Category of personal data | The personal data is processed for the following purposes | Ways of processing | Personal data will be processed during the following period of time, or, alternatively, the time period for processing will be set according to the following principles | Legal basis for processing |
Name | Administer your account, enable and provide our services, integrate with third-party services, and personalize and improve your experience. | 1. Collection 2. Recording 3. Storage 4. Disclosure by transmission | Until the termination of the user account + 6 months | Performance of a contract to which the data subject is a party |
Administer your account, enable and provide our services, integrate with third-party services, and personalize and improve your experience. | 1. Collection 2. Recording 3. Storage 4. Disclosure by transmission | Until the termination of the user account + 6 months | Performance of a contract to which the data subject is a party | |
Technichal data, which may include the URL you are accessing the Services from, your IP address, unique device ID, network and computer performance, browser type, language, and identifying information and operating system. | Administer your account, enable and provide our services, integrate with third-party services, and personalize and improve your experience. | 1. Collection 2. Recording 3. Storage 4. Disclosure by transmission | Until the termination of the user account + 6 months | Performance of a contract to which the data subject is a party |
List of sub-processors
1. Auth0 (Authentication/login)
Website: https://cloud.google.com/
Sub-Processing Location: Frankfurt, Germany (EU)
International Transfer: Not applicable, processing within the EU
Description of Sub-Processing: Provides authentication services for users logging into the platform. Manages secure user authentication and authorization.
Type of Personal Data: Email addresses, IP addresses
Categories of Data Subjects: Users who create accounts
2. Google Cloud Platform (Cloud Hosting)
Website: https://cloud.google.com/
Sub-Processing Location: Hamina, Finland (EU)
International Transfer: Not applicable, processing within the EU
Description of Sub-Processing: Hosts primary data storage solutions, including databases and application data.
Type of Personal Data: Primary data store (detailed categories and attributes should be specified)
Categories of Data Subjects: Users who create accounts
3. ArangoDB (Database)
Website: https://www.arangodb.com/
Sub-Processing Location: Netherlands (EU)
International Transfer: Not applicable, processing within the EU
Description of Sub-Processing: Manages databases for storing customer and user information, including emails, names, company details, IP addresses, and user IDs.
Type of Personal Data: Email, name, company, IP address, user ID
Categories of Data Subjects: Users who create accounts
4. Google Analytics (Public web-page Analytics)
· Website: https://analytics.google.com/
Sub-Processing Location: Hamina, Finland (EU)
International Transfer: Not applicable, processing within the EU
Description of Sub-Processing: Collects and analyzes public website traffic to improve service offerings.
Type of Personal Data: IP addresses
Categories of Data Subjects: Website visitors
5. Intercom (Support)
Website: https://www.intercom.com/
Sub-Processing Location: Ireland (EU)
International Transfer: Not applicable, processing within the EU
Description of Sub-Processing: Provides customer support services, facilitating communication between users and support staff.
Type of Personal Data: Email, name, company, IP address, user ID
Categories of Data Subjects: Users who create accounts
6. Sendgrid (Email Notifications, Password Resets)
Website: https://sendgrid.com/
Sub-Processing Location: USA
International Transfer: Standard Contractual Clauses (SCCs). Sendgrid participates in and relies on the EU-U.S. Data Privacy Framework (EU-U.S. DPF)
Description of Sub-Processing: Sends email notifications and password reset emails to users, with a 3-day data retention policy.
Type of Personal Data: Email
Categories of Data Subjects: Users who create accounts
8. Sentry (Exception Tracker)
Website: https://sentry.io/
Sub-Processing Location: USA
International Transfer: Standard Contractual Clauses (SCCs) Sentry participates in and relies on the EU-U.S. Data Privacy Framework (EU-U.S. DPF)
Description of Sub-Processing: Tracks and reports system errors to improve system reliability.
Type of Personal Data: IP address
Categories of Data Subjects: Users who encounter errors within the platform
Comment: Sentry has recently opened the possibility to EU data processing and Howwe is exploring this opportunity
9. WPEngine (Public Webpage Hosting)
Website: https://wpengine.com/
Sub-Processing Location: Germany (EU)
International Transfer: Not applicable, processing within the EU
Description of Sub-Processing: Hosts the public-facing website, including marketing and lead generation information.
Type of Personal Data: IP addresses, leads information
Categories of Data Subjects: Website visitors, potential customers (leads)