# How Does the SPF Deal with Personal Data? Is my Privacy Protected?

**URL:** <https://forum.clarin.eu/t/how-does-the-spf-deal-with-personal-data-is-my-privacy-protected/410>\
**Category:** Service Provider Federation\
**Created:** [15 August 2024 13:39 UTC](https://forum.clarin.eu/t/how-does-the-spf-deal-with-personal-data-is-my-privacy-protected/410 "2024-08-15T13:39:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![alekoe](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.clarin.eu/alekoe/32/4_2.png) [@alekoe](https://forum.clarin.eu/u/alekoe)\
**Post date:** [15 August 2024 13:39 UTC](https://forum.clarin.eu/t/how-does-the-spf-deal-with-personal-data-is-my-privacy-protected/410/1 "2024-08-15T13:39:27Z")

</div>

All CLARIN Service Providers respect the relevant legal frameworks for the protection of personal data, especially the [EU data protection directive](http://en.wikipedia.org/wiki/Data_Protection_Directive).

For details we refer to section 15 in [the SPF agreement](http://www.clarin.eu/system/files/CLARIN_Service_Provider_Start-Up_Federation_Agreement_Final.pdf):

**Data Protection and Data Security**  
Each Party will not use the personal data concerning the End Users of the services, including but not limited to such personal data provided by an Identity Federation, for any other purpose than making available the CLARIN material. Each Party will treat the personal data, to which it has access, in the utmost confidence and not disclose it to third parties.

Each Party is committed to comply with the obligations imposed by the currently valid legislation on personal data protection, concerning without limitation processing and disclosure of personal data, obligations of non-disclosure and secrecy, as well as providing a sufficient data security level for the services.

If the domicile of the Party is outside the EU or the European Economic Area (EEA) and the Party is in a country for which the European Commission has not verified the adequate level of privacy protection according to the Directive on Data Protection, or if the domicile of the Party is in the United States of America (USA) and the Party is not committed to adhere to the Safe Harbor principles and the Frequently Asked Questions accepted by the U.S. Department of Commerce and the European Commission to comply with the principles on privacy protection, the Party shall adhere to the stipulations of the currently valid EU Directive on Data Protection regarding processing of personal data.

If the domicile of the Party is in a country for which the European Commission has verified the adequate level of privacy protection according to the EU Directive on Data Protection, the Party shall adhere to the currently valid legislation in the country of domicile when processing personal data subject to this Agreement.

If the domicile of the Party is in the USA and the Party has declared to adhere to the Safe Harbor principles and the Frequently Asked Questions to comply with the principles, the Party shall adhere to the said principles and the related instructions when processing personal data subject to this Agreement.