The subcontractor must immediately inform the person responsible for any breach of this data processing agreement or accidental, unlawful or unauthorized access to personal data, the use or disclosure of personal data, or the fact that personal data may have been compromised or that the integrity of personal data has been breached. The subcontractor provides the processing manager with all necessary measures to ensure that the person in charge of the processing complies with applicable data protection rules and allows the processing managers to respond to all requests from the relevant data protection authorities. It is the responsibility of the person in charge of the processing to inform the data protection authority of anomalies in accordance with applicable law. This data processing agreement governs the rights and obligations of the subcontractor to ensure that the full processing of personal data complies with applicable data protection legislation. „processing“ personal data, any use, exploitation or series of transactions carried out using personal data, whether collected automatically, such as collection, transfer, storage, modification, disclosure, as defined in applicable legislation and in the European Union Regulation 2016/679. (A) HubSpot must not transmit European data to a country or recipient that is not recognised as sufficiently protected for personal data (in accordance with current EU data protection legislation), unless HubSpot takes all necessary measures to ensure that the transfer complies with existing EU data protection legislation. These measures may include (without restriction) the transfer of such data to a recipient under an appropriate framework or other legally appropriate transfer mechanism, recognised by the competent authorities or the competent courts as an appropriate level of protection of personal data, to a recipient who has obtained binding authorisation for the company`s rules in accordance with EUROPEAN data protection legislation, or to a recipient who has in any case implemented the corresponding standard contractual clauses in accordance with the current European data protection law.