The transfer of data and biological samples may take place to users in Member States of the European Union (EU) as well as the European Economic Area (EEA), where data protection is ensured by the General Data Protection Regulation (GDPR). Transfers to countries outside the EU or EEA (so called third countries) are only permitted where an adequate level of data protection is ensured. This is achieved either on the basis of an adequacy decision of the European Commission or - where no such decision exists - on the basis of appropriate safeguards (e.g. EU Standard Contractual Clauses, Binding Corporate Rules), together with enforceable rights of data subjects. List of countries with adequacy decisions.
Please note that fields marked with a blue asterisk (*) are required.