Criteria for transfer of personal data to a third country