Last updated: 9/10/2021
Why did NextRoll update its Data Protection Addendum (DPA)?
In light of the new Standard Contractual Clauses (SCCs) published by the European Commission on June 4, 2021 regarding the transfer of personal data outside the European Economic Area (EEA), we have updated our DPA to incorporate these new SCCs and better align with the regulatory requirements of the General Data Protection Regulation (GDPR) and the decision in the Schrems II case.
The updated DPA automatically comes into effect on September 27, 2021, for AdRoll customers that have agreed to our online DPA.
These “new” SCCs replace the three sets of old SCCs adopted under the Data Protection Directive 95/46/EC in 2001, 2004 and 2010.
Does this impact me as an AdRoll customer?
The updates to the DPA are only applicable to customers who use NextRoll to process personal data belonging to individuals residing in the EEA, Switzerland and the UK.
Do the new SSCs apply to transfers of personal data from the UK to the US?
No.
The old SCCs, not the new SCCs, were adopted by the UK’s Information Commissioner’s Office (ICO) after Brexit, and will continue to apply to transfers of personal data from the UK to the US until the UK recognizes the European Commission’s new SCCs or adopts its own version. This is reflected in the updated DPA.
For more information about UK data transfers, please view the ICO website on SCCs and data transfers.
What if I am a new AdRoll customer doing business in the EEA?
After September 27, 2021, the old SCCs will cease to be valid for future use with new AdRoll customers. This means that after September 27, 2021, new AdRoll customers requiring a Data Protection Addendum will have an opportunity to review and accept the updated DPA that incorporates the new SCCs available here.
Do I need to take any action if I am an existing AdRoll customer?
For customers who have agreed to our online DPA, no action is required. The updated DPA will automatically become part of your agreement with us effective September 27, 2021.
If you have a negotiated DPA with NextRoll which incorporates the prior version of the SCCs, those SCCs will remain effective until December 27, 2022. If you would like to update them prior to that date, please reach out to support@adroll.com. In any case, we will work with you to update the DPA before December 27, 2022.
Contact us to learn more
We are committed to supporting your data protection needs. To learn more about our data privacy efforts, please visit the Privacy and Security section of our Help Center and see our Privacy Notice.
If you have any questions regarding the DPA or new SCCs, please contact support@adroll.com.