Sub-processors
List of Sub-Processors:
A sub-processor is any business or contractor where customer data may pass through as a result of using OBRIZUM’s services, under the GDPR.
This list outlines the partners that we are affiliated with that are utilised to bring specific expertise to our business processes that are critical to our clients having a quality experience.
| Entity name | Entity destination | Processing activity to be performed | Website |
|---|---|---|---|
| Amazon web services | EU | Cloud infrastructure for our apps and services | https://aws.amazon.com/ |
| Zendesk Inc | EU | Cloud support management | https://www.zendesk.co.uk/ |
| Flowmailer | EU | Cloud based transactional email delivery platform | https://flowmailer.com/ |
| Sendgrid Twillo Inc | USA | Cloud based transactional email delivery platfrom | https://sendgrid.com/ |
| Hubspot Inc | USA & UK | Customer relationship management and marketing automation | https://www.hubspot.com/ |
| Wix.com Ltd | USA, IE, IL | Website visitor data collection and tracking | https://www.wix.com/ |
| Metabase | USA & UK | Business intelligence dashboard, aggregates and organises data from our own platform | https://www.metabase.com/ |
| Paddle | USA & UK | Cloud based payment processing services | https://www.paddle.com/ |
| Google Inc | EU | Website analytics and customer interaction | https://www.google.com/ |
OBRIZUM’s needs as an organisation will continue to evolve in light of changes to our business, technical, and regulatory context. As a result we must regularly re-evaluate our Sub-Processor relationships to ensure efficiency in our delivery and development of services. We will regularly update this page to reflect changes to our engagement of external Sub-Processors. Details provided will be balanced between clarifying our data processing architecture and protecting our organisational Information Security. New Sub-Processor relationships will only be entered into after due diligence is performed and regulatory compliance is ensured.
We understand that our Data Subjects have an interest in knowing exactly how their data is processed and will do our best to responsibly facilitate such insights where possible and when requested. Under the terms of our Data Processing Agreement (DPA), a User may reasonably object in writing to the processing of its personal data by a new Sub-Processor within 30 days following the update of this page. If the objection satisfies all relevant Right of Access/Rectification/Erasure/Transportation factors of applicable data protection law, we will facilitate the request. If a User does not object during the 30-day time period, the appointment of the new sub-processor shall be deemed accepted by the User. If you are an OBRIZUM User and want to know more about our DPA, please contact us.
For more information on OBRIZUM’s privacy practices, please visit our Privacy Policy. If you have any questions regarding this page, please contact us.
