Skip to main content

BCRs approved under UK GDPR

Contents

List of BCRs approved under UK GDPR

Group entity UK entity with delegated responsibility for UK BCRs Type Categories of data
ADP Automatic Data Processing Limited Processor
  • Client data
American Express GBT GBT Travel Services UK Limited Controller
  • Customer Data
  • Employee Data
  • Service provider Data
AMGEN AMGEN Limited Controller
  • Employees
  • Healthcare
  • Professional
  • Vendors
  • Suppliers
  • Patients which may include children under 18 years of age in specified circumstances
Arcadis Arcadis Consulting (UK) Ltd Controller
  • Customer, Supplier & Business Data
Arcadis Arcadis Consulting (UK) Ltd Controller
  • Employee Data
ATOS ATOS IT SERVICES UK LIMITED Controller
  • Employees (past, current and future) and associated persons
  • clients (current and potential)
  • end-users of clients, providers and visitors.
ATOS ATOS IT SERVICES UK LIMITED Processor
  • employees (past, current and future) and associated persons
  • users
  • members
  • patients
  • students / pupils
  • clients (current and potential)
  • end-users of clients
  • visitors
  • providers
AXA AXA UK PLC Controller
  • Customers (including prospective)
  • Claimants
  • Employees (including applicants)
  • Agents, suppliers and other third parties
BDO BDO LLP, BDO Northern Ireland & BDO Services Limited Controller
  • Client data
  • Employee data
  • Supplier, sub-contractor and other third parties data
BDO BDO LLP, BDO Northern Ireland & BDO Services Limited Processor
  • Client data
  • Supplier, sub-contractor and other third parties data
BMC Software BMC Software Limited Controller
  • customers
  • sales prospects
  • applicants and employees (current and former)
  • suppliers/vendors
  • business partners/resellers
BMC Software BMC Software Limited  Processor
  • prospects, customers, business partners and vendors of customers
  • customer’s personnel, including employees, agents and contractors
  • customer’s users authorised by customer to use BMC Services
Bristol Myers-Squibb Bristol-Myers Squibb Pharmaceuticals Limited Controller
  • Medical Marketing 
  • Corporate Affairs and Market Access 
  • Clinical Operations
  • Drug Safety and Risk Management
  • Medical Activities
  • Distribution/Logistics
  • Finance
  • Human resources 
  • Facilities
Capgemini Capgemini UK plc Controller
  • employees and dependents,
  • suppliers,
  • sub-contractors
  • shareholders
  • client or alliance partners.
Capgemini Capgemini UK plc Processor
  • clients and customers of the controllers
  • contact details of staff within the controller organizations.
Equinix Equinix (Services) Limited Controller
  • Employees (eg current and former employees, free-lancers, consultants, agents, temporary workers, trainees and job applicants)
  • Business contacts (eg current and former customers, correspondents, advisers, vendors and suppliers)
ExxonMobil Esso Petroleum Company Limited Controller
  • Employees
  • Business purposes
Mastercard Mastercard Europe Services Limited Controller
  • Cardholders
  • other individual customers of Mastercard customers (eg issuing financial institutions, merchants, public sector bodies, partners and other businesses)
  • Mastercard customers,
  • Merchants
  • Suppliers
  • Vendors
  • Employees
  • Contractors
  • job applicants
Mastercard Mastercard Europe Services Limited Processor
  • Cardholders
  • other individual customers of Mastercard customers (eg issuing financial institutions, merchants, public sector bodies, partners and other businesses)

  • Mastercard customers,
  • Merchants
  • Suppliers
  • Vendors
  • Employees
  • Contractors
  • job applicants
Rakuten Group Inc Rakuten Marketing Europe Limited Controller
  • current and former employees (temporary and permanent) and their families
  • customers
  • merchants
  • contractors and
  • suppliers
Reinsurance Group of America RGA UK Services Limited Controller
  • RGA workforce members
  • Client relationship management data
  • Policyholder related data
  • Supply chain management data
  • Other third-party data
Reinsurance Group of America RGA UK Services Limited Processor
  • Insurance related data that RGA receives from its customer or the customers data subjects including policyholders, insured parties, beneficiaries of an individual, business clients, group insurance and pension policy
Salesforce Salesforce UK Limited Processor
  • Prospects
  • Customers
  • Business partners
  • Vendors of Customer
  • Contact persons of Customer’s prospects, customers, business partners and vendors
  • Current and former employees, agents, advisors, freelancers of Customer
  • Customers’ users
Workday Workday (UK) Limited Processor
  • Applicants, employees and other workers
  • Related persons
  • Prospects, customers, business partners and suppliers
  • Learners