Common use of International Transfers and Country-Specific Deviations Clause in Contracts

International Transfers and Country-Specific Deviations. 4.1 Personal Data that SAP has received from any Data Controller hereunder shall only be exported by SAP or its Subprocessors from the Data Center to or accessed from a country or territory outside the EEA (“International Transfer”) if (a) the recipient itself or the country or territory in which it operates (i.e. where or from where it processes or accesses Personal Data) has been found to ensure an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of Personal Data as determined by the European Commission and subject to the scope restrictions of any such determination, or (b) when a Non-EU Entity fulfills the requirements of Section 4.2 below. The same shall apply to SAP receiving Personal Data directly from a Data Controller in the EEA, via Internet access to a Service hosted in a Data Center outside the EEA.