Elsevier Privacy Policy

DATED 2020-06-08 · VERSION 20200701_rev01 · COMPARED WITH 20200101_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20200101_rev01 to 20200701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Last updated: December 19, 2019
+Last updated: June 8, 2020
 Elsevier is committed to maintaining your confidence and trust with respect to your privacy. This privacy policy explains how we collect, use and share your personal information.
 ## About our privacy policy
 This privacy policy applies to our websites, apps and other services, including programs and events, that refer or link to this privacy policy (each, a "Service"). This policy may be supplemented by additional privacy statements, terms or notices provided to you. The Elsevier company that owns or administers the Service, as identified therein, is the primary controller of your personal information provided to, or collected by or for, the Service.
 We take precautions to safeguard your personal information against loss, theft and misuse and unauthorized access, disclosure, alteration and destruction through the use of appropriate technical and organizational measures.
 [Scroll to top of page](https://www.elsevier.com/legal/privacy-policy)
 ## Locations of processing
+Your personal information may be stored and processed in your region or another country where Elsevier companies and their service providers maintain servers and facilities, including Australia, France, Germany, India, Ireland, the Netherlands, the Philippines, Singapore, the United Kingdom, and the United States.
+Your personal information may be stored and processed in your region or another country where Elsevier companies and their service providers maintain servers and facilities, including Australia, France, Germany, India, Ireland, the Netherlands, the Philippines, Singapore, the United Kingdom, and the United States. We take steps, including through contracts, to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.
+We take steps, including through contracts, to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law. Where personal information is transferred from the European Economic Area ("EEA") or Switzerland to a country that has not received an adequacy decision by the European Commission, we rely on appropriate safeguards such as the European Commission-approved Standard Contractual Clauses and Privacy Shield Frameworks to transfer the data.
+Where personal information is transferred from the European Economic Area ("EEA") or Switzerland to a country that has not received an adequacy decision by the European Commission, we rely on appropriate safeguards such as the European Commission-approved Standard Contractual Clauses and Privacy Shield Frameworks to transfer the data.
+Certain U.S. entities within the Elsevier group of companies have certified certain of their services to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce. Please view these entities' Privacy Shield Notice [here](https://www.relx.com/~/media/Files/R/RELX-Group/documents/privacy-shield-notice.pdf). To learn more about the Privacy Shield program, and to view these entities' certification, please visit [www.privacyshield.gov](https://www.privacyshield.gov/welcome).
 [Scroll to top of page](https://www.elsevier.com/legal/privacy-policy)
 ## Grounds for processing
 When we collect from you any personal information within the scope of European data protection laws, we do so: