Orange County NC Website
DocuSign Envelope ID:90A54439-23B9-40AF-8246-BFCAAEAA529D <br /> (c) are aware both of Submittable's duties and their personal duties and obligations <br /> under the Privacy and Data Protection Requirements and this DPA. <br /> 4.4 Submittable will take reasonable steps to ensure the reliability, integrity, and <br /> trustworthiness of, and conduct background checks consistent with applicable Law on, all of <br /> Submittable's employees with access to the Personal Information. <br /> 5. Sub-processors. <br /> 5.1 Customer acknowledges and agrees that (a) Submittable's Affiliates may be retained as <br /> Sub-processors, and (b) Submittable and Submittable's Affiliates respectively may engage third-party <br /> Sub-processors in connection with the provision of the Services. Pursuant to the Standard <br /> Contractual Clauses, Customer acknowledges and expressly agrees that Submittable may engage <br /> new Sub-processors as described in this DPA. <br /> 5.2 Submittable may only authorize a Sub-processor to Process Personal Information if: <br /> (a) Submittable or a Submittable Affiliate has entered into a written agreement with <br /> each Sub-processor containing data protection obligations not less protective than those in this <br /> DPA with respect to the protection of Personal Information to the extent applicable to the <br /> nature of the services provided by such Sub-processor; <br /> (b) Submittable maintains control over all Personal Information it entrusts to the <br /> Sub-processor; and <br /> (c) Submittable remains liable for breaches of this DPA caused by its Sub-processor's <br /> acts and omissions. <br /> 5.3 A list of current Sub-processors can be found at Appendix A. Such Sub-processor list <br /> shall include the identities of those Sub-processors and their country of location. Customer agrees <br /> and acknowledges Submittable's current Sub-processors are authorized to Process Personal <br /> Information as set forth in this DPA. Submittable shall update the list of Sub-processors with the <br /> identities of those Sub-processors and their country of location on its website and by emailing <br /> Customer ("Updated Sub-processor List"). <br /> 5.4 Customer may object to Submittable's use of a new Sub-processor by notifying <br /> Submittable in writing within ten (10) business days after such Sub-processor is emailed to Customer <br /> in an Updated Sub-processor List, provided Customer's objection is based on a commercially <br /> reasonable and objective belief that such Sub-processor is not qualified to Process Personal <br /> Information. In the event Customer objects to a new Sub-processor, Submittable will notify Customer <br /> within sixty (60) days if another Sub-processor is available for performing the objected to Sub- <br /> processors' duties. If Submittable is unable to make available another Sub-processor, Customer may <br /> terminate the applicable Order Form in part or entirely by providing written notice to Submittable. <br /> Submittable will refund to Customer any prepaid fees covering the remainder of the term of such <br /> Order Form following the effective date of termination with respect to such terminated Services, <br /> without imposing a penalty for such termination on Customer. <br /> 6. Authorized Affiliates. <br /> 6.1 Customer agrees to obtain agreement of its Authorized Affiliates to be bound by the <br /> obligations under this DPA and, to the extent applicable, the TOS. All access to and use of the Service <br /> by Authorized Affiliates must comply with the TOS, and any violation of the TOS by an Authorized <br /> Affiliate shall be deemed a violation by Customer. <br /> 6.2 Customer shall remain responsible for coordinating all communication with Submittable <br /> under this DPA and be entitled to make and receive any communication in relation to this DPA on <br /> behalf of its Authorized Affiliates. <br /> Submittable Customer Terms of Service v1.1—Exhibit B Page 4 of 12 <br />