Wix.com Privacy Policy

DATED 2023-01-17 · VERSION 20231101_rev01 · COMPARED WITH 20230601_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20230601_rev01 to 20231101_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 .1.
 User's personal information is controlled by Wix.com Ltd. in Israel, which the European Commission considers as a country offering an adequate level of protection for the Personal Information of E.U. Member State residents (see [here](https://eur-lex.europa.eu/legal-content/EN/TXT/)).
 .2.
+If you are in Europe, the U.K., or Switzerland, when we transfer your Personal Information to a location outside of Europe, We will make sure that (i) there is a level of protection deemed adequate by the European Commission or (ii) that the relevant Standard Contractual Clauses are in place (i.e., the applicable module of the Standard Contractual Clauses for the transfer of personal data to third countries pursuant to Regulation (E.U.) 2016/679 of the European Parliament and of the Council from June 4, 2021, as available [here](https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), and the ICO's International Data Transfer Addendum to the E.U. Commission Standard Contractual Clauses version B1.0, in force from 21 March 2022, as it is revised under Section ‎‎18 of its Mandatory Clauses).
+If you are in Europe, the U.K., or Switzerland, when we transfer your Personal Information to a location outside of Europe, We will make sure that (i) there is a level of protection deemed adequate by the European Commission or (ii) that the relevant Standard Contractual Clauses are in place (i.e., the applicable module of the Standard Contractual Clauses for the transfer of personal data to third countries pursuant to Regulation (E.U.) 2016/679 of the European Parliament and of the Council from June 4, 2021, as available [here](https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), and the ICO's International Data Transfer Addendum to the E.U. Commission Standard Contractual Clauses version B1.0, in force from 21 March 2022, as it is revised under Section ‎‎18 of its Mandatory Clauses), or (iii) we comply with Data Privacy Framework as applicable to data transfers to the United States and specified in clause 5.4 below, or (iv) we use another legally recognized transfer mechanism in the applicable jurisdiction.
 .3.
 ### #ItsThatEasy
 We may store and process Personal Information in the USA, Europe, Israel, or other jurisdictions, whether by ourselves or with the help of our affiliates and service providers.
 Wix's data storage providers are contractually committed to protect and secure your data.
 Among other things, Wix will ensure that there is the adequate level of protection or that relevant Standard Contractual Clauses are in place for the international transfer of our EU users' data.
 When Wix transfers E.U. Personal Information to a third country that the European Commission did not find will adequately protect your information, Wix ensures that it has taken additional measures to comply with the European data protection laws.
+Privacy Shield Certification: Wix and its affiliates, including DeviantArt Inc., participates in, and has certified its compliance with, the E.U.-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce's Privacy Shield List, [here](https://www.privacyshield.gov/welcome).
+Data Privacy Framework: Wix complies with Data Privacy Framework ("DPF") that embeds the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") as set forth by the U.S. Department of Commerce, European Commission, UK Government, and Swiss Federal Administration regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom (and Gibraltar), and Switzerland to the United States. Wix has certified to the U.S. International Trade Administration (ITA), within the U.S. Department of Commerce that it adheres to the Data Privacy Framework Principles. If there is any conflict between the terms in this Policy and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. Wix's commitment to subject the personal information described in this Policy to the Data Privacy Framework is subject to the enforcement and investigative powers of the United States Federal Trade Commission.
+With respect to Personal Information received or transferred pursuant to the Privacy Shield Framework, Wix.com is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission (FTC). In compliance with the Privacy Shield Principles, Wix.com commits to resolve complaints about our collection or use of your personal information. E.U. and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact us at: [privacy@wix.com](mailto:privacy@wix.com).
+To learn more about the Data Privacy Framework Program visit [https://www.dataprivacyframework.gov/s/,](https://www.dataprivacyframework.gov/s/,) and to view our certification, please click [here](https://www.dataprivacyframework.gov/s/participant-search/participant-detail).
+Wix.com has further committed to refer unresolved Privacy Shield complaints to an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, you may - under certain conditions described on the [Privacy Shield website](https://www.privacyshield.gov/article) - invoke binding arbitration when other dispute resolution procedures have been exhausted. If you have an unresolved privacy ,or data use, concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request) for more information or to file a complaint. The services are provided at no cost to you.
+Wix may share personal information with third parties under certain circumstances described in this Policy, subject to obligations under the Data Privacy Framework Principles extend to third parties acting as agents who help us run our business and provide services, and Wix remains liable should a third party acting as our agent process personal information subject to this Policy in a manner inconsistent with this Policy, except where Wix is not responsible for the event giving rise to the damage.
+For the avoidance of doubt, Wix does not rely on the Privacy Shield as a mechanism for transferring GDPR protected personal data. Currently, Wix only rely on other transfer mechanisms, as detailed above, such as the SCC or an adequacy decision.
+In compliance with the Data Privacy Framework Principles, Wix.com commits to resolve complaints about our collection or use of your personal information. E.U., UK and Swiss individuals with inquiries or complaints regarding our Data Privacy Framework policy should first contact us at: [privacy@wix.com](mailto:privacy@wix.com).
+Wix.com has further committed to refer unresolved Data Privacy Framework complaints to an alternative dispute resolution provider located in the United States. If you have an unresolved privacy, or data use, concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider TRUSTe at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request) for more information or to file a complaint. The services are provided at no cost to you.
+If you have such an unresolved complaint, under the recourse mechanism you may contact the applicable EU Data Protection Authorities (free of charge). Wix commits to cooperate with the DPAs and comply with the advice given by such authorities.
+If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, you may - under certain conditions described on the Data Privacy Framework website - invoke binding arbitration when other dispute resolution procedures have been exhausted. For more information on this option, please see Annex I of the Data Privacy Framework Principles.
 .4
 \. Users-of-Users
 ## 6\. Users-of-users' 'Personal Information'