PrivMX data subprocessors

Introduction

This document gives you an information about all possible third parties that process personal data as our processors, subprocessors or entities acting as a separate data controllers. Please, keep in mind that all data stored within PrivMX Infrastructure, uploaded by PrivMX Client Software are end to end encrypted and both we and our subprocessors are not able to decrypt them.

According to our Privacy Policy, if:

  • you are our Client or User of PrivMX Services,
  • you visit one of our public web pages, Control Center page or our social media fanpage,

we may transfer your personal data to some of the data processors (companies that process data on our behalf) or other entities that may gain access to your data. In order to provide you with a comprehensive information about processing your personal data, we present you with a detailed list of these entities, specified below.

This document does not include possible state authorities that may demand access to financial data concerning our services (e.g. tax authorities).

Processing personal data stored within PrivMX Infrastructure

If you, acting as a Client, conclude a Data Processing Agreement with us, we may transfer some of the data that you process via our services (especially if you store your data within PrivMX Infrastructure) to other entities that help us with providing services for you (subprocessors). It is possible that you will be allowed to choose a location of a data center where your data will be stored. Please keep in mind that this data, uploaded via PrivMX Client Software are encrypted on your device, so we are not able to decrypt them.

Companies that may receive data that you process in connection with using our PrivMX Services:

  • Microsoft Ireland Operations Limited with its registered office in Dublin, Ireland,
  • Leaseweb Netherlands B.V. with its registered office in Amsterdam, the Netherlands,
  • OVH sp. z o.o. with its registered office in Wroclaw, Poland.

In case if you choose a data center outside the European Economic Area, your personal data may be transferred to another Microsoft group company responsible for the specific data center. In this case, the legal basis for the transfer of such data outside the European Economic Area is the Data Privacy Framework, a binding agreement between the European Union and the United States of America (www.dataprivacyframework.gov), approved by the European Commission.

Please keep in mind that this include the data that you store within PrivMX Infrastructure or data processed in connection with communication with other persons via PrivMX Infrastructure. You may process these data both as a data controller or as a data processor. It means that you may use PrivMX Services in order to process data that were provided to you by a separate data controller and you act as a data processor. We consider ourselves a data processor or further data subprocessor.

Processing personal data in order to perform provisions of Terms of Service

Some of our data processors will receive your data only to a limited extent. That especially concerns processing personal data via our Control Center (a place where you may manage your services), our public website or processing personal data in order to provide you with online services, according to the provisions of our Terms of Service, such as maintaining services or issuing invoices. We also use external services to measure traffic on our public website or to perform other marketing activities, such as advertising our services.

Therefore, these companies may gain access to your data:

  • Microsoft Ireland Operations Limited with its registered office in Dublin, Ireland.

Microsoft may transfer personal data to other companies of its group. In this case, the legal basis for the transfer of such data outside the European Economic Area is the Data Privacy Framework, a binding agreement between the European Union and the United States of America (www.dataprivacyframework.gov), approved by the European Commission.

Other data recipients

We may also process your personal data together with other entities in order to conduct marketing and advertising activities. We may use social media platforms and process personal data of their users, as long as they interact with our fanpage or public websites. Therefore, we hereby inform you that we may process your personal data together with:

  • LinkedIn Corp. with its registered office in San Francisco, California, USA,
  • X Corp. with its registered office in San Francisco, California USA, together with its subsidiary, Twitter International Unlimited Company with its registered office in Dublin, Ireland,
  • Meta Platforms Ireland Ltd., with its registerd office in Dublin, Ireland.

Your personal data will be processed by the aforementioned entities only in case if you are an user of these platforms. The detailed information regarding the processing of personal data by them is available in the privacy policy sections of their respective websites.

Detailed list of subprocessors

If you look for detailed description of processing activities that may lead to providing your personal data to other entities, see the table with a list of our subprocessors or data controllers below.

Entity Character of processing
Microsoft Ireland Operations Limited, addres:, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland This company provides us with services that we use in order to maintain our cloud infrastructure and provide our cloud services. Microsoft may transfer personal data to other companies of its group. In this case, the legal basis for these transfer is the Data Privacy Framework - a binding agreement between the European Union and the United States of America (www.dataprivacyframework.gov), approved by the European Commission.
OVH sp. z o.o., address: Powstańców Śląskich 9, 53-332 Wrocław, KRS number: 0000220286 This company is providing us with hosting services connected with maintaining PrivMX Infrastructure.
Leaseweb Netherlands B.V., address: Hessenbergweg 95 1101 CX Amsterdam, KvK number: 30141839 This company is providing us with hosting services connected with maintaining PrivMX Infrastructure.
LinkedIn Corp., address: 1000 W. Maude Avenue Sunnyvale, CA 94085, USA LinkedIn is a social media platform that we use in order to promote our services and to maintain contact with people interested in our activity. LinkedIn process their user's personal data as a separate data controller. Transferring personal data to United States of America is based on Standard Contractual Clauses, a special agreement, approved by the European Commission.
X Corp., address: Suite 900, 1355 Market Street, San Francisco, California, USA, and its subsidiary, Twitter International Unlimited Company, address: 1 Cumberland Place, Fenian Street, Dublin 2, Dublin, Ireland X (formerly: Twitter) is a social media platform that we use in order to promote our services and to maintain contact with people interested in our activity. X process their user's personal data as a separate data controller. Transferring personal data to United States of America is based on Standard Contractual Clauses - a special agreement, adopted by the European Commission.
Meta Platforms Ireland Ltd., address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland Meta is an owner of Facebook. Facebook is a social media platform that we use in order to promote our services and to maintain contact with people interested in our activity. Facebook process their user's personal data as a separate data controller.

rev 27102023

We use cookies on our public website to analyze how you interact with it and to improve its functionality. It's up to you to decide if you're OK with that. Click OK to proceed, accept all cookies and go back to the site or check the Cookie settings and decide upon particular types of Cookies you want to accept.