§ 59 ThürDSG
Data transfer without an adequacy decision
(1)(Articles 37 and 38 of Directive (EU) 2016/680)
(2)Where no adequacy decision within the meaning of Section 57(1) exists, the transmission of personal data to a body in a third country or to an international organisation shall also be permissible where 1. appropriate safeguards for the protection of personal data are provided in a legally binding instrument, or 2. the controller, having assessed all the circumstances surrounding the transfer, has concluded that appropriate safeguards exist for the protection of personal data.
(3)The controller shall document transmissions pursuant to paragraph 1, number 2. The documentation shall contain the date of the transmission, the identity of the recipient, the reason for the transmission and the personal data transmitted. It shall be made available to the State Commissioner for Data Protection upon request.
(4)The controller shall inform the State Commissioner for Data Protection at least annually about transmissions that have taken place on the basis of an assessment pursuant to paragraph 1, number 2. In the notification, he or she may categorise recipients and transmission purposes appropriately. zur Einzelansicht § 59