Data processors

How the data that is stored/uploaded into the Collective Minds^® platform is processed to provide the Services

Data processors (sub-processors)

Which process the data that is stored/uploaded into the Collective Minds^® platform (acting as Processors) to provide the Services

Subprocessor

Processing Activity

Purpose

Country/Region

Main safety measures

Amazon Web Services Germany GMBH (AWS)

Hosting provider

To store the Platform and the data contained in the Platform: The Collective Minds^® platform is hosted here.

Germany

Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading the data into AWS GmbH Servers.

Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability.

Signature of a DPA that includes the signaure of additional undertakings and safety measures, including the signature of the EU SCCs.

Data Processors

(when we are acting as data Controllers)

That help us process data about users, clients, and partners who access, use, and interact with our services

Subprocessor	Categories of data and data subjects	Processing Activity	Purpose	Country/Region	Main safety measures
Google Cloud Platform	Encrypted and pseudoyimised users, clients, and partners data	Office functionality	Email, document storage, chat, etc.	Ireland	Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data. Encryption and enforced safety measures to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs. In accordance with our internal policies, we will process only the minimum data necessary to provide the services and will prioritise the use of pseudonymised data when referring to users, customers, etc.
Mailjet	Users’ email data	Messaging gateway	Email and SMS for marketing campaigns and general news/updates concerning the company.	France	Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature strong undertakings and safety measures.
Google Analytics	Encrypted and pseudoyimised users, clients, Institutions and partners data	Platform usage analysis	Analyse and understand community usage of the service to improve user experience	Germany	Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data. Encryption and enforced safety measures to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs.
HubSpot	Encrypted users, clients, partners and providers data	CRM Provider	Internal management of customer, contact and relationship information	United States of America	Pseudonymisation and data minimisation (anonymisation techniques) and encryption prior to uploading and or sharing the data. Encryption and enforced safety measures to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature of strong additional undertakings and safety measures, including the signature of the EU SCCs.
Fortnox	Clients and providers data	Invoicing and billing	Invoicing and billing customers for services and development.	Sweden	Encryption and enforced safety measures provided by AWS to ensure confidentiality, integrity and availability. Signature of a DPA that includes the signature strong undertakings and safety measures