TRANSFERRING INFORMATION OUTSIDE THE EU
We may transfer some personal information we collect about you to the following countries outside the EU: the United States and Switzerland, for example where this is necessary for the purposes of our commercial relationships with our investors, to send limited personal data to board members and directors who are not based in the EU, and for cloud storage provision.
There is an adequacy decision by the European Commission in respect of Switzerland. This means that Switzerland is deemed to provide an adequate level of protection for your personal information. There is not an adequacy decision by the European Commission in respect of the United States. This means that the United States is not deemed to provide an adequate level of protection for your personal information.
However, to ensure that your personal information that is transferred to the United States does receive an adequate level of protection we have put in place appropriate measures to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection, namely ensuring that the third parties have joined the EU-US Privacy Shield, or by agreeing standard contractual clauses with the third partiesation is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection, namely standard contractual clauses.
In addition, we seek to obtain copies or access to the third parties’ data protection policies where possible and only supply the minimum amount of personal data required for the purposes of the activities mentioned above.
If you require further information about these protective measures, you can request it from the Data Privacy Manager.