PrivMX data subprocessors

Introduction

This document gives you an information about all possible third parties that process personal data as our processors, subprocessors or entities acting as a separate data controllers. Please, keep in mind that all data stored on a PrivMX Team Server, uploaded by PrivMX Client Software are end to end encrypted and both we and our subprocessors are not able to decrypt them.

According to our Privacy Policy, if:

  • you are our Client or User of PrivMX Services,
  • you visit one of our public web pages, Control Center page or our social media fanpage,

we may transfer your personal data to some of the data processors (companies that process data on our behalf) or other entities that may gain access to your data. In order to provide you with a comprehensive information about processing your personal data, we present you with a detailed list of these entities, specified below.

This document does not include possible state authorities that may demand access to financial data concerning our services (e.g. tax authorities).

Processing personal data stored within PrivMX Team Servers

If you, acting as a Client, conclude a Data Processing Agreement with us, we may transfer some of the data that you process via our services (especially if you store your data on PrivMX Team Servers) to other entities that help us with providing services for you (subprocessors). It is possible that you will be allowed to choose a location of a data center where your data will be stored. Please keep in mind that this data, uploaded via PrivMX Client Software are encrypted on your device, so we are not able to decrypt them.

Companies that may receive data that you process in connection with using our PrivMX Services:

  • Amazon Web Services EMEA SARL with its registered office in Luxembourg,
  • Microsoft Ireland Operations Limited with its registered office in Dublin, Ireland,
  • Leaseweb Netherlands B.V. with its registered office in Amsterdam, the Netherlands,
  • OVH BV with its registered office in Amsterdam, the Netherlands,
  • OVH sp. z o.o. with its registered office in Wroclaw, Poland.

In case if you choose a data center outside the European Economic Area, your personal data may be transferred to another Amazon or Microsoft group company responsible for the specific data center. In this case, the legal basis for the transfer of such data outside the European Economic Area are the Standard Contractual Clauses, approved by the European Commission.

Please keep in mind that this concern the data that you store on a PrivMX Team Server or data processed in connection with communication with other persons via PrivMX Team Server (e.g. via PrivMX Meeting). You may process these data both as a data controller or as a data processor. It means that you may use PrivMX Services in order to process data that were provided to you by a separate data controller and you act as a data processor. We consider ourselves a data processor or further data subprocessor.

Processing personal data in order to perform provisions of Terms of Services

Some of our data processors will receive your data only to a limited extent. That especially concerns processing personal data via our Control Center (a place where you may manage your services, our public website or processing personal data in order to provide you with online services, according to the provisions of our Terms of Service, such as maintaining services or issuing invoices. We also use external services to measure traffic on our public website or to perform other marketing activities, such as advertising our services.

Therefore, these companies may gain access to your data:

  • Amazon Web Services EMEA SARL with its registered office in Luxembourg,
  • Microsoft Ireland Operations Limited with its registered office in Dublin, Ireland,
  • TransIP B.V. with its registered office in Leiden, the Netherlands.

In case if you choose a data center outside the European Economic Area, your personal data may be transferred to another Amazon or Microsoft group company responsible for the specific data center. In this case, the legal basis for the transfer of such data outside the European Economic Area are the Standard Contractual Clauses, approved by the European Commission.

If you are our Client (you purchase PrivMX Services) your personal data will also be processed by Paddle.com Market Limited with its registered office in Corby, United Kingdon - a reseller company that is responsible for orders' processing, payments and taxes. They process your personal data as a separate data controller.

Other data recipients

We may also process your personal data together with other entities in order to conduct marketing and advertising activities. We may use social media platforms and process personal data of their users, as long as they interact with our fanpage or public websites. Therefore, we hereby inform you that we may process your personal data together with LinkedIn Corp., Twitter, Inc., as well as Facebook Ireland Ltd., with its registerd office in Dublin, Ireland.

Detailed list of subprocessors

If you look for detailed description of processing activities that may lead to providing your personal data to other entities, see the table with a list of our subprocessors or data controllers below.

Entity Character of processing
Amazon Web Services EMEA SARL with its registered office in Luxembourg, address: 38 Avenue John F. Kennedy, L-1855, Luxembourg. This company provides us with services that we use in order to maintain our cloud infrastructure and provide our cloud services.
Microsoft Ireland Operations Limited with its registered office in Dublin, Ireland, addres:, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland This company provides us with services that we use in order to maintain our cloud infrastructure and provide our cloud services.
TransIP B.V. with its registered office in Leiden, the Netherlands, address: Schipholweg 9B, 2316 XB, Leiden, KvK number: 24345899 This company is providing us with hosting services in connection with our Control Center (a place where you can manage your services). Therefore, data of a Client that uses Control Center may be processed by TransIP. We also use this company to host our website, www.privmx.com
OVH sp. z o.o. with its registered office in Wroclaw, Poland, address: Swobodna 1, 50-088 Wrocław, KRS number: 0000220286 This company is providing us with hosting services connected with using Team Servers.
OVH BV - with its registered office in Amsterdam, the Kingdom of Netherlands, address: Hogehilweg 16, 1101 CD Amsterdam This company is providing us with hosting services connected with using Team Servers.
Leaseweb Netherlands B.V. with its registered office in Amsterdam, the Kingdom of Netherlands, address: Luttenbergweg 8, 1101 EC Amsterdam, KvK number: 30141839 This company is providing us with hosting services connected with using Team Servers.
Paddle.com Market Limited, with its registered office in United Kingdom, address: 15 Briery Close, Great Oakley, Corby, Northamptonshire, NN18 8JG, United Kingdom, company number 08172165 Paddle is a company that resells and distributes our PrivMX Services. It means that they are responsible for processing orders, fraud prevention, payments and invoicing, including potential tax obligations. If you purchase our services, you enter into a contract both with us and with Paddle. They process your personal data as a separate data controller.
LinkedIn Corp. with its registered office in Sunnyvale, California, USA address: 1000 W. Maude Avenue Sunnyvale, CA 94085, USA LinkedIn is a social media platform that we use in order to promote our services and to maintain contact with people interested in our activity. LinkedIn process their user's personal data as a separate data controller. Transferring personal data to United States of America is based on Standard Contractual Clauses - a special agreement, adopted by the European Commission. LinkedIn complies with provisions of this agreement.
Twitter, Inc. with its registered office in San Francisco, California, USA address: 1355 Market Street #900, San Francisco, CA 94103, USA Twitter is a social media platform that we use in order to promote our services and to maintain contact with people interested in our activity. Twitter process their user's personal data as a separate data controller. Transferring personal data to United States of America is based on Standard Contractual Clauses - a special agreement, adopted by the European Commission. Twitter complies with provisions of this agreement.
Meta Platform Ireland Ltd with its registered office in Dublin, Ireland, address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland Meta is an owner of Facebook. Facebook is a social media platform that we use in order to promote our services and to maintain contact with people interested in our activity. Facebook process their user's personal data as a separate data controller.

rev 15032023

We use cookies on our public website to analyze how you interact with it and to improve its functionality. It's up to you to decide if you're OK with that. Click OK to proceed, accept all cookies and go back to the site or check the Cookie settings and decide upon particular types of Cookies you want to accept.