As a minimum standard, we aim to comply with applicable privacy and information security laws and requirements related to the collection, storage, processing and transmission and sharing of personal information and with our controller and processor Binding Corporate Rules policies.