Standard Contractual Clauses (SCCs)
List of Parties
MODULE TWO: Transfers controller to processor
Data exporter: Customer (as defined in the Corsearch Master Service Agreement or other negotiated agreement between the parties (the “Agreement”))
Address: The address specified in the Agreement.
Contact person’s name, position and contact details: The contact details specified in the Agreement.
Activities relevant to the data transferred under these Clauses: Corsearch Services provided to Customer in accordance with the Agreement.
Role (controller/processor): Controller
Data importer: Corsearch B.V. and/or any of its Affiliates that may receive data from Customer, as specified in the Agreement.
Address: Naritaweg 116 1034CA Amsterdam The Netherlands
Contact person’s name, position and contact details: Corsearch Privacy Team [email protected]
Activities relevant to the data transferred under these Clauses: Corsearch Services provided to Customer in accordance with the Agreement.
Role (controller/processor): Processor
MODULE FOUR: Transfer processor to controller
Data exporter: Corsearch B.V. and/or any of its Affiliates that may sent data to Customer, as specified in the Agreement.
Address: Naritaweg 116 1034CA Amsterdam The Netherlands
Contact person’s name, position and contact details: Corsearch Privacy Team [email protected]
Activities relevant to the data transferred under these Clauses: Corsearch Services provided to Customer in accordance with the Agreement.
Role (controller/processor): Processor
Data importer: Customer (as defined in the Corsearch Master Service Agreement or other negotiated agreement between the parties (the “Agreement”))
Address: The address specified in the Agreement.
Contact person’s name, position and contact details: The contact details specified in the Agreement.
Activities relevant to the data transferred under these Clauses: Corsearch Services provided to Customer in accordance with the Agreement.
Role (controller/processor): Controller
APPLICABILITY
EU SCCs
If Customer Personal Data is transferred from Customer, located in the EEA to Corsearch, in a non-adequate country, such transfers shall be governed by the Module Two of the EU SCCs, as set forth below.
If Customer Personal Data is transferred from Corsearch, located in the EEA, to Customer, in a non-adequate country, such transfers shall be governed by the Module Four of the EU SCCs, as set forth below.
UK SCCs
If Customer Personal Data is transferred from Customer, located in the UK to Corsearch, in a non-adequate country, such transfers shall be governed by the Module Two of the EU SCCs, as modified by the UK Addendum which is set forth below.
If Customer Personal Data is transferred from Corsearch, located in the UK to Customer, in a non-adequate country, such transfers shall be governed by the Module Four of the EU SCCs, as modified by the UK Addendum which is set forth below.
EU SCCs
MODULE TWO: Transfer controller to processor
Parties hereby incorporate the Module Two of the EU SCCs, which shall be deemed completed as follows:
– Optional Clause 7 shall not be deemed incorporated;
– In Clause 9(a) (Use of Sub-Processors), Parties choose Option 2 ‘General Written Authorization’ with the time period as set forth in the Data Protection Agreement (“DPA”);
– In Clause 11 (Redress) optional wording shall not be deemed incorporated;
– In Clause 17 (Governing Law), Option 1 shall apply, and these EU SCCs shall be governed by Dutch law;
– In Clause 18(b) (Choice of forum and jurisdiction), disputes shall be resolved before the courts of Amsterdam, the Netherlands;
– the Description of Transfer is set forth under the Schedule A Scope of Processing in the DPA; and
– the Technical and Organizational Measures to Ensure the Security of the Data are as set forth in the DPA.
MODULE FOUR: Transfer processor to controller
Parties hereby incorporate the Module Four of the EU SCCs, which shall be deemed completed as follows:
– Optional Clause 7 shall not be deemed incorporated;
– In Clause 11 (Redress) optional wording shall not be deemed incorporated;
– In Clause 17 (Governing Law), these EU SCCs shall be governed by Dutch law;
– In Clause 18(b) (Choice of forum and jurisdiction), disputes shall be resolved before the courts of Amsterdam, the Netherlands; and
– the Description of Transfer is set forth under the Schedule A Scope of Processing in the DPA.
UK SCCs
MODULE TWO: Transfer controller to processor
Parties hereby incorporate the Module Two of the EU SCCs which shall be modified in line with the UK GDPR as follows:
– Table 1 shall be completed as set forth in the DPA and the Agreement.
– Table 2: The selection shall be “the Approved EU SCC, including the Appendix Information and with only the following modules, clauses or optional provisions of the Approved EU SCC brought into effect for the purposes of this Addendum” and the table shall be completed as follows:
i. Module in operation is two.
ii. Clause 7 (Docking Clause) shall not apply.
iii. Clause 11 (Option) shall not apply.
iiii. Clause 9a (Prior Authorization or General Authorization) shall be General Authorization, with the time period as set forth in the DPA.
– Table 3 shall be completed as follows:
i. Annex I.A: The parties as set forth in the Agreement
ii. Annex I.B: As set forth under Schedule A Scope of Processing in the DPA
iii. Annex II: As set forth in the DPA
iiii. Annex III: As set forth in the DPA
– Table 4: The selection shall be either party.
MODULE FOUR: Transfer processor to controller
Parties hereby incorporate the Module Four of the EU SCCs which shall be modified in line with the UK GDPR as follows:
– Table 1 shall be completed as set forth in the DPA and the Agreement.
– Table 2: The selection shall be “the Approved EU SCC, including the Appendix Information and with only the following modules, clauses or optional provisions of the Approved EU SCC brought into effect for the purposes of this Addendum” and the table shall be completed as follows:
i. Module in operation is four.
ii. Clause 7 (Docking Clause) shall not apply.
iii. Clause 11 (Option) shall not apply.
iiii. The question, “Is personal data received from the Importer combined with personal data collected by the Exporter” shall be “no,” unless otherwise specified in the DPA.
– Table 3 shall be completed as follows:
i. Annex I.A: The parties as set forth in the Agreement
ii. Annex I.B: As set forth under Schedule A Scope of Processing in the DPA
iii. Annex II: As set forth in the DPA
iiii. Annex III: As set forth in the DPA
– Table 4: The selection shall be either party.