EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Data Privacy Framework Notice

G2.com, Inc. ("G2") complies with and has certified to the U.S. Department of Commerce ("DOC") that adheres to the:

EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) for processing personal data received from the European Union;
UK Extension to the EU-U.S. DPF (“UK Extension”) for processing personal data received from the United Kingdom and Gibraltar; and .
Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) with regard to the processing of personal data received from Switzerland.

In case of conflict, the EU-U.S. DPF, UK Extension and/or the Swiss-U.S. DPF (collectively, “DPF”), will take precedence of G2’s Privacy Policy. To learn more about the DPF program, and to view our certification, please visit the Data Privacy Framework Website.

In compliance with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles, G2 commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF’s principles. The following complaint channels are available for European Union, United Kingdom and Swiss individuals:

First, please contact G2 at privacy[at]g2.com for any of your DPF inquiries or complaints.
G2 has further committed to refer unresolved privacy complaints under the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by G2, please visit the BBB National Programs Website for more information and to file a complaint. This service is provided free of charge to you.
If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. With respect to personal data received or transferred pursuant to the Data Privacy Framework.

G2. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) with respect to personal data received or transferred pursuant to the Data Privacy Framework.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, G2 commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in the context of the employment relationship.

Pursuant to the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles, G2 may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Our organization and its U.S. subsidiaries adhere to the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles. This commitment extends to all entities listed in our DPF certification submission. Specifically, Siftery LLC and Advocately Inc. are U.S. subsidiaries of our organization that are also covered under our DPF certification and adhere to the same DPF Principles described in this notice.

G2’s accountability for personal data that it receives in the United States under the Data Privacy Framework and subsequent onward transfers to a third party is described in the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles. In particular, G2 remains responsible and liable under the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the DPF, except where G2 is not responsible for the events giving rise to the damage.

Third-Party Disclosures
G2 may disclose personal information to certain third parties for the purposes described in our Privacy Policy. This includes disclosures to service providers, business partners, and other entities that support our operations, analytics, and marketing activities. Details about the types or identities of these third parties and the purposes for which G2 shares data can be found in the section titled “How We Share Information” of our Privacy Policy, available at https://legal.g2.com/privacy-policy.

Individual Access Rights
Individuals have the right to access the personal data that G2 holds about them, consistent with applicable law. Information about this right and instructions for submitting an access request are provided in the section titled “Your Rights and Choices” of our Privacy Policy, available at https://legal.g2.com/privacy-policy.

Choices and Means to Limit Use and Disclosure
G2 offers individuals several choices to limit the use and disclosure of their personal data, including the ability to manage communication preferences, opt out of marketing, and control cookie settings. More information about these choices and mechanisms is available in the “Your Rights and Choices” and “Cookies and Similar Technologies” sections of our Privacy Policy, available at https://legal.g2.com/privacy-policy.