Supplemental Google Cloud Privacy Notice

Effective Date: August 21, 2023

If your organization has adopted our Google Workspace for Education Service Data Addendum, most of the Google Cloud Privacy Notice (the “GCPN”) still applies to Google’s processing of your Service Data, but this page sets out certain modified sections of the GCPN that will apply instead of the corresponding GCPN sections. You should make sure to refer to both this page and the GCPN to get all the information you need about how we process your Service Data when you use Google Workspace for Education.

Please note that your organization is also required to provide you with information about how it processes your Service Data, and about your legal rights. Please review your organization’s own policies and/or privacy notices for more information.

In this Supplemental Privacy Notice, terms have the same meanings they have in the GCPN, but “Service Data” refers only to Service Data collected or generated from your Google Workspace for Education services.

Why We Process Service Data

Google processes your Service Data for the following purposes when your organization has adopted the Google Workspace for Education Service Data Addendum:

Administer the Cloud Services you request. We use Service Data to conduct checks before extending credit to certain customers, to bill for the Cloud Services used, for account management, and for customer relationship management and related correspondence with our customers and their administrators.
Make recommendations to optimize use of Cloud Services. We use Service Data to provide you and our customers with recommendations (for example, suggesting ways to better secure your account or data, reduce service charges or improve performance, or optimize your configurations), and providing information about new or related products and features. We also evaluate your responses to our recommendations and other feedback (if you choose to provide it).
Improve Cloud Services and other services you request. We evaluate Service Data to help us improve the performance and functionality of Cloud Services and other services that you and our customers request, including Google or third-party services that are enabled via the Cloud Services, administrative consoles, application programming interfaces (APIs) or command line interfaces (CLIs), or the Google Workspace Marketplace. As we improve Cloud Services and those other services for you, this will improve them for our customers, and vice versa.
Assist you. We process the Service Data in support tickets and requests to assess whether we have met your needs in relation to the technical support we provide. We also use Service Data to improve our technical support, inform you and our customers about updates to Cloud Services and send other notifications relating to Cloud Services.
Protect you, our users, customers, the public, and Google. We use Service Data to detect, prevent and respond to fraud, abuse, security risks, and technical issues that could harm you, other users, our customers, the public, or Google. This helps make our services safer, more reliable, and more secure.
Comply with legal obligations. We use Service Data to comply with our legal obligations (for example, where we’re responding to legal process or an enforceable governmental request, or meeting our financial record-keeping obligations).

To achieve these processing purposes, we use algorithms to recognize patterns in Service Data, manual review of Service Data (such as when you interact directly with our billing or support teams), aggregation or anonymization of Service Data to eliminate personal information, and combination of Service Data with information from other Google products and services. We also use Service Data for internal reporting and analysis of applicable product and business operations.

European Privacy Standards and GDPR

Our grounds for processing your Service Data

When we process Service Data for the purposes described in this Supplemental Privacy Notice (see "Why We Process Service Data” above), we rely on the following legal grounds:

Purpose	Types of Service Data Processed	Legal Grounds
Administer the Cloud Services you request.	The following types of Service Data, as necessary for the purpose: Account information Cloud payments and transactions Cloud settings and configurations Technical and operational details of your use of Cloud Services Your direct communications	Where necessary for our legitimate interests in fulfilling the contractual obligations which we owe to our customer to administer the Cloud Services.
Make recommendations to optimize use of Cloud Services.	The following types of Service Data, as necessary for the purpose: Account information Cloud payments and transactions Cloud settings and configurations Technical and operational details of your use of Cloud Services Your direct communications	When we’re pursuing legitimate interests in offering the best service we can, and ensuring our customers know how to get the most out of our services. In some cases we will seek your consent to send you marketing communications.
Improve Cloud Services and other services you request.	The following types of Service Data, as necessary for the purpose: Account information Cloud settings and configurations Technical and operational details of your use of Cloud Services Your direct communications	Where necessary for our legitimate interests in offering the best services we can, and continuing to improve the services to meet our customers’ needs.
Assist you.	The following types of Service Data, as necessary for the purpose: Account information Cloud payments and transactions Cloud settings and configurations Technical and operational details of your use of Cloud Services Your direct communications	Where necessary for our legitimate interests in fulfilling the contractual obligations we owe to our customer to provide the Cloud Services, in offering the best services we can, and continuing to improve the services to meet our customers’ needs.
Protect you, our users, customers, the public, and Google.	The following types of Service Data, as necessary for the purpose: Account information Cloud payments and transactions Cloud settings and configurations Technical and operational details of your use of Cloud Services Your direct communications	Where necessary for Google’s legitimate interest to protect against harm to the rights, property and safety of Google, and where necessary for Google’s and third parties’ legitimate interests to protect against harm to our users, our customers and the public, including criminal acts and rights violations.
Comply with legal obligations.	Depending on the specific legal obligations, the following types of Service Data: Account information Cloud payments and transactions Cloud settings and configurations Technical and operational details of your use of Cloud Services Your direct communications	When we have a legal obligation to do so. For example, where we’re responding to legal process or an enforceable governmental request, or retaining information relating to your purchases and communications to meet our record-keeping obligations.

Last modified August 21, 2023