These are policies for personal dataprotection which are adhered to by a controller or processor, and established on the territory of an EU Member State, for transfers (or a set of transfers) of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises, engaged in a joint economic activity.