☐ the subcontractor must take appropriate steps to assist the processing manager in responding to individuals` requests in the exercise of their rights; 3.4.2 Wolters Kluwer will notify the customer if Wolters Kluwer intends to replace or hire a new subprocessor. Wolters Kluwer then provides the subcontractor`s name and processing location information as well as, at the customer`s written request, information on the processing activity to be carried out by the subcontractor on behalf of Wolters Kluwer. The customer has the right to object in writing to such changes within 30 days of Wolters Kluwer`s announcement. If, despite the customer`s objection, Wolters Kluwer still intends to replace or require a new subprocessor, the customer is entitled to terminate the contract for the service concerned within 30 days of wolters Kluwer`s announcement of the change. The termination is made in writing and the notice is at least 30 days, but no more than 60 days. Wolters Kluwer then refunds to the customer all fees paid for the period following the expiry of the notice period. If the customer has a legitimate reason for his objection, Wolters Kluwer cannot instruct the new subcontractor of the relevant service to process the customer`s personal data during the customer`s notice period. If the client has no valid reason for the objection, termination of the client is considered a termination without notice, the client having to pay the compensation specified in the contract for that termination and, moreover, an amount equal to 25% of the remaining monthly service delivery fee from the end of the notice period. In this sub-clause, a “justified reason” is one of the circumstances of the subcontractor that significantly affect or may affect the protection of the personal data of the person concerned. For example, if the new subcontractor does not meet the requirements of subcontractors in applicable data protection legislation.
3.2 Subcontracting obligations. DigitalOcean must: (i) enter into a written agreement with the subcontract, which imposes data protection rules requiring the subcontractor to protect personal data according to the legal standard; and (ii) remain responsible for meeting the obligations of this data protection authority and for any act or omission of the subprocessor which has the effect of forcing DigitalOcean to one of its obligations under that authority. Outsourced processing: We host our service with outsourced cloud infrastructure providers. In addition, we have contractual relationships with suppliers to provide the service in accordance with our data protection authority. We rely on contractual agreements, confidentiality policies and compliance programs for suppliers to protect data processed or stored by these providers. Treatment by a subcontractor is subject to a contract or other legal act, within the meaning of EU or Member State law, which is mandatory for the subcontractor with regard to the person in charge of the treatment and which defines the purpose and duration of the treatment, the nature and purpose of the treatment, the nature of the personal data and the categories of persons concerned. , as well as the obligations and rights of the person in charge of the treatment.