For the processes stemming from this website, Atos is the data controller, deciding the purposes and means of the data being collected and processed. Because data protection and security matter, Atos has adopted a set Privacy Policy internal data protection measures knows as Binding Corporate Rules (BCR).
Atos was the first IT company to obtain formal approval of its Binding Corporate Rules (BCR) by the European data protection authorities both as a data controller and as processor. This approval proves Atos’s commitment to the protection not only of its own data, but also that of its clients: all Atos entities provide a very strong level of protection to personal data, aligning regulations and good practices, regardless of their location in the world. The BCRs are a commitment whereby the companies of the Atos Group undertake to process personal data in accordance with a stringent level of protection for its own needs (employee data, etc.) and for the needs of its customers, therefore allowing the free flow of personal data between the companies of the Atos Group.
Atos’s website is hosted in the European Union and application support may be made from Atos India. The transfers resulting from such support would be framed with the Atos Binding Corporate Rules.
EU Binding Corporate Rules and Appendixes
Atos Group Binding Corporate Rules (Atos Group BCR)
Atos Group BCR – Appendix 1 – Organization of the Data Protection Community and Roles
Atos Group BCR – Appendix 2 – List of Entities Bound by Atos Group BCR
Atos Group BCR – Appendix 3 – Form for Data Subject’s rights exercise
Atos Group BCR – Appendix 4 – Complaint Handling Procedure where Atos is acting as a Data Controller
Atos Group BCR – Appendix 5 – Complaint Handling Procedure where Atos is acting as a Data Processor
Atos Group BCR – Appendix 6 – Procedure for Handling A Complaint From A Controller Regarding Processing
Atos Group BCR – Appendix 7 – Transfers of Personal Data
Atos Group BCR – Appendix 8 – Compliance Assessment of Data Processing where Atos acts as a Controller
Atos Group BCR – Appendix 9 – Compliance Assessment of Data Processing where Atos acts as a Processor
Atos Group BCR – Appendix 10 – Local Data Protection Points of Contact in a Country
Atos Group BCR – Appendix 11 – Audit Plan (Streams)
Atos Group BCR – Appendix 12 – Responsibility Assignment Matrix – RACI