Personal data may be transferred to other legal entities of SIX and to the relevant supervisory bodies, law enforcement agencies, tax authorities and courts as well as service providers and other business partners of SIX that are involved both within and outside the European Economic Area (EEA). This includes countries whose data protection standard deviates from the EEA standard. If data is transferred to a recipient in a country with a lower level of data protection appropriate safeguards are implemented to ensure an adequate level of protection. These safeguards may include data transfer agreements based on standard contractual clauses or other legally recognized mechanism.
In the international custody business data may be transferred in the countries in which the sub-custodian is located. For other services, data may be transferred to the following countries if necessary for the provision of the service: Austria, Belgium, Colombia, Cyprus, France, Germany, Greece, Hungary, Ireland, Italy, Liechtenstein, Luxembourg, Netherlands, Norway, Poland, Singapore, Spain, Sweden, United Arab Emirates, United Kingdom, United States.