Transfers of personal data outside of the EU/EEA

Written procedures are in place which include a requirement that EG may only transfer personal data to third countries or international organizations in accordance with the data processing agreement with the data controller by using a valid basis of such transfer.  EG ensures that data transfers outside of the EU/EEA are compliant with the relevant provisions of the GDPR. ​

EG checks the suppliers' technical and organisational security measures to ensure that our customers' personal data is stored and handled correctly, and that the suppliers continue to have a security level that at least guarantees an equivalent level of security as in the EU.