Website Privacy Policy: Include link to internet host&#39;s policy?
<p>Why don't most privacy policies include links to the privacy policy of the company that is hosting the website?  One would think that that given all the data that the host collects, that would be required.</p>

<p>This terminology used in this answer is valid for EU (the controller-processor relationship referred to was introduced in 1995, and is perpetuated in the GDPR). It may that non-EU jurisdictions uses different terminology.</p>
<p>The relationship between the owner of the website (controller) and the hosting company (processor) is contractual (usually in the form of a signed Data Processing Addendum - DPA). The terms of the conditions of the DPA are usually very different from the public Privacy Policy of the hosting company (which is about how it processes personal data <em>about</em> its customers, not how it processes personal data <em>under the supervision</em> of one specific customer).</p>
<p>Since the processor is contractually bound to abide by the DPA (<em>not</em> its public privacy policy) when acting as a processor, its public privacy policy is irrelevant to the audience the controller's public privacy is intended for.</p>
<p>Any serious hosting company that wants to do business in Europe after May 25 2018 will offer a DPA. Here is a <a href="https://aws.amazon.com/compliance/eu-data-protection/" rel="nofollow noreferrer">link</a> to the page for requesting one from Amazon AWS.</p>

privacy