Microsoft 365
by Microsoft
On Microsoft 365's Privacy Page you can request and collect all the privacy and GDPR related information that Microsoft 365 is providing.
Privacy policy
The privacy policy by is a legal document or statement that discloses how Microsoft 365 gathers, uses, discloses, and manges their customers' data.
Get the contact information for Microsoft 365 privacy team or DPO.
Data transfers
The basis for Microsoft sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.
Security information & certifications
Documentation of the security measures and practices Microsoft has in place when handling personal data.
Personal data
A description of the personal data that Microsoft is handling.
Data processing agreements
A DPA is a contract that defines clear roles and obligations for the sharing of personal data.
Data retention & deletion
Information about how long the data is kept for and when it's deleted.
Subprocessors
Subprocessors are companies that provide a service for Microsoft and who has or potentially will get access to personal data of their customers.
Processing locations
Where personal data is processed by Microsoft
Processing locations of Microsoft's subprocessors
Where personal data is processed by the subprocessors of Microsoft