(114) In any case where the Commission has not taken a decision establishing an adequate level of data protection in a third country, the controller or processor should apply solutions that will allow data subjects to have, once the transfer takes place, enforceable and effective rights in relation to the processing of their data in the Union so that they can continue to enjoy their fundamental rights and safeguards.
„Our employees do not keep passwords under the keyboard."
Are you sure about that?

