This Data Privacy Framework Notice (“Notice”) outlines how Handshake complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. Handshake has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Handshake has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in the Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Handshake commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK and Swiss individuals with inquiries or complaints regarding the handling of Personal Data received in reliance of the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Handshake at:

Stryder Corp. dba Handshake
225 Bush St
12th Floor
San Francisco, CA 94104
Attn: Privacy

Within the scope of this Notice, if a privacy complaint or dispute cannot be resolved through Handshake’s internal processes, and in compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Handshake commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to VeraSafe DPF Dispute Resolution Procedure. Subject to terms of the VeraSafe DPF Dispute Resolution Procedure, please submit the required information to VeraSafe here. These services of VeraSafe are provided at no cost to you.

Under certain conditions specified by the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles, you may also be able to invoke binding arbitration to resolve your complaint, as described in Annex I of the EU-U.S. DPF Principles and Annex I of the Swiss-U.S. DPF Principles.

The Federal Trade Commission has jurisdiction over Handshake’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DFP, and the Swiss-U.S. DPF.

The EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF describe Handshake’s accountability for Personal Data that it subsequently transfers to a third-party agent. Under the DPF Principles, Handshake shall remain liable if third party agents process the personal information in a manner inconsistent with the DPF Principles, unless Handshake proves it is not responsible for the event giving rise to the damage.

Handshake may be required to release the Personal Data of EU, UK and Swiss individuals in response to legal requests from public authorities, including to meet national security and law enforcement requirements.

For information about the categories of third parties to which Handshake discloses Personal Data and the purposes for such disclosure, your right to access your Personal Data, and the choices and means Handshake offers for limiting the use and disclosure of your Personal Data, please see the "How We May Share Personal Data We Collect" and "Your Rights and Choices" sections of our Privacy Policy.