Google Managed Multi Cloud Services Data Processing And Security Terms Addendum | Google Cloud (original) (raw)

2.1. Authorization to Engage Multi-Cloud Service Third-Party Provider. If Customer selects a Multi-Cloud Service Third-Party Provider (following the process described in the Documentation for the Google-Managed MCS), Customer specifically authorizes the engagement of that Multi-Cloud Service Third-Party Provider to process the Multi-Cloud Customer Data in connection with Google’s provision of the Google-Managed MCS. If Customer is a processor, Customer warrants that the relevant controller has authorized the engagement of any Multi-Cloud Service Third-Party Providers as described in this Amendment.

2.2. Information about Multi-Cloud Service Third-Party Providers. The available Multi-Cloud Service Third-Party Providers are listed at https://cloud.google.com/terms/mcs-providers (as may be updated by Google from time to time).

2.3. Requirements for Multi-Cloud Service Third-Party Provider Engagement. When engaging Customer’s selected Multi-Cloud Service Third-Party Provider in connection with the Google-Managed MCS, Google will:

a. ensure via a written contract that:

i. the Multi-Cloud Service Third-Party Provider only accesses and uses the Multi-Cloud Customer Data to the extent required to perform the obligations subcontracted to it; and

ii. enter into a data processing agreement with the Multi-Cloud Service Third-Party Provider that imposes the data protection obligations described in Article 28(3) of the GDPR on the Multi-Cloud Service Third-Party Provider in relation to its processing of any personal data within the Multi-Cloud Customer Data; and

b. remain fully liable for all obligations subcontracted to, and all acts and omissions of, the Multi-Cloud Service Third-Party Provider related to the provision of the Google-Managed MCS.

2.4. Multi-Cloud Service Third-Party Provider Changes. Customer is responsible for its selection of a Multi-Cloud Service Third-Party Provider to process the Multi-Cloud Customer Data, and may change or revoke its selection at any time. Google will not change Customer’s selected Multi-Cloud Service Third-Party Provider.