Refapp Subprocessors
app.refapp.se and app.refapp.com
Subprocessor | Notes | Customer data stored | Storage location | Company EU registration number | DPA agreement url (Google drive or public) | Company EU address | Additional customer data processed |
|---|---|---|---|---|---|---|---|
46Elks | SMS service | Candidate and referee name and phone number in SMS messages | Stockholm/Uppsala, Sweden | 556838-8184 | 2002/58/EG instead of GDPR, see https://46elks.se/gdpr | Dragarbrunnsgatan 78C, 753 20 Uppsala, Sverige | none |
Amazon Web Services, Inc. | Refapp servers | Profile images for Refapp users and validated referees
Company logos (not GDPR) | Frankfurt, Germany
| 556833-3503 | https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf | Kungsgatan 49
111 22 Stockholm, Sverige
| All data that the Refapp system handles:
Refapp user data and logs, candidate and referee data |
Google Workplace | Mail and document storage for Refapp | Support mail that may contain customer data | (EU/EES)
Dublin, Irland,
Eemshaven,
Holland,
Fredericia,
Danmark,
Hamina,
Finland
St. Ghislain,
Belgien. | 368047
(Google Ireland Limited) | https://gsuite.google.com/terms/dpa_terms.html
SCC (Standard Contractual Clauses) for data transfers | 368047
(Google Ireland Limited)
Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin | |
Mailjet | Handles transactional mail (mail sent out to individuals as an effect of an action, e.g. a click on a button) | Recipient email addresses and subject (title) for transactional mail | Frankfurt, Germany | 524 536 992 | https://www.mailjet.com/dpa/ | 13-13 bis, rue de l’Aubrac
75012 Paris, France.
| Mail content with links to Refapp and candidate and referee names (e.g. notification mail) |
MongoDB Atlas | Refapp main database. Candidate/referee data is encrypted and cannot be accessed by MongoDB
Uses AWS as a sub-contractor for cloud services | Refapp users: email, name, title, audit log with IP addresses
Company names
Project names, candidates and referees with their contact info and answers (ENCRYPTED) | Stockholm, Sweden
| 524 536 992 | https://www.mongodb.com/legal/dpa | Building Two
Number One Ballsbridge Dublin 4
Ireland
| none |
Zendesk Inc | Support system | Support tickets that may contain customer data | Frankfurt, Germany | CVR-nr: 30801830 | SCC (Standard Contractual Clauses) for data transfers | Snaregade 12 3, 1205 København K | none |