Sub-processors

It forms part of the Data Processing Agreement and is kept up to date on an ongoing basis.

Sub-processors engaged

1. Hetzner Online GmbH

• Registered office: Germany
• Service: Server, hosting, storage and database infrastructure of the CRM application, operation of the application servers, data backup
• Place of processing: Germany
• Third-country transfer: no

2. IONOS SE

• Registered office: Germany
• Service: Hosting of the corporate website user-flow.de
• Place of processing: Germany
• Third-country transfer: no

3. Stripe Payments Europe, Limited

• Registered office: Ireland
• Service: Payment processing, subscription management, settlement of commissions under the referral programme
• Place of processing: European Union
• Third-country transfer: possible within the provider's group of companies, safeguarded by standard contractual clauses pursuant to Article 46 (2) (c) GDPR

4. Plus Five Five, Inc. (Resend)

• Registered office: United States of America
• Service: Dispatch of transactional and system-related emails, in particular registration confirmations, password resets, invitations and security-relevant notifications
• Place of processing: United States of America
• Third-country transfer: yes, safeguarded by standard contractual clauses pursuant to Article 46 (2) (c) GDPR

5. Cloudflare, Inc.

• Registered office: United States of America
• Service: Protection of the website, registration and login processes against automated access (Cloudflare Turnstile)
• Place of processing: United States of America / European Union
• Third-country transfer: yes, safeguarded by standard contractual clauses pursuant to Article 46 (2) (c) GDPR

6. UAB "Data troops" (Decodo)

• Registered office: Lithuania
• Service: Network and proxy infrastructure for technical communication with supported third-party platforms
• Place of processing: European Union
• Third-country transfer: no

7. Functional Software, Inc. (Sentry)

• Registered office: United States of America
• Service: Recording and analysis of technical errors to ensure operation of the Platform
• Place of processing: European Union (EU data region)
• Third-country transfer: possible in the case of support access, safeguarded by standard contractual clauses pursuant to Article 46 (2) (c) GDPR

8. SpaceXAI LLC ("SpaceXSI")

• Registered office: United States of America
• Service: Automated translation of communication content (Translator)
• Place of processing: United States of America
• Third-country transfer: yes, safeguarded by standard contractual clauses pursuant to Article 46 (2) (c) GDPR
• Particularity: The translation function is optional. Where it is not activated, no transfer to this sub-processor takes place.

Providers not listed

Providers that process personal data as controllers in their own right are not listed as sub-processors:

• Operators of supported third-party platforms. The connection is established exclusively at the instigation of the respective customer. The operator of the third-party platform is responsible for processing within that platform.
• Telegram, where a customer requests support via this messenger service. Use is voluntary; the ticket system provided within the Platform is available as an alternative.

The service used for source code management is likewise not listed, as no productive customer data is processed there.

Changes

User Flow informs Contracting Parties of the intended addition of a new sub-processor or the replacement of an existing one at least four weeks before processing begins, in text form or via the functions provided within the Platform.

Contracting Parties may object to the change in text form within four weeks of receipt of the information, on important data protection grounds. § 9 of the Data Processing Agreement governs the details.

Please address objections and enquiries to info@user-flow.de.

Change history

User Flow LT UG (haftungsbeschränkt) · Legal Notice · Privacy Policy