February 2018 Stuart Addis 01923 658599 gdpr@globalsteelexports.com Dear Supplier General Data Protection Regulation and Modern Slavery Act 2015 As part of our ongoing review of our procurement and supply arrangements, we are asking all of our suppliers to provide us with some information in relation to data protection and the Modern Slavery Act 2015 to help us to ensure that we are compliant. General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) As you will be aware, the GDPR comes into force on 25th May 2018. It creates greater obligations for both data controllers and processors. Please sign this declaration by following the links on the Adobe Echosign system to confirm that: 
Appropiate technical and organisational measures will be implemented to meet the requirements of the GDPR, from the date of commencement, and all other applicable current and subsequent privacy legislation, including the Data Protection Act 1998

You will not transfer personal data processed under and contract or agreement with Global Steel Exports to a jurisdiction outside the European Economic Area (EEA) or to a jurisdiction without a guaranteed adequate level of protection. Ensuring adequacy may include transferring to countries with a European Commission adequacy decision; adopting European Commission model clauses or Binding Corporate Rules.
If, in relation to data processed under your agreement with us, you have any current sub-processing arrangements or you currently transfer personal data outside the EEA or to any country without a guaranteed adequate level of protection, please email the following information to gdpr@globalsteelexports.com :
Global Steel Exports, 31 Greenhill Crescent, Watford Business Park, Watford, WD18 8YB. Tel: +44 (0) 1923 658575 658546 Website: www.globalsteelexports.com Registration no: 10517458
Pa ge 1|3