This notice provides additional information for users in the European Economic Area (EEA) and the United Kingdom (UK). Users in the EEA and UK have certain privacy rights as specified under EU and UK law, including the General Data Protection Regulations (GDPR) and UK Data Protection Act 2018. Our Privacy Principles and the privacy controls we offer to all users are in line with these laws—this notice makes sure we cover the EEA and UK-specific requirements. For example, all users can request a copy of their data, request deletion, and control their privacy settings in the app. For the full picture, check out our Privacy Policy.

If you’re a user in the EEA or UK, you should know that Snap Inc. is the controller of your personal information.

You can exercise your rights of access, deletion, correction, and portability as described in the Control Over Your Information section of the Privacy Policy.

Your country only allows us to use your personal information when certain conditions apply. These conditions are called “legal bases” and, at Snap, we typically rely on one of four:

• Contract. One reason we might use your information is because you’ve entered into an agreement with us. For example, when you buy an On-Demand Geofilter and accept our Custom Creative Tools Terms, we need to use some of your information to collect payment and make sure we show your Geofilter to the right people at the right place and time.

• Legitimate interest.  Another reason we might use your information is that we have – or a third party has – a legitimate interest in doing so. For instance, we need to use your information to provide and improve our services, including protecting your account, delivering your Snaps, providing customer support, and helping you find friends and content we think you’ll like. As most of our services are free, we also use some information about you to try and show you ads you’ll find interesting. An important point to understand about legitimate interest is that our interests don’t outweigh your right to privacy, so we only rely on legitimate interest when we think the way we are using your data doesn’t significantly impact your privacy or would be expected by you or there is a compelling reason to do so. We explain our legitimate business reasons for using your information in more detail here.

• Consent. In some cases we’ll ask for consent to use your information for specific purposes. If we do, we’ll make sure you can revoke your consent in our services or through your device permissions. Even if we’re not relying on consent to use your information, we may ask you for permission to access data like contacts and location.

• Legal obligation.  We may be required to use your personal information to comply with the law, such as when we respond to valid legal processing or need to take action to protect our users. Our policy is to notify Snapchatters when we receive legal process seeking their account information, with some exceptions. Learn more here.

You have the right to object to our use of your information. With many types of data, we’ve provided you with the ability to simply delete it if you don’t want us processing it any more. For other types of data, we’ve given you the ability to stop the use of your data by disabling the feature altogether. You can do these things in the app. If there are other types of information you don’t agree with us processing, you can contact us.

We may collect your personal information from, transfer it to and store and process it in the United States and other countries outside of where you live. You can find more information on the categories of third parties we share information with here.

Whenever we share information with a third party outside of where you live we make sure an adequate transfer mechanism is in place (such as Standard Contractual Clauses or the EU-U.S. /UK/Swiss Data Privacy Framework).

Snap Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

Snap Inc. has certified to the U.S. Department of Commerce that it:

a. adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.

b. adheres to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in our Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) Programme, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In accordance with the DPF principles, Snap remains liable for failures to comply with the DPF when we share your personal information with third parties working on our behalf under the Onward Transfer Principle (except for failures that are not our responsibility).

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Snap Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

Our compliance with the DPF's principles is also subject to the investigatory and enforcement powers of the US Federal Trade Commission. In certain circumstances, you have the right to invoke binding arbitration to resolve complaints that are not resolved by other means, as described in Annex I of the DPF Framework.

If you have complaints or questions about how we are complying with the DPF's principles when handling your personal information, please submit your inquiries as explained below.

We want you to know that you can submit any inquiries to our privacy support team or Data Protection Officer at dpo [at] snap [dot] com.  You also have the right to file a complaint with the data protection authority in the EEA, the Information Commissioner's Office in the UK, or the Federal Data Protection and Information Commissioner in Switzerland.

Snap Inc. has appointed Snap B.V. as its EEA representative. You can contact the representative here or at:

Snap B.V.
Keizersgracht 165, 1016 DP
Amsterdam, The Netherlands