Data privacy binding corporate rules (“BCR policy”)

Data Privacy Binding Corporate Rules (“BCR Policy”) approved by ISO 27001 certification with respect to compliance with European data protection laws and specifically to transfers of Personal Information of employees, customers, service providers and other third parties wherever it is collected and used in conjunction with Relational business activities and the administration of employment between members of the Relational Group or to external service providers.

BCR Framework

Relational has established the Controller and Processor BCR Policy. Data Controller and/or a Data Processor which have been reviewed and approved by EDPS European data protection authorities. The BCR Policy is incorporated into a Relational corporate wide policy, requiring all entities, employees and third party providers to comply with and respect the BCR Policy governing the collection, use, access, storage and transfer of Personal Information among Relational entities.

Revised: December 2024