Our operations are supported by a network of computers, servers and other infrastructure and information technology, including third party service providers – as identified in Section 5 above. Some of these are established in countries outside of the European Economic Area (“EEA”) or the UK. Your personal information identified in Section 3 above, are transferred outside of the EEA/UK as permitted by applicable data protection and privacy laws and regulations, including but not limited to the following countries: Australia, Hong Kong, Japan, the United States, China, Singapore.
WorldFirst has entered into standard contractual clauses (“SCCs”) for intra-group transfers of personal information including, without limitation to the WorldFirst Group Companies identified in Section 5 above that are located outside of the UK and/or the EEA in countries which do not offer an adequate level of data protection. The categories of personal information processed by the data importers are set out in Section 3 above. The data importers may also (onward) transfer personal information to third party recipients who may be located outside the EEA/UK for the purposes set out in Sections 4 and 5 above. The data importers will only make such (onward) transfers to recipients ensuring appropriate safeguards are in place where required, or where otherwise permitted by the SCCs and which may include entry into SCCs.
Where WorldFirst transfers personal information to other recipients located outside of the EEA/UK, WorldFirst will always ensure that the recipient is based in a country with adequate data protection laws (e.g., Japan), that appropriate contractual obligations (e.g., SCCs) are implemented, that they otherwise adhere to Binding Corporate Rules, or that an appropriate derogation to legitimise the transfer can be relied on.
If you would like further information or a copy of the relevant contractual safeguards, you can contact us using the details set out in Section 12 below.