1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1–88, available at http://eur-lex.europa.eu/eli/reg/2016/679/oj.
2. www.sappi.com
3. under the form of the “Standard contractual clauses for the transfer of personal data from the Community to third countries (controller to controller transfers)”, in its latest applicable form.