ALK may share your personal data with others in connection with the purposes described in this notice, and we may make your personal data available to:
i. ALK EMPLOYEES & EXTERNAL PROCESSORS
The recipients of your personal data will be employees of entities belonging to the ALK Group and external processors providing specific services and processing personal data on our behalf (i.e. CROs, infrastructure and IT service providers, as well as third-party consultants). They will receive your personal data only on a ‘need-to-know’ basis, subject to confidentiality obligations and after signing appropriate legal agreements.
ii. INDEPENDENT THIRD PARTIES
When needed, we may disclose your personal data to independent third parties such as attorneys, public authorities, ethic committees/institutional review boards, regulators, external shipment or payment providers or third-party auditors.
iii. TRANSFERS OF DATA FROM EU/EEA TO THIRD COUNTRIES
In some cases, the third parties may be located in countries outside the European Economic Area (EEA) that may not be considered as providing an adequate level of protection of Personal Data; in these cases, ALK will rely on appropriate safeguards such as binding corporate rules/standard contract clauses, the EU-US Data Privacy Framework or on the need to perform the contract with the third party or on the need of the establishment, exercise or defence of legal claims in accordance with articles 46, 49(1)(c) and 49(1)(e) of GDPR.