What lawful basis do you rely on for transferring personal data outside the EEA (e.g., EU Standard Contract Clauses or by being registered with Privacy Shield)
Where will personal data be processed and what processing operations are being carried out from these locations
Please describe the steps which you have taken to comply with the General Data Protection Regulation (GDPR)