Some of our external third parties are based outside the EU so their processing of your personal data will involve a transfer of data outside the EU. We may transfer your personal data to “third countries” outside the EU/EEA, including the United States and India. Such transfers are based on either the standard contractual clauses of the European Commission (here) and adequacy decisions from the European Commission (here) or another applicable legal basis for such transfer.

Whenever we transfer your personal data out of the EU, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

1. We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
2. Where we use certain service providers, we may use specific contracts approved for use in the EU which give personal data the same protection it has in the EU.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EU.