Refapp Sub-Processors

The list of sub-processors used by the Refapp service. Refapp maintains two separate systems with their own sub-processors: app and sec. These are given in order.

app.refapp.se and app.refapp.com

Last modified: 2023-04-03.

Subprocessor Purpose Customer data stored Storage location Company EU registration number DPA agreement url (Google drive or public) Company EU address Additional customer data processed
46Elks SMS service Candidate and referee name and phone number in SMS messages Stockholm/Uppsala, Sweden 556838-8184 2002/58/EG instead of GDPR, see https://46elks.se/gdpr SMEDSGRÄND 4 
753 20 Uppsala
none
Amazon Web Services EMEA SARL Refapp servers Profile images for Refapp users and validated referees
Company logos (not GDPR)
Frankfurt, Germany R.C.S. Luxembourg: B186284 https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf

https://d1.awsstatic.com/Supplementary_Addendum_to_the_AWS_GDPR_DPA.pdf
38 Avenue John F. Kennedy
L-1855 Luxembourg
All data that the Refapp system handles:
Refapp user data and logs, candidate and referee data
Google Workplace Mail and document storage for Refapp Mail and document storage for Refapp (EU/EES)
Dublin, Irland,
Eemshaven,
Holland,
Fredericia,
Danmark,
Hamina,
Finland
St. Ghislain,
Belgien.
368047
(Google Ireland Limited)
https://gsuite.google.com/terms/dpa_terms.html
SCC (Standard Contractual Clauses) for data transfers
368047
(Google Ireland Limited)
Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin
Support mail that may contain customer data
Mailjet Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button) Recipient email addresses and subject (title) for transactional mail Frankfurt, Germany 524 536 992 https://www.mailjet.com/dpa/ 13-13 bis, rue de l’Aubrac
75012 Paris, France.
Mail content with links to Refapp and candidate and referee names (e.g. notification mail)
MongoDB Atlas Refapp main database. Candidate/referee data is encrypted and cannot be accessed by MongoDB
Uses AWS as a sub-contractor for cloud services
Refapp users: email, name, title, audit log with IP addresses
Company names
Project names, candidates and referees with their contact info and answers (ENCRYPTED)
Stockholm, Sweden 524 536 992 https://www.mongodb.com/legal/dpa Building Two
Number One Ballsbridge Dublin 4
Ireland
none
Zammad GMBH Support system Support tickets and followup conversations that may contain customer data Germany HRB 163946 B Amtsgericht Berlin-Charlottenburg https://drive.google.com/file/d/1NkdUuSlILXF1zMZOX7JpoDYxqtFS9yjc/view?usp=sharing Marienstraße 18
10117 Berlin
none
Zendesk Inc Support system Support tickets that may contain customer data Frankfurt, Germany CVR-nr: 30801830 SCC (Standard Contractual Clauses) for data transfers Snaregade 12 3, 1205 København K none

sec.refapp.se

Last modified: 2023-04-03.

Subprocessor Purpose Customer data stored Storage location Company EU registration number DPA agreement url (Google drive or public) Company EU address Additional customer data processed
46Elks SMS service Candidate and referee name and phone number in SMS messages Stockholm/Uppsala, Sweden 556838-8184 2002/58/EG instead of GDPR, see https://46elks.se/gdpr SMEDSGRÄND 4 
753 20 Uppsala
none
Cleura AB

(changed name from CityNetwork AB in 2022)
Refapp main database & system Profile images for Refapp users and validated referees
Company logos (not GDPR)

Refapp users: email, name, title, audit log with IP addresses
Company names
Project names, candidates and referees with their contact info and answers (ENCRYPTED)
Stockholm and Karlskrona, Sweden  556630-7806 https://drive.google.com/drive/u/0/folders/1-YLya0wWBWJu1VIQy1RDLBhZ1Ia7NYv5

https://citycloud.com/iso-certifications/
Cleura AB
Blekingegatan 1 
37157 Karlskrona
Sweden
All data that the Refapp system handles:
Refapp user data and logs, candidate and referee data
GNS Sweden AB Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button) Recipient email addresses and subject (title) for transactional mail Stockholm, Sweden 556791-4915 https://www.gns.se/support/general-data-protection-regulation-gdpr/

https://www.gns.se/molntjaenster/hosted-exchange/
GÖRAN ELGFELTS GATA 1 A 
183 39 Täby
Mail content with links to Refapp and candidate and referee names (e.g. notification mail)
Zammad GMBH Support system Support tickets and followup conversations that may contain customer data Germany HRB 163946 B Amtsgericht Berlin-Charlottenburg https://drive.google.com/file/d/1NkdUuSlILXF1zMZOX7JpoDYxqtFS9yjc/view?usp=sharing Marienstraße 18
10117 Berlin
none