Data Processing Agreement

Выберите язык:Русский

open

Дата последнего изменения:: 21.08.2026

**Introduction to Uber’s Data Processing Agreement **

Uber requires that its suppliers agree to terms set forth in its Data Processing Agreement (“DPA”) governing the processing of Uber Confidential Information, including Uber Personal Data.

These terms are intended to protect the confidentiality and security of Uber’s Confidential Information, and enable Uber to meet its requirements under global data protection laws, including as applicable (based on suppliers’ processing of Uber Personal Data) the European Union’s General Data Protection Regulation (“GDPR”), Brazil’s Lei Geral de Proteção de Dados Pessoais (“LGPD”), Australia’s Privacy Act, India’s Digital Personal Data Protection Act and U.S. state privacy laws, including the California Consumer Privacy Act (“CCPA”).

The DPA specifically addresses:

• General requirements and limitations regarding suppliers’ processing of Uber Confidential Information, including as regarding data security, data security incidents, risk assessments and audits, data retention and deletion, and use of sub-processors.

• Designation of the roles played by Uber and suppliers as regards the processing of Uber Personal Data. The DPA specifically requires that the parties designate whether each is acting as:a “Controller” or “Processor”

• a “Business,” “Service Provider,” “Contractor” or “Third Party” as those terms are defined under the CCPA.

• The DPA also specifies the responsibilities of each party based on the above designations. Please notify your Uber contact if you have questions regarding Uber’s DPA.

**UBER DATA PROCESSING AGREEMENT **

This Data Processing Agreement (”Agreement”) sets forth the requirements applicable to Supplier’s Processing of: (1) Uber Confidential Information, including Uber Personal Data (see Section 2 below); and (2) Uber Personal Data (see Section 3 below).

This Agreement forms part of the main agreement(s) between Uber and the company or entity (“Supplier”) (each individually a Party and collectively the “Parties”) and all further agreements executed under it (collectively, the “Main Agreement”).

SECTION 1: DEFINITIONS

In addition to the terms defined below, “Business,” “Contractor,” “Sale”**, “Sell”, “Service Provider” and **“Share” shall have the meanings set forth under the CCPA / CPRA.

• Controller: a natural or legal person that, alone or jointly with others, determines the purpose and means of Processing Personal Data.

• **Data Protection Laws: **all laws and regulations applicable to the Processing of Uber Personal Data under this DPA.

• Data Subject:** **a natural personal to whom Personal Data relates.

• Data Security Incident: any actual or reasonably suspected unauthorized access to, or acquisition or unlawful Processing of, Uber Confidential Information, or compromise of the security or integrity of such Uber Confidential Information or any System used by Supplier, or its Sub-processors, to Process such data.

• Delete: to physically or logically destroy Uber Confidential Information so that it cannot be recovered.

• **Discovery: **any instance in which Supplier discovers a Data Security Incident, is notified of a Data Security Incident, or would have discovered a Data Security Incident had it exercised reasonable diligence.

• Personal Data: any information that relates to an identified or identifiable Data Subject.**