Their DPO tells me this: "On international transfers: we don't currently have any transfers of personal data outside the EEA — processing and storage stay within the EEA. Should that change, we'd only transfer data under an appropriate safeguard (an EU Commission adequacy decision or the Standard Contractual Clauses, plus supplementary measures where needed), in line with GDPR Chapter V." But this DOES go outside the EEA right? So can the DPO be misinformed? @_elena@mastodon.social