Binding Corporate Rules

Why are the rules important?

Some countries have only limited or fragmented privacy rules or may lack a general privacy code to follow. Therefore, Rakuten uses its own privacy code for its operations worldwide. Because privacy is the core value of trust for our users and stakeholders, Rakuten is very serious about maintaining global compliance at a high standard.

What is the content of the rules?

The rules comprise the main privacy principles such as purpose limitation and data quality, as well as, right to information, rectification and erasure. Rakuten’s global privacy manager will be responsible for mediating claims and assuring internal compliance. Most importantly, the rules bind all of Rakuten’s worldwide entities so that each company adheres to the same rules in all their actions taken.

Depending on the user’s residence, they may enjoy additional rights. For example, citizens of the European Union have the right to bring actions against Rakuten if they believe their rights have been infringed by Rakuten’s entities abroad. In such cases, Rakuten would be liable in the same way it would if the infringement had taken place in the European Union.

Why are global transfers necessary?

The fast-moving digital sector requires global players to make their services available all over the world. Rakuten is based in Japan, therefore many processing activities take place in Japan. These corporate rules assure a level of protection in Japan similar to that required in the European Union so that data can be transferred safely.

List of Rakuten Group Entities Part of the BCR Intra-group Agreement

BCR Policy

• English
• Japanese
• Spanish
• German
• French
• Portugese
• Italian
• Chinese - Simplified
• Chinese - Traditional
• Korean