Et officielt EU-websiteOfficielt EU-website

Approved Binding Corporate Rules

This register provides a list of valid BCR.

For BCR approved after the entry into application of the GDPR (25 May 2018), a link to the EDPB Opinion and to the national decision of the supervisory authority is provided. 

Please note that this overview list is provided for information purposes only. Companies have a responsibility to inform the competent supervisory authorities of changes to the BCR. The overview list is updated based on information provided by the companies to the competent supervisory authorities. 

For categories of data subjects in the case of BCR-P, the categories of data relate to data processed on behalf of the controllers outside of the group.

Companies relying on BCR for data transfers are obliged to give data subjects easy access to their BCR. For more details about the BCR, please contact the company.

Align Technologies, Inc. 2014
ES SA
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Other third parties as part of the Group’s respective regular business activities.
Align Technologies, Inc. 2014
ES SA
Type of BCR:
Processor
Categories of data subjects
Employees
Clients, customers
Other third parties as part of the Group’s respective regular business activities.
Allianz 2018
DE SA (Bavaria)
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Other third parties as part of the Group’s respective regular business activities
American Express Company 2012
ES SA
Type of BCR:
Controller
Categories of data subjects
Clients, customers
Other third parties as part of the Group’s respective regular business activities.
American Express Global Business Travel (Amex GBT) 2024
NL SA
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Suppliers, service providers
Download
Opinion / Binding decision References
Opinion 19/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the American Express Global Business Travel Group
AMGEN 2016
FR SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities.
ANTOLIN Group 2022
ES SA
Type of BCR:
Controller
Categories of data subjects
Employees and business contacts
Opinion / Binding decision References
Opinion 17/2022 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the ANTOLIN Group
Arcadis N.V. 2017
NL SA
Type of BCR:
Processor
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Arcadis N.V. 2017
NL SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
ArcelorMittal Group 2013
LU SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities

We use cookies