{"id":3935,"date":"2020-11-24T14:49:27","date_gmt":"2020-11-24T14:49:27","guid":{"rendered":"https:\/\/mondaylegal.kinsta.cloud\/uncategorized-pt\/clausulas-contratuais-padrao\/"},"modified":"2021-10-26T11:55:31","modified_gmt":"2021-10-26T11:55:31","slug":"clausulas-contratuais-padrao","status":"publish","type":"post","link":"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/","title":{"rendered":"Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores)"},"content":{"rendered":"\n<p><a href=\"https:\/\/na3.docusign.net\/Member\/PowerFormSigning.aspx?PowerFormId=176ad33c-8ca7-46b3-9346-6025450622b9&amp;env=na3&amp;acct=2b5df10d-1b22-4e99-a6c2-f88dc659b4f6&amp;v=2\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Sign the Online Version<\/strong><\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The data exporter and the data importer, as defined under the <a href=\"https:\/\/monday.com\/terms\/dpa\">monday.com Data Processing &nbsp;Addendum<\/a> or other agreement or addendum effectively governing the processing of personal&nbsp; data by the data importer on behalf of the data exporter, including all annexes, exhibits and&nbsp; appendices thereto (\u201c<strong>DPA<\/strong>\u201d), each a &#8220;<strong>party<\/strong>&#8220;; together the &#8220;<strong>parties<\/strong>&#8220;, have agreed on the following&nbsp; Contractual Clauses (&#8220;<strong>Clauses<\/strong>&#8220;) in order to adduce adequate safeguards with respect to the&nbsp; protection of privacy and fundamental rights and freedoms of individuals for the transfer by the&nbsp; data exporter to the data importer of the personal data specified in Appendix 1.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 1 &#8211; Definitions<\/h2>\n\n\n\n<p>For the purposes of the Clauses:<\/p>\n\n\n\n<p>(a) &#8216;personal data&#8217;, &#8216;special categories of data&#8217;, &#8216;process\/processing&#8217;, &#8216;controller&#8217;, &#8216;processor&#8217;,&nbsp; &#8216;data subject&#8217; and &#8216;supervisory authority&#8217; shall have the same meaning as in Directive&nbsp; 95\/46\/EC of the European Parliament and of the Council of 24 October 1995 on the&nbsp; protection of individuals with regard to the processing of personal data and on the free&nbsp; movement of such data;<\/p>\n\n\n\n<p>(b) &#8216;the data exporter&#8217; means the controller who transfers the personal data;<\/p>\n\n\n\n<p>(c) &#8216;the data importer&#8217; means the processor who agrees to receive from the data exporter&nbsp; personal data intended for processing on his behalf after the transfer in accordance with&nbsp; his instructions and the terms of the Clauses and who is not subject to a third country&#8217;s&nbsp; system ensuring adequate protection within the meaning of Article 25(1) of&nbsp; Directive 95\/46\/EC;<\/p>\n\n\n\n<p>(d) &#8216;the subprocessor&#8217; means any processor engaged by the data importer or by any other&nbsp; subprocessor of the data importer who agrees to receive from the data importer or from&nbsp; any other subprocessor of the data importer personal data exclusively intended for&nbsp; processing activities to be carried out on behalf of the data exporter after the transfer in&nbsp; accordance with his instructions, the terms of the Clauses and the terms of the written&nbsp; subcontract;<\/p>\n\n\n\n<p>(e) &#8216;the applicable data protection law<strong>&#8216; <\/strong>means the legislation protecting the fundamental rights&nbsp; and freedoms of individuals and, in particular, their right to privacy with respect to the&nbsp; processing of personal data applicable to a data controller in the Member State in which&nbsp; the data exporter is established;<\/p>\n\n\n\n<p>(f) &#8216;technical and organisational security measures&#8217; means those measures aimed at&nbsp; protecting personal data against accidental or unlawful destruction or accidental loss,&nbsp; alteration, unauthorised disclosure or access, in particular where the processing involves&nbsp; the transmission of data over a network, and against all other unlawful forms of&nbsp; processing.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 2 &#8211; Details of the transfer<\/h2>\n\n\n\n<p>The details of the transfer and in particular the special categories of personal data where applicable &nbsp;are specified in Appendix 1 which forms an integral part of the Clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 3 &#8211; Third-party beneficiary clause<\/h2>\n\n\n\n<p>1. The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i),&nbsp; Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses&nbsp; 9 to 12 as third-party beneficiary.&nbsp;<\/p>\n\n\n\n<p>2. The data subject can enforce against the data importer this Clause, Clause 5(a) to (e)&nbsp; and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data&nbsp; exporter has factually disappeared or has ceased to exist in law unless any successor entity&nbsp; has assumed the entire legal obligations of the data exporter by contract or by operation of&nbsp; law, as a result of which it takes on the rights and obligations of the data exporter, in which&nbsp; case the data subject can enforce them against such entity.&nbsp;<\/p>\n\n\n\n<p>3. The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e)&nbsp; and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the&nbsp; data exporter and the data importer have factually disappeared or ceased to exist in law or&nbsp; have become insolvent, unless any successor entity has assumed the entire legal&nbsp; obligations of the data exporter by contract or by operation of law as a result of which it&nbsp; takes on the rights and obligations of the data exporter, in which case the data subject can&nbsp; enforce them against such entity. Such third-party liability of the subprocessor shall be&nbsp; limited to its own processing operations under the Clauses.&nbsp;<\/p>\n\n\n\n<p>4. The parties do not object to a data subject being represented by an association or other&nbsp; body if the data subject so expressly wishes and if permitted by national law.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 4 &#8211; Obligations of the data exporter<\/h2>\n\n\n\n<p>The data exporter agrees and warrants:&nbsp;<\/p>\n\n\n\n<p>(a) that the processing, including the transfer itself, of the personal data has been and will&nbsp; continue to be carried out in accordance with the relevant provisions of the applicable data&nbsp; protection law (and, where applicable, has been notified to the relevant authorities of the&nbsp; Member State where the data exporter is established) and does not violate the relevant&nbsp; provisions of that State;<\/p>\n\n\n\n<p>(b) that it has instructed and throughout the duration of the personal data processing&nbsp; services will instruct the data importer to process the personal data transferred only on&nbsp; the data exporter&#8217;s behalf and in accordance with the applicable data protection law and&nbsp; the Clauses;<\/p>\n\n\n\n<p>(c) that the data importer will provide sufficient guarantees in respect of the technical and&nbsp; organisational security measures specified in Appendix 2 to this contract;<\/p>\n\n\n\n<p>(d) that after assessment of the requirements of the applicable data protection law, the&nbsp; security measures are appropriate to protect personal data against accidental or unlawful&nbsp; destruction or accidental loss, alteration, unauthorised disclosure or access, in particular&nbsp; where the processing involves the transmission of data over a network, and against all other&nbsp; unlawful forms of processing, and that these measures ensure a level of security&nbsp; appropriate to the risks presented by the processing and the nature of the data to be&nbsp; protected having regard to the state of the art and the cost of their implementation;<\/p>\n\n\n\n<p>(e) that it will ensure compliance with the security measures;<\/p>\n\n\n\n<p>(f) that, if the transfer involves special categories of data, the data subject has been informed&nbsp; or will be informed before, or as soon as possible after, the transfer that its data could be&nbsp; transmitted to a third country not providing adequate protection within the meaning of&nbsp; Directive 95\/46\/EC;<\/p>\n\n\n\n<p>(g) to forward any notification received from the data importer or any subprocessor pursuant&nbsp; to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data&nbsp; exporter decides to continue the transfer or to lift the suspension;<\/p>\n\n\n\n<p>(h) to make available to the data subjects upon request a copy of the Clauses, with the&nbsp; exception of Appendix 2, and a summary description of the security measures, as well&nbsp; as a copy of any contract for subprocessing services which has to be made in&nbsp; accordance with the Clauses, unless the Clauses or the contract contain commercial&nbsp; information, in which case it may remove such commercial information;<\/p>\n\n\n\n<p>(i) that, in the event of subprocessing, the processing activity is carried out in accordance&nbsp; with Clause 11 by a subprocessor providing at least the same level of protection for the&nbsp; personal data and the rights of data subject as the data importer under the Clauses; and<\/p>\n\n\n\n<p>(j) that it will ensure compliance with Clause 4(a) to (i).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 5 &#8211; Obligations of the data importer<\/strong><\/h2>\n\n\n\n<p>The data importer agrees and warrants:<\/p>\n\n\n\n<p>(a) to process the personal data only on behalf of the data exporter and in compliance with its&nbsp; instructions and the Clauses; if it cannot provide such compliance for whatever reasons,&nbsp; it agrees to inform promptly the data exporter of its inability to comply, in which case the&nbsp; data exporter is entitled to suspend the transfer of data and\/or terminate the contract;<\/p>\n\n\n\n<p>(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling&nbsp; the instructions received from the data exporter and its obligations under the contract and&nbsp; that in the event of a change in this legislation which is likely to have a substantial adverse&nbsp; effect on the warranties and obligations provided by the Clauses, it will promptly notify the&nbsp; change to the data exporter as soon as it is aware, in which case the data exporter is&nbsp; entitled to suspend the transfer of data and\/or terminate the contract;<\/p>\n\n\n\n<p>(c) that it has implemented the technical and organisational security measures specified in&nbsp; Appendix 2 before processing the personal data transferred;<\/p>\n\n\n\n<p>(d) that it will promptly notify the data exporter about:<\/p>\n\n\n\n<p>(i) any legally binding request for disclosure of the personal data by a law enforcement&nbsp; authority unless otherwise prohibited, such as a prohibition under criminal law to&nbsp; preserve the confidentiality of a law enforcement investigation,<\/p>\n\n\n\n<p>(ii) any accidental or unauthorised access, and<\/p>\n\n\n\n<p>(iii) any request received directly from the data subjects without responding to that&nbsp; request, unless it has been otherwise authorised to do so;<\/p>\n\n\n\n<p>(e) to deal promptly and properly with all inquiries from the data exporter relating to its&nbsp; processing of the personal data subject to the transfer and to abide by the advice of the&nbsp; supervisory authority with regard to the processing of the data transferred;<\/p>\n\n\n\n<p>(f) at the request of the data exporter to submit its data processing facilities for audit of the&nbsp; processing activities covered by the Clauses which shall be carried out by the data exporter&nbsp; or an inspection body composed of independent members and in possession of the&nbsp; required professional qualifications bound by a duty of confidentiality, selected by the data&nbsp; exporter, where applicable, in agreement with the supervisory authority;<\/p>\n\n\n\n<p>(g) to make available to the data subject upon request a copy of the Clauses, or any existing&nbsp; contract for subprocessing, unless the Clauses or contract contain commercial&nbsp; information, in which case it may remove such commercial information, with the exception&nbsp; of Appendix 2 which shall be replaced by a summary description of the security measures&nbsp; in those cases where the data subject is unable to obtain a copy from the data exporter;<\/p>\n\n\n\n<p>(h) that, in the event of subprocessing, it has previously informed the data exporter and&nbsp; obtained its prior written consent;<\/p>\n\n\n\n<p>(i) that the processing services by the subprocessor will be carried out in accordance with&nbsp; Clause 11;<\/p>\n\n\n\n<p>(j) to send promptly a copy of any subprocessor agreement it concludes under the Clauses&nbsp; to the data exporter.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 6 &#8211; Liability<\/strong><\/h2>\n\n\n\n<p>1. The parties agree that any data subject, who has suffered damage as a result of any breach&nbsp; of the obligations referred to in Clause 3 or in Clause 11 by any party or subprocessor is&nbsp; entitled to receive compensation from the data exporter for the damage suffered.<\/p>\n\n\n\n<p>2. If a data subject is not able to bring a claim for compensation in accordance with paragraph&nbsp; 1 against the data exporter, arising out of a breach by the data importer or his subprocessor&nbsp; of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter&nbsp; has factually disappeared or ceased to exist in law or has become insolvent, the data&nbsp; importer agrees that the data subject may issue a claim against the data importer as if it&nbsp; were the data exporter, unless any successor entity has assumed the entire legal&nbsp; obligations of the data exporter by contract of by operation of law, in which case the data&nbsp; subject can enforce its rights against such entity.<\/p>\n\n\n\n<p>The data importer may not rely on a breach by a subprocessor of its obligations in order&nbsp; to avoid its own liabilities.<\/p>\n\n\n\n<p>3. If a data subject is not able to bring a claim against the data exporter or the data importer&nbsp; referred to in paragraphs 1 and 2, arising out of a breach by the subprocessor of any of&nbsp; their obligations referred to in Clause 3 or in Clause 11 because both the data exporter&nbsp; and the data importer have factually disappeared or ceased to exist in law or have become&nbsp; insolvent, the subprocessor agrees that the data subject may issue a claim against the data&nbsp; subprocessor with regard to its own processing operations under the Clauses as if it were&nbsp; the data exporter or the data importer, unless any successor entity has assumed the entire&nbsp; legal obligations of the data exporter or data importer by contract or by operation of law, in&nbsp; which case the data subject can enforce its rights against such entity. The liability of the&nbsp; subprocessor shall be limited to its own processing operations under the Clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 7 &#8211; Mediation and jurisdiction<\/strong><\/h2>\n\n\n\n<p>1. The data importer agrees that if the data subject invokes against it third-party beneficiary&nbsp; rights and\/or claims compensation for damages under the Clauses, the data importer will&nbsp; accept the decision of the data subject:<\/p>\n\n\n\n<p>(a) to refer the dispute to mediation, by an independent person or, where applicable,&nbsp; by the supervisory authority;<\/p>\n\n\n\n<p>(b) to refer the dispute to the courts in the Member State in which the data exporter is&nbsp; established.<\/p>\n\n\n\n<p>2. The parties agree that the choice made by the data subject will not prejudice its substantive&nbsp; or procedural rights to seek remedies in accordance with other provisions of national or&nbsp; international law.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 8 &#8211; Cooperation with supervisory authorities&nbsp;<\/strong><\/h2>\n\n\n\n<p>1. The data exporter agrees to deposit a copy of this contract with the supervisory authority&nbsp; if it so requests or if such deposit is required under the applicable data protection law.<\/p>\n\n\n\n<p>2. The parties agree that the supervisory authority has the right to conduct an audit of the data&nbsp; importer, and of any subprocessor, which has the same scope and is subject to the same&nbsp; conditions as would apply to an audit of the data exporter under the applicable data&nbsp; protection law.<\/p>\n\n\n\n<p>3. The data importer shall promptly inform the data exporter about the existence of&nbsp; legislation applicable to it or any subprocessor preventing the conduct of an audit of the&nbsp; data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data&nbsp; exporter shall be entitled to take the measures foreseen in Clause 5 (b).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 9 &#8211; Governing Law<\/strong><\/h2>\n\n\n\n<p>The Clauses shall be governed by the law of the Member State in which the data exporter is&nbsp; established.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 10 &#8211; Variation of the contract<\/strong><\/h2>\n\n\n\n<p>The parties undertake not to vary or modify the Clauses. This does not preclude the parties from&nbsp; adding clauses on business related issues where required as long as they do not contradict the&nbsp; Clause.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 11 &#8211; Subprocessing<\/strong><\/h2>\n\n\n\n<p>1. The data importer shall not subcontract any of its processing operations performed on&nbsp; behalf of the data exporter under the Clauses without the prior written consent of the&nbsp; data exporter. Where the data importer subcontracts its obligations under the Clauses,&nbsp; with the consent of the data exporter, it shall do so only by way of a written agreement&nbsp; with the subprocessor which imposes the same obligations on the subprocessor as are&nbsp; imposed on the data importer under the Clauses. Where the subprocessor fails to fulfil<\/p>\n\n\n\n<p>its data protection obligations under such written agreement the data importer shall&nbsp; remain fully liable to the data exporter for the performance of the subprocessor&#8217;s&nbsp; obligations under such agreement.&nbsp;<\/p>\n\n\n\n<p>2. The prior written contract between the data importer and the subprocessor shall also&nbsp; provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the&nbsp; data subject is not able to bring the claim for compensation referred to in paragraph 1 of&nbsp; Clause 6 against the data exporter or the data importer because they have factually&nbsp; disappeared or have ceased to exist in law or have become insolvent and no successor&nbsp; entity has assumed the entire legal obligations of the data exporter or data importer by&nbsp; contract or by operation of law. Such third-party liability of the subprocessor shall be&nbsp; limited to its own processing operations under the Clauses.<\/p>\n\n\n\n<p>3. The provisions relating to data protection aspects for subprocessing of the contract referred&nbsp; to in paragraph 1 shall be governed by the law of the Member State in which the data&nbsp; exporter is established.<\/p>\n\n\n\n<p>4. The data exporter shall keep a list of subprocessing agreements concluded under the&nbsp; Clauses and notified by the data importer pursuant to Clause 5 (j), which shall be updated&nbsp; at least once a year. The list shall be available to the data exporter&#8217;s data protection&nbsp; supervisory authority.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 12 &#8211; Obligation after the termination of personal data processing services<\/strong><\/h2>\n\n\n\n<p>1. The parties agree that on the termination of the provision of data processing services,&nbsp; the data importer and the subprocessor shall, at the choice of the data exporter, return&nbsp; all the personal data transferred and the copies thereof to the data exporter or shall&nbsp; destroy all the personal data and certify to the data exporter that it has done so, unless&nbsp; legislation imposed upon the data importer prevents it from returning or destroying all or&nbsp; part of the personal data transferred. In that case, the data importer warrants that it will&nbsp; guarantee the confidentiality of the personal data transferred and will not actively process&nbsp; the personal data transferred anymore.<\/p>\n\n\n\n<p>2. The data importer and the subprocessor warrant that upon request of the data exporter&nbsp; and\/or of the supervisory authority, it will submit its data processing facilities for an audit&nbsp; of the measures referred to in paragraph 1.<\/p>\n\n\n\n<p><strong>ANNEX A: FURTHER PROVISIONS<\/strong><\/p>\n\n\n\n<p><strong>A. General Data Protection Regulation<\/strong>: References throughout these Clauses to Directive&nbsp; 95\/46\/EC shall be read as references to the General Data Protection Regulation&nbsp; (2016\/679) (the \u201c<strong>Regulation<\/strong>\u201d), or, if the data exporter is established in the United Kingdom&nbsp; (the \u201c<strong>UK<\/strong>\u201d), to the Regulation and\/or any UK local law which implements or supplements&nbsp; the Regulation, as applicable from time to time, and in each case references to specific&nbsp; articles or provisions of the Directive shall be read as references to the equivalent article&nbsp; or provision in the Regulation or UK local law, where possible and as appropriate.&nbsp;<\/p>\n\n\n\n<p><strong>B. Onward Subprocessing<\/strong>: For the purposes of Clause 11 of these Clauses, the data&nbsp; exporter hereby consents to the data importer subcontracting any or all of its data&nbsp; processing operations performed under these Clauses in accordance with the DPA.&nbsp;<\/p>\n\n\n\n<p><strong>C. Data importers established in \u2018adequate\u2019 countries<\/strong>: To the extent monday.com Ltd. is&nbsp; the recipient and processor of personal data pursuant to these Clauses and is:<\/p>\n\n\n\n<p>(i) established in a jurisdiction recognised by the European Commission (or, if the&nbsp; data exporter is established in the UK, then recognized by the relevant authorities&nbsp; in the UK) as providing an adequate level of protection for personal data, the terms&nbsp; of the DPA concerning transfers of personal data to other countries shall apply,&nbsp; such that these Clauses will apply solely on onward transfer of the imported data&nbsp; to monday.com Ltd.\u2019s sub-processors that are located in a jurisdiction not&nbsp; recognised by the European Commission as providing an adequate level of&nbsp; protection for personal data; or<\/p>\n\n\n\n<p>(ii) established in a jurisdiction not recognised by the European Commission as&nbsp; providing an adequate level of protection for personal data, monday.com Ltd. shall&nbsp; be the data importer for the purposes of these Clauses.<\/p>\n\n\n\n<p><strong>D. Data exporters established outside the European Economic Area<\/strong>: To the extent the&nbsp; data exporter pursuant to these Clauses is established in a jurisdiction outside the&nbsp; European Economic Area, these Clauses shall apply solely in respect of transfers of&nbsp; personal data concerning individuals residing within the European Economic Area. In such&nbsp; cases, references to \u201cMember State\u201d shall be read as references to the Member State&nbsp; applicable in respect of the data exporter\u2019s processing activities in relation to these&nbsp; Clauses which concern personal data of individuals residing within the European&nbsp; Economic Area.&nbsp;<\/p>\n\n\n\n<p><strong>E. Instructions<\/strong>: For the purposes of Clause 5(a) of the Standard Contractual Clauses, the&nbsp; processing described in the DPA and any other mutually agreed upon written instrument&nbsp; by data exporter and data importer constitute as data exporter\u2019s instructions to data&nbsp; importer at the time of entering the DPA and\/or such written instrument, to process&nbsp; Personal Data on data exporter\u2019s behalf. Any additional or alternate instructions shall be&nbsp; subject to the terms of the DPA.<\/p>\n\n\n\n<p><strong>F. Suspension of Data Transfers and Termination<\/strong>: If, pursuant to Clause 5(a), the data&nbsp; exporter intends to suspend the transfer of personal data and\/or terminate these Clauses,&nbsp; it shall provide notice to the data importer and provide data importer with 30 days to cure&nbsp; the non-compliance (\u201c<strong>Cure Period<\/strong>\u201d). If after the Cure Period the data importer has not or&nbsp; cannot cure the non-compliance then the data exporter may suspend or terminate the<\/p>\n\n\n\n<p>transfer of personal data immediately. The data exporter shall not be required to provide&nbsp; such notice in instances where it considers there is a material risk of harm to data subjects&nbsp; or their personal data. Notwithstanding any other terms in this Section F, in the event these&nbsp; Clauses cease to be an appropriate safeguard for the transfer of the personal data in&nbsp; accordance with the applicable data protection law by virtue of a binding decision by a&nbsp; competent supervisory authority, the terms of the DPA concerning modifications&nbsp; necessary pursuant to legislative and regulatory changes shall apply.&nbsp;<\/p>\n\n\n\n<p><strong>G. Data importer\u2019s assistance<\/strong>: In the event the data exporter seeks to conduct any&nbsp; assessment of the adequacy of these Clauses for the protection of the personal data being&nbsp; transferred, the data importer shall provide reasonable assistance to the data exporter for&nbsp; the purpose of any such assessment.&nbsp;<\/p>\n\n\n\n<p><strong>H. Audit Rights<\/strong>: Data exporter acknowledges and agrees that it exercises its audit right&nbsp; under Clause 5(f) and Clause 12.2 by instructing data importer to comply with the audit&nbsp; measures described in the DPA.&nbsp;<\/p>\n\n\n\n<p><strong>I. Transfers from Switzerland<\/strong>: Notwithstanding Section D above, in respect of data&nbsp; transfers from a data exporter established in Switzerland, these Clauses shall be&nbsp; interpreted in accordance with the governing law in Switzerland. In such cases, references&nbsp; throughout these Clauses to Directive 95\/46\/EC shall be read as references to the relevant&nbsp; legislation in Switzerland concerning data protection, privacy, data security or the handling&nbsp; of information about individuals applicable to the data exporter, and defined terms in&nbsp; Clause 1 shall have the meanings given to them (or reasonably equivalent terms) in such&nbsp; legislation. References to \u201cMember State\u201d shall be read as references to Switzerland.&nbsp; Without prejudice to Section A above, the parties further agree that that in respect of data&nbsp; transfers where, under applicable privacy laws, the definition of \u201cpersonal data\u201d (or such&nbsp; reasonably equivalent term) extends to information relating to legal entities, references in&nbsp; these Clauses to \u201cpersonal data\u201d shall also include information relating to legal entities.&nbsp; The parties further agree that, where required by applicable law or upon the request of the&nbsp; relevant supervisory authority, they will do all such further acts as may reasonably be&nbsp; required to grant effect to this Section H, including (but not limited to) executing all&nbsp; documents.<\/p>\n\n\n\n<p><strong>APPENDIX 1&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>to the Standard Contractual Clauses<\/strong><\/p>\n\n\n\n<p><strong>Data exporter&nbsp;<\/strong><\/p>\n\n\n\n<p>The data exporter is the entity identified as \u201cCustomer\u201d or \u201cController\u201d in the DPA. <strong>Data importer&nbsp;<\/strong><\/p>\n\n\n\n<p>The data importer is monday.com Ltd., a provider of web services, and\/or its sub-processor (as&nbsp; such term is used in the DPA), as determined by monday.com Ltd. in accordance with the terms of the DPA concerning cross-border data transfers.<\/p>\n\n\n\n<p><strong>Data subjects&nbsp;<\/strong><\/p>\n\n\n\n<p>The personal data transferred concern the categories of data subjects defined in the DPA.&nbsp; <strong>Categories of data&nbsp;<\/strong><\/p>\n\n\n\n<p>The personal data transferred concern the categories of data defined in the DPA.&nbsp; <strong>Processing operations&nbsp;<\/strong><\/p>\n\n\n\n<p>The personal data transferred will be subject to the basic processing activities defined in Annex&nbsp; 1 to the DPA.&nbsp;<\/p>\n\n\n\n<p><strong>APPENDIX 2&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>to the Standard Contractual Clauses<\/strong><\/p>\n\n\n\n<p><strong>Description of the technical and organisational security measures implemented by the&nbsp; data importer in accordance with Clauses 4(d) and 5(c) (or document\/legislation attached):&nbsp;<\/strong><\/p>\n\n\n\n<p>The technical and organisational security measures implemented by the data importer are as&nbsp; described in the DPA.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sign the Online Version The data exporter and the data importer, as defined under the monday.com Data Processing &nbsp;Addendum or other agreement or addendum effectively governing the processing of personal&nbsp; data by the data importer on behalf of the data exporter, including all annexes, exhibits and&nbsp; appendices thereto (\u201cDPA\u201d), each a &#8220;party&#8220;; together the &#8220;parties&#8220;,&#8230;<\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[103],"tags":[],"class_list":["post-3935","post","type-post","status-publish","format-standard","hentry","category-privacidade-pt"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores) - monday.com Legal Portal<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores) - monday.com Legal Portal\" \/>\n<meta property=\"og:description\" content=\"Sign the Online Version The data exporter and the data importer, as defined under the monday.com Data Processing &nbsp;Addendum or other agreement or addendum effectively governing the processing of personal&nbsp; data by the data importer on behalf of the data exporter, including all annexes, exhibits and&nbsp; appendices thereto (\u201cDPA\u201d), each a &#8220;party&#8220;; together the &#8220;parties&#8220;,...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/\" \/>\n<meta property=\"og:site_name\" content=\"monday.com Legal Portal\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-24T14:49:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-26T11:55:31+00:00\" \/>\n<meta name=\"author\" content=\"Legal Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Legal Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"18 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/\",\"url\":\"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/\",\"name\":\"Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores) - monday.com Legal Portal\",\"isPartOf\":{\"@id\":\"https:\/\/monday.com\/l\/ja\/#website\"},\"datePublished\":\"2020-11-24T14:49:27+00:00\",\"dateModified\":\"2021-10-26T11:55:31+00:00\",\"author\":{\"@id\":\"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb\"},\"inLanguage\":\"pt\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/monday.com\/l\/ja\/#website\",\"url\":\"https:\/\/monday.com\/l\/ja\/\",\"name\":\"monday.com Legal Portal\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/monday.com\/l\/ja\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb\",\"name\":\"Legal Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt\",\"@id\":\"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g\",\"caption\":\"Legal Team\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores) - monday.com Legal Portal","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/","og_locale":"pt_PT","og_type":"article","og_title":"Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores) - monday.com Legal Portal","og_description":"Sign the Online Version The data exporter and the data importer, as defined under the monday.com Data Processing &nbsp;Addendum or other agreement or addendum effectively governing the processing of personal&nbsp; data by the data importer on behalf of the data exporter, including all annexes, exhibits and&nbsp; appendices thereto (\u201cDPA\u201d), each a &#8220;party&#8220;; together the &#8220;parties&#8220;,...","og_url":"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/","og_site_name":"monday.com Legal Portal","article_published_time":"2020-11-24T14:49:27+00:00","article_modified_time":"2021-10-26T11:55:31+00:00","author":"Legal Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Legal Team","Est. reading time":"18 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/","url":"https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/","name":"Cl\u00e1usulas Contratuais Padr\u00e3o (SCC, Standard Contractual Clauses) (Controlador aos Processadores) - monday.com Legal Portal","isPartOf":{"@id":"https:\/\/monday.com\/l\/ja\/#website"},"datePublished":"2020-11-24T14:49:27+00:00","dateModified":"2021-10-26T11:55:31+00:00","author":{"@id":"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb"},"inLanguage":"pt","potentialAction":[{"@type":"ReadAction","target":["https:\/\/monday.com\/l\/pt\/privacidade-pt\/clausulas-contratuais-padrao\/"]}]},{"@type":"WebSite","@id":"https:\/\/monday.com\/l\/ja\/#website","url":"https:\/\/monday.com\/l\/ja\/","name":"monday.com Legal Portal","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/monday.com\/l\/ja\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt"},{"@type":"Person","@id":"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb","name":"Legal Team","image":{"@type":"ImageObject","inLanguage":"pt","@id":"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g","caption":"Legal Team"}}]}},"_links":{"self":[{"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/posts\/3935","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/comments?post=3935"}],"version-history":[{"count":1,"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/posts\/3935\/revisions"}],"predecessor-version":[{"id":3948,"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/posts\/3935\/revisions\/3948"}],"wp:attachment":[{"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/media?parent=3935"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/categories?post=3935"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/monday.com\/l\/pt\/wp-json\/wp\/v2\/tags?post=3935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}