Are international data transfers involved?

Wyser's standard service is designed around UK and EEA processing and storage.

The Data Protection Agreement (DPA) permits transfers to, or access from, countries outside the UK or EEA where this is permitted under applicable data protection legislation and requires appropriate transfer arrangements where applicable.

For example, in some circumstances a specialist subject matter expert may need to access customer data from outside the UK or EEA to help resolve a technical or service issue. This is not standard practice. Where this type of access is required, Wyser would seek permission from the organisation that controls the data before any such access takes place. The access would be carried out under the agreement and in accordance with the DPA and applicable data protection requirements.

The organisation using Wyser ASSIST remains responsible for determining whether its use of the service involves an international transfer and considering this as part of its DPIA.

Wyser maintains a current list of approved subprocessors. Where a new subprocessor is proposed, customers are notified and have an opportunity to object in accordance with the DPA.

Clients should check the current subprocessor list as part of their DPIA and supplier assurance process.