Vendor registry · Payments
PayPal: DPA, subprocessors and transfers
Last checked 16 September 2026. Changes to this record are tracked.
- Contracting legal entity
- PayPal (Europe) S.à r.l. et Cie, S.C.A.
- Country of registration
- Luxembourg
- Transfer mechanism
- Standard contractual clauses (SCC)
Contract terms adopted by the European Commission that the vendor signs to protect personal data transferred outside the EEA. Usually part of the vendor's DPA.
- Subprocessor list
- https://www.paypal.com/ie/legalhub/paypal/third-parties-list
- Security or trust page
- https://www.paypal.com/ie/webapps/mpp/paypal-safety-and-security
What to put in your subprocessor list
A ready row. Replace the purpose with what your client actually uses PayPal for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| PayPal | PayPal (Europe) S.à r.l. et Cie, S.C.A. | LU | Payments | SCC | — |