Data processors
Data processors
How the data that is stored/uploaded into the Collective Minds® platform is processed to provide the Services
Data processors (sub-processors)
Which process the data that is stored/uploaded into the Collective Minds® platform (acting as Processors) to provide the Services
Subprocessor | Processing Activity | Purpose | Country/Region | Main safety measures |
Amazon Web Services Germany GMBH (AWS) | Hosting provider | To store the Platform and the data contained in the Platform: The Collective Minds® platform is hosted here. | Germany |
Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading the data into AWS GmbH Servers. Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signaure of additional undertakings and safety measures, including the signature of the EU SCCs. |
Data Processors
(when we are acting as data Controllers)
That help us process data about users, clients, and partners who access, use, and interact with our services
Subprocessor | Categories of data and data subjects | Processing Activity | Purpose | Country/Region | Main safety measures |
Google Cloud Platform | Encrypted and pseudoyimised users, clients, and partners data | Office functionality | Email, document storage, chat, etc. | Ireland | Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data. Encryption and enforced safety measures to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs. In accordance with our internal policies, we will process only the minimum data necessary to provide the services and will prioritise the use of pseudonymised data when referring to users, customers, etc. |
Mailjet | Users’ email data | Messaging gateway | Email and SMS for marketing campaigns and general news/updates concerning the company. | France | Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature strong undertakings and safety measures. |
Google Analytics | Encrypted and pseudoyimised users, clients, Institutions and partners data | Platform usage analysis | Analyse and understand community usage of the service to improve user experience | Germany | Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data. Encryption and enforced safety measures to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs. |
HubSpot | Encrypted users, clients, partners and providers data | CRM Provider | Internal management of customer, contact and relationship information | United States of America | Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data. Encryption and enforced safety measures to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs. |
Fortnox |
Clients and providers data |
Invoicing and billing | Invoicing and billing customers for services and development. | Sweden | Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature strong undertakings and safety measures |