Overview of the Sub-Processors and potential Third Country Transfers
For the Processing of Personal Data on behalf of Customer, Uberall may use the Sub-Processors listed in this overview (Status as of: April 2024)
This overview is divided into two parts: One part containing all Sub-Processors that will be used in any event (Part A) and one part containing any third parties that may be used as Sub-Processors under the conditions and/or in the event(s) described below (Part B).
Part A: Generally used Sub-Processors and, if applicable, Third Country Transfers
PROCESSINGS WITHIN THE EUROPEAN UNION (EU) / EEA
Sub-Processor | Address | Place of Processing | Purpose |
Amazon Web Services EMEA SARL | 38 Avenue John F. Kennedy, L-1855, Luxembourg / Luxembourg | European Union (EU) | Hosting / Technical infrastructure |
Salesforce.com Germany GmbH | Erika-Mann-Straße 31, 80636 München / Germany | European Union (EU) | Project and Client Management |
THIRD COUNTRY TRANSFERS
The use of following Sub-Processors results in a Third Country Transfer of Personal Data processed on behalf of Customer:
Sub-Processor | Address | Place of Processing / Legal Basis for Third Country Transfer | Purpose |
SendGrid Inc. (Twilio Inc.) | 1801 California Street, Suite 500 Denver, Colorado, 80202 / USA | USA / Standard Contractual Clauses & Adequacy Decision (EU-U.S. Data Privacy Framework) | Communication & System Mailings (Client communication data) |
Part B: Scenario-specific Sub-Processors and, if applicable, Third Country Transfers
The following third parties may be used as Sub-Processors under the conditions and/or in the event(s) described below.
For Agreements including affiliated companies of uberall GmbH
In the event and to the extent that Uberall as defined in the Agreement is not defined as uberall GmbH, but an Affiliate of such:
Sub-Processor | Address | Place of Processing | Purpose |
uberall GmbH | Hussitenstraße 32-33, 13355 Berlin / Germany | European Union (EU) | Central technical infrastructure and services provision for the uberall group |
For “Messages”
In the event and to the extent that the subject of an Order includes the SaaS Product Messages the following Sub-Processor will additionally be used for the processing of Personal Data on behalf of Customer:
Sub-Processor | Address | Place of Processing | Purpose |
Google Cloud EMEA Limited | 70 Sir John Rogerson's Quay, Dublin 2 / Ireland | European Union (EU) | Artificial intelligence (AI) for the SaaS Product Messages |
For “Social Ads”
In the event and to the extent that the subject of an Order includes the SaaS Product Social Ads the following Sub-Processor will additionally be used for the processing of Personal Data on behalf of Customer:
Sub-Processor | Address | Place of Processing / Legal Basis for Third Country Transfer | Purpose |
Tiger Pistol, Inc. | 1220 W. 6th St. Suite 201, Cleveland, OH 44113 / United States of America | USA / Standard Contractual Clauses & Adequacy Decision (EU-U.S. Data Privacy Framework) | Service Provider for Social Ads |
For “Review Generation SMS”
In the event and to the extent that the subject of an Order includes the SaaS Product Review Generation SMS, the service Amazon Simple Notification Service of the Sub-Processor Amazon Web Services EMEA SARL will additionally be used for the provision of Review Generation SMS. Within the scope of Amazon Simple Notification Service, the Sub-Processor Amazon Web Services EMEA SARL itself uses processors for the Processing of Personal Data processed on behalf of the Customer in the third countries listed below.
For the purpose of clarification, the SaaS Product Review Generation Email does not include a Processing of the Sub-Processor below.
Sub-Processor | Address | Place of Processing / Legal Basis for Third Country Transfer | Purpose |
Amazon Web Services EMEA SARL | 38 Avenue John F. Kennedy, L-1855, Luxemburg / Luxemburg |
| Sending of SMS with the product "Review Generation" through Amazon Simple Notification Service |
For features/functionalities of “AI-powered Features” (formerly: AI Assistant) & “UB-I”
In the event and to the extent that Customer is provided with a SaaS Product and/or SaaS Product feature of the SaaS Product feature category “AI-powered Features” (including but not limited to the SaaS Product feature(s) AI-Review Response (formerly: AI Responses) and/or AI-Generated Auto Responses for the SaaS Product Reviews, the SaaS Product feature(s) AI-Messages Localization (formerly: Chatbot Localization) and/or AI-Messages Knowledge Base (formerly: Chatbot Knowledge Base) for the SaaS Product Messages or the SaaS Product feature AI-Post Tone Adjuster (formerly: AI Post Assistant or Tone Adjuster) for the SaaS Product Local Social) and/or “UB-I” the Sub-Processor(s) set forth in the table below will additionally be used for the processing of Personal Data on behalf of Customer.
For the purpose of clarification, in the event that the SaaS Products are provided without any SaaS Product and/or SaaS Product feature of the SaaS Product feature category “AI-powered Features”, they do not include a Processing of the Sub-Processor below, unless agreed otherwise.
Sub-Processor | Address | Place of Processing / Legal Basis for Third Country Transfer | Purpose |
OpenAI OpCo, LLC | 3180 18th St., Suite 100 San Francisco, CA 94110 / United States | USA / Standard Contractual Clauses | Artificial Intelligence (AI) used for features of SaaS Product feature category/-ies “AI-powered Features” & “UB-I” |
For “Uberall Connect”
In the event and to the extent that the subject of an Order includes the SaaS Product Uberall Connect (also referred to as: Platform Integrations) the following Sub-Processor will additionally be used for the processing of Personal Data on behalf of Customer:
Sub-Processor | Address | Place of Processing / Legal Basis for Third Country Transfer | Purpose |
Workato, Inc. | 215 Castro Street, Suite 300, Mountain View, CA 94041 / United States of America | European Union (EU) & USA / Standard Contractual Clauses | Service Provider for the SaaS Product “Uberall Connect” |
Part C: Miscellaneous
In the event that Customer is provided with the SaaS Product Locator, Locator may also be provided together with an underlying map (such as Mapbox or Google Maps) (“Map”) of a third party (“Third Party Map Provider”). Such Map is not an inseparable part of the SaaS Product Locator.
The use of a Map together with Locator might lead to a processing of access data, such as IP addresses of website visitors, for billing and/or security logging purposes by the Third Party Map Provider which are not subject to the DPA and to which the Third Party Map Provider is the Controller or, if such relationship has been established, the Processor of Customer. Information of such processing(s) regarding
Mapbox is available under https://www.mapbox.com/legal/privacy