Common use of Personal Data Transfers Clause in Contracts

Personal Data Transfers. 6.1 Oracle may access and Process Personal Information on a global basis as necessary to perform the Services, including for IT security purposes, maintenance and performance of the Services and related infrastructure, Services technical support and Service change management. 6.2 To the extent such global access involves a transfer of Personal Information subject to any data transfer restrictions under Applicable European Data Protection Law, such transfer shall be subject to the Oracle Processor Code (Binding Corporate Rules for Processors). The most current version of the Oracle Processor Code is available on ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/corporate/contracts/cloud-services/contracts.html#data-processing, and is incorporated by reference into the Services Agreement and this Data Processing Agreement. Oracle has obtained EEA authorization for its Processor Code and will maintain such authorization for the duration of the Services Agreement. 6.3 To the extent such global access involves a transfer of Personal Information subject to any transfer restrictions under Applicable UK Data Protection Law, to countries outside the United Kingdom not covered by an Adequacy Decision by the UK ICO, such transfers are subject to (i) the terms of Module 2 (Controller to Processor) of the EU Standard Contractual Clauses 2021/914 of 4 June 2021 as supplemented by the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses version B1.0 (the “IDTA”), which are incorporated herein by reference; and (ii) when approved by the UK ICO, the approved UK Binding Corporate Rules for Processors, in the form that will be approved by the UK ICO for use in the UK and will be published on Oracle’s public websites. The IDTA will be read in conjunction with the Services Agreement and the Data Processing Agreement. 6.4 To the extent such global access involves a transfer of Personal Information subject to cross-border transfer restrictions under Applicable Data Protection Law, such transfers shall be subject to the terms of the Oracle Intra-Company Data Transfer and Mandate Agreement.