International transfers:

''(a)Any transfer by us of personal data to a third country or an international organisation that is not recognised under GDPR as having adequate safeguards in place with respect to your personal data shall be done only on the basis of documented instructions from you or in order to fulfil a specific requirement under Union or Member State law to which we are subject and shall take place in compliance with Chapter V of Regulation (EU) 2016/679 or Regulation (EU) 2018/1725. For this purpose, the parties agree to the Standard Contractual Clauses to comply with Regulation (EU) 2016/679 as set out under the Data Protection Legislation to the extent that any of your personal data is transferred to a country outside the EEA that is not deemed by the European Union to have adequate safeguards in place.''

Section 6.8 of the DPA