SUB-PROCESSORS AND THIRD COUNTRY TRANSFERS. 7.1. Customer acknowledges and agrees that Momentum may appoint another data processor ("Sub-processor") in connection with the provision of the Services. An updated list can be found at the following web-site: ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇.▇▇/gdpr/ 8.1. Momentum will notify Customer in advance of any changes to sub-processors using regular communication means such as customer newsletters, websites, and portals. If Customer reasonably objects to the addition of a new or Sub-processor (e.g., such change causes Customer to be noncompliant with applicable Data Protection Laws), Customer shall notify Momentum in writing of its specific objections within 30 days of receiving such notification. If Customer does not object within such period or objects but does not terminate the Service, the addition of the new Sub-processor and, if applicable, the accession to this Addendum shall be considered accepted. If Customer does object to the addition of a new data Sub-processor and Momentum cannot accommodate Customers' objection, Customer may terminate the Service. For the avoidance of doubt, the Momentum will not allow the new Sub-processor to process personal data until Customer accepts the Sub-processor or the Service is terminated in accordance with this Section 7.2. 8.2. If Momentum engages a Sub-processor, a written data processing agreement shall be drawn up between Momentum and the Sub-processor. The agreement between them shall state that the Sub-processor has the same obligations as Momentum in relation to Customer. Momentum is fully liable towards Customer for the processing carried out by the Sub-processor. 8.3. If a Sub-processor processes personal data in a third country, Customer may authorize Momentum to sign a data processing agreement on behalf of Customer with Sub-processors in the third country, in accordance with the requirements for third country transfers as specified in the Data Protection Laws. 8.4. Momentum shall ensure that Customer knows which Sub-processors process personal data by, without undue delay, at the request of Customer, providing Customer with complete, correct and updated information about all Sub-processors, where the following information is specified for each individual Sub-processor: o Definition of the Sub-processor, including contact details, corporate form and geographic location, o The type of service performed by the Sub-processor, o The characteristics of the Sub-processor, o Guarantees provided for compliance with the Regulations, and o Where the Sub-processor processes personal data covered by the Addendum. 8.5. If the Sub-processor does not comply with its processing obligations as set forth in the Addendum, Momentum remains fully liable towards Customer for the compliance of the Sub-processor with its obligations under the Addendum.
Appears in 2 contracts