Transfer of personal data Mallilausekkeet

Transfer of personal data. The Data Processor will only transfer Personal Data out of the territory of the member states of the European Union, the European Economic Area, or other countries which the European Commission has found to guarantee an adequate level of data protection (collectively, the “Approved Jurisdictions”) with the Data Controller’s prior written consent or that the Customer has explicitly approved. The data from outside of EU may be transferred to EU, processed and may be transferred back to any country / area. If required by applicable legislation, the Data Processor shall enter into relevant contractual arrangements with required parties (including with the Data Controller itself or any of the Data Controller’s Affiliates) for the lawful transfer of Personal Data from the Approved Jurisdiction to third countries. Such contractual arrangements shall be carried out in accordance with the standard data protection clauses adopted or approved by the European Commission (“Standard Contractual Clauses”). As an alternative to entering into the Standard Contractual Clauses, the Data Processor may rely upon an alternative transfer safeguard permitting and providing for the lawful transfer of Personal Data outside of the Approved Jurisdictions, provided that such safeguard is in compliance with applicable legislation. In case of conflict between the Standard Contractual Clauses or any other alternative transfer safeguard permitting the lawful transfer of Personal Data outside the Approved Jurisdictions and the DPA, the Standard Contractual Clauses or such alternative framework shall always take precedence over the Service Agreement and this DPA.