EU-US Data Privacy Framework Notice

G2.com, Inc. ("G2") complies with and has certified to the  U.S. Department of Commerce ("DOC") that adheres to the:  

  1. EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) for processing  personal data received from the European Union;
  2. UK Extension to the EU-U.S. DPF (“UK Extension”) for processing personal data received from the United Kingdom and Gibraltar; and .  
  3. Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”)  with regard to the processing of personal data received from Switzerland.

In case of conflict,  the EU-U.S. DPF, UK Extension  and/or the Swiss-U.S. DPF (collectively, “DPF”), will take precedence of G2’s Privacy Policy. To learn more about the DPF program, and to view our certification, please visit the Data Privacy Framework Website.

In compliance with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles, G2 commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF’s principles. The following complaint channels are available for European Union, United Kingdom and Swiss individuals:

  1. First, please contact G2 at privacy[at]g2.com for any of your DPF inquiries or complaints. 
  2. G2 has further committed to refer unresolved privacy complaints under the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by G2, please visit the BBB National Programs Website for more information and to file a complaint. This service is provided free of charge to you.
  3. If your  DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. With respect to personal data received or transferred pursuant to the Data Privacy Framework.

G2. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) with respect to personal data received or transferred pursuant to the Data Privacy Framework. 

Pursuant to the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles, G2 may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. 

G2’s accountability for personal data that it receives in the United States under the Data Privacy Framework and subsequent onward transfers to a third party is described in the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles. In particular,G2 remains responsible and liable under the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the DPF, except where G2 is not responsible for the events giving rise to the damage.