Home
Stay organized with collections
Save and categorize content based on your preferences.
Data Processing and
Security Terms (Customers)
Last modified: August 19, 2020
This is not the current version of this document and is provided for archival
purposes.
View the current version
The customer agreeing to these terms (“Customer”), and
Google LLC, Google Ireland Limited, Google Asia Pacific Pte.
Ltd., or any other entity that directly or indirectly
controls, is controlled by, or is under common control with
Google LLC (as applicable, “Google”), have entered into an
agreement under which Google has agreed to provide Google
Cloud Platform (as described at
https://cloud.google.com/terms/services)
and related technical support to Customer (as amended from
time to time, the “Agreement”).
1. Commencement
These Data Processing and Security Terms, including their
appendices (the “Terms”) will be effective and replace any
previously applicable data processing and security terms as from
the Terms Effective Date (as defined below).
These Terms supplement the Agreement. Where the Agreement was
entered into offline with Google Ireland Limited, these Terms
supersede the “Privacy” Clause in that agreement (if
applicable).
2. Definitions
2.1 Capitalized terms defined in the Agreement apply to these
Terms. In addition, in these Terms:
-
Additional Security Controls means security
resources, features, functionality and/or controls that
Customer may use at its option and/or as it determines,
including the Admin Console, encryption, logging and
monitoring, identity and access management, security scanning,
and firewalls.
-
Agreed Liability Cap means the maximum
monetary or payment-based amount at which a party’s liability
is capped under the Agreement.
-
Alternative Transfer Solution means a
solution, other than the Model Contract Clauses, that enables
the lawful transfer of personal data to a third country in
accordance with European Data Protection Law.
-
Audited Services means the then-current
Services indicated as being in-scope for the relevant
certification or report
at https://cloud.google.com/security/compliance/services-in-scope.
Google may not remove a Service from this URL unless that
Service has been discontinued in accordance with the
Agreement.
-
Customer Data has the meaning given in the
Agreement or, if no such meaning is given, means data provided
by or on behalf of Customer or Customer End Users via the
Services under the Account.
-
Customer End Users has the meaning given in
the Agreement or, if not such meaning is given, has the
meaning given to “End Users” in the Agreement.
-
Customer Personal Data means the personal data
contained within the Customer Data.
-
Data Incident means a breach of Google’s
security leading to the accidental or unlawful destruction,
loss, alteration, unauthorized disclosure of, or access to,
Customer Data on systems managed by or otherwise controlled by
Google.
-
EEA means the European Economic Area.
-
EU GDPR means Regulation (EU) 2016/679 of the
European Parliament and of the Council of 27 April 2016 on the
protection of natural persons with regard to the processing of
personal data and on the free movement of such data, and
repealing Directive 95/46/EC.
-
European Data Protection Law means, as
applicable: (a) the GDPR; and/or (b) the Federal Data
Protection Act of 19 June 1992 (Switzerland).
-
European or National Law means, as applicable: