Contractual standards for Data Processing on Behalf, last revised December 8, 2014 PART 3: APPROVED SUBCONTRACTORS Subcontractor name, address (1) Name Zip code, town/city No., street, P.O. box no. Country Data protection contact Information security contact Brief description of the function carried out by this subcontractor: Subcontractor name, address (2) Name Zip code, town/city No., street, P.O. box no. Country Data protection contact Information security contact Brief description of the function carried out by this subcontractor: (Provide details for any further subcontractors) Processor shall ensure that the subcontractors listed above are contractually bound by the obligations specified in Part 1 and have implemented the technical and organizational measures in accordance with the specifications in Part 2 or can furnish proof that they have been awarded suitable certification (for example, ISO 2700x). Page 19 of 20