1 minute read
ANNEX 1: DEFINITIONS
• “Third country” means any country that is not a Member State of the EEA. • “EEA” means the European Economic Area and it includes the Member States of the European
Union and Iceland, Norway and Liechtenstein. The GDPR applies to the latter by virtue of the EEA
Advertisement
Agreement, in particular its Annex XI and Protocol 37. • “GDPR” refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27
April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data
Protection Regulation). • “The Charter” refers to the Charter of Fundamental Rights of the European Union, OJ C 326, 26.10.2012, p. 391–407. • “CJEU” or “the Court” refer to the Court of Justice of the European Union. It constitutes the judicial authority of the European Union and, in cooperation with the courts and tribunals of the Member
States, it ensures the uniform application and interpretation of EU law. • “Data exporter” means the controller or processor within the EEA who transfers personal data to a controller or processor in a third country. • “Data importer” means the controller or processor in a third country who receives or gets access to personal data transferred from the EEA. • “Article 46 GDPR transfer tool”: refers to the appropriate safeguards under Article 46 GDPR that data exporters shall put in place when transferring personal data to a third country, in the absence of an adequacy decision pursuant to Article 45(3) GDPR. Article 46(2) and (3) of the GDPR contains the list of Article 46 GDPR transfer tools that controllers and processors may use. • “SCCs” means standard data protection clauses (or “standard contractual clauses”) adopted by the European Commission for personal data transfers between controllers or processors in the
EEA and controllers or processors outside the EEA. Standard contractual clauses adopted by the
European Commission are a transfer tool under the GDPR, as per Article 46(2)(c) and (5) GDPR.
