Data processors

Data processors

How the data that is stored/uploaded into the Collective Minds® platform is processed to provide the Services
Brain MRI
Group 246

Data processors (sub-processors)

Which process the data that is stored/uploaded into the Collective Minds® platform (acting as Processors) to provide the Services

Subprocessor Processing Activity Purpose Country/Region Main safety measures
Amazon Web Services Germany GMBH (AWS) Hosting provider To store the Platform and the data contained in the Platform: The Collective Minds® platform is hosted here. Germany

Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading the data into AWS GmbH Servers.

Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signaure of additional undertakings and safety measures, including the signature of the EU SCCs.

Group 246

Data Processors

(when we are acting as data Controllers)

That help us process data about users, clients, and partners who access, use, and interact with our services

Subprocessor Categories of data and data subjects Processing Activity Purpose Country/Region Main safety measures
Google Cloud Platform Encrypted and pseudoyimised users, clients, and partners data Office functionality Email, document storage, chat, etc. Ireland Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data.
Encryption and enforced safety measures to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs.

In accordance with our internal policies, we will process only the minimum data necessary to provide the services and will prioritise the use of pseudonymised data when referring to users, customers, etc.
Mailjet Users’ email data Messaging gateway Email and SMS for marketing campaigns and general news/updates concerning the company. France Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signature strong undertakings and safety measures.
Google Analytics Encrypted and pseudoyimised users, clients, Institutions and partners data Platform usage analysis Analyse and understand community usage of the service to improve user experience Germany Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data.
Encryption and enforced safety measures to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs.
HubSpot Encrypted users, clients, partners and providers data  CRM Provider Internal management of customer, contact and relationship information United States of America Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data.
Encryption and enforced safety measures to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs.
Fortnox

Clients and providers data 

 Invoicing and billing Invoicing and billing customers for services and development. Sweden Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signature strong undertakings and safety measures