EEA+ PRIVACY DISCLOSURE (“EEA+ DISCLOSURE”)

This EEA+ Disclosure applies, in addition to and must be read alongside the Privacy Policy and Data Privacy Framework Notice which are incorporated herein by reference, if you (as defined in the Privacy Policy) are located in the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland (collectively, “EEA+”). Depending on your location, the European Union (“EU”) General Data Protection Regulation (“GDPR”), UK GDPR, or Swiss Federal Data Protection Act, subject to their conditions and exceptions, may apply (“Privacy Laws”).

1. Data Controller and Contacts. G2.com, Inc. (“G2”) is the controller of your personal data covered by this EEA+ Disclosure. G2’s representatives are as follows:

Party	Contact Information
Data Protection Officer (“DPO”)	G2.com, Inc. Attention: Privacy Department, 100 S. Wacker Dr., Suite 600 Chicago, IL 60606 USA, or privacy@g2.com
EU Representative	Osano International Compliance Services Limited, ATTN: HQ8K, 3 Dublin Landings, North Wall Quay, Dublin 1, D01C4EO
UK Representative	Osano UK Compliance LTD, ATTN: HQ8K, 42-46 Fountain Street, Belfast, Antrim, BT1-5EF

2. Legal Bases. Depending on applicable Privacy Laws, G2 relies on the following legal bases to process your personal data.

Bases	Meaning
Contract	Perform a contract with you or take steps you request before entering one
Legitimate Interest	G2’s or another party’s legitimate interests, provided those interests are not overridden by your interests, rights, or freedoms
Consent	A specific purpose with your clear, informed, and voluntary consent
Legal Obligations	Comply with a legal obligation applicable to G2

G2 identifies required personal data when collecting it and explain any legal or contractual requirement. Without information needed for the requested service or contract, we may be unable to provide it. Optional information is voluntary.

3. Your Rights. Depending on applicable Privacy Laws, you may request to exercise the following rights:

Right	Meaning
Access	Confirm whether G2 processes your personal data and receive a copy and information about its use
Correction	Have inaccurate personal data corrected or incomplete data completed
Deletion	Have your personal data deleted where the legal requirements for deletion are met
Restriction	Limit how G2 uses your personal data in specified circumstances
Portability	Receive personal data you provided in a commonly used, machine-readable format and transfer it to another controller, directly where technically feasible - this applies to automated processing, as applicable
Withdraw Consent	Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
Object	Object to processing for certain purposes relating to your situation
Direct Marketing Objection	Object to processing for direct marketing, including related profiling
Automated Decisions	Request human review, express your views, and challenge certain decisions based solely on automated processing that have legal or similarly significant effects on you including the right not to be subject to such decisions, to receive information about them, to request human review, and to challenge the decision
Complain	File a privacy complaint directly with G2 at the contact information in Section 1, or lodge a complaint with the relevant data protection authority

Exercise your rights or make a privacy complaint to G2 using G2’s Privacy Rights Form or the DPO contact in Section 1.