Common use of Cross-Border Data Transfers Clause in Contracts

Cross-Border Data Transfers. 9.1 Transfers from the EEA, Switzerland and the United Kingdom to countries that offer an adequate level of data protection. Personal Data may be transferred from EU Member States and Norway, Iceland and Liechtenstein (collectively, “EEA”), Switzerland and the United Kingdom (“UK”) to countries that offer an adequate level of data protection under or pursuant to the adequacy decisions published by the relevant authorities of the EEA, Switzerland, and/or the UK as relevant (“Adequacy Decisions”), as applicable, without any further safeguard being necessary. 9.2 Transfers from the EEA, Switzerland and the United Kingdom to other countries. If the Processing of Personal Data by Processor includes a transfer (either directly or via onward transfer): (i) from the EEA to other countries which have not been subject to a relevant Adequacy Decision, and such transfers are not performed through an alternative compliance mechanism recognized by Data Protection Laws (as may be adopted by Processor in its own discretion) (“EEA Transfer”), the terms set forth in the EU SCCs shall apply; (ii) from the UK to other countries which have not been subject to a relevant Adequacy Decision, and such transfers are not performed through an alternative compliance mechanism recognized by Data Protection Laws (as may be adopted by Processor in its own discretion) (“UK Transfer”), the terms set forth in the UK Addendum shall apply; (iii) from Switzerland to other countries which have not been subject to a relevant Adequacy Decision, and such transfers are not performed through an alternative compliance mechanism recognized by Data Protection Laws (as may be adopted by Processor in its own discretion) (“Switzerland Transfer”), the terms set forth in the Switzerland Addendum shall apply; (iv) the terms set forth in Annex V of the EU SCCs (Additional Safeguards) shall apply to any EEA Transfer, UK Transfer and Switzerland Transfer, where the Standard Contractual Clauses apply.

Cross-Border Data Transfers. 9.1 9.1. Transfers from the EEA, Switzerland and the United Kingdom to countries that offer an adequate level of data protection. Personal Data may be transferred from EU Member States and Norway, Iceland and Liechtenstein (collectively, “EEA”), Switzerland and the United Kingdom (“UK”) to countries that offer an adequate level of data protection under or pursuant to the adequacy decisions published by the relevant authorities of the EEA, Switzerland, and/or the UK as relevant relevant, including similarly approved mechanisms and frameworks (“Adequacy Decisions”), as applicable, without any further safeguard being necessary. For the avoidance of doubt, “Adequacy Decisions” include the European Commission’s adequacy decision of 10 July 2023, establishing the EU-US Data Privacy Framework. 9.2 9.2. Direct Transfers from the EEA, Switzerland Switzerland, and the United Kingdom to other countries. If the Processing of Personal Data by Processor includes a direct transfer (either directly or via onward transfer):from Customer to ▇▇▇▇▇▇.▇▇▇: (i) from the EEA to other countries which have not been subject to a relevant Adequacy Decision, and such transfers are not performed through an alternative compliance mechanism recognized by Data Protection Laws (as may be adopted by Processor in its own discretion) (“EEA Transfer”), the terms set forth in the EU SCCs shall apply; (ii) from the UK to other countries which have not been subject to a relevant Adequacy Decision, and such transfers are not performed through an alternative compliance mechanism recognized by Data Protection Laws (as may be adopted by Processor in its own discretion) (“UK Transfer”), the terms set forth in the UK Addendum shall apply; (iii) from Switzerland to other countries which have not been subject to a relevant Adequacy Decision, and such transfers are not performed through an alternative compliance mechanism recognized by Data Protection Laws (as may be adopted by Processor in its own discretion) (“Switzerland Transfer”), the terms set forth in the Switzerland Addendum shall apply; (iv) the terms set forth in Annex V of the EU SCCs (Additional Safeguards) shall apply to any EEA Transfer, UK Transfer and Switzerland Transfer, where the Standard Contractual Clauses apply. 9.3. Onward Transfers from the EEA, Switzerland, and the United Kingdom to other countries. Where Processor onward transfers Personal Data from countries in the EEA, UK and Switzerland to authorized Sub-processors, including Processor Affiliates, in countries which are not subject to an Adequacy Decision (respectively, the Standard Contractual Clauses (Module 3) set out in the Annex of Commission Implementing Decision (EU) 2021/914 of 4 June 2021, and any applicable annexes thereto (“SCCs”)), the IDTA and/or the SCCs, as adjusted pursuant to the Swiss Federal Data Protection and Information Commissioner’s guidance of 27 August 2021 as between Processor and its respective Sub- processors and Subsidiaries, shall apply.