Overview of the Sub-Processors and potential Third Country Transfers
(Partnership)
For the Processing of Personal Data on behalf of Partner, Uberall may use the Sub-Processors listed in this overview (Status as of: December 2025)
This overview is divided into three parts: One part containing all Sub-Processors that will be used in any event (Part A), one part containing any third parties that may be used as Sub-Processors under the conditions and/or in the event(s) described below (Part B) and one part containing other general remarks (Part C).
A. General
Part A: Generally used Sub-Processors and, if applicable, Third Country Transfers
PROCESSINGS WITHIN THE EUROPEAN UNION (EU) / EEA
THIRD COUNTRY TRANSFERS
The use of following Sub-Processors results in a Third Country Transfer of Personal Data processed on behalf of Customer:
Part B: Scenario-specific Sub-Processors and, if applicable, Third Country Transfers
The following third parties may be used as Sub-Processors under the conditions and/or in the event(s) described below.
- For Agreements including affiliated companies of uberall GmbH
In the event and to the extent that Uberall as defined in the Agreement is not defined as uberall GmbH, but an Affiliate of such:
- For “Locator & Local Pages” (or features “Review Tiles” & “Social Widget”)
To the extent that the subject of an Order includes SaaS Products “Locator & Local Pages” and/or the SaaS Product features “Review Tiles” and/or “Social Widget”, Uberall may also utilise the Content Delivery Network (CDN) Amazon CloudFront of the Subprocessor Amazon Web Services EMEA SARL as result of which the respective Corporate Location Data (and, to the extent applicable, any Personal Data included in such by Customer) will be provided to the website visitor utilizing “Locator & Local Pages” through the server location of a global network of Amazon Web Services EMEA SAR (edge locations) which closest to the user of the environment where the respective SaaS Product / SaaS Product feature is integrated. The hosting location for such Corporate Location Data remains the European Union.
- For “Messages”
In the event and to the extent that the subject of an Order includes the SaaS Product Messages the following Sub-Processor will additionally be used for the processing of Personal Data on behalf of Customer:
- “Social Ads”
In the event and to the extent that the subject of an Order includes the SaaS Product Social Ads the following Sub-Processor will additionally be used for the processing of Personal Data on behalf of Customer:
- For "Review Generation SMS"
In the event and to the extent that the subject of an Order includes the SaaS Product Review Generation SMS, the service Amazon Simple Notification Service of the Sub-Processor Amazon Web Services EMEA SARL will additionally be used for the provision of Review Generation SMS. Within the scope of Amazon Simple Notification Service, the Sub-Processor Amazon Web Services EMEA SARL itself uses processors for the Processing of Personal Data processed on behalf of the Customer in the third countries listed below.
For the purpose of clarification, the SaaS Product Review Generation Email does not include a Processing of the Sub-Processor below.
- For features/functionalities of “AI-powered Features” (formerly: AI Assistant) & “UB-I”
In the event and to the extent that a Client is provided under the Agreement with a SaaS Product and/or SaaS Product feature of the SaaS Product feature category “AI-powered Features” (including but not limited to the SaaS Product feature(s) AI-Review Response (formerly: AI Responses) and/or AI-Generated Auto Responses for the SaaS Product Reviews, the SaaS Product feature(s) AI-Messages Localization (formerly: Chatbot Localization) and/or AI-Messages Knowledge Base (formerly: Chatbot Knowledge Base) for the SaaS Product Messages or the SaaS Product feature AI-Post Tone Adjuster (formerly: AI Post Assistant or Tone Adjuster) for the SaaS Product Local Social) and/or “UB-I” the Sub-Processor(s) set forth in the table below will additionally be used for the processing of Personal Data on behalf of Partner.
A current overview of the SaaS Product features of the SaaS Product feature category AI-powered Features is available under https://uberall.com/en-us/products-descriptions-partners. Uberall may notify Partner of updates thereto from time to time in text form or written form.
For the purpose of clarification, in the event that the SaaS Products are provided without any SaaS Product and/or SaaS Product feature of the SaaS Product feature category “AI-powered Features”, they do not include a Processing of the Sub-Processor below, unless agreed otherwise.
- "For “Uberall Connect”
In the event and to the extent that the subject of an Order includes the SaaS Product Review Generation SMS, the service Amazon Simple Notification Service of the Sub-Processor Amazon Web Services EMEA SARL will additionally be used for the provision of Review Generation SMS. Within the scope of Amazon Simple Notification Service, the Sub-Processor Amazon Web Services EMEA SARL itself uses processors for the Processing of Personal Data processed on behalf of the Customer in the third countries listed below.
For the purpose of clarification, the SaaS Product Review Generation Email does not include a Processing of the Sub-Processor below.
- For Client Account Data Management
In the event and to the extent that Partner, as defined in the Agreement, has its seat of business in the United States of America (USA) or Canada and has, voluntarily, decided to create an account at the platform of the Sub-Processor for the purpose set forth below, the following Sub-Processor will additionally be used for the processing of Personal Data on behalf of Partner.
Part C: Miscellaneous
In the event that Customer is provided with the SaaS Product Locator, Locator may also be provided together with an underlying map (such as Mapbox or Google Maps) (“Map”) of a third party (“Third Party Map Provider”). Such Map is not an inseparable part of the SaaS Product Locator.
The use of a Map together with Locator might lead to a processing of access data, such as IP addresses of website visitors, for billing and/or security logging purposes by the Third Party Map Provider which are not subject to the DPA and to which the Third Party Map Provider is the Controller or, if such relationship has been established, the Processor of Customer. Information of such processing(s) regarding
- Mapbox is available under https://www.mapbox.com/legal/privacy
- Google is available under https://policies.google.com/privacy