International Transfers of Personal Information

Last updated 02.10.2023

No matter where your data is processed, MoreThanDigital is committed to applying the protections as outlined in our privacy policy. Our adherence to various international frameworks ensures that your data is always protected during transfers and processing.

Adequacy Decisions

Certain countries outside of the European Economic Area (EEA) have been recognized by the European Commission for offering an adequate level of data protection. This recognition facilitates the transfer of data from the European Union (EU) and countries such as Norway, Liechtenstein, and Iceland to these “adequate” countries. The UK and Switzerland have implemented similar mechanisms. MoreThanDigital leans on the following adequacy determinations for data transfers:

• European Commission adequacy decisions
• UK adequacy regulations
• Swiss adequacy decisions

EU–US and Swiss–US Data Privacy Frameworks

In alignment with our Data Privacy Framework certification, MoreThanDigital complies with the EU–US and Swiss–US Data Privacy Frameworks (DPF) and adheres to the principles set forth by the US Department of Commerce regarding the handling of personal information from the EEA, Switzerland, and the UK. MoreThanDigital is responsible for any personal information shared under the Onward Transfer principle with third parties for external processing on our behalf.

Concerns or inquiries related to our adherence to DPF can be addressed to our team, and we encourage users to contact us for any clarifications regarding our privacy practices in relation to our DPF certification. In certain circumstances, the DPF offers a binding arbitration resolution mechanism for unresolved complaints.

Standard Contractual Clauses

To ensure appropriate data protection safeguards during transfers from the EEA to third countries, we sometimes rely on Standard Contractual Clauses (SCCs). These SCCs, endorsed by the European Commission, offer written guarantees between transacting parties. They’re designed to provide robust data protection standards, and their content is fixed (See the SCCs approved by the European Commission here, here, and here). These clauses are also utilized for data transfers to locations outside the UK and Switzerland. Whenever necessary and where a transfer isn’t covered by an adequacy decision, MoreThanDigital employs SCCs to guarantee the protection of your data.

Assurance

Our comprehensive approach to data protection ensures that users’ personal information remains secure and is processed in compliance with applicable data protection laws, providing users with a high level of trust in our services.