In case of data flow to a third country, it must be ensured that adequate measures are in place, and that a contract is signed. Furthemore, the contract should clearly state the rights of the data subject and the purpose of the data processing. It should also be assessed what additional transfer safeguards according to the GDPR are to be agreed upon. Accompanied by the conduction of a Transfer Impact Assessment (TIA).