The use of Standard Contractual Clauses is the named legal mechanism Palantir relies on to legitimise international personal data transfers from the EEA and UK, providing a defined level of contractual protection.
We will use contractual clauses, such as the Standard Contractual Clauses approved by the European Commission and other Regulatory Bodies where applicable.
Stash
· Stash Terms of Use
Users' Subscription Data is shared with unspecified third parties, and users must permit this as a condition of use, with sharing limited to verification and account-charging purposes.
This establishes a categorical prohibition on the sale of customer information, which is a significant data protection commitment.
we may share the following categories of Personal Data with entities who are considered "third parties" as defined under State Privacy Laws...for purposes of "targeted advertising," which may constitute a "sale" of Personal Data...
Steam
· Steam Privacy Policy
The claim establishes that Steam User Account data is publicly accessible to anyone with a Steam ID query, not limited to authenticated partners or specific parties.
Billing data for paying and developer-tier users is shared with a third-party sub-processor in the United States, while free-tier and government users are not covered by this arrangement.
Canva
· Canva Privacy Policy
We will share student data with our third party service providers who have security, privacy, and data retention policies consistent with our policies and solely to the extent necessary for them to perform a business or technology support function for …
Chegg
· Chegg Privacy Policy
Where you are using our services in your capacity as a student, employee, or other third party through an employer or educational institution, we may share your personal data...with your educational institution, employer, or the third party paying for the …
Enrollment constitutes affirmative consent to personal data sharing with individual Teachers, meaning a user's personal data leaves Skillshare's direct control upon each class enrollment.
Pinecone
· Pinecone Data Processing Addendum
Pinecone shall enter into a written agreement with its Subprocessors which includes data protection and security measures no less protective than the measures set forth in this DPA.
When engaging any Subprocessor, Google will: (a) ensure via a written contract that the Subprocessor only accesses and uses Customer Personal Data to the extent required to perform the obligations subcontracted to it
ADP
· ADP Privacy Statement
The Subprocessor Contract shall impose similar data protection-related Processing terms on the Third Party Subprocessor that will be not less protective than those imposed on the ADP Contracting Entity by the Service Agreement...
Unity
· Unity Privacy Policy
Incorporation by reference means the list of sub-processors is contractually part of the DPA, making Unity's use of those third parties a binding element of the data processing agreement.
Baseten will ensure that each Sub-Processor shall be bound by a written agreement that includes terms which offer at least a level of protection for Customer Personal Data substantially similar to those set out in this DPA...
Zoom
· Zoom Sub-Processors
By flowing down equivalent DPA obligations to subprocessors, Zoom extends its own data protection commitments through the subprocessing chain, rather than allowing a lower standard at the subprocessor level.
When engaging any Subprocessor, Google will ensure via a written contract that if the processing of Customer Personal Data is subject to European Data Protection Legislation, the data protection obligations in these Data Processing Terms (as referred to in Article …
Subscribing to a Creator's publication on Substack results in the Creator receiving the subscriber's name and email address, transferring personal data to a third party outside Substack's direct control.
Twilio
· Twilio Privacy Notice
Where required by local law, we share Subscriber Records with local carriers or authorities solely to provide connectivity, maintaining the highest confidentiality for these records.
Meta
· Meta Platform Policy
In the event the Service Provider engages another Service Provider (“Sub-Service Provider”) in order to provide the services requested, ensure the Service Provider requires the Sub-Service Provider in writing to comply with the above requirements.
Zoom
· Zoom Sub-Processors
Suki may process the following data if the AI Clinical Notes feature is enabled: Customer Content and context
Suno
· Suno Terms of Service
Suno may preserve Content and your Voice Model and may also disclose Content and your Voice Model if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) …
The clause establishes a categorical prohibition on two specific forms of commercial transfer of personal information to third parties.
if Synthesia undertakes or is involved in any merger, acquisition, reorganisation, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer, or share some or all of our assets, including your personal data...
We will not be responsible for any use, disclosure, modification or deletion of Customer Data that is transmitted to, or accessed by, a Non-Synthesia Product.
where we are under an obligation to disclose personal data such as, for example, if we receive a valid legal request for certain personal data (such as a search warrant), we will access, preserve and/or share your personal data...
we will share your information if and to the extent we are required or permitted to do so by law or where disclosure is reasonably necessary to (i) comply with applicable law; (ii) comply with a valid legal request...
In order to effectively verify the authenticity of submissions, we may use a third-party verification systems or vendors, including but not limited to Amazon Web Services EMEA SARL.
The clause establishes that Tabnine does not engage in the sale of Personal Information, which is relevant to privacy rights under laws such as the California Consumer Privacy Act.
We do not share sensitive Personal Information for cross-context behavioral advertising and we do not sell sensitive Personal Information.