Merge pull request #364 from gruntwork-io/update-legal-docs

Update privacy policy and DPA to address revocation of Privacy Shield.

Author: josh-padnick

_data/legal.yml

@@ -105,3 +105,10 @@
   category: terms-of-service
   link: https://github.com/gruntwork-io/gruntwork-io.github.io/commit/6d1bcb9a817698e1e4e77018818397cc834deeb7
   date: 2020-09-10
+
+- guid: 10013
+  title: Update privacy policy and Data Processing Agreement to reflect revocation of the Privacy Shield Framework
+  description: Because the European Court of Justice has revoked the Privacy Shield Framework, we need to update our privacy policy and Data Processing Agreement to remove reference to it.
+  category: privacy-policy
+  link: https://github.com/gruntwork-io/gruntwork-io.github.io/commit/433dfbb
+  date: 2020-09-29

_data/privacy-policy.yml

@@ -107,8 +107,8 @@
   items:
     - title:
       ans: |
-        <p>We may store and process any information that we collect (personal or otherwise) ourselves or in databases and servers owned and maintained by us, our affiliates, agents, or service providers, including without limitation in a Gruntwork-owned AWS account. If you access or use the Services outside of the United States, information that we collect about you may be transferred to servers inside the United States, or in any country where we have operations or where we engage vendors or service providers. These countries may not have the same data protection laws as the country in which you originally provided the data. By using the Services, or submitting your personal data to us, you consent to such transfer and processing of your such information. We may also store some information locally on your computer or other devices. For example, we may store information as local cache so that you can open the Website and view content faster.</p>
-        <p>Where personal data is transferred outside the European Economic Area to a third party in a country that is not subject to an adequacy decision by the EU Commission, data is appropriately protected by Standard Contractual Clauses, an appropriate Privacy Shield certification, or a vendor’s Processor Binding Corporate Rules. If you would like a copy of the relevant mechanism, please contact us at <a href="mailto:privacy@gruntwork.io">privacy@gruntwork.io</a>. </p>
+        <p>We may store and process any information that we collect (personal or otherwise) ourselves or in databases and servers owned and maintained by us, our affiliates, agents, or service providers, including without limitation in a Gruntwork-owned AWS account. If you access or use the Services outside of the United States, information that we collect about you may be transferred to servers inside the United States, or in any country where we have operations or where we engage vendors or service providers. These countries may not have the same data protection laws as the country in which you originally provided the data. By using the Services, or submitting your personal data to us, you consent to such transfer and processing of your such information. If you reside or are located in the European Economic Area ("EEA") and such transfers occur, we take appropriate steps to provide the same level of protection for the processing carried out in any such countries as you would have within the EEA to the extent feasible under applicable law. You may contact us at privacy@gruntwork.io to request a copy of the relevant mechanism we use to transfer personal data outside the EEA.</p>
+        <p>We may also store some information locally on your computer or other devices. For example, we may store information as local cache so that you can open the Website and view content faster.</p>
 
 - question: We retain your data only as long as necessary
   items:

assets/pdf/gruntwork-data-processing-agreement.pdf

@@ -1,7 +1,7 @@
 ---
 layout: default
 title: Privacy Policy
-modified_date: June 3, 2020
+modified_date: September 29, 2020
 permalink: /legal/privacy-policy/
 redirect_from: /privacy-policy/
 slug: privacy-policy