International Data Protection Schedules

Version: 1.6
This English version is provided for convenience. The German version controls.
These schedules apply only when the versioned country catalog enables the Customer country and the concrete processing triggers the relevant schedule.

1. EU/EEA

Article 28 GDPR and the supervisory-authority model required by mandatory law apply. The DPA's general authorization, 30-day notice, objection, and termination rules apply. EU SCC Module 2 or 3 is incorporated only where an actual restricted transfer requires it; another EU/EEA state alone does not.

2. United Kingdom

Mandatory UK GDPR processor duties apply. A UK IDTA or UK Addendum applies only where a concrete UK restricted transfer requires it. Competent UK authority rights and mandatory law remain unaffected.

3. Switzerland

Terms are adapted to the revised Swiss FADP where required. FDPIC competence and rights remain unaffected. Swiss adaptations to the EU SCCs apply only to a concrete transfer lacking adequate protection.

4. United States

Where covered state law treats Doli as service provider or contractor, Doli uses personal data only for specified business purposes; does not sell/share; does not combine outside the direct relationship except where allowed; provides equivalent protection and subprocessor flow-down; gives inability-to-comply notice; and permits reasonable monitoring, audit, and remediation. No HIPAA, FERPA, regulated-finance, biometric, or child-directed commitment is made.

5. Brazil

Where LGPD applies, controller/operator terms follow the actual processing; Doli is operador/suboperador for Customer Data. ANPD rights remain unaffected. ANPD clauses or other transfer mechanisms apply only when the actual international transfer requires them.

6. General international framework

Applicable Data Protection Law governs other enabled countries. Mandatory local rights prevail only as required. This schedule neither claims compliance with every law nor enables a country. Only the server-side versioned country catalog authorizes new purchases, after review of provider availability, sanctions, transfers, and the legal position. New business contracts are concluded exclusively through the Doli website.