Home
Google Cloud Platform Terms
Data Processing and Security Terms (Partners)
Stay organized with collections
Save and categorize content based on your preferences.
Last modified: 28 February 2019
This is not the current version of this document and is provided for archival purposes.
View the current version
The partner agreeing to these terms ("Partner"), and Google LLC (formerly known as Google Inc.),
Google Ireland Limited, Google Asia Pacific Pte. Ltd., or any other entity that directly or
indirectly controls, is controlled by, or is under common control with Google LLC
(as applicable, "Google"), have entered into an agreement under which Google has agreed to
provide Google Cloud Platform (as described at https://cloud.google.com/terms/services) and
related technical support to Partner as a reseller or supplier of Google Cloud Platform under
the Program (as amended from time to time, the "Agreement").
These Data Processing and Security Terms, including their appendices (the "Terms") will be
effective and replace any previously applicable data processing and security terms as from the
Terms Effective Date (as defined below). These Terms supplement the Agreement.
1. Introduction
These Terms reflect the parties' agreement with respect to the terms governing the
processing and security of Partner Data under the Agreement.
2. Definitions
2.1 Capitalized terms used but not defined in these Terms have the meanings set out in
the Agreement. In these Terms, unless stated otherwise:
-
Additional Security Controls means security resources, features, functionality
and/or controls that Partner may use at its option and/or as it determines,
including the Admin Console and other features and/or functionality of the
Services such as encryption, logging and monitoring, identity and access
management, security scanning, and firewalls.
-
Agreed Liability Cap means the maximum monetary or payment-based amount at
which a party's liability is capped under the Agreement, either per annual period
or event giving rise to liability, as applicable.
-
Alternative Transfer Solution means a solution, other than the Model Contract
Clauses, that enables the lawful transfer of personal data to a third country in
accordance with Article 45 or 46 of the GDPR (for example, the EU-U.S. Privacy
Shield).
-
Audited Services means the Services indicated as being in-scope for the relevant
certification or report at https://cloud.google.com/security/compliance/services-in-scope,
as may be updated by Google from time to time, provided that Google
may only remove a Deprecation Policy Service from such URL if that Service has
been discontinued in accordance with the Deprecation Policy.
-
Data Incident means a breach of Google's security leading to the accidental or
unlawful destruction, loss, alteration, unauthorized disclosure of, or access to,
Partner Data on systems managed by or otherwise controlled by Google. "Data
Incidents" will not include unsuccessful attempts or activities that do not
compromise the security of Partner Data, including unsuccessful log-in attempts,
pings, port scans, denial of service attacks, and other network attacks on
firewalls or networked systems.
-
Deprecation Policy Service means a Service identified at
https://cloud.google.com/cloud/terms/deprecation.
-
EEA means the European Economic Area.
-
European Data Protection Legislation means, as applicable: (a) the GDPR; and/or
(b) the Federal Data Protection Act of 19 June 1992 (Switzerland).