Provisioning and operations of server and infrastructure services (PaaS)
Data handled: All data handled in the service
Location of processing: EU/EEA (Frankfurt data centers). Processing is covered
by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
✔️
|
Performs customer satisfaction measurements (Net Promotor Score)
Data handled: Name, email, basic account details only for randomly selected administrators in our customer accounts, unless customer has opted out of measurements.
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
Transactional emails
Data handled: Email address and email activity (receipts, read events), phone numbers (if provided on specific users)
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
Infrastructure provider (IaaS) providing CDN, WAF, Network acceleration
Data handled: IP-address & traffic logs
Location of processing: Worldwide (ip-addresses may be logged on servers globally). Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing
|
|---|---|
|
✔️
|
✔️
|
Support services, providing SaaS tool for support ticket handling
Data handled: Name, email, support ticket details
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
Marketing & leads handling
Data handled: Name, email, account activity data, marketing website activity
Location for processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
https://www.google.com/
Traffic analytics and Maps
Data handled: Ip-adress & website activity
Location of processing: Worldwide (distributed in EU/EEA and USA)
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
Legal agreements
Data handled: Digitally signed agreements with personal data in them, limited to personal data within agreements.
Location of processing:US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC)
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
Infrastructure provider providing push notification delivery
Data handled: Device identifiers and basic device data for app users, connected to the users &frankly pseudonymous id (no direct personally identifiable information such as name, email etc.)
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC)
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
✔️
|
Software provider (SaaS) providing logging for errors occurring in our application for troubleshooting & quality improvements.
Data handled: IP-address, &frankly pseudonymous id, basic user agent details
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC)
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
(not used)
|
https://www.mailjet.com/
Transactional emails
Data handled: Email address and email activity (receipts, read events)
Location of processing: EU/EEA. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
✔️
|
https://www.planhat.com/
Customer Success Management system
Data handled: Firstname, Lastname, Email address, &frankly account activities including link to support & NPS answers
Location of processing: EU/EEA. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
|
Standard
|
Reduced Processing*
|
|---|---|
|
✔️
|
✔️
|
* If enabled for your account in &frankly, processing will be limited to within EU/EEA and/or only for anonymized data with the highlighted sub-processors only. Please note reduced processing may impact our ability to provide our high level of customer success and support, and will have reduced troubleshooting capabilities.
