You are on page 1of 4

This document includes: (1) a Confidentiality Undertaking; (2) Privacy Notice regarding the Collection and Processing of Personal

Data; and (3) a request for consent to use your biometric data and photograph as a subset of the Personal Data we collect and
process in order to facilitate your secure entry to an Equinix International Business Exchange Center (IBX Center) and to issue you
with an access card.

1. Confidentiality Undertaking

If the entity that authorized the signatory to access the IBX Center is subject to a Master Service Agreement/Master Country
Agreement/Non-Disclosure Agreement or another governing document with Equinix relating to Confidential Information, the
provisions of that agreement will control and the provisions of this Section 1 will be null and void.

You are about to enter an IBX Center, which is a secured and private environment. You may be accessing or receiving, on a strict
need-to-know basis and at Equinix’s sole discretion, certain Equinix’s proprietary and confidential information such as, information
of a technical or business nature or otherwise, in a tangible or intangible form, disclosed directly or indirectly, relating to any of
the Equinix group companies, and including, but not limited to information that: (a) is identified by Equinix, in writing or verbally,
as confidential at the time of disclosure; (b) information concerning Equinix’s business, products, services, pricing information,
financial position, technical information or business operations, and relating to any of the Equinix group companies; and/or (c)
relates to the design and plans of the IBX Center, the tools, protocols and equipment used at the IBX Center, the configuration of
cables, networks, space, power and services at the IBX Center (“Proprietary and Confidential Information”).

You agree to not:

(i) disclose, or allow the disclosure of, Equinix’s Proprietary and Confidential Information to any third party
(ii) use, or allow the use of, such Proprietary and Confidential Information for any purpose other than complying with
your contractual obligations; and
(iii) disclose, or allow the disclosure to any third party of, the fact that Equinix’s Proprietary and Confidential Information
has been made available to you and/or is inspected by you
without Equinix’s prior written consent.

You agree to:

(i) to hold Equinix’s Proprietary and Confidential Information in confidence and to take reasonable precautions to
protect it, such precautions to be at least equal to the precautions you take to protect your own confidential
information
(ii) immediately notify Equinix in writing of any misuse or misappropriation of Equinix’s Proprietary and Confidential
Information that may come to your attention; and
(iii) be responsible for any breach of this Confidentiality Undertaking by you.

If you become legally compelled under applicable law, regulation, or by a competent governmental, administrative or regulatory
authority, before a court, arbitration or administrative proceeding, to disclose a portion of Equinix’s Proprietary and Confidential
Information, you will provide Equinix with prompt written notice (unless prohibited by law) of such legal compulsion.
Any threatened or actual breach of this Confidentiality Undertaking may lead to Equinix exercising any rights or remedies subject
to applicable local jurisdiction, including the remedies of injunction.

You also agree that upon Equinix’s request or after termination of access to all or part of Equinix’s Proprietary and Confidential
Information, you will immediately return to Equinix or destroy all such Equinix’s Proprietary and Confidential Information together
with any copies thereof. The obligations hereunder will continue to be in effect for a period of five (5) years after such termination.

If any of the provisions of this Confidentiality Undertaking are held by a court or other tribunal of competent jurisdiction to be
illegal, invalid or unenforceable, such provisions shall be deemed to not apply and the remaining provisions shall remain in full
force and effect.

I acknowledge that by signing this Confidentiality Undertaking in the signature line below as part of Equinix’s IBX Center access
policies, I expressly confirm that I have read, understood and agreed to being bound by all of its terms, with effect from the date
Confidential rev 2022.1 January 7, 2022
of signature hereunder or the first date of disclosure of Equinix’s Proprietary and Confidential Information, whichever is the earlier
(the “Effective Date”).

-----------------------------------------------------------------------------------------------------------------------------------------------------------
2. Privacy Notice regarding the Collection and Processing of Personal Data

We collect and process some of your Personal Data in the implementation of our secure access procedure in our IBX Centers and
in support of the business relationship that Equinix may have with the company that you represent in seeking access to our IBX
Centers.

Upon entering any of our IBX Centers, we require all our visitors to show to our security officers a government-issued photo
identification in such form acceptable to Equinix in accordance with our Global IBX Policies, for identification verification purposes
performed by a security guard and an identification scanner. Acceptable identification is limited to valid, readily identifiable
government issued photo identification such as: (a) a passport, (b) a driver’s license or national identity card from the same state
or country in which the IBX is located, (c) a national identity card used as the sole document for travel (EU only) or (d) a travel
permit used as the sole document for travel (China Only).

Additionally, we require all of our visitors to provide the Personal Data set out below for permanent access to the relevant IBX
Centers for the duration of your authorised access (via an Equinix Access Card, which will assign access rights for entry and
circulation within our IBX Centers). The Equinix Access Card will contain your biometric template for the provision of such access
where this type of biometric smart card is made available by Equinix. As explained further below, without certain information, you
will only be permitted to access the IBX Center as an escorted visitor.

Privacy Statement

We, Equinix, will collect, process and use your Personal Data, as described below, for the following purposes:
• ensuring and implementing secure access to any of our IBX Centers;
• conducting investigations into potential misconduct
• securing assets within an IBX Center
• allowing the assessment of Equinix’s business operations and any potential security breaches by our Management,
Privacy Office, compliance officers and internal or external auditors; and
• supporting the business relationship with the company that you represent in gaining access to the IBX Center.

Your Personal Data will be collected in our Equinix systems as an “Authorized Person” who is identified as being able to gain access
to the IBX Centers and then again at the time of entry into one of our IBX Centers and, in the case of CCTV images, during your visit
to the IBX Center. We may collect biometric data to enrol you and provide you with biometrically authenticated access. Biometric
data includes fingerprint, hand scan, palm, vein and iris scan. The biometric data collected will be converted into a template (which
is an encrypted mathematical file based on the distinctive characteristics of your biometric data) during enrolment. The biometric
template will then either be stored on a smart card which will be issued to you, or it will be stored on a secure centralised database
controlled by Equinix, depending on the system in operation at the IBX Center.

We will only retain your Personal Data for a reasonable period thereafter according to Equinix’s policies and procedures for
applicable data retention requirements, but in any event, for no longer than necessary to fulfil the purposes described herein. Any
raw biometric data collected during enrolment will be immediately converted into a biometric template and then immediately
destroyed. These biometric templates and other data relating to security profiles are stored by Equinix until they are no longer
required; specifically, until they are deleted by Equinix when your Equinix Customer Portal (ECP) profile is removed, your IBX Center
access is removed, or when a contract related to your access has ended. Also, if you do not use biometric entry for a year from
when it is granted, or you are inactive for a year, any biometric template data stored by Equinix is deleted a year later. Where you
use a biometric smart card, your biometric template data will be stored in the smart card. You can return this to us or destroy it
yourself when you no longer require entry.

We process the following Personal Data:


(i) your name and surname;
(ii) your photograph;
(iii) your contact details at the company you represent to gain access to the IBX Centers;
(iv) if biometric entry is used, certain biometric data (such as fingerprint, hand scan, palm, vein, iris scan, or any other
biometric-assessment technology developed in the future as applicable from time to time) and a biometric template
(an encrypted mathematical file created based on your biometric data);
(v) your government-issued photo identification information;
(vi) your vehicle registration number (where applicable); and
(vii) your CCTV images, both live and recorded.

Confidential rev 2022.1 January 7, 2022


Your provision of your name, surname, contact details and identification information is optional, but if you do not provide this
information, we will not be able to grant you access to the IBX Center.

Where we seek your consent for any processing, you may withdraw your consent at any time by contacting us using the details
set out below (but this will not affect any processing which has already taken place at that time).

If you do not consent or you withdraw your consent to the processing of certain biometric data, Equinix will not be able to provide
you with permanent access for the duration of your authorized access to the IBX Center and you will only be permitted to access
the IBX Center as an escorted visitor. If you do not consent or you withdraw your consent to the processing of your photograph,
you will have to show your valid government photo ID to the IBX Security Guard each time you enter the IBX Center.

Other than where we ask for your consent hereunder, the processing of Personal Data, for the purposes set out within this
document, is done pursuant to our legitimate interest to ensure that our IBX Centers have an adequate level of data security and
in particular, to ensure that sufficient technical and organizational measures for secure access control are in place.

We inform you that, except for CCTV images and biometric templates stored on smart cards, which will only be processed in the
country in which such data is collected, your Personal Data will (subject to applicable laws and regulations (including regulatory
requirements)) be shared with Equinix’s affiliated companies, including Equinix Inc., which is headquartered in the United States.
The transfer of such Personal Data to the United States is necessary due to the fact that our customer services management
systems are set up as global systems to optimise customer service management efficiency and performance.

In this respect, we have in place appropriate legitimization measures to ensure the validity of such data transfers, as required
under applicable data protection and privacy laws; such as, the entry into inter-company data transfer agreements based on the
European Union (EU) Standard Contractual Clauses and/or the Binding Corporate Rules (BCRs) and to ensure that all Equinix
affiliated companies provide an adequate level of protection of the Personal Data they process.

Additionally, Equinix employs technical, organizational and administrative mechanisms to help ensure that your Personal Data is
stored in a secure and safe manner and used and processed fairly, in compliance with applicable data protection and privacy
requirements. Access to your Personal Data is strictly limited on a need-to-know basis. The Personal Data is only accessible by our
security staff (which may be outsourced to third party suppliers, with whom Equinix engages on the basis that such suppliers
comply with applicable data protection and privacy requirements); our IT support staff which maintains our IT systems; our
managers or other employees with duties requiring access to this data; our Privacy Office and compliance officers to the extent
necessary to perform their duties; our auditors in the course of the performance of their duties; and to the company you represent,
solely where there has been a potential security breach at one of our IBX Centers and where Equinix is required to provide access
pursuant to the terms of a contract. We also have strict measures in place to prevent unauthorized access to your Personal Data
and we do not, and will never, sell your Personal Data.

Finally, depending on the applicable jurisdiction, you may have the right to: (1) access your Personal Data that Equinix collects
about you; (2) correct or supplement your Personal Data where changes to such Personal Data have occurred or where your
Personal Data is otherwise incorrect; (3) request a copy of your Personal Data that Equinix collects about you; (4) request deletion
of your Personal Data; and (5) restrict or object to the processing of your Personal Data. To do this, please send your request to
the Equinix Privacy Office at PrivacyOffice@equinix.com. If you are a California resident and want to make a request, please call
+(1) 866-977-3749. For more information, you can access our general Equinix Privacy Statement here
https://www.equinix.com/company/legal/privacy/.

In Japan, both our general Equinix Privacy Statement above and our Equinix Policy for Protection of Personal Information applied
in Japan found at http://www.equinix.co.jp/company/legal/privacy/japan/ will apply.

In Korea, both our general Equinix Privacy Statement above and our Equinix Privacy Statement for Korea found at
https://www.equinix.kr/about/legal/privacy/korea will apply.

If you are an xScale customer or contractor, the details of the Equinix legal entity (“Equinix Services”) and our partner (and its
subsidiaries) (“Hyperscale Entities”) that are jointly responsible for the processing of personal data described in the privacy notice
will be set out in your customer or vendor contract. References to "Equinix" in this Privacy Notice should be read as if they were
references to Equinix Services and each Hyperscale Entity, and references to "IBX Center(s)" should be read as if they were
references to xScale data centers. Equinix Services and each Hyperscale Entity is responsible for complying with its respective
obligations under applicable data protection laws, ensuring the lawful transfer of your personal data and for fulfilling any request
you may make in respect of your personal data. We recommend that you direct any request to the Equinix Privacy Office at
PrivacyOffice@equinix.com. However, you may make such request to Equinix Services or to any Hyperscale Entity, regardless of
which entity is processing your personal data.

Please sign below to confirm that you have read, understood and agree to the Privacy Notice.
Confidential rev 2022.1 January 7, 2022
Note that your agreement to this Privacy Notice and Privacy Statement does not constitute a consent to processing under EU or
UK data protection and privacy laws.

-----------------------------------------------------------------------------------------------------------------------------------------------------------
3. Use of biometric data and photograph for an Equinix IBX Access Card:

Please complete and sign below if you agree to: a) Equinix processing relevant biometric data for the purposes of facilitating and
authenticating your entry to the IBX Center (and where biometric smart cards are made available by Equinix, providing you with
a Equinix IBX Access card with your biometric template on it for such purposes) (please note that if your biometric data is not
processed, Equinix will not be able to provide you with permanent access to IBX Centers for the duration of your authorised access
and you will have to access the IBX Center as an escorted visitor); and b) upload your photograph into the Equinix Customer Portal
(ECP) to create your security profile and for your Equinix IBX Access Card (please note that if you decide not to upload your
photograph you will have to show your valid government photo ID to the IBX Security Guard every time you enter the IBX Center).

Please check the boxes and sign below to confirm that you have read, understood and agree to the selected sections.

Note that your agreement to the Privacy Notice and Privacy Statement does not constitute a consent to processing under EU or UK
data protection and privacy laws.

{{[]*}} Confidentiality Undertaking


{{[]*}} Privacy Notice and Privacy Statement regarding the Collection and Processing of Personal Data
{{[]*}} Consent to the use of biometric data and photograph

Signature: {{Sig_es_:signer1:signature}}

Name: Hamed Hosseinnezhd Gavifekr

Confidential rev 2022.1 January 7, 2022

You might also like