On Magento 2 Grouped Promotions' Privacy Page you can request and collect all the privacy and GDPR related information that Magento 2 Grouped Promotions is providing.
The privacy policy by is a legal document or statement that discloses how Magento 2 Grouped Promotions gathers, uses, discloses, and manges their customers' data.
The basis for IToris sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.