(1) In special individual cases and if all other requirements for data transfers to third countries are met, controllers may transfer personal data directly to recipients in third countries not referred to in Section 78 (1) no. 1 if the transfer is strictly necessary for the performance of their tasks and
- in the specific case no fundamental rights of the data subject override the public interest in the transfer;
- transfer to the bodies referred to in Section 78 (1) no. 1 would be ineffective or inappropriate, in particular because the transfer cannot be carried out in time; and
- the controller informs the recipient of the purposes of processing and instructs the recipient that the transferred data may be processed only to the extent necessary for these purposes.
(2) In the case of subsection 1, the controller shall inform the bodies referred to in Section 78 (1) no. 1 of the transfer without delay, unless this is ineffective or inappropriate.
(3) Section 79 (2) and (3) shall apply accordingly to transfers pursuant to subsection 1.
(4) In the case of transfers pursuant to subsection 1, the transmitting controller shall obligate the recipient to process the transferred personal data without the controller’s consent only for the purpose for which they were transferred.
(5) Agreements in the field of judicial cooperation in criminal matters and police cooperation shall remain unaffected.