SCCs should be used when personal data is being transferred from an entity within the EEA to a third country that does not have an adequacy decision from the European Commission. In the realm of email marketing, this could involve transferring data to a third-party email service provider located outside the EEA.