Common use of International Processing Clause in Contracts

International Processing. 8.1. Conditions for International Processing SAP shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses (2010), then: a) SAP and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE and the Subprocessor as an independent owner of rights and obligations; or c) other Controllers whose use of the Cloud Services has been authorized by Customer under the Agreement may also enter into Standard Contractual Clauses (2010) with SAP or the relevant Subprocessors in the same manner as Customer in accordance with Section 8.2.1 a) and b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. 8.1. Conditions for International Processing SAP shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, Where for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into the Standard Contractual Clauses (2010), then: a) if applicable, SAP and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE and the Subprocessor as an independent owner of rights and obligations; or c) other Controllers whose use of the Cloud SAP Services has have been authorized by Customer under the applicable Agreement may also enter into Standard Contractual Clauses (2010) with SAP or the relevant Subprocessors in the same manner as Customer in accordance with Section Sections 8.2.1 (a) and (b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. 8.1. Conditions for International Processing SAP shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, Where for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses (2010), then: a) SAP and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE and the Subprocessor as an independent owner of rights and obligations; or c) other Other Controllers whose use of the Cloud Services has who have been authorized by Customer to include Personal Data under the Agreement may also enter into Standard Contractual Clauses (2010) with SAP or and/or the relevant Subprocessors in the same manner as Customer in accordance with Section Sections 8.2.1 a) and b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. 8.1. Conditions for International Processing SAP shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, Where for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses (2010), then: a) SAP and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE and the Subprocessor as an independent owner of rights and obligations; or c) other Other Controllers whose use of the Cloud Services has who have been authorized by Customer to include Personal Data under the Agreement may also enter into Standard Contractual Clauses (2010) with SAP or and/or the relevant Subprocessors in the same manner as Customer in accordance with Section Sections 8.2.1 (a) and (b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. 8.1. Conditions for International Processing SAP shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, Where for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into the Standard Contractual Clauses (2010), then: a) if applicable, SAP and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE and the Subprocessor as an independent owner of rights and obligations; or c) other Controllers whose use of the Cloud SAP Services has have been authorized by Customer under the applicable Agreement may also enter into Standard Contractual Clauses (2010) with SAP or the relevant Subprocessors in the same manner as Customer in accordance with Section Sections 8.2.1 a) and (b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. 8.1. Conditions for International Processing SAP NS2 shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses (2010), then: a) SAP and Customer enter into the Standard Contractual Clauses (2010);2010);‌ b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE and the Subprocessor as an independent owner of rights and obligations; or c) other Controllers whose use of the Cloud Services has been authorized by Customer under the Agreement may also enter into Standard Contractual Clauses (2010) with SAP or the relevant Subprocessors in the same manner as Customer in accordance with Section 8.2.1 a) and b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. ‌ 8.1. Conditions for International Processing SAP RELISH shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses (2010), then: a) SAP RELISH and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE RELISH and the Subprocessor as an independent owner of rights and obligations; or c) other Controllers whose use of the Cloud Services has been authorized by Customer under the Agreement may also enter into Standard Contractual Clauses (2010) with SAP RELISH or the relevant Subprocessors in the same manner as Customer in accordance with Section 8.2.1 a) and b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.

International Processing. 8.1. Conditions for International Processing SAP RELISH shall be entitled to process Personal Data, including by using Subprocessors, in accordance with this DPA outside the country in which the Customer is located as permitted under Data Protection Law. . 8.2. Applicability of the Standard Contractual Clauses (2010) 8.2.1. Where, for the period up to and including 26 September 2021, Personal Data of a Controller that is subject to GDPR is processed in a Third Country, or where Personal Data of a Swiss or United Kingdom based Controller or another Controller is processed in a Third Country and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses (2010), then: a) SAP RELISH and Customer enter into the Standard Contractual Clauses (2010); b) Customer joins the Standard Contractual Clauses (2010) entered into by SAP or SAP SE RELISH and the Subprocessor as an independent owner of rights and obligations; or c) other Controllers whose use of the Cloud Services has been authorized by Customer under the Agreement may also enter into Standard Contractual Clauses (2010) with SAP RELISH or the relevant Subprocessors in the same manner as Customer in accordance with Section 8.2.1 a) and b) above. In such case, Customer will enter into the Standard Contractual Clauses (2010) on behalf of the other Controllers. 8.2.2. The Standard Contractual Clauses (2010) shall be governed by the law of the country in which the relevant Controller is established. 8.2.3. Where applicable Data Protection Law adopts the New Standard Contractual Clauses as meeting any required adequacy means as an alternative or update to the Standard Contractual Clauses (2010) then the New Standard Contractual Clauses shall apply in accordance with Section 8.3.