Esri Privacy Statement (Trust Center Privacy Intro)
ARCHIVED 2020-05-01, DATE APPROXIMATE · VERSION 20200501_rev01 · COMPARED WITH 20190820_rev01
Full text changes — 20190820_rev01 to 20200501_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 1 | 1 | Esri values the privacy of our customers, distributors, and business partners, as it is a principal component of establishing trust. Esri has created a general company Privacy Statement and a supplementary Products & Services Privacy Statement to ensure our customers receive the level of privacy they deserve and expect. The privacy statements describe how Esri collects data and uses information you provide to us, and are independently validated. |
| 2 | 2 | |
| 3 | 3 | Esri works diligently to ensure we provide a trustworthy environment for our customers; therefore, we are continuously making new privacy and security advancements to ensure we meet evolving requirements around the world. The most recent examples of this are the expansion of the supplemental ArcGIS Online privacy statements to cover a broader base across Esri Products & Services while also updating privacy statements to be in line with Privacy Shield. |
| 4 | 4 | |
| 5 | 5 | Esri is committed to compliance with the European privacy law, the General Data Protection Regulation (GDPR) which went into enforcement May 2018. The GDPR imposes new rules on companies, government agencies, non-profits, and other organizations outside the European Union that process personal data related to the offering of goods and services to people in the European Union (EU), or that monitor the behavior of EU citizens within the European Union. |
| 6 | 6 | |
| 7 | Privacy & Security presentations from the 2018 User Conference addressing our GDPR efforts will be posted to the Trust Center after the conference. We will also be releasing an ArcGIS GDPR/Privacy Best Practices whitepaper soon to help our customers use our products in a manner that supports them meet their GDPR obligations. | |
| 7 | Esri is also committed to compliance with the California Consumer Privacy Act (CCPA), which went into effect January 1, 2020. To help our customer use our products in a manner that supports them meeting their GDPR and CCPA obligations, Esri has released the [ArcGIS Location Tracking Privacy Best Practices](https://downloads.esri.com/resources/enterprisegis/Esri%20Whitepaper%20-%20ArcGIS%20Location%20Tracking%20Privacy%20Best%20Practices.pdf) whitepaper. | |
| 8 | 8 | |
| 9 | 9 | We have posted to the Trust Center an [Esri signed Data Processing Addendum (DPA)](https://www.esri.com/~/media/files/pdfs/legal/pdfs/data-process-addend.pdf) that our customers can sign. |
| 10 | 10 | |
| 11 | 11 | ## Esri Privacy Statement |
| 12 | 12 | |
| 13 | 13 | Esri complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Esri has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in our statements here or privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. |
| 28 | 28 | |
| 29 | 29 | - The importance of the privacy of our Customer Data to be treated as confidential |
| 30 | 30 | - The collection and handling of Support Data when engaging with Esri for support |
| 31 | 31 | - Not storing payment instrument number information within Esri systems from credit cards |
| 32 | 32 | - The requirement of cookies for many products when non-anonymous access is required |
| 33 | 33 | - Ability to configure on-premises products to not collect or transmit data to Esri |
| 34 | - ArcGIS Online and EMCS Advanced Plus only store Customer Data in the contiguous US | |
| 35 | 34 | - Constraints in place for limiting disclosure of data |
| 36 | 35 | - In the event of a conflict between the general Esri Privacy Statement and the more restrictive terms of the Products & Services Privacy Statement Supplement, with regard to data provided to Esri in connection with use of the "Products & Services" the Products & Services Privacy Statement Supplement will control |
| 37 | 36 | |
| 38 | 37 | ## ArcGIS Online Privacy Assurance |
| 39 | 38 | |
| 40 | 39 | ArcGIS Online privacy assurance is boosted by the Products & Services Privacy Statement Supplement as well as the following additional items: |