Esri Privacy Statement (Trust Center Privacy Intro)

20210201_rev01 · COMPARED WITH 20200501_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20200501_rev01 to 20210201_rev01

33Esri works diligently to ensure we provide a trustworthy environment for our customers; therefore, we are continuously making new privacy and security advancements to ensure we meet evolving requirements around the world. The most recent examples of this are the expansion of the supplemental ArcGIS Online privacy statements to cover a broader base across Esri Products & Services while also updating privacy statements to be in line with Privacy Shield.
44
55Esri is committed to compliance with the European privacy law, the General Data Protection Regulation (GDPR) which went into enforcement May 2018. The GDPR imposes new rules on companies, government agencies, non-profits, and other organizations outside the European Union that process personal data related to the offering of goods and services to people in the European Union (EU), or that monitor the behavior of EU citizens within the European Union.
66
77Esri is also committed to compliance with the California Consumer Privacy Act (CCPA), which went into effect January 1, 2020. To help our customer use our products in a manner that supports them meeting their GDPR and CCPA obligations, Esri has released the [ArcGIS Location Tracking Privacy Best Practices](https://downloads.esri.com/resources/enterprisegis/Esri%20Whitepaper%20-%20ArcGIS%20Location%20Tracking%20Privacy%20Best%20Practices.pdf) whitepaper.
88
9We have posted to the Trust Center an [Esri signed Data Processing Addendum (DPA)](https://www.esri.com/~/media/files/pdfs/legal/pdfs/data-process-addend.pdf) that our customers can sign.
9We have posted to the Trust Center an [Esri signed Data Processing Addendum (DPA)](https://www.esri.com/~/media/files/pdfs/legal/pdfs/data-process-addend.pdf) that our customers can sign which includes the Standard Contractual Clauses (SCC's) for assurance purposes.
1010
1111## Esri Privacy Statement
1212
13Esri complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Esri has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in our statements here or privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.
13Esri complies with the EU-U.S. and the Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom and Switzerland to the United States. Esri has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in our statements here or privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.
1414
15Esri's participation in the Privacy Shield applies to all personal data that is subject to the Esri Privacy Statement and is received from the European Union and the rest of the European Economic Area. Esri will comply with the Privacy Shield Principles in respect of such personal data.
15Esri's participation in the Privacy Shield applies to all personal data that is subject to the Esri Privacy Statement and is received from the European Union, the United Kingsom and Switzerland. Esri will comply with the Privacy Shield Principles in respect of such personal data.
1616
1717To learn more about the Privacy Shield program, and to view our certification, please visit [www.privacyshield.gov](https://www.privacyshield.gov/participant). The [Esri Privacy Statement](https://www.esri.com/en-us/privacy/privacy-statements/privacy-statement) is also viewable on the Esri website.
1818
19Esri also maintains an affirmative commitment to the U.S.-Swiss Safe Harbor Framework and its principles, which will not be affected by our participation in the Privacy Shield. The U.S.-Swiss Safe Harbor applies to personal data that transferred from Switzerland to the U.S.
20
2119## Esri Products & Services Privacy Statement Supplement
2220
2321The Products & Services Privacy Statement Supplement applies to the Esri Products, Services and related offerings that display or link to the "Products & Services" notice. Esri established the Products & Services Privacy Statement Supplement in order to clarify that the use of information to which it may be provided access in order to deliver Product & Services, is more limited than the use of information covered by the general Esri Privacy Statement.
2422
2523Key offerings that fall within the scope of Products & Services include ArcGIS Online, Esri Managed Cloud Services, Customer Support, and Professional Service engagements. Customers who utilize organization (cost based) accounts, of Products & Services such as ArcGIS Online, expect a higher level of privacy assurance which is reflected in the Products & Services Privacy Statement Supplement, whereas consumers of public accounts are provided the privacy assurance level of the Esri Privacy Statement. Esri's marketing sites and other public websites are governed by the general Esri Privacy Statement.
2624