Unity
· Unity Privacy Policy
International data transfers carry risk because data protection laws in destination countries, particularly the US, may offer weaker protections than GDPR; standard contractual clauses help but require Unity to conduct transfer impact assessments to verify they are effective in practice.
This provision establishes the legal transfer mechanism for cross-border data flows from the EU/EEA, which is a requirement under GDPR Chapter V. Enterprise customers should confirm that executed SCCs are in place and reflect the current 2021 EU Commission SCC templates.
Zoom
· Zoom Privacy Statement
This provision governs how EU, UK, and Swiss users' personal data is legally protected when transferred to Zoom's servers or operations outside those regions. Standard Contractual Clauses are a standard but operationally significant mechanism that requires Zoom to provide contractual data protection commitments.
Notion
· Notion Privacy Policy
The provision establishes the legal framework under which Notion processes personal data across jurisdictions with differing data protection standards. Standard Contractual Clauses create contractual obligations between data exporters and importers to maintain equivalent protection during international transfers.
DeepL
· DeepL Privacy Policy
Data transfers outside the EEA carry privacy risks if the receiving country has weaker legal protections or government access to data; the adequacy of SCCs as a transfer mechanism has been the subject of significant EU regulatory scrutiny following the Schrems II ruling.
The clause operationalizes compliance with EU data protection requirements that restrict international data transfers to jurisdictions with adequate privacy safeguards. By specifying reliance on SCCs, the provision documents the legal basis under which the entity transfers personal data across borders.
Microsoft
· Microsoft Privacy Statement (Legacy)
The Standard Contractual Clauses establish contractual safeguards that enable lawful international data transfers while maintaining compliance with EEA data protection requirements, particularly following regulatory changes to adequacy determinations for certain destination countries.
Roblox
· Roblox Privacy and Cookie Policy
The clause establishes the legal mechanism by which Roblox operationalizes cross-border data flows for non-U.S. users. Standard Contractual Clauses create contractual obligations between data exporters and importers to maintain protection standards equivalent to EU law, addressing jurisdictional gaps in data protection adequacy determinations.
GitHub
· GitHub Privacy Statement
The provision establishes the operational framework through which GitHub processes personal data across international borders, designating SCCs as the contractual safeguards that govern the lawfulness of cross-border data flows from regulated jurisdictions to less restrictive data protection environments.
The provision operationalizes Anthropic's compliance framework for cross-border data transfers by specifying the legal instruments (adequacy determinations and SCCs) that establish contractual protections and regulatory validity for data moving outside the EEA/UK jurisdiction.
Slack
· Slack Privacy Policy
For EU, UK, and Swiss users, these transfer mechanisms are what legally permits your data to flow to Slack's U.S.-based infrastructure, and their validity is subject to ongoing legal developments at the EU and national level.
Stripe
· Stripe Privacy Policy
The operational significance is that liability and compliance obligations are allocated to different Stripe entities depending on jurisdiction, creating jurisdiction-specific contractual relationships. This structure affects which entity bears legal responsibility for data handling and personal data rights exercise.
The adequacy of international transfer mechanisms is a live regulatory issue; if Zendesk's reliance on the Data Privacy Framework or SCCs is found insufficient, EU and UK users' data could be transferred in ways that regulators consider unlawful, though the DPF is currently an operative adequacy mechanism.
Slack
· Slack Privacy Policy
The provision documents Slack's legal framework for cross-border data transfers, addressing EU data protection requirements that restrict international transfers without adequate safeguards. By implementing SCCs, Slack establishes a contractual mechanism recognized under EU law to govern how personal data flows between jurisdictions with different regulatory standards.
Cross-border data transfers to the US have been subject to significant legal scrutiny in Europe, and the adequacy of Standard Contractual Clauses depends on additional safeguards and transfer impact assessments that the notice does not detail.
The provision establishes the operational framework under which OpenSea processes personal data across international borders, relying on a specific European Commission-approved contractual safeguard rather than alternative transfer mechanisms. This approach structures the legal basis for cross-border data flows while acknowledging the absence of equivalent data protection regimes in destination countries.
BeReal
· BeReal Privacy Policy
The clause establishes the operational framework by which BeReal may process and store user personal data across international borders while maintaining compliance with EU data protection requirements. The reliance on SCCs creates enforceable contractual obligations between data processors and recipients in third countries regarding data handling standards.
OpenAI
· OpenAI Data Processing Addendum
The incorporation of EU SCCs provides the legal mechanism required under EU data protection law to authorize and structure cross-border data transfers to third countries. This framework establishes contractual safeguards and obligations that comply with GDPR requirements for international data flows and defines the respective responsibilities of each party in the data processing relationship.
The clause establishes the operational framework for cross-border data flows and acknowledges that destination jurisdictions may have less comprehensive data protection regimes than the EEA, Switzerland, or UK. It specifies the contractual mechanism—Standard Contractual Clauses—that governs the lawfulness of these international transfers under GDPR and equivalent regimes.
The provision identifies the specific regulatory framework governing international data transfers from EU/EEA/UK/Swiss jurisdictions, establishing Standard Contractual Clauses as the contractual safeguard that enables lawful data movement across borders while maintaining data protection standards required under EU and UK law.
DeepL
· DeepL Privacy Policy
The standard contractual clauses mechanism creates a legally binding framework that imposes data protection obligations on the recipient organization, ensuring compliance with EEA data protection requirements even when data is processed in third countries. This addresses the regulatory requirement that personal data cannot be transferred to inadequately protected jurisdictions without formal safeguarding mechanisms.
Upwork
· Upwork Privacy Policy
For EU, UK, and Swiss users, the adequacy of the transfer mechanism directly affects whether their personal data receives the same level of protection outside Europe as it does within it. The use of SCCs requires a transfer impact assessment to be conducted and documented.
Canva
· Canva Privacy Policy
This provision establishes the procedural framework governing cross-border data transfers under GDPR and equivalent data protection regimes. The use of standard contractual clauses creates a documented legal mechanism intended to maintain data protection standards during international transfers, which is operationally significant for regulatory compliance and data subject protections.
International data transfers to countries without equivalent data protection laws create risk that your data may be subject to different legal standards, including potential government access regimes, once it leaves the EU/EEA.
This provision establishes the contractual and regulatory framework governing Pinterest's international data transfers. Standard Contractual Clauses create legally binding obligations between data exporter and importer, defining permissible uses and requiring specified data protection safeguards for transfers to third countries.
The clause operationalizes international data transfers by specifying the legal mechanisms Bluesky may employ when moving personal data across jurisdictions with different regulatory protections, thereby establishing compliance pathways for cross-border data flows that are subject to varying national data protection requirements.
Strava
· Strava Privacy Policy
EU and UK users' data is processed in the United States, which is subject to US surveillance laws; Standard Contractual Clauses are the primary transfer mechanism but their adequacy has been contested, and users should be aware that their data crosses jurisdictional boundaries.
EU and UK users' personal data is subject to US legal frameworks once transferred, and the adequacy of standard contractual clauses as a transfer mechanism has been subject to legal challenge and regulatory scrutiny.
Unity
· Unity Privacy Policy
The provision establishes the operational framework and legal mechanism by which Unity conducts cross-border data transfers for EEA/UK/Swiss residents. It creates explicit notice that data subject to different regulatory protection standards may be transferred internationally, with documented reliance on EU-approved contractual safeguards.
The provision describes the contractual safeguard framework Shopify uses to comply with EU data transfer requirements when moving personal information to non-adequate countries. This mechanism establishes the operational basis for cross-border data flows and provides transparency regarding the specific protective measures applied.