European Court of Justice Safe Harbor Ruling—FAQ
Adobe has evaluated various options that will allow for the transfer of personal data from the EU/EEA to a non-EU/EEA country, such as the U.S.
Adobe has prepared a new Data Processing Agreement (DPA) for our enterprise customers, which includes Standard Contractual Clauses (SCCs), also referred to as Model Contracts. These SCCs provide a mechanism approved by the European Commission as offering adequate protection for data subjects when transferring personal data from the EU/EEA under the EU Data Protection Directive. If you are an Adobe enterprise customer transferring personal data in connection with Adobe cloud services from the EU/EEA to the U.S., please click here to request the new Data Processing Agreement and Standard Contractual Clauses.
Prior to the decision by the European Court of Justice (ECJ), Adobe relied primarily on its certification to the Safe Harbor Framework to ensure adequate protection for the transfer of personal data from the EU/EEA to the U.S. Following the ECJ’s decision, Adobe has decided to authorize these personal data transfers using European Commission-approved Standard Contractual Clauses (also referred to as Model Contracts).
Adobe has prepared a new Data Processing Agreement (DPA) for our enterprise customers, which includes the Standard Contractual Clauses (SCCs) to provide a mechanism approved by the European Commission as offering adequate protection for data subjects when transferring personal data from the EU/EEA under the EU Data Protection Directive. If you are an Adobe enterprise customer transferring personal data in connection with Adobe cloud services from the EU/EEA to the U.S., please click here to request the new Data Processing Agreement and Standard Contractual Clauses.
Adobe Safe Harbor Privacy Policy
Last updated: June 18, 2014
Adobe Inc. (our U.S. company) has certified to U.S.–E.U. Safe Harbor Framework and the U.S.–Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from our subsidiaries, corporate customers, and other business partners in the European Union member countries and Switzerland. To learn more about the Safe Harbor program, and to view the certification for Adobe Inc., visit https://www.ftc.gov/business-guidance/privacy-security/us-eu-safe-harbor-framework.
This Adobe Safe Harbor Privacy Policy describes how we handle personal information (1) collected by Adobe subsidiaries, our corporate customers, and other business partners located in the European Economic Area (the EEA) and Switzerland, which is then transferred to Adobe Inc. in the United States; and (2) received from companies that use one of Adobe’s hosted services (learn more) who operate in the EEA and Switzerland and processed by Adobe Inc. in the United States on behalf of the company. This Safe Harbor Privacy Policy supplements the Adobe Privacy Policy.
Personal information
Adobe Inc. may receive personal information from Adobe subsidiaries (see list of Adobe entities and our acquired companies), our corporate customers, and other business partners in the EEA and Switzerland, such as name, email address, company name, title, postal address, telephone number, and preferences regarding our applications and websites. Any personal information sent to us may be used by Adobe Inc. and its subsidiaries and their agents and business partners for the purposes described at the time the information was collected. If you agree to receive email or telephone marketing from us, personal information we receive will also be used for those purposes, as described in the Adobe Privacy Policy. If we plan to use personal information for a purpose that is incompatible with these purposes or if we plan to disclose personal information to a kind of company not described here, we will seek your consent to such uses or disclosures.
Agents and service providers
Adobe Inc. works with several companies to help us deliver our services to you on our behalf. These companies provide services such as offering customer support, processing credit card payments, and sending emails on our behalf. In some cases, these companies will have access to some of your personal information in order to provide services to you on our behalf. They are not permitted to use your information for their own purposes. Adobe Inc. requires that its agents and service providers that have access to personal information received by Adobe Inc. from the EU or Switzerland subscribe to the Safe Harbor Privacy Principles, be subject to the EU Privacy Directive or another adequacy finding, or enter into a written agreement that requires them to provide at least the same level of privacy protection as is required by the relevant Safe Harbor Principles.
Security
Adobe Inc. uses reasonable physical, electronic, and administrative safeguards to protect your personal information from loss; misuse; or unauthorized access, disclosure, alteration, or destruction.
Data integrity
Adobe Inc. takes reasonable steps to ensure that your personal information we process is accurate, complete, and current by using the most recent information provided to us.
Accessing and updating your information
You can request to review, update, or delete your personal information.
Information processed by Adobe on behalf of a company using an Adobe hosted service
Adobe Inc. provides hosted services to companies (learn more). As part of providing these hosted services, Adobe Inc. may receive and process your personal information if you are a customer of one of these companies. When Adobe Inc. provides these services, we are referred to as a data processor. As a data processor, Adobe Inc. acts on the instructions of these companies and uses reasonable physical, electronic, and administrative safeguards to protect this personal information from loss; misuse; or unauthorized access, disclosure, alteration, or destruction. Companies that use an Adobe hosted service are responsible for complying with all other obligations in relation to the personal information they may collect from you.