Third country transfers. The Processor and its subcontractors may Process Personal Data under the scope of the Agreement in a country located outside of the EU or the countries approved by the EU Commission only if; a) The receiving organization of the Personal Data has been certified according to the Privacy Shield program, or; b) The transfer and the rights and freedoms of the data subjects are protected through binding corporate rules according to article 47 of the GDPR, or; c) The transfer and the rights and freedoms of the data subjects are protected through the Standard Contractual Clauses approved by the EU Commission.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Agreement