Last Updated: November 24, 2023
Snowflake Inc. (“Snowflake”, “we”, “our” or “us”) has self-certified compliance with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce (collectively, the “Data Privacy Framework”). We have certified to the U.S. Department of Commerce that we adhere to the Data Privacy Framework Principles regarding the collection, use, and retention of personal information transferred from the European Union and European Economic Area member states, United Kingdom, and Switzerland to the United States in reliance on the Data Privacy Framework. Additional information, along with Snowflake’s self-certification, can be found at https://www.dataprivacyframework.gov.
1. Scope
Snowflake provides a generally available software-as-a-service offering hosted by or on behalf of Snowflake (the “Service”). Snowflake’s Data Privacy Framework certification applies to personal information that we collect and process in the course of our business, as described in the Snowflake Privacy Notice. It also applies to Customer Personal Data (as defined in the Customer Data Processing Addendum found at: https://www.snowflake.com/legal/) that our customers and their Authorized Users upload and store in the Service from the European Union and European Economic Area member states, the United Kingdom, and Switzerland, except where the agreement with the customer stipulates a different transfer mechanism recognized by the relevant authorities (e.g., standard contractual clauses). The types of personal information that our customers upload and store in the Service is at their discretion (subject to any limitations in the applicable agreement) and we only process such information in accordance with the customer’s instructions, as set forth in the applicable agreement.
Although we adhere to the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, we will not rely on these frameworks for personal information transferred from the United Kingdom and Switzerland until each of those frameworks enters into force.
2. Inquiries & Complaints
You may direct any inquiries or complaints concerning our Data Privacy Framework compliance to [email protected]. Snowflake will investigate and attempt to resolve complaints within 45 days. If your inquiry or complaint is not resolved as it relates to Snowflake’s compliance with the Data Privacy Framework, you may contact our U.S.-based third party dispute resolution provider (free of charge) at BBB Data Privacy Framework Program. If neither Snowflake or our dispute resolution provider resolve your complaint, you may be entitled to pursue binding arbitration. Further information about binding arbitration can be found here: https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf.
3. Disclosure Requests
Snowflake may be required to disclose personal information in response to lawful requests by public authorities, including national security or law enforcement requirements. More information on the types of requests, and bi-annual reports of requests made to Snowflake by public authorities, is available at https://www.snowflake.com/legal/snowflake-transparency-report/.
4. Onward Transfers
Snowflake is liable if any third party agents to which we disclose personal information fail to meet the obligations under the Data Privacy Framework for which Snowflake is responsible and such failure results in damages, unless we can prove that we are not responsible for the events giving rise to the damages.
5. Enforcement
Snowflake’s compliance with the Data Privacy Framework is subject to the investigative and enforcement powers of the U.S. Federal Trade Commission.
6. Changes to this Notice
We may change this Notice from time to time. If we make any changes to this Notice, we will change the Last Updated date above. If such changes are material in nature, we will provide you with additional notice (such as adding a statement to the main website page or sending you an email notification).
7. How to Contact Us
If you have any questions about this Notice or our Data Privacy Framework certification, please contact us at [email protected] or Snowflake Inc., Suite 3A, 106 East Babcock Street, Bozeman, Montana 59715.