Binding Corporate Rules

Rakuten adheres to a set of global privacy protection standards referred to as Binding Corporate Rules. These guidelines ensure privacy protection throughout the Rakuten Group and have been approved by the European Union data protection authorities. The rules establish that even if personal data is transferred to a country that operates on a more lenient data protection regime, Rakuten will still apply its high global standards.

Why are the rules important?

Some countries have only limited or fragmented privacy rules or may lack a general privacy code to follow. Therefore, Rakuten uses its own privacy code for its operations worldwide. Because privacy is the core value of trust for our users and stakeholders, Rakuten is very serious about maintaining global compliance at a high standard.

What is the content of the rules?

The rules comprise the main privacy principles such as purpose limitation and, data quality as well as, right to information, rectification and erasure. Rakuten’s global privacy manager will be responsible for mediating claims and assuring internal compliance. Most importantly, the rules bind all of Rakuten’s worldwide entities so that each company adheres to the same rules in all their actions taken.

Depending on the user’s residence, they may enjoy additional rights. For example, citizens of the European Union have the right to bring actions against Rakuten if they believe their rights have been infringed by Rakuten’s entities abroad. In such cases, Rakuten would be liable in the same way it would if the infringement had taken place in the European Union.

Why are global transfers necessary?

The fast-moving digital sector requires global players to make their services available all over the world. Rakuten is based in Japan, therefore many processing activities take place in Japan. These corporate rules assure a level of protection in Japan similar to that required in the European Union so that data can be transferred safely.

List of Rakuten Group Entities Part of the BCR Intra-group Agreement

EEA Entities

Jurisdiction	Entity
Estonia	OU Massi Miliano
France	Rakuten France S.A.S.
France	Rakuten Aquafadas S.A.S.
Germany	Rakuten Deutschland GmbH
Luxembourg	Rakuten Europe S.a.r.l.
Luxembourg	Rakuten Europe Bank S.A.
Luxembourg	Viber Media S.a.r.l.
Luxembourg	Kobo Europe S.A.
Spain	Rakuten TV Europe, S.L.U.

Non EEA Entities

Jurisdiction	Entity
Brazil	Rakuten Brazil Holdings LTDA.
Canada	Rakuten Kobo Inc.
India	Rakuten India Enterprise Private Limited
Japan	Amrid.DC, Inc.
Japan	everybody's bitcoin, Inc.
Japan	LOB, Inc.
Japan	Osakaya Kurita
Japan	Rakuten Adroll, Inc
Japan	Rakuten Insight Global, Inc.
Japan	Rakuten Insight, Inc.
Japan	Rakuten, Inc.
Singapore	Rakuten Asia Pte. Ltd.
Taiwan	Taiwan Rakuten Ichiba, Inc.
U.S.A	EBATES INC.
U.S.A	OverDrive, Inc.
U.S.A	Rakuten USA, Inc.
U.S.A	Slice Technologies, Inc.
U.S.A	Viki, Inc.

BCR Policy

• English (pdf)
• Japanese (pdf)
• Spanish (pdf)
• German (pdf)
• French (pdf)
• Portuguese (pdf)
• Italian (pdf)
• Chinese - Simplified (pdf)
• Chinese - Traditional (pdf)
• Korean (pdf)

Contact Us

If you have any questions, Please refer to the following.

• Inquiry counter

Page Top