Legal Mechanisms

Do you use appropriate legal mechanisms for all international transfers of personal data?

We use sub-processors to deliver various parts of our service, some of which are outside the UK. We have a signed contract with every sub-processor, each of which includes Standard Contractual Clauses (SCCs) that are sully GDPR compliant and have been approved by the UK Information Commissioner’s Office (ICO). We also fully comply with the ICO's international data transfer standards including Data Transfer Risk Assessments. 

More information: https://www.commonplace.is/subprocessors