Standard Contractual Clauses Where (i) Personal Data of an EEA or Swiss based Controller is processed in a country outside the EEA, Switzerland and any country, organization or territory acknowledged by the European Union as safe country with an adequate level of data protection under Art. 45 GDPR, or where (ii) Personal Data of another Controller is processed internationally and such international processing requires an adequacy means under the laws of the country of the Controller and the required adequacy means can be met by entering into Standard Contractual Clauses, then:
TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):
APPENDIX 1 TO THE STANDARD CONTRACTUAL CLAUSES Data exporter The data exporter is the entity identified as “Customer” in the DPA Data importer The data importer is Amazon Web Services, Inc., a provider of web services. Data subjects Data subjects are defined in Section 1.3 of the DPA. Categories of data The personal data is defined in Section 1.3 of the DPA.