Atos Approach to Privacy
Atos Binding Corporate Rules
For the processes stemming from this website, Atos is the data controller, deciding the purposes and means of the data being collected and processed. Because data protection and security matter, Atos has adopted a set Privacy Policy internal data protection measures knows as Binding Corporate Rules (BCR).
Atos was the first IT company to obtain formal approval of its Binding Corporate Rules (BCR) by the European data protection authorities both as a data controller and as processor. This approval proves Atos’s commitment to the protection not only of its own data, but also that of its clients: all Atos entities provide a very strong level of protection to personal data, aligning regulations and good practices, regardless of their location in the world. The BCRs are a commitment whereby the companies of the Atos Group undertake to process personal data in accordance with a stringent level of protection for its own needs (employee data, etc.) and for the needs of its customers, therefore allowing the free flow of personal data between the companies of the Atos Group.
Atos’s website is hosted in the European Union and application support may be made from Atos India. The transfers resulting from such support would be framed with the Atos Binding Corporate Rules.
EU Binding Corporate Rules and Appendixes as a Processor
Atos Group BCR – P – Binding Corporate Rules as a Processor
Atos Group BCR – P – Appendix 1 – Organization of the Data Protection Community and Roles
Atos Group BCR – P – Appendix 2 – List of Entities Bound by Atos Group BCR
Atos Group BCR – P – Appendix 3 – Form for Data Subject’s rights exercise
Atos Group BCR – P – Appendix 4 – Complaint Handling Procedure where Atos is acting as a Data Controller
Atos Group BCR – P – Appendix 5 – Complaint Handling Procedure where Atos is acting as a Data Processor
Atos Group BCR – P – Appendix 6 – Transfers of Personal Data
Atos Group BCR – P – Appendix 7 – Compliance Assessment of Data Processing where Atos acts as a Processor
Atos Group BCR – P – Appendix 8 – Local Data Protection Points of Contact in a Country
Atos Group BCR – P – Appendix 9 – Audit Plan (Streams)
Atos Group BCR – P – Appendix 10 – Responsibility Assignment Matrix – RACI
EU Binding Corporate Rules and Appendixes as a Controller
Atos Group BCR – C – Binding Corporate Rules
Atos Group BCR – C – Appendix 1 – Organization of the Data Protection Community and Roles
Atos Group BCR – C – Appendix 2 – List of Entities Bound by Atos Group BCR
Atos Group BCR – C – Appendix 3 – Form for Data Subject’s rights exercise
Atos Group BCR – C – Appendix 4 – Procedure for Handling Complaint where Atos is acting as a Controller
Atos Group BCR – C – Appendix 5 – Data Transfers of Personal Data
Atos Group BCR – C – Appendix 6 – Compliance Assessment of Data Processing where Atos acts as a Controller
Atos Group BCR – C – Appendix 7 – Local Data Protection Points of Contact in a Country
Atos Group BCR – C – Appendix 8 – Audit Plan (Streams)
Atos Group BCR – C – Appendix 9 – Responsibility Assignment Matrix – RACI