Our Binding Corporate Rules (BCRs) and ISO27701 Certifications

Data Privacy Hub

A picture representing connections in between locations, mapped over a city

Explore other pages:

Binding Corporate Rules
Data Privacy Statement
Cookies Policy
Individual Rights
Goals & Company Policy

Binding Corporate Rules and International Data Transfer Privacy Tools

Colt BCRs controller and processor have been approved by the European Data Protection Board (EDPB) August 02, 2021. The approval was published in the official Gazette of the EDPB on August 05, 2021 and ratified by the Spanish Data Protection Authority, as Colt's BCR leading Authority August 16, 2021.

The EDPB approved the Privacy and GDPR compliance programme implemented by Colt across the whole group. The approved privacy programme is legally binding on every company of the group.

Colt's BCR Controller and Processor decisions are published on the European Data Protection Board (EDPB) website and on the Spanish Data Protection Authority (“AEPD”) website.

You will be able to find the BCR approval document available on the EDPB website.

The Binding Corporate Rules ("BCRs") are the golden privacy certification approved by three European Data Protection Authorities as well as the European Data Protection Board which allows:

Colt to have the highest recognition in privacy that a group of companies can have

Transfer of personal data easily between all Colt's entities

Keeping the same levels and standards of privacy compliance all over Colt worldwide

Frequently asked questions

What are the Binding Corporate Rules?

The Binding Corporate Rules (“BCRs”) are a certification granted by the European Data Protection Board (“EDPB”), the collective body of all EU Data Protection Authorities. Through the BCRs, the EDPB certifythat the privacy programme implemented by a company is compliant with the General Data Protection Regulations (“GDPR”)and the same level of data protection compliance valid in Europe is applied all over the entities of the same group. In addition, the BCRs are a tool for safely transfer personal data outside the EU within a group of companies.

Are the BCRs a privacy compliance tool?

When was Colt awarded the BCRs?

What does the BCRs imply for Colt?

Colt's BCRs allow Colt to transfer EU personal data within the Group, even outside the EEA, recognizing a Global Privacy programme that meets highest possible industry standards.

For approving our BCRS, the EDPB audited, validated and approved Colt privacy compliance framework applicable in all Colt ́s entities. With them, Colt can offer the best data protection assurance in the world.

Are the BCRs applicable over all Colt entities?

Are there any other Telco companies which have obtained the BCRS post-GDPR?

Please could you explain a little the procedure of obtaining the BCRs?

Colt BCRs were negotiated and discussed with the 3 toughest European Data Protection Authorities and approved by the European Data Protection Boardwhich includes all the EU Data Protection Authorities. The Italian Data Protection Authority was the “guardian” of such procedure. This approval proves that Colt has implemented the most stringent privacy rules on the European scene and worldwide.

Where can you find the official approval of Colt BCR?

Individual rights

Colt shall inform all individuals about how to exercise their rights and ensure that individuals are able to exercise their rights freely. Colt will respond as appropriate to requests to exercise any of the following individual rights:

(a) Right of access: Individuals have the right to access a copy of the personal data that has been collected about them (whether held by Colt itself or at its providers), and be provided with information about the processing.

(b) Right of rectification: Individuals have the right to rectify any inaccurate or incomplete personal data concerning them (whether held by Colt itself or at its providers), in order to guarantee their accuracy and the appropriate processing thereof.

(c) Right of erasure (right to be forgotten): Individuals have the right to the deletion of personal data concerning them.

(d) Right to object: Individuals have the right to object to the processing of personal data at any time.

(e) Right of restriction: Individuals have the right to restrict the processing of personal data concerning him or her. This means that the processing will be "paused" and the personal data will only be stored.

(f) Right of data portability: Individuals have the right to receive personal data concerning them and to have that data transmitted to another controller in a structured, commonly used, machine-readable format.

(g) Right to non-automated data processing: Individuals have the right not to be subject to a decision affecting them, where this decision is based on automated data processing of information, including profiles. This includes cases in which Colt uses cookies as a technical tool to evaluate customers and predict their behaviour, performance or preferences, comparing their profile with that of other users or similar customers.

7.10.2 Colt responds to these requests in accordance with the procedure provided by the Individual Rights Policy

Downloadable items

ISO27701 Certification

ISO27701 Presentation

Binding Corporate Rules Infographic

Colt BCR Controller Approval Statement

Colt BCR Processor Approval Statement

Data Protection Compliance Statement

Privacy by Design Statement

Questions? We're here to help.

Speak with one of specialists today. We’re here to offer advice, provide further information and to answer any queries you may have.

Get support

We are pleased to confirm that your site can be reached by Colt Fibre Network.

Step 1 of 4

Is there a particular Colt solution you are interested in?
- Networking services
- Capital Markets
- Cloud connectivity
- Communications
- UC + Contact Centres
- Other

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Back

Our Binding Corporate Rules (BCRs) and ISO27701 Certifications

Data Privacy Hub

Explore other pages:

Binding Corporate Rules and International Data Transfer Privacy Tools

Colt to have the highest recognition in privacy that a group of companies can have

Transfer of personal data easily between all Colt's entities

Keeping the same levels and standards of privacy compliance all over Colt worldwide

Frequently asked questions

Downloadable items

ISO27701 Certification

ISO27701 Presentation

Binding Corporate Rules Infographic

Colt BCR Controller Approval Statement

Colt BCR Processor Approval Statement

Data Protection Compliance Statement

Privacy by Design Statement

Questions? We're here to help.