§ 49 NDSG
Other data transfers to recipients in third countries
(1)Where the other conditions applicable to data transfers to third countries are met, controllers may, in specific individual cases, transfer personal data directly to bodies in third countries not referred to in § 46(1) number 1, where the transfer is indispensable for the performance of their tasks for the purposes referred to in § 23 and
(2)in the specific case, no fundamental rights of the data subject outweigh the public interest in the transfer,
(3)the transfer to the bodies referred to in § 46(1) number 1 would be ineffective or inappropriate, in particular because it cannot be carried out in a timely manner, and
(4)the controller informs the recipient of the purposes of the processing and indicates that the transmitted data may only be processed to the extent that their processing is necessary for those purposes.
(5)In the case of paragraph 1, the controller shall inform the bodies referred to in § 46(1) number 1 of the transfer without undue delay, unless this would be ineffective or inappropriate.
(6)§ 47(2) and (3) shall apply mutatis mutandis to transfers pursuant to paragraph 1.
(7)In the case of transfers pursuant to paragraph 1, the controller shall require the recipient to process the transmitted personal data only for the purpose for which they were transmitted, without the consent of the controller.
(8)Agreements in the area of judicial cooperation in criminal matters and police cooperation shall remain unaffected.