Refapp Subprocessors

sec.refapp.se

Subprocessor
Organisation number
Notes
Customer Data stored
Additional customer data processed (in transit)
Storage Location
DPA agreement url (Google drive or public)
GNS Sweden AB
556791-4915
Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button)
Recipient email addresses and subject (title) for transactional mail
Mail content with links to Refapp and candidate and referee names (e.g. notification mail)
Stockholm, Sweden
https://citycloud.com/iso-certifications/
CityNetwork AB
556630-7806
Refapp main database
Refapp users: email, name, title, audit log with IP addresses Company names Project names, candidates and referees with their contact info and answers (ENCRYPTED)
none
Stockholm and Karlskrona, Sweden
https://citycloud.com/iso-certifications/
46Elks
556838-8184
SMS service
Candidate and referee name and phone number in SMS messages
none
Stockholm/Uppsala, Sweden
2002/58/EG instead of GDPR, see https://46elks.se/gdpr
CityNetwork AB
556630-7806
Refapp servers
Profile images for Refapp users and validated referees Company logos (not GDPR)
All data that the Refapp system handles: Refapp user data and logs, candidate and referee data
Stockholm, Sweden
https://citycloud.com/iso-certifications/

app.refapp.se and app.refapp.com

Subprocessor
Notes
Customer data stored
Storage location
Company EU registration number
DPA agreement url (Google drive or public)
Company EU address
Additional customer data processed
46Elks
SMS service
Candidate and referee name and phone number in SMS messages
Stockholm/Uppsala, Sweden
556838-8184
2002/58/EG instead of GDPR, see https://46elks.se/gdpr
Dragarbrunnsgatan 78C, 753 20 Uppsala, Sverige
none
Amazon Web Services, Inc.
Refapp servers
Profile images for Refapp users and validated referees Company logos (not GDPR)
Frankfurt, Germany
556833-3503
https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf
Kungsgatan 49 111 22 Stockholm, Sverige
All data that the Refapp system handles: Refapp user data and logs, candidate and referee data
Google Workplace
Mail and document storage for Refapp
Support mail that may contain customer data
(EU/EES) Dublin, Irland, Eemshaven, Holland, Fredericia, Danmark, Hamina, Finland St. Ghislain, Belgien.
368047 (Google Ireland Limited)
https://gsuite.google.com/terms/dpa_terms.html SCC (Standard Contractual Clauses) for data transfers
368047 (Google Ireland Limited) Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin
Mailjet
Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button)
Recipient email addresses and subject (title) for transactional mail
Frankfurt, Germany
524 536 992
https://www.mailjet.com/dpa/
13-13 bis, rue de l’Aubrac 75012 Paris, France.
Mail content with links to Refapp and candidate and referee names (e.g. notification mail)
MongoDB Atlas
Refapp main database. Candidate/referee data is encrypted and cannot be accessed by MongoDB Uses AWS as a sub-contractor for cloud services
Refapp users: email, name, title, audit log with IP addresses Company names Project names, candidates and referees with their contact info and answers (ENCRYPTED)
Stockholm, Sweden
524 536 992
https://www.mongodb.com/legal/dpa
Building Two Number One Ballsbridge Dublin 4 Ireland
none
Zendesk Inc
Support system
Support tickets that may contain customer data
Frankfurt, Germany
CVR-nr: 30801830
SCC (Standard Contractual Clauses) for data transfers
Snaregade 12 3, 1205 København K
none