Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council (notified under document C(2010) 593) (Text with EEA relevance) (2010/87/EU)

  1. Introductory Text

  2. Article 1.The standard contractual clauses set out in the Annex are...

  3. Article 2.This Decision concerns only the adequacy of protection provided by...

  4. Article 3.For the purposes of this Decision the following definitions shall...

  5. Article 4.(1) Without prejudice to their powers to take action to...

  6. Article 5.The Commission shall evaluate the operation of this Decision on...

  7. Article 6.This Decision shall apply from 15 May 2010.

  8. Article 7.(1) Decision 2002/16/EC is repealed with effect from 15 May...

  9. Article 8.This Decision is addressed to the Member States.

  10. Signature

    1. ANNEX

      STANDARD CONTRACTUAL CLAUSES (PROCESSORS)

      1. For the purposes of Article 26(2) of Directive 95/46/EC for...

      2. Name of the data exporting organisation: …

      3. Address: …

      4. Tel. …; fax …; e-mail: …

      5. Other information needed to identify the organisation

      6. …

      7. (the data exporter)

      8. And

      9. Name of the data importing organisation: …

      10. Address: …

      11. Tel. …; fax …; e-mail: …

      12. Other information needed to identify the organisation:

      13. …

      14. (the data importer)

      15. each a ‘party’; together ‘the parties’,

      16. HAVE AGREED on the following Contractual Clauses (the Clauses) in...

      17. Clause 1 Definitions

      18. Clause 2 Details of the transfer

      19. Clause 3 Third-party beneficiary clause

        1. 1. The data subject can enforce against the data exporter this...

        2. 2. The data subject can enforce against the data importer this...

        3. 3. The data subject can enforce against the sub-processor this Clause,...

        4. 4. The parties do not object to a data subject being...

      20. Clause 4 Obligations of the data exporter

      21. Clause 5 Obligations of the data importer

      22. Clause 6 Liability

        1. 1. The parties agree that any data subject, who has suffered...

        2. 2. If a data subject is not able to bring a...

        3. 3. If a data subject is not able to bring a...

      23. Clause 7 Mediation and jurisdiction

        1. 1. The data importer agrees that if the data subject invokes...

        2. 2. The parties agree that the choice made by the data...

      24. Clause 8 Cooperation with supervisory authorities

        1. 1. The data exporter agrees to deposit a copy of this...

        2. 2. The parties agree that the supervisory authority has the right...

        3. 3. The data importer shall promptly inform the data exporter about...

      25. Clause 9 Governing law

      26. Clause 10 Variation of the contract

      27. Clause 11 Sub-processing

        1. 1. The data importer shall not subcontract any of its processing...

        2. 2. The prior written contract between the data importer and the...

        3. 3. The provisions relating to data protection aspects for sub-processing of...

        4. 4. The data exporter shall keep a list of sub-processing agreements...

      28. Clause 12 Obligation after the termination of personal data-processing services

        1. 1. The parties agree that on the termination of the provision...

        2. 2. The data importer and the sub-processor warrant that upon request...

      29. Appendix 1

        to the Standard Contractual Clauses

        1. This Appendix forms part of the Clauses and must be...

        2. The Member States may complete or specify, according to their...

        3. Data exporter

        4. Data importer

        5. Data subjects

        6. Categories of data

        7. Special categories of data (if appropriate)

        8. Processing operations

        9. DATA EXPORTER Name: … Authorised Signature … DATA IMPORTER Name:...

      30. Appendix 2

        to the Standard Contractual Clauses

        1. This Appendix forms part of the Clauses and must be...

        2. Description of the technical and organisational security measures implemented by...

        3. …

        4. …

        5. …

        6. …

        7. ILLUSTRATIVE INDEMNIFICATION CLAUSE (OPTIONAL) Liability