Ste na enem od uradnih spletišč EUSte na uradnem spletišču EU

Approved Binding Corporate Rules

This register provides a list of valid BCR.

For BCR approved after the entry into application of the GDPR (25 May 2018), a link to the EDPB Opinion and to the national decision of the supervisory authority is provided. 

Please note that this overview list is provided for information purposes only. Companies have a responsibility to inform the competent supervisory authorities of changes to the BCR. The overview list is updated based on information provided by the companies to the competent supervisory authorities. 

For categories of data subjects in the case of BCR-P, the categories of data relate to data processed on behalf of the controllers outside of the group.

Companies relying on BCR for data transfers are obliged to give data subjects easy access to their BCR. For more details about the BCR, please contact the company.

Mercedes Benz Group 2022
DE SA
Type of BCR:
Controller
Categories of data subjects
Employees and business contacts
Opinion / Binding decision References
Opinion 19/2022 on the draft decision of the Baden- Württemberg (Germany) Supervisory Authority regarding the Controller Binding Corporate Rules of the Mercedes- Benz Group
Merck & Co., Inc. (MSD) 2016
FR SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities.
Merck Sharp & Dohme (MSD) 2016
FR SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
MICHELIN 2010
FR SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Microchip Technology Inc (previously known as Atmel Corporation) 2009
NO SA
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Other third parties as part of the Group’s respective regular business activities.
MOL Group 2022
HU SA
Type of BCR:
Controller
Categories of data subjects
Employees and business contacts
English
    Download
    Opinion / Binding decision References
    Opinion 07/2022 on the draft decision of the Hungarian Supervisory Authority regarding the Controller Binding Corporate Rules of MOL Group
    Motorola Solutions 2013
    DK SA
    Type of BCR:
    Controller
    Categories of data subjects
    Employees
    Contractors
    Clients, customers
    Suppliers, service providers
    Other third parties as part of the Group’s respective regular business activities
    Munich Re Reinsurance Group 2022
    DE SA
    Type of BCR:
    Controller
    Categories of data subjects
    Employees and business contacts
    Download
    Opinion / Binding decision References
    Opinion 26/2022 on the draft decision of the Data Protection Authority of Bavaria for the Private Sector regarding the Controller Binding Corporate Rules of the Munich Re Reinsurance Group
    Nestlé Group 2023
    FR SA
    Type of BCR:
    Controller
    Categories of data subjects
    Employees, contractors and business contacts
    Clients, customers and business contacts
    Other third parties as part of the Group’s respective regular business activities
    English
      Download
      Opinion / Binding decision References
      Opinion 24/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Nestlé Group
      NetApp, Inc. 2015
      NL SA
      Type of BCR:
      Controller
      Categories of data subjects
      Employees
      Clients, customers
      Suppliers, service providers
      Other third parties as part of the Group’s respective regular business activities

      We use cookies