Data Transfer

We are committed to ensuring that your information is protected and apply safeguards in accordance with applicable law. To learn more about security, including the security steps we have taken and security steps you can take, please read Security at Yahoo.

Personal data transfers from the EEA 

Oath may process personal information related to individuals in the European Economic Area (‘EEA’) and may transfer that information to countries outside the EEA for the purposes described in the Oath Privacy Policy
The United States and other non-EEA countries have different laws on data protection and rules in relation to government access to information. If you are based in the EEA, when your data is moved from your home country to a third country outside the EEA, some of these countries may not have the same data protection safeguards as your home country.

To the extent that Oath is deemed to transfer information about you outside the EEA, Oath relies separately, alternatively and independently on the following legal bases to transfer your information: 

Standard contractual clauses. The European Commission has adopted standard data protection clauses that provide safeguards for personal data that is transferred outside the EEA. We often use these clauses when transferring personal data outside the EEA including to our affiliates. You can request a copy of our standard contractual clauses here.
Contractual necessity. You can choose whether or not you want to use our Services. However, if you want to use our Services, you need to agree to our Terms of Service, which set out the terms of the contract between us and you. As we operate in countries worldwide (including in the United States) and use technical infrastructure in these countries, to be able to deliver our Services to you in accordance with the contract between us, we may need to transfer your information to other jurisdictions where necessary. We can’t provide you with our Services without moving your data around the world.  
Privacy Shield. Some companies to which we may transfer your information in the United States may be certified to receive your information under the Privacy Shield programme.