eBay Data Processing Agreement (DPA)

The eBay Data Processing Agreements (DPAs) terms include the Controller to Controller and the Controller to Processor DPAs as set forth below, each outlining the parties’ obligations in processing eBay Personal Data as described in each document.

Controller to Controller

EBAY DATA PROCESSING TERMS IN VENDOR ROLES ACTING AS A DATA CONTROLLER IN PROCESSING EBAY PERSONAL DATA.

This (Controller to Controller) Data Processing Addendum (“Addendum”) forms a part of the Main Service Agreement (the “Agreement”) entered into between the eBay group company (“eBay”) specified in Appendix 2 of the Addendum and the entity (“Vendor”) that signed the Agreement, and with eBay, each a “Party” and together, “Parties” on the Effective Date, for the purpose of ensuring that any Personal Data (as defined in the Addendum) collected or utilized by Vendor is handled in a manner that is secure and otherwise in accordance with terms of the Agreement, Vendor’s obligation as a Controller, this Addendum, and Applicable Data Protection Law (as defined in the Addendum). In the event of any conflict between the terms of this Addendum and the terms of the Agreement, prior data processing agreements, addenda, or similar terms between the Parties, the terms of this Addendum shall prevail.

Controller to Processor

EBAY DATA PROCESSING TERMS FOR SUPPLIERS OR PROCESSORS (COLLECTIVELY ACTING AS DATA PROCESSORS).

This (Controller to Processor) Data Processing Addendum (“Addendum”) forms a part of the Main Service Agreement (the “Agreement”) entered into between the eBay group company (“eBay”) specified in Appendix 2 of the Addendum and the entity that signs the Agreement (“Supplier” or “Processor”), and with eBay, each a “Party” and together, “Parties” on the Effective Date, for the purpose of ensuring that any Personal Data (as defined in the Addendum) collected or utilized by Supplier or Processor is handled in a manner that is secure and otherwise in accordance with terms of the Agreement, this Addendum, and Applicable Data Protection Law (as defined in the Addendum). In the event of any conflict between the terms of the Addendum and the terms of the Agreement, prior data processing agreements, addenda, or similar terms between the Parties, the terms of this Addendum shall prevail.

Standard Contractual Clauses Module 1

Standard Contractual Clauses Module 2

UK International Data Transfer Addendum

Transfer Impact Assessment