International transfers of your personal data

We may provide personal data to agents/subcontractors outside the European Economic Area (EEA). The EEA includes all European Union countries and the following three non-European Union countries Iceland, Liechtenstein and Norway.

The European Commission has made an "adequacy decision" in respect of a number of other countries outside of the EEA. An adequacy decision is a decision which confirms whether or not another country (outside of the EEA) provides an adequate level of protection of an individual’s personal data. If we intend to provide personal data to agents/subcontractors outside of the EEA then this will be outlined in the relevant service privacy policy which you can access from the relevant service area homepage.