APPENDIX [ D ] to [ Contract / Agreement] STANDARD CONTRACTUAL CLAUSES (EU Controller to Non-EU Processor)  [ Sections in yellow to be completed by the successful tenderer prior to signature of the Agreement] For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors  established in third countries which do not ensure an adequate level of data protection  European Investment Bank Address: 98- 100 Boulevard Konrad Adenauer  L-2950 Luxembourg  Tel. +352 43 79 1; e-mail: (the data  exporter )  And  (the data  importer )  each a ‘party’; together ‘the parties’,  HAVE AGREED on the following Contractual Clauses (the Clauses) in order to adduce adequate  safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals  for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.  For the purposes of the Clauses:  (a) ‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data  subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the  European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard  to the processing of personal data and on the free movement of such data;  (c) ‘the data importer’ means the processor who agrees to receive from the data exporter personal data  intended for processing on his behalf after the transfer in accordance with his instructions and the terms  of the Clauses and who is not subject to a third country’s system ensuring adequate protection within  the meaning of Article 25(1) of Directive 95/46/EC;  (d) ‘the sub-processor’ means any processor engaged by the data importer or by any other sub- processor of the data importer who agrees to receive from the data importer or from any other sub- processor of the data importer personal data exclusively intended for processing activities to be carried  Version 1.2: COMMISSION DECISION 2010/87/EU of 5 February 2010 on standard contractual clauses for the transfer of  personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the  Council, as amended. (b) ‘the data exporter’ means the controller who transfers the personal data;  Clause 1 - Definitions Name of the data importing organisation:  ................................................................................................................................................  Address:  ..................................................................................................................................................................  Tel.  ................................................................;  fax  ................................................................; e -mail:  ...............................................................  Other information needed to identify the organisation:  .................................................................................................................................................................. 