Kraken processes personal data both within and outside of the European Union. Importantly, Kraken ensures all international data transfers comply with
the General Data Protection Regulation’s (GDPR) requirements. This includes ensuring personal data processed internationally is safeguarded by the same
high level of protection afforded to personal data processed within the European Union.

‍
If personal data is transferred to a country which has been found by the European Commission to have an essentially equivalent standard of data protection
to the European Union, then Kraken may rely on an ‘adequacy decision’ to transfer that personal data. See here for a list of countries with adequacy
decisions. For transfers to other countries, we may rely on Standard Contractual Clauses.

‍