Common use of Transfer of the Personal Data Clause in Contracts

Transfer of the Personal Data. 11. 1 IDEXX may transfer and store Personal Data to and in its locations in the United States. IDEXX certifies to and complies with the EU-US Privacy Shield and the transfer of Personal Data to IDEXX’s locations in the United States falls within the scope of such certification. 11. 2 If IDEXX intends to transfer the Personal Data to a Non-EEA Entity, IDEXX shall inform Customer of such intention. IDEXX hereby informs Customer of such intention to the extent that the subcontractors referenced in Article 7 of this Data Protection Agreement are Non-EEA Entities. 11. 3 The transfer to a Non-EEA Entity may be legitimized based upon the EU-US Privacy Shield, where it concerns a transfer to a US entity that is self-certified to the EU-US Privacy Shield, and the transfer falls within the scope of such certification. 11. 4 As the case may be, the transfer to a Non-EEA Entity may instead also be legitimized based upon the unchanged EU-recommended controller-to-processor Standard Contractual Clauses. These Standard Contractual Clauses without optional clauses shall be deemed incorporated by reference herein and apply between Customer and the Non-EEA Entity, if and to the extent Personal Data to which the data protection laws of a member state of the EEA applies are transferred from the EEA to a Non-EEA Entity. The applicable Standard Contractual Clauses incorporated herein in accordance with this article, is agreed in the name and on behalf of the Non-EEA Entity by IDEXX acting as the Non-EEA Entity's attorney. 11. 5 Nothing in (the body of) the Agreement or this Data Protection Agreement shall be construed to prevail over any conflicting clause of the Standard Contractual Clauses. Customer acknowledges it has had the opportunity to review the Standard Contractual Clauses or to request a full copy from IDEXX. IDEXX shall provide all reasonable assistance to facilitate that Customer is able to comply with its obligations as data controller if a Data Subject exercises any of its rights under the applicable law.

Transfer of the Personal Data. 11. 1 IDEXX may transfer and store Personal Data to and in its locations in the United States. IDEXX certifies to and complies with the EU-US Privacy Shield and the transfer of Personal Data to IDEXX’s locations in the United States falls within the scope of such certification. 11. 2 If IDEXX intends to transfer the Personal Data to a Non-EEA Entity, IDEXX shall inform Customer of such intention. IDEXX hereby informs Customer of such intention to the extent that the subcontractors referenced in Article 7 of this Data Protection Agreement are Non-EEA Entities. 11. 3 2 The transfer to a Non-EEA Entity may be legitimized based upon the EU-US Privacy Shield or Swiss-US Privacy Shield, where it concerns a transfer to a US entity that is self-certified to the EU-US Privacy Shield or Swiss- US Privacy Shield, and the transfer falls within the scope of such certification. 11. 4 3 As the case may be, the transfer to a Non-EEA Entity may instead also be legitimized based upon the unchanged EU-EU- recommended controller-to-processor Standard Contractual Clauses. These Standard Contractual Clauses without optional clauses shall be deemed incorporated by reference herein and apply between Customer and the Non-EEA Entity, if and to the extent Personal Data to which the data protection laws of a member state of the EEA applies are transferred from the EEA to a Non-EEA Entity. The applicable Standard Contractual Clauses incorporated herein in accordance with this article, is agreed in the name and on behalf of the Non-EEA Entity by IDEXX acting as the Non-EEA Entity's attorney. 11. 5 4 Nothing in (the body of) the Agreement or this Data Protection Agreement shall be construed to prevail over any conflicting clause of the Standard Contractual Clauses. Customer acknowledges it has had the opportunity to review the Standard Contractual Clauses or to request a full copy from IDEXX. IDEXX shall provide all reasonable assistance to facilitate that Customer is able to comply with its obligations as data controller if a Data Subject exercises any of its rights under the applicable law.

Transfer of the Personal Data. 111 1 . 1 IDEXX may transfer and store Personal Data to and in its locations in the United States. IDEXX certifies to and complies with the EU-US Privacy Shield and the transfer of Personal Data to IDEXX’s locations in the United States falls within the scope of such certification. 111 1 . 2 If IDEXX intends to transfer the Personal Data to a Non-EEA Entity, IDEXX shall inform Customer of such intention. IDEXX hereby informs Customer of such intention to the extent that the subcontractors referenced in Article 7 of this Data Protection Agreement are Non-EEA Entities. 111 1 . 3 The transfer to a Non-EEA Entity may be legitimized based upon the EU-US Privacy Shield, where it concerns a transfer to a US entity that is self-certified to the EU-US Privacy Shield, and the transfer falls within the scope of such certification. 111 1 . 4 As the case may be, the transfer to a Non-EEA Entity may instead also be legitimized based upon the unchanged EU-recommended controller-to-processor Standard Contractual Clauses. These Standard Contractual Clauses without optional clauses shall be deemed incorporated by reference herein and apply between Customer and the Non-EEA Entity, if and to the extent Personal Data to which the data protection laws of a member state of the EEA applies are transferred from the EEA to a Non-EEA Entity. The applicable Standard Contractual Clauses incorporated herein in accordance with this article, is agreed in the name and on behalf of the Non-EEA Entity by IDEXX acting as the Non-EEA Entity's attorney. 111 1 . 5 Nothing in (the body of) the Agreement or this Data Protection Agreement shall be construed to prevail over any conflicting clause of the Standard Contractual Clauses. Customer acknowledges it has had the opportunity to review the Standard Contractual Clauses or to request a full copy from IDEXX. IDEXX shall provide all reasonable assistance to facilitate that Customer is able to comply with its obligations as data controller if a Data Subject exercises any of its rights under the applicable law.