Refapp Sub-Processors
The list of sub-processors used by the Refapp service. Refapp maintains two separate systems with their own sub-processors:
app.refapp.se and app.refapp.com
Last modified: 2023-04-03.
| Subprocessor | Purpose | Customer data stored | Storage location | Company EU registration number | DPA agreement url (Google drive or public) | Company EU address | Additional customer data processed |
|---|---|---|---|---|---|---|---|
| 46Elks | SMS service | Candidate and referee name and phone number in SMS messages | Stockholm/Uppsala, Sweden | 556838-8184 | 2002/58/EG instead of GDPR, see https://46elks.se/gdpr | SMEDSGRÄND 4 753 20 Uppsala |
none |
| Amazon Web Services EMEA SARL | Refapp servers | Profile images for Refapp users and validated referees Company logos (not GDPR) |
Frankfurt, Germany | R.C.S. Luxembourg: B186284 | https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf https://d1.awsstatic.com/Supplementary_Addendum_to_the_AWS_GDPR_DPA.pdf |
38 Avenue John F. Kennedy L-1855 Luxembourg |
All data that the Refapp system handles: Refapp user data and logs, candidate and referee data |
| Google Workplace | Mail and document storage for Refapp | Mail and document storage for Refapp | (EU/EES) Dublin, Irland, Eemshaven, Holland, Fredericia, Danmark, Hamina, Finland St. Ghislain, Belgien. |
368047 (Google Ireland Limited) |
https://gsuite.google.com/terms/dpa_terms.html SCC (Standard Contractual Clauses) for data transfers |
368047 (Google Ireland Limited) Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin |
Support mail that may contain customer data |
| Mailjet | Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button) | Recipient email addresses and subject (title) for transactional mail | Frankfurt, Germany | 524 536 992 | https://www.mailjet.com/dpa/ | 13-13 bis, rue de l’Aubrac 75012 Paris, France. |
Mail content with links to Refapp and candidate and referee names (e.g. notification mail) |
| MongoDB Atlas | Refapp main database. Candidate/referee data is encrypted and cannot be accessed by MongoDB Uses AWS as a sub-contractor for cloud services |
Refapp users: email, name, title, audit log with IP addresses Company names Project names, candidates and referees with their contact info and answers (ENCRYPTED) |
Stockholm, Sweden | 559038-9739 | https://www.mongodb.com/legal/dpa | Building Two Number One Ballsbridge Dublin 4 Ireland |
none |
| Zammad GMBH | Support system | Support tickets and followup conversations that may contain customer data | Germany | HRB 163946 B Amtsgericht Berlin-Charlottenburg | https://drive.google.com/file/d/1NkdUuSlILXF1zMZOX7JpoDYxqtFS9yjc/view?usp=sharing | Marienstraße 18 10117 Berlin |
none |
|
Zendesk Inc (not included in DPAs signed after September 1st 2024) |
Support system | Support tickets that may contain customer data | Frankfurt, Germany | CVR-nr: 30801830 | SCC (Standard Contractual Clauses) for data transfers | Snaregade 12 3, 1205 København K | none |
sec.refapp.se
Last modified: 2023-04-03.
| Subprocessor | Purpose | Customer data stored | Storage location | Company EU registration number | DPA agreement url (Google drive or public) | Company EU address | Additional customer data processed |
|---|---|---|---|---|---|---|---|
| 46Elks | SMS service | Candidate and referee name and phone number in SMS messages | Stockholm/Uppsala, Sweden | 556838-8184 | 2002/58/EG instead of GDPR, see https://46elks.se/gdpr | SMEDSGRÄND 4 753 20 Uppsala |
none |
| Cleura AB (changed name from CityNetwork AB in 2022) |
Refapp main database & system | Profile images for Refapp users and validated referees Company logos (not GDPR) Refapp users: email, name, title, audit log with IP addresses Company names Project names, candidates and referees with their contact info and answers (ENCRYPTED) |
Stockholm and Karlskrona, Sweden | 556630-7806 | https://drive.google.com/drive/u/0/folders/1-YLya0wWBWJu1VIQy1RDLBhZ1Ia7NYv5 https://citycloud.com/iso-certifications/ |
Cleura AB Blekingegatan 1 37157 Karlskrona Sweden |
All data that the Refapp system handles: Refapp user data and logs, candidate and referee data |
| GNS Sweden AB | Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button) | Recipient email addresses and subject (title) for transactional mail | Stockholm, Sweden | 556791-4915 | https://www.gns.se/support/general-data-protection-regulation-gdpr/ https://www.gns.se/molntjaenster/hosted-exchange/ |
GÖRAN ELGFELTS GATA 1 A 183 39 Täby |
Mail content with links to Refapp and candidate and referee names (e.g. notification mail) |
| Zammad GMBH | Support system | Support tickets and followup conversations that may contain customer data | Germany | HRB 163946 B Amtsgericht Berlin-Charlottenburg | https://drive.google.com/file/d/1NkdUuSlILXF1zMZOX7JpoDYxqtFS9yjc/view?usp=sharing | Marienstraße 18 10117 Berlin |
none |