К основному содержимому

stripe.com

На контроле

Data Transfers Addendum

Последняя правка была 17 дней назад.

Исходная оферта

Открыть оригинал на stripe.com

https://stripe.com/legal/dta

Какие ещё документы есть у stripe.com?

У компании в каталоге есть и другие оферты — их история ведётся так же.

Все оферты stripe.com

Откуда этот документ и когда его проверяли?

Сайт-источник
stripe.com
Первая фиксация
Последняя проверка
Версий в архиве
13 версий
Зафиксировано изменений
2 изменения
Периодичность проверки
6 часов

Насколько сильно меняли эту оферту?

Каждая строка — одна зафиксированная правка. Пункт считается изменённым, если его текст стал другим; добавленные и удалённые считаются отдельно.

Правки оферты «Data Transfers Addendum»: дата, сколько пунктов изменено, сколько появилось новых и сколько убрано
Дата правки Пунктов изменено Новых пунктов Убрано пунктов
0 0 0
0 85 0

Last updated: November 18, 2025 On this page Introduction Europe Order of Precedence Data Privacy Framework The EU Standard Contract Clauses Module 1 (Transfer: Controller to Controller) Appendix to Module 1 (Transfer: Controller to Controller) Module 2 (Transfer: Controller to P...

Раскрыть документ

Last updated: November 18, 2025

On this page

  1. Introduction

Europe

  1. Order of Precedence

  2. Data Privacy Framework

  3. The EU Standard Contract Clauses

    • Module 1 (Transfer: Controller to Controller)

    • Appendix to Module 1 (Transfer: Controller to Controller)

    • Module 2 (Transfer: Controller to Processor)

    • Appendix to Module 2 (Transfer: Controller to Processor)

    • Module 3 (Transfer: Processor to Processor)

    • Appendix to Module 3 (Transfer: Processor to Processor)

  4. UK International Data Transfer Addendum

    • Part 1: The Parties

    • Part 2: Mandatory Clauses

  5. Personal Data transfers from Switzerland

  6. Supplemental Clauses to the EEA SCCs

  7. Operation of the EEA SCCs

Rest of World

9.** **Personal Data transfers from Thailand

  1. Personal Data transfers from CBPR and PRP participating economies

  2. Personal Data transfers from Brazil

  3. Personal Data transfers from the United Arab Emirates (UAE)

1. Introduction

This Data Transfers Addendum is incorporated by reference into the data processing agreement between User and Stripe , which governs Stripe’s and its Affiliates’ Processing of Personal Data ). Any capitalized terms not defined in this Data Transfers Addendum have the meanings given to them in your DPA or Agreement.

Europe

2. Order of Precedence

If, in connection with Stripe providing the Services to User, more than one Data Transfer Mechanism could apply to a transfer of Personal Data, User and Stripe agree that the transfer will be subject to one Data Transfer Mechanism only, according to the following order of precedence:

(a) the Data Privacy Framework;

(b) the EEA SCCs or the UK International Data Transfer Addendum, as applicable.

3. Data Privacy Framework

Stripe, LLC is self-certified under the Data Privacy Framework. When User transfers Personal Data originating from the EEA, the UK or Switzerland to Stripe in the United States, Stripe, LLC will receive the Personal Data under the Data Privacy Framework and, when processing that Personal Data, will comply with the data privacy principles and relevant supplemental principles set out in the Data Privacy Framework.

Stripe will notify User without undue delay if its self-certification under the Data Privacy Framework is withdrawn, terminated, revoked, or otherwise invalidated (in which case, an alternative Data Transfer Mechanism will apply according to this Data Transfers Addendum). Stripe’s Data Privacy Framework Policy is available at www.stripe.com/legal/data-privacy-framework.

4. The EU Standard Contract Clauses

Module 1 (Transfer: Controller to Controller), Module 2 (Transfer: Controller to Processor) and Module 3 (Transfer: Processor to Processor) of the EEA SCCs, each as completed and supplemented as set out in this Data Transfers Addendum, apply to a transfer by User to Stripe, LLC of Personal Data that is subject to DP Law in the EEA and Processed under User's DPA.

Module 1 (Transfer: Controller to Controller)

Module 1 (Transfer: Controller to Controller)

SECTION I

Clause 1

Purpose and scope

(a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) for the transfer of personal data to a third country.

Это начало документа. Читать полностью

Что и когда меняли в этой оферте?

Добавлено

  • Добавлено: (a) **ADGM. **Stripe shall comply with the data importer’s obligations and User shall comply with the data exporter obligations set out in the ADGM Standard Data Protection Contractual Clauses namely Module 1 (Controller-to-Controller), Module 2 (Controller-to-Processor) and Module 3 (Processor-to-Processor) issued by the ADGM Office of Data Protection (“ADGM SCCs”), each to the extent applicable, incorporated into and form part of this Agreement. For the purposes of: (a) Clause 5 of the ADGM SCCs, the optional docking clause is deemed to be omitted; (b) Clause 9 of the Modules 2 and 3 of the ADGM SCCs, Option 2 is selected and the time period is 30 days; (c) Clause 11 of the ADGM SCCs, the optional redress wording is deemed to be omitted; (d) for purposes of Section A of Annex I of the ADGM SSCs, the name, address, contact details and signature is as set out in this Data Transfer Agreement or DPA; (e) for the purposes of Section B of Annex A, the processing details set out in the Appendices to the EU Standard Contractual Clauses shall apply (where relevant); and (f) for the purposes of Annex II, the technical and organizational measures set out in the Agreement and the DPA (as applicable) shall apply.
  • Добавлено: (b)** DIFC.** Stripe shall comply with the data importer’s obligations and User shall comply with the data exporter obligations set out in the DIFC Standard Data Protection Contractual Clauses issued by the DIFC Data Protection Commissioner's Office (“DIFC SCCs”), which are incorporated into and form part of this Data Transfer Agreement, for that particular transfer of Personal Data. For the purposes of: (a) Clause 7 of the DIFC SCCs, the optional docking clause is deemed to be omitted; (b) Clauses 9(1)(a) and 9(2)(a) of the DIFC SCCs, Option 2 is selected and the time period is 30 days; (c) Clause 16(6) of the DIFC SCCs, the optional termination clause is omitted; (d) for the purposes of Appendix 1 of the DIFC SCCs, the Parties’ details as set out in the DPA or Agreement will apply and the processing details set out in the Appendices to the EU Standard Contractual Clauses shall apply (where relevant); and (e) for the purposes of Appendix 2 of the DIFC SCCs, the technical and organizational measures set out in the Agreement and the DPA (as applicable) shall apply.

Изменено

  • Изменено: Было **12.2 Financial Free Zones.** The provisions in this Section 12.2 apply solely if and to the extent that the User (as Data Exporter) is subject to the data protection laws of the Abu Dhabi Global Market (“**ADGM**”) or **Dubai International Financial Centre **(“**DIFC **”): Стало **12.2 Financial Free Zones.** The provisions in this Section 12.2 apply solely if and to the extent that the User (as Data Exporter) is subject to the data protection laws of the Abu Dhabi Global Market (“**ADGM**”) or **Dubai International Financial Centre **(“**DIFC **”) and is transferring Personal Data to Stripe for processing in a country not deemed to provide adequate protection for Personal Data by the relevant competent authority of the DIFC and ADGM respectively:

Удалено

  • Удалено: (a) **ADGM. **The standard data protection clauses of the ADGM Addendum to the EU Commission Standard Contractual Clauses shall – in addition to the EEA SCCs and this Data Transfer Addendum – apply to the transfer of Personal Data (subject to the ADGM Data Protection Regulations 2021) to a third country if such third country is not subject to an adequacy decision by the ADGM Commissioner of Data Protection.
  • Удалено: (b)** DIFC.** The DIFC Standard Data Protection Contractual Clauses shall apply to the transfer of Personal Data (subject to the DIFC Data Protection Law no. 5 of 2020) to a third country if such third country is not subject to an adequacy decision by the DIFC Commissioner of Data Protection.

Первая зафиксированная редакция.

Last updated: November 18, 2025 On this page Introduction Europe Order of Precedence Data Privacy Framework The EU Standard Contract Clauses Module 1 (Transfer: Controller to Controller) Appendix to Module 1 (Transfer: Controller to Controller) Module 2 (Transfer: Controller to P...

  • 1. Introduction
  • 2. Order of Precedence
  • 3. Data Privacy Framework
  • 4. The EU Standard Contract Clauses
  • 5. UK International Data Transfer Addendum
  • 6. Personal Data transfers from Switzerland