This precedent is for use between a processor and sub-processor. It assumes the sub-processor is able to obtain fairly favourable terms and that the original processor has contracted with the controller based on Precedent: Personal data processing schedule—pro-supplier—UK GDPR and EU GDPR. For a list of precedent provisions for use between a controller and processor, see: List of data protection clauses and agreements for commercial transactions and personal data processing and sharing. This precedent uses the additional defined terms ‘Agreement’, ‘Business Day’, ‘Charges’, ‘Customer’, ‘Services’, ‘Supplier’ and ‘Supplier Personnel’, which are unlikely to be specific to this schedule and which it is assumed are separately defined in the relevant agreement. The Schedule Part A: Operative provisions 1 Definitions 1.1 In this Schedule: Controller • has the meaning given in applicable Data Protection Laws from time to time; Controller Entity • means [insert as appropriate, eg ‘the Controller of the Protected Data, which as at the date of this Agreement is [insert name of legal entity]’]; Data Protection Laws • means, as binding on either party or the Services: (a) the EU GDPR;