Other Covered Entities

See Purposes of Data Collection section for details on scope of cert

Industries

  • Information and Communications Technology
  • Information Technology Services

Participation

Swiss-U.S. Privacy Shield Framework: Active

Original Certification Date: 4/18/2017
Next Certification Due Date: 9/15/2022
Data Collected: HR, NON-HR

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 9/22/2016
Next Certification Due Date: 9/15/2022
Data Collected: HR, NON-HR

Purpose of Data Collection

This certification applies to Google LLC and its wholly-owned U.S. subsidiaries, it includes X (a division of Google LLC) and Chronicle LLC, and any other wholly-owned U.S. subsidiary of Google LLC to the extent of any current separate self-certification by such entity. Personal data other than human resources data: Data is processed for various purposes depending on the particular product or service being provided, including: sales and marketing to consumers and businesses; supplying services and products to consumers and businesses; operating, developing and improving Google services and products; personalizing Google services and products; financial processing and management; supplier, vendor and partner relationship management; fraud prevention, security, and protection of Google and our users; compliance with governmental, legislative and regulatory bodies; and customer support and relationship management. Data is disclosed to third parties as detailed in our Privacy Policy, including: in situations in which we have consent, for external processing, with domain administrators, and for legal reasons. Human resources data: Data is processed for various employment and legal purposes, including: recruitment and staffing; compensation, benefit programs and payroll; performance management and training; compliance and risk management; workplace management; protection against injury, theft, legal liability, fraud and abuse; and other business purposes. Data is disclosed to third parties as detailed in our Privacy Policy, including for business-related and legal purposes. As of July 16, 2020, we no longer rely on the EU-U.S. Privacy Shield to transfer EEA and UK personal information to the U.S. but continue to apply the Privacy Shield Principles to personal data we received from the EEA and UK in reliance on the Shield.

Privacy Policy

HR Data

Google Employee Privacy Policy
Description:

Describes how Google collects and uses employee data. Available to employees on Google internal sites and services. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for Google Employee Privacy Policy.

Effective Date: 1/8/2021

Non-HR Data

Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) will serve as the dispute resolution provider for this privacy policy.

Effective Date: 8/25/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 1/11/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) will serve as the dispute resolution provider for this privacy policy.

Effective Date: 3/14/2019
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 2/3/2021
Description:

The Extended Workforce Privacy Policy explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 1/13/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this Privacy Policy.

Effective Date: 1/7/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy notice.

Effective Date: 7/1/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this Privacy Policy.

Effective Date: 7/1/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this Privacy Policy.

Effective Date: 11/20/2020
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 8/16/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 6/14/2021
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 1/31/2020
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy statement.

Effective Date: 1/31/2020
Description:

Explains the data that we collect and why we collect it, how we use that data, and the choices we offer to control that data. The EU Data Protection Authorities (DPAs) serve as the dispute resolution provider for this privacy policy.

Effective Date: 1/22/2021

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Google LLC at:

Keith Enright
Chief Privacy Officer
Google LLC
Google Data Protection Office
1600 Amphitheatre Parkway
Mountain View, California 94043

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Google LLC to your question or complaint, please contact the independent recourse mechanism listed below




Appropriate statutory body with jurisdiction to investigate any claims against Google LLC regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission