Location and transfer of Personal Data to Third Countries. The Processor shall observe the following requirements regarding the location of Personal Data: The Processor is only entitled to Process the Personal Data at the following locations: [Enter locations for Processing (postal address, country).] If the Controller has not given instructions on the transfer of Personal Data to a Third Country, the Processor shall not have the right to make such a transfer. The Processor shall observe the following requirements for transferring Personal Data to a Third Country: [Enter any instructions for transferring Personal Data to a Third Country according to the following example. For the purpose of xyz, the Processor is entitled to transfer Personal Data in the form of xyz to country xyz for Processing in the form of xyz by the Subprocessor xyz. The legal basis for transferring is xyz in Chapter V of the GDPR.]