What do we offer?
Cross-border transfer of personal data outside the European Economic Area may increase the risk that individuals will not be able to exercise their right to personal data protection. Therefore, such data transfers are only possible under the conditions specified in the GDPR. We will provide support in assessing whether the transfer of data to a third country is possible, and if so, how to secure it to ensure the transfer complies with GDPR regulations.
Take advantage of our experience and raise the standards of personal data security.
How do we work?
1. Recognation
We will identify areas where the transfer of personal data abroad is necessary. We will recognize situations in which data is exchanged with individuals from third countries.
2. Preparation and delivery of documentation
We will prepare and provide foreign contractors with the necessary documents to legalize the exchange of personal data.
3. Signing of documents
We will ensure that the contractor signs the documents. We will also handle their archiving.
4. Support
In case of any questions, we will address any doubts from both you and your foreign contractors.
5. Audit
Sometimes, in addition to transferring and signing documents, it is necessary to conduct an audit of foreign contractors. This is a procedure to check whether the security measures implemented by the contractor comply with the standards.
6. Implementation
After conducting the audit, we offer assistance in implementing the appropriate solutions to ensure that the transfer of personal data occurs smoothly and in compliance with the applicable law.
Let’s talk about your project! Fill out the form
What else do we offer?
We will help implement personal data security in your organization or its individual components. Check out our offer for other services related to personal data security.
GDPR implementation
Discover the scope of our serviceGDPR audit
Discover the scope of our serviceAudit of data processors
Discover the scope of our serviceRisk analysis in GDPR
Discover the scope of our serviceDPIA in GDPR
Discover the scope of our serviceGDPR documentation
Discover the scope of our serviceAutomation of process assessment
Discover the scope of our servicePrivacy by design and privacy by default
Discover the scope of our serviceOutsourcing DPO
Discover the scope of our serviceSupport for DPO
Discover the scope of our serviceGDPR training
Discover the scope of our serviceWhy us?
Knowledge and experience
Tailored services
Favorable conditions
We work as equals!
They trusted us
Transfer of personal data abroad from our perspective
What is a third country?
A third country, in the context of GDPR, refers to all countries outside the European Economic Area (EEA).
Who is the personal data transfer service abroad aimed at, and what does it involve?
Here, we need to refer to what we mean by the transfer of personal data abroad. These are both complex and ongoing situations, as well as incidental ones. An example of a complex situation would be, for instance, global IT support outsourcing. An example of ongoing cooperation could be the use of servers located in a third country. Incidental cases could include, for example, a job interview where someone from a third country has access to a CV or simple correspondence with employees of a contractor from Vietnam. If such situations occur in your company, you should ensure appropriate safeguards are in place.
How is the transfer of personal data to third countries conducted?
GDPR outlines 8 standard ways to legalize such a transfer. The most commonly used method is filling out the data protection clauses adopted by the European Commission. However, in some situations, standard methods may not be sufficient. In such cases, an audit should be conducted at the contractor’s site, and appropriate security systems should be implemented, ensuring the required level of data protection in the third country.
How much does the transfer of personal data to third countries cost?
The price depends on the number of entities with which cooperation is required to fulfill the obligations. Sometimes, standard solutions are not enough to meet GDPR requirements, so the range of actions may not always be identical. The pricing is based on the workload, which is determined at the beginning of the collaboration.