Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on May 1, 2026, not verified as current.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Where artificial intelligence is leveraged, it will only be used where legally permissible, in compliance with this Privacy Statement, and in a manner which is consistent with our commitments and values.”
“We ensure that the recipient of your Personal Data provides an adequate level of protection and security, by entering into appropriate agreements, including, where required, standard contractual clauses or an alternative mechanism...”
“The Personal Data we collect from other sources for the purposes of tailored advertising includes personal identifiers professional or employment-related information...We collect this from third party providers of business contact information...”
“In the event you choose to opt-in to have your badge scanned by an event sponsor, you are providing your Personal Data directly to the sponsor (not to Salesforce) and the processing of your badge data will be subject to the event sponsor's privacy policy”
“If you believe that we have not been able to assist with your complaint or concern, and you are located in the EEA or the UK, you have the right to lodge a complaint with the competent supervisory authority.”
“Your Personal Data may be transferred to and stored by us in the United States and by our affiliates and third-parties...your Personal Data may be processed and stored outside your country or jurisdiction...”
This document explains how Salesforce collects, uses, and shares your personal information when you interact with Salesforce directly—though it does not cover data Salesforce handles on behalf of its business customers. Salesforce may share your information with contracted vendors, event sponsors, and international affiliates, and it collects data from third-party sources for targeted advertising. You have the right to request that Salesforce delete your personal data, and Salesforce states it does not sell personal data.
This Privacy Statement establishes Salesforce, Inc. and its affiliates as data controllers responsible for Personal Data processing, while explicitly carving out data Salesforce processes as a processor or service provider on behalf of customers. It sets out the categories of Personal Data Salesforce collects—including data acquired from third-party business contact providers for tailored advertising—and the parties with whom Salesforce shares that data, including contracted service providers, event sponsors, and international affiliates and third parties. Cross-border transfers are governed by appropriate agreements, including standard contractual clauses where required, to ensure adequate protection. Individuals are recognized as holding a right to erasure, and EEA and UK individuals are acknowledged as having the right to escalate unresolved complaints to a competent supervisory authority. Salesforce expressly limits its use of artificial intelligence to contexts that are legally permissible, consistent with the Privacy Statement, and aligned with its stated commitments and values.
As an individual, your Personal Data may be collected not only directly from you but also from third-party business contact providers for tailored advertising purposes. Attending a Salesforce event, webinar, or accessing a sponsored resource may result in your Personal Data being shared with the relevant sponsors; and if you opt in to a badge scan by an event sponsor, your data goes directly to that sponsor and is governed by the sponsor's own privacy policy—not Salesforce's. Your Personal Data may be transferred to and stored in the United States, and may also be processed by affiliates and third parties outside your home jurisdiction. You have a recognized right to request erasure of your Personal Data, and if you are located in the EEA or the UK and Salesforce has not resolved your complaint, you can lodge a complaint directly with the competent supervisory authority.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“We ensure that the recipient of your Personal Data provides an adequate level of protection and security, by entering into appropriate agreements, including, where required, standard contractual clauses or an alternative mechanism...”
“The Personal Data we collect from other sources for the purposes of tailored advertising includes personal identifiers professional or employment-related information...We collect this from third party providers of business contact information...”
“Where artificial intelligence is leveraged, it will only be used where legally permissible, in compliance with this Privacy Statement, and in a manner which is consistent with our commitments and values.”
“In the event you choose to opt-in to have your badge scanned by an event sponsor, you are providing your Personal Data directly to the sponsor (not to Salesforce) and the processing of your badge data will be subject to …”
“If you believe that we have not been able to assist with your complaint or concern, and you are located in the EEA or the UK, you have the right to lodge a complaint with the competent supervisory authority.”
“Your Personal Data may be transferred to and stored by us in the United States and by our affiliates and third-parties...your Personal Data may be processed and stored outside your country or jurisdiction...”
“If you attend an event or webinar organized by us, or download or access a resource on our website, we may share your Personal Data with the sponsors of the event or the sponsor of the resource.”
“This Privacy Statement does not apply to the extent we process Personal Data as a processor or service provider on behalf of our customers...”
“Erase or delete your Personal Data”
“Salesforce, Inc. and/or its affiliated entities...act as the controllers of your Personal Data and are responsible for its processing, unless expressly specified otherwise in our full Privacy Statement.”
“As a business covered by the CCPA, we do not sell Personal Data.”
“With our contracted service providers, who provide services such as IT and system administration and hosting, credit card processing, research and analytics, marketing, events planning, customer support and data enrichment...”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Cross-platform context
See how other platforms handle Adequate protection required for international transfers and similar clauses.
Compare across platforms →