CompanyLyssna’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. available to Customer at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/legal/sub-processors. Such List may be updated by Company Lyssna from time to time on ten time. Lyssna will provide a mechanism to subscribe to notifications (10which may include but are not limited to email) days email noticeof new Authorized Sub-Processors and Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten fourteen (1014) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company Lyssna will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Company Lyssna in writing within ten fourteen (1014) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company Lyssna from offering the Services to Customer. 4.3 4.3. If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company Lyssna cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to CompanyLyssna. Discontinuation shall not relieve Customer of any fees owed to Company Lyssna under the Agreement. 4.4 4.4. If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten 4.5 Company fourteen (14) days of notice by Lyssna, that third party will be deemed an Authorized Sub-Processor for the purposes of this Agreement. 4.5. Lyssna will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company Lyssna under this Addendum Agreement with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with CompanyLyssna, Company Lyssna will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 4.6. If Customer and Company Lyssna have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company Lyssna of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company Lyssna to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company Lyssna beforehand, and that such copies will be provided by the Company Lyssna only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) listed in Exhibit B to this DPA to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this DPA, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. will be made available to Customer, either attached hereto, at a link provided to Customer, via email, or through another means made available to Customer. Such List may be updated by Company from time to time on ten (10) days email noticetime. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this DPA. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum DPA with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates affiliates and the Authorized Sub- Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to the Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. will be made available to the Customer at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/compliance. Such List may be updated by Company from time to time on ten time. Company will provide a mechanism to subscribe to notifications (10which may include but are not limited to email) days email noticeof new Authorized Sub-Processors and Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Company may (1) engage its Affiliates affiliates and the Authorized Sub- Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services,, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. 4.2 A list of Company’s current Authorized Sub-Processors (the “List”) is set forth in Exhibit B. will be made available to Customer at ▇▇▇▇▇://▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/terms/data-protection/. Such List may be updated by Company from time to time on ten time. Company will provide a mechanism to subscribe to notifications (10which may include but are not limited to email) days email noticeof new Authorized Sub-Processors and Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Company. Discontinuation shall not relieve Customer of any fees owed to Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Company, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Company beforehand, and that such copies will be provided by the Company only upon request by Customer.