In connection with the above purposes we occasionally, and only where necessary, transfer your personal data to third parties outside the European Economic Area (“EEA”). If and to the extent that we do so, we will ensure that appropriate measures are in place to comply with our obligations under applicable law governing such transfers, which may include:

• to a jurisdiction which has been subject to an “Adequacy” decision from the European Commission, meaning the jurisdiction is recognised as providing for an equivalent level of protection for personal data as is provided for in the European Union;
• entering into a contract governing the transfer which contains the “standard contractual clauses” approved for this purpose by the European Commission; or
• in respect of transfers to the United States of America, ensuring that the transfer is covered by the EU-US Privacy Shield framework.