Hello,
I am looking for some assistance with the dreaded GDPR with a special focus on what is classed as transfer of data outside the EEA.
We are currently recruiting for a designer to work in our HQ in Scotland however the manager/team leader of the design team are based in India and will need to be involved in the recruitment and selection process.
We utilise Google Drive for storing recruitment candidates with limited people having access. If we were to give the manager/team leader in India access to these folders would this be classed as a data transfer? If that is, can you advise what I would need to put in place to ensure they are able to access the CV's?
Sorry I have another query based regarding data transfer outwith the EEA. We have a globally distributed team of contractors some of which are team leaders and are required to authorise timesheets and invoices for their team (both documents will have personal details on them). A couple of examples of the process are
Contractor A based in San Francisco sends his timesheet and invoice via e-mail to their team leader based in Argentina, once authorised the team leader then sends the timesheet and invoice to payroll at HQ in UK for processing. Is this classed as data transfer as the information is coming to us from outwith the EEA
Contractor A based in San Francisco sends his timesheet and invoice via e-mail to payroll at HQ, this has not yet received sign off and needs to be sent to the team leader via e-mail in Argentina for authorisation, once authorised this is sent back to UK. I am guessing this would be classed as data transfer?
Any advice and guidance on data transfer would be greatly appreciated.
Thanks in advance
Victoria
Replies