Common use of Transfer mechanisms for data transfers Clause in Contracts

Transfer mechanisms for data transfers. Subject to the additional terms in Schedule 1, SafePaaS makes available the transfer mechanisms listed below which shall apply, in the order of precedence as set out in Section 11.4, to any transfers of Personal Data under this DPA from the European Union, the European Economic Area and/or their member states, Switzerland and the United Kingdom to countries which do not ensure an adequate level of data protection within the meaning of Data Protection Laws and Regulations of the foregoing territories, to the extent such transfers are subject to such Data Protection 1. The SafePaaS Processor Binding Corporate Rules apply to the Services listed in Schedule 2 to this DPA (the“BCR Services”), subject to the additional terms in Section 1 of Schedule 1; 2. SafePaaS’s EU-U.S. and Swiss-U.S. Privacy Shield Framework self-certifications apply to the Services listed in Schedule 3 to this DPA (the “EU-US and Swiss-US Privacy Shield Services”), subject to the additional terms in Section 2 of Schedule 1; 3. The Standard Contractual Clauses set forth in Schedule 5 to this DPA apply to the Services listed in Appendix 3 to the Standard Contractual Clauses (the “SCC Services”), subject to the additional terms in Section 3 of Schedule 1.

Transfer mechanisms for data transfers. Subject to the additional terms in Schedule 1, SafePaaS Salesforce makes available the transfer mechanisms listed below which shall apply, in the order of precedence as set out in Section 11.4, to any transfers of Personal Data under this DPA from the European Union, the European Economic Area and/or their member states, Switzerland and the United Kingdom to countries which do not ensure an adequate level of data protection within the meaning of Data Protection Laws and Regulations of the foregoing territories, to the extent such transfers are subject to such Data ProtectionProtection Laws and Regulations: 1. The SafePaaS Salesforce Processor Binding Corporate Rules apply to the Services listed in Schedule 2 to this DPA (the“BCR the “BCR Services”), subject to the additional terms in Section 1 of Schedule 1; 2. SafePaaSSalesforce’s EU-U.S. and Swiss-U.S. Privacy Shield Framework self-certifications apply to the Services listed in Schedule 3 to this DPA (the “EU-US and Swiss-US Privacy Shield Services”), subject to the additional terms in Section 2 of Schedule 1; 3. The Standard Contractual Clauses set forth in Schedule 5 to this DPA apply to the Services listed in Appendix 3 to the Standard Contractual Clauses (the “SCC Services”), subject to the additional terms in Section 3 of Schedule 1.

Transfer mechanisms for data transfers. Subject to the additional terms in Schedule 1, SafePaaS TRUSTOPIA makes available the transfer mechanisms listed below which shall apply, in the order of precedence as set out in Section 11.4, to any transfers of Personal Data under this DPA from the European Union, the European Economic Area and/or their member states, Switzerland and the United Kingdom to countries which do not ensure an adequate level of data protection within the meaning of Data Protection Laws and Regulations of the foregoing territories, to the extent such transfers are subject to such Data ProtectionProtection Laws and Regulations: 1. The SafePaaS TRUSTOPIA Processor Binding Corporate Rules apply to the Services listed in any Schedule 2 to this DPA (the“BCR the “BCR Services”), subject to the additional terms in Section 1 of Schedule 1; 2. SafePaaSTRUSTOPIA’s EU-U.S. and Swiss-U.S. Privacy Shield Framework self-self- certifications apply to the Services listed in Schedule 3 to this DPA (the “EU-US and Swiss-US Privacy Shield Services”), subject to the additional terms in Section 2 of Schedule 1; 3. The Standard Contractual Clauses set forth in Schedule 5 to this DPA apply to the Services listed in Appendix 3 to the Standard Contractual Clauses (the “SCC TRUSTOPIA Services”), subject to the additional terms in Section 3 of Schedule 1.

Transfer mechanisms for data transfers. Subject to the additional terms in Schedule 1, SafePaaS Salesforce makes available the transfer mechanisms listed below which shall apply, in the order of precedence as set out in Section 11.4, to any transfers of Personal Data under this DPA from the European Union, the European Economic Area and/or their member states, Switzerland and the United Kingdom to countries which do not ensure an adequate level of data protection within the meaning of Data Protection Laws and Regulations of the foregoing territories, to the extent such transfers are subject to such Data ProtectionProtection Laws and Regulations: 1. The SafePaaS Salesforce Processor Binding Corporate Rules apply to the Services listed in Schedule 2 to this DPA (the“BCR the “BCR Services”), subject to the additional terms in Section 1 of Schedule 1; 2. SafePaaSSFDC’s EU-U.S. and Swiss-U.S. Privacy Shield Framework self-certifications apply to the Services listed in Schedule 3 to this DPA (the “EU-US and Swiss-US Privacy Shield Services”), subject to the additional terms in Section 2 of Schedule 1; 3. The Standard Contractual Clauses set forth in Schedule 5 to this DPA apply to the Services listed in Appendix 3 to the Standard Contractual Clauses (the “SCC Services”), subject to the additional terms in Section 3 of Schedule 1.