Cooperation with processors of personal data in countries outside the EEA for which the European Commission has determined that they provide an adequate level of protection (this includes US companies certified under the approved EU-US Data Protection Framework, such as Microsoft),
and in the absence of the aforementioned decision of the European Commission:
- the use of standard contractual clauses in contracts with such companies,
- application of binding corporate rules approved by the relevant supervisory authority,
- application of the conditions set forth in Article 49 of the GDPR.
The Controller ensures that any transfer of personal data is carried out based on appropriate agreements, in a secure and controlled manner.In any of the cases described in paragraphs 2-4 above, you may request further information on the safeguards in place in this regard, obtain a copy of these safeguards and information on where they are available.