Home
Stay organized with collections
Save and categorize content based on your preferences.
Cloud Data Processing
Addendum (Partners)
For translations of this Cloud Data Processing Addendum into other languages, please click on the appropriate link:
Bahasa Indonesia,
Deutsch,
Español (Latinoamérica),
Français,
Italiano,
Nederlands,
Português,
한국어,
日本語
This Cloud Data Processing Addendum (including its
appendices, the “Addendum”) is incorporated into
the Agreement (as defined below) between Google and
Partner. This Addendum was formerly known as the “Data
Processing and Security Terms” for Google Cloud Platform
and as the “Data Processing Addendum” or “Data
Processing and Security Terms” for Looker (original) or
Google SecOps Services.
1. Overview
This Addendum describes the parties’ obligations,
including under applicable privacy, data security, and
data protection laws, with respect to the processing and
security of Partner Data. This Addendum will be effective
on the Addendum Effective Date (as defined below), and
will replace any terms previously applicable to the
processing and security of Partner Data. Capitalized terms
used but not defined in this Addendum have the meaning
given to them in the Agreement.
2. Definitions
2.1 In this Addendum:
- “Addendum Effective Date” means the date
on which Partner accepted, or the parties otherwise
agreed to, this Addendum.
“Additional Security Controls”* *means
security resources, features, functionality, and
controls that Partner may use at its option and as it
determines, including the Admin Console, encryption,
logging and monitoring, identity and access management,
security scanning, and firewalls.
-
“Agreement” means the contract under which
Google has agreed to provide the applicable Services to
Partner.
-
“Applicable Privacy Law” means, as applicable
to the processing of Partner Personal Data, any
national, federal, European Union, state, provincial or
other privacy, data security, or data protection law or
regulation. For clarity, Applicable Privacy Laws include
but are not limited to the laws mentioned in Appendix 3 (Specific Privacy
Laws).
-
“Audited Services”* *means the
then-current Services indicated as being in-scope for
the relevant certification or report
at https://cloud.google.com/security/compliance/services-in-scope.
Google may not remove any Services from this URL unless
they have been discontinued in accordance with the
Agreement.
-
“Compliance Certifications” has the meaning
given in Section 7.4 (Compliance Certifications and SOC
Reports).
-
“Data Incident” means a breach of Google’s
security leading to the accidental or unlawful
destruction, loss, alteration, unauthorized disclosure
of, or access to, Partner Data on systems managed by or
otherwise controlled by Google.
-
“EMEA”* *means Europe, the Middle
East and Africa.
-
“EU GDPR” means Regulation (EU) 2016/679
of the European Parliament and of the Council of 27
April 2016 on the protection of natural persons with
regard to the processing of personal data and on the
free movement of such data, and repealing Directive
95/46/EC.
-
“European Data Protection Law” means, as
applicable: (a) the GDPR; or (b) the Swiss FADP.
-
“European Law” means, as applicable: (a) EU or
EU Member State law (if the EU GDPR applies to the
processing of Partner Personal Data); (b) the law of the
UK or a part of the UK (if the UK GDPR applies to the
processing of Partner Personal Data); or (c) the law of