UK Data Transfer Addendum

This UK Data Transfer Addendum consists of three parts:
Part A: Definitions
Part B: Special Terms
Part C: Approved Addendum

PART A: DEFINITIONS
  1. For the purposes of this UK Data Transfer Addendum, the following terms have the meanings set out below:
    1. "Applicable Product Terms" means the applicable products terms (such as the Meta Business Tools Terms and the Customer List Customer audience Terms) upon which you transfer personal data to Meta Platforms, Inc. and which state that this UK Data Transfer Addendum applies.
    2. "Approved EU SCCs" means the standard contractual clauses approved by the European Commission in Commission Decision 2021/914 dated 4 June 2021, for transfers of personal data in countries not otherwise recognised as offering an adequate level of protection for personal data by the European commission (as amended and updated from time to time).
    3. "Approved addendum" means the International Data Transfer Addendum to the Approved EU SCCs, Version B1.0, issued by the information commissioner under s119A of the Data Protection Act 2018 and dated 21 March 2022, as may be amended, replaced or superseded by the information commissioner.
  2. All other defined terms used in this UK Data Transfer Addendum shall have the meanings given to them in the Approved Addendum.

  3. PART B: SPECIAL TERMS
  4. You agree that:
    1. where regulatory approval is required for your use of this UK Data Transfer Addendum, you will obtain such approval;
    2. any sub-processor agreement to be provided under Clause 9(c) of the Approved EU SCCs (as applicable) will be provided to you on request only, is confidential, and will be limited to the data protection provisions related to personal data transferred under this UK Data Transfer Addendum with commercial information redacted;
    3. you will use your rights of information, reports and audit under the Data Processing Terms (as applicable) to satisfy any requirements you have for an audit under this UK Data Transfer Addendum, unless you demonstrate to Meta Platforms, Inc. that you cannot reasonably satisfy your obligations under the UK GDPR in this way. In that case, you can request that Meta Platforms, Inc. provides for other means of audit under this UK Data Transfer Addendum (using the least intrusive and disruptive means possible, e.g. additional information, questions, meetings or other means suggested by Meta Platforms, Inc.) to the extent you can show this is reasonably necessary to satisfy your obligations under the UK GDPR. Any other means of audit under this UK Data Transfer Addendum is subject to mutual agreement of the details such as (as relevant) manner, timing, scope, duration, control, confidentiality procedures, evidence requirements, auditor identity and subject to you paying all associated fees and costs, including for time expended by Meta Platforms, Inc. in connection with the request.
  5. Any claim or action brought by you against Meta Platforms, Inc. under or in connection with the Approved Addendum or this UK Data Transfer Addendum shall be subject to the exclusions and limitations of liability and disclaimers and disputes mechanism in Meta's Commercial Terms, Terms of Service and Applicable Product Terms as if they applied in respect to the Approved Addendum (as well as this UK Data Transfer Addendum) and as if Meta Platforms, Inc. was a party to them.
  6. This UK Data Transfer Addendum takes priority over the applicable product terms, the UK Controller Addendum and the Data Processing Terms to the extent of a conflict or inconsistency. The Approved Addendum takes priority over any other part of this UK Data Transfer Addendum to the extent of any conflict or inconsistency, and nothing in this UK Data Transfer Addendum, the applicable product terms, the UK Controller Addendum or the Data Processing Terms varies or modifies or affects the rights of any supervisory authority or data subject under the Approved Addendum, or under the UK GDPR.

PART C: APPROVED ADDENDUM
  1. The Approved Addendum is incorporated into this UK Data Transfer Addendum by reference and is deemed to have been entered into and completed as set out in this UK Data Transfer Addendum.
  2. In Table 1 of the approved addendum, the parties' details and key contact information is as set out below:
  3. Start dateThe date upon which the parties enter into the applicable product terms
    The partiesExporter (who sends the restricted transfer)Importer (who receives the restricted transfer)
    Parties' detailsFull legal name: Customer

    Main address (if a company registered address): The customer's address associated with its ad account or as otherwise specified in the applicable product terms.

    Official registration number (if any) (company number or similar identifier): The customer's company number associated with its ad account or as otherwise specified in the applicable product terms.
    Full legal name: Meta Platforms, Inc.

    Main address (if a company registered address): 1601 Willow Road, Menlo Park, CA 94025, US
    Key contactContact person's name, position and contact details: The customer's contact details associated with its ad account, or as notified by the data exporter to the data importer from time to time.Contact person's name, position and contact details: Details as notified by the data importer to the data exporter from time to time.
    Signature (if required for the purposes of Section ‎2)The parties agree that execution of the applicable product terms by the parties shall constitute execution of this UK Data Transfer AddendumThe parties agree that execution of the applicable product terms by the parties shall constitute execution of this UK Data Transfer Addendum

  4. In Table 2 of the approved addendum, information about the version of the standard contractual clauses, modules and selected clauses which this approved addendum is appended to is set out below:
  5. Addendum EU SCCsThe approved EU SCCs, including the appendix information and with only the following modules, clauses or optional provisions of the approved EU SCCs brought into effect for the purposes of this addendum:
    ModuleModule in operationClause 7 (Docking clause)Clause 11 (Option)Clause 9a (Prior authorisation or general authorisation)Clause 9a (Time period)Is personal data received from the importer combined with personal data collected by the exporter?
    1Yes (where Meta acts as a controller under the applicable product terms)NoNoN/AN/AN/A
    2Yes (where Meta acts as a processor under the applicable product terms)NoNoGeneral authorisation14 daysN/A
    3N/AN/AN/AN/AN/AN/A
    4N/AN/AN/AN/AN/AN/A

  6. In Table 3 of the approved addendum:
    Annex 1A: List of parties:
  7. Data Exporter:See Table 1 (above)
    Address and contact person's name, position and contact details:See Table 1 (above)
    Activities relevant to the data transferred:The activities relevant to the data transferred are as described in the Applicable Product Terms
    Signature and date:See Table 1 (above)
    Role:Controller

    Data Importer:See Table 1 (above)
    Address and contact person's name, position and contact details:See Table 1 (above)
    Activities relevant to the data transferred:The activities relevant to the data transferred are as described in the Applicable Product Terms
    Signature and date:See Table 1 (above)
    Role:Controller or processor (as applicable)
    Annex 1B: Description of transfer:
    Categories of data subjects whose personal data is transferred:As specified in the Applicable Product Terms
    Categories of personal data transferred:As specified in the Applicable Product Terms
    Frequency of the transfer:Continuous
    Nature of the processing:The personal data transferred will be subject to the following processing activities: collecting, recording, organising, structuring, storing, altering, retrieving, using, disclosing, combining, erasing and destroying personal data for the purposes described in the applicable product terms
    Purpose of the data transfer and further processing:The data importer will process personal data for the purposes described in the applicable product terms
    The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period:Until deletion in accordance with the provisions of the applicable product terms and the Data Processing Terms (as applicable).
    For transfers to sub-processors, also specify subject matter, nature and duration of the processing:As above
    Annex II: Technical and organisational measures including technical and organisational measures to ensure the security of the data:
    The data importer will implement appropriate technical and organisational measures to protect the personal data processed under this UK Data Transfer Addendum including against unauthorised or unlawful processing or accidental loss, alteration, disclosure or destruction; these include the measures listed in the Data Security Terms (as updated from time to time, for example, to reflect technological developments).
    Annex III: List of sub-processors (for Module 2):
    See Meta ads data sub-processors for the list of sub-processors.
  8. In Table 4 of the Approved Addendum, the data importer may end this Approved Addendum in accordance with the terms of the Approved Addendum.

Effective date: 25 April 2023
English (UK)
Tiếng Việt
中文(台灣)
한국어
日本語
Français (France)
ภาษาไทย
Español
Português (Brasil)
Deutsch
Italiano