Common use of Requirements for Subprocessor Engagement Clause in Contracts

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Upwork will: a. ensure via a written contract that: i. the Subprocessor only accesses and uses Customer Data to perform the obligations subcontracted to it, and does so in accordance with the Agreement (including this DPA) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Upwork as described in Section 10.2 (Transfers of Data Out of the EEA); and ii. if the GDPR applies to the processing of Customer Personal Data, the data protection obligations set out in Article 28(3) of the GDPR, as described in this DPA, are imposed on the Subprocessor; and b. remain liable for all obligations subcontracted to, and all related acts and omissions of, the Subprocessor.

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Upwork JustAskme will: a. ensure via a written contract that: i. the Subprocessor only accesses and uses Customer Data to perform the obligations subcontracted to it, and does so in accordance with the Agreement (including this DPA) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Upwork JustAskme as described in Section 10.2 (Transfers of Data Out of the EEA); and ii. if the GDPR applies to the processing of Customer Personal Data, the data protection obligations set out in Article 28(3) of the GDPR, as described in this DPA, are imposed on the Subprocessor; and b. remain liable for all obligations subcontracted to, and all related acts and omissions of, the Subprocessor.

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Upwork will: a. ensure via a written contract that: i. the Subprocessor only accesses and uses Customer Data to perform the obligations subcontracted to it, and does so in accordance with the Agreement (including this DPA) and any Model Contract Standard Contractual Clauses entered into or Alternative Transfer Solution adopted by Upwork as described in Section 10.2 (Transfers of Data Out of the EEA); and ii. if the GDPR applies to the processing of Customer Personal Data, the data protection obligations set out in Article 28(3) of the GDPR, as described in this DPA, are imposed on the Subprocessor; and b. remain liable for all obligations subcontracted to, and all related acts and omissions of, the Subprocessor.

Requirements for Subprocessor Engagement. When engaging any Subprocessor, Upwork will: a. ensure via a written contract that: i. the Subprocessor only accesses and uses Customer Data to perform the obligations subcontracted to it, and does so in accordance with the Agreement (including this DPA) and any Model Contract Clauses entered into or Alternative Transfer Solution adopted by Upwork as described in Section 10.2 (Transfers of Data Out of the EEA); EEA); and ii. if the GDPR applies to the processing of Customer Personal Data, the data protection obligations set out in Article 28(3) of the GDPR, as described in this DPA, are imposed on the Subprocessor; Subprocessor; and b. remain liable for all obligations subcontracted to, and all related acts and omissions of, the Subprocessor.