Home
Stay organized with collections
Save and categorize content based on your preferences.
Data Processing and
Security Terms (Partners)
Last modified: September 24, 2021
This is not the current version of this document and is provided for archival
purposes.
View the current version
These Data Processing and Security Terms, including their
appendices (the “Terms”) are incorporated into the
agreement under which Google has agreed to provide Google
Cloud Platform (as described at
https://cloud.google.com/terms/services)
and related technical support to Partner (the
“Agreement”).
1. Commencement
These Terms will be effective and replace any previously
applicable data processing and security terms from the Terms
Effective Date (as defined below).
2. Definitions
2.1 Capitalized terms defined in the Agreement apply to these
Terms. In addition, in these Terms:
-
Additional Security Controls means security
resources, features, functionality and/or controls that
Partner may use at its option and/or as it determines,
including the Admin Console, encryption, logging and
monitoring, identity and access management, security scanning,
and firewalls.
-
Adequate Country means:
(a) for data processed subject to
the EU GDPR: the EEA, or a country or territory that is the
subject of an adequacy decision by the Commission under Article
45(1) of the EU GDPR;
(b) for data processed subject to
the UK GDPR: the UK or a country or territory that is the
subject of the adequacy regulations under Article 45(1) of the
UK GDPR and Section 17A of the Data Protection Act 2018;
and/or
(c) for data processed subject to
the Swiss FDPA: Switzerland, or a country or territory that (i)
is included in the list of the states whose legislation ensures
an adequate level of protection as published by the Swiss
Federal Data Protection and Information Commissioner, or (ii) is
the subject of an adequacy decision by the Swiss Federal Council
under the Swiss FDPA.
-
Alternative Transfer Solution means a solution,
other than SCCs, that enables the lawful transfer of personal
data to a third country in accordance with European Data
Protection Law.
-
Audited Services means the then-current Services
indicated as being in-scope for the relevant certification or
report at
https://cloud.google.com/security/compliance/services-in-scope.
Google may not remove a Service from this URL unless that
Service has been discontinued in accordance with the
Agreement.
-
Data Incident means a breach of Google’s security
leading to the accidental or unlawful destruction, loss,
alteration, unauthorized disclosure of, or access to, Partner
Data on systems managed by or otherwise controlled by Google.
-
EEA means the European Economic Area.
-
EMEA means Europe, the Middle East and Africa.
-
EU GDPR means Regulation (EU) 2016/679 of the
European Parliament and of the Council of 27 April 2016 on the
protection of natural persons with regard to the processing of
personal data and on the free movement of such data, and
repealing Directive 95/46/EC.
-
European Data Protection Law means, as applicable:
(a) the GDPR; and/or (b) the Swiss FDPA.
-
European Law means, as applicable: (a) EU or EU
Member State law (if the EU GDPR applies to the processing of
Partner Personal Data); and (b) the law of the UK or a part of
the UK (if the UK GDPR applies to the processing of Partner
Personal Data).
-
GDPR means, as applicable: (a) the EU GDPR; and/or