Liste der Unterauftragsverarbeiter
von Shiftmove
Shiftmove beauftragt externe Unterauftragsverarbeiter und verbundene Unternehmen von Shiftmove, um uns bei der Erbringung von Dienstleistungen für unsere Kunden zu unterstützen. Als Voraussetzung für die Erlaubnis zur Verarbeitung personenbezogener Daten durch einen Unterauftragsverarbeiter schließt Shiftmove (und gegebenenfalls seine verbundenen Unternehmen) mit jedem Unterauftragsverarbeiter eine schriftliche Vereinbarung ab, die Datenschutzverpflichtungen enthält, die mindestens ebenso streng sind wie die technischen und organisatorischen Maßnahmen, die Shiftmove zum Schutz der personenbezogenen Daten seiner Kunden vor versehentlicher oder unrechtmäßiger Vernichtung, Verlust, Veränderung oder unbefugter Offenlegung oder Zugriff getroffen hat. Jeder Unterauftragsverarbeiter, der nur bei der Buchung eines bestimmten Zusatzmoduls oder einer bestimmten Funktion beauftragt wird, ist in der Spalte „Geltungsbereich“ gekennzeichnet.
Dieses Dokument bildet Anhang 3 der Datenverarbeitungsvereinbarung und ist gemäß § 6 der Datenverarbeitungsvereinbarung Bestandteil des Vertrags. Alle Aktualisierungen dieser Liste werden unseren Kunden gemäß den in unserer Datenverarbeitungsvereinbarung festgelegten Anforderungen mitgeteilt.
For the provision of our fleet management solution Avrios we are using the following subprocessors:
(nur für das
Paket „Externes Schaden-management“)
San Francisco, CA 94111, USA
San Francisco, CA 94105, USA
We use the following subprocessors for the provision of Optimum Automotive:
We use the following subprocessors for the provision of Vimcar Fleet Geo and the Vimcar (Fleet)-Logbook:
New York, NY 10018, USA
Somerville, MA 02145, USA
San Francisco, CA 94105, USA
For the provision of our services and the support of our customers we are also engaging the following subsidiaries as subprocessors:
Rechtliche Informationen
Shiftmove
| Entity Name | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Avrios International AG | Customer Support, Product Development | Weststrasse 50, 8003 Zürich, Switzerland | Yes | Adequacy decision of the European Commission pursuant to Art. 45 (1) GDPR. | Group Company |
| Vimcar GmbH | Provision of Vimcar Fleet Logbook and Fleet Geo SaaS-Products, Customer Support | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company |
Vimcar
| Entity Name | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL, ("AWS Europe") | Cloud service provider | 38 avenue John F. Kennedy, 1855, Luxembourg | No - data is stored exclusively in computing centres wihtin the EU (Frankfurt a.M. Germany) | - |
| Datadog, Inc. | Application health and runtime monitoring | 620 8th Ave Fl 45 New York, NY 10018, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Datadog, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| LapID Service GmbH (optional when using driver licence checks) | Application error monitoring through Bugsnag | Untere Industriestraße 20, 57250 Netphen, Germany | No | |
| Munic SA (previous: MDI - Mobile Devices Ingenierie) | Recording, temporary storage and forwarding of anonymised data from the logbook hardware. | 100 Avenue de Stalingrad, 94800 Villejuif, France | No | - |
| FusionAuth | Registration and log-in provider (including Multi-Factor-Authentification and Single-Sign-On) | 11080 Circle Point Rd #405, Westminster, CO 80020, USA | Yes | |
| Google Ireland Limited | Provision of map API | Gordon House, Barrow Street, Dublin 4, Ireland | No | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Google, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Intercom, Inc. | Provosion of the support live chat and support knowledge base | 55 2nd Street, Suite 400 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Mixpanel, Inc. | Logging and usage analytics | Pier 1, Bay 2, The Embarcadero San Francisco, CA 94111, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Munic SA (previous: MDI - Mobile Devices Ingenierie) | Recording, temporary storage and forwarding of anonymised data from the logbook hardware. | 100 Avenue de Stalingrad, 94800 Villejuif, France | No | - |
| Twilio Inc. | product analytics and tool integration (via Segment) | 101 Spear St FL 5 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Usercentrics GmbH | Consent mangement provider | Sendlinger Straße 7 80331 München Deutschland | No | - |
Affiliated companies
| Affiliates | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Avrios Germany GmbH | Customer Support, Product Development | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company | |
| Avrios Poland sp. z o.o | Customer Support, Product Development | Fabryczna 6, PL-53-609 Wrocław, Poland | No | Group Company | |
| Avrios International AG | Provision of the Avrios SaaS-Product | Weststrasse 50, 8003 Zürich, Switzerland | Yes | Adequacy decision of the European Commission pursuant to Art. 45 (1) GDPR. | Group Company |
| Shiftmove GmbH | Customer Support, Contracting Entity | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company |
Avrios
| Entity Name | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Amazon Web Services EMEA SARL, ("AWS Europe") | Cloud service provider | 38 avenue John F. Kennedy, 1855, Luxembourg | No - data is stored exclusively in computing centres wihtin the EU (Frankfurt a.M. Germany) | - | |
| Baruti AG | Quality assurance support | Kirchheim 18, 6037 Root, Switzerland | No | - | |
| Datadog, Inc. | Application health and runtime monitoring | 620 8th Ave Fl 45 New York, NY 10018, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Datadog, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Google Ireland Limited | Provision of Document Readout Automations | Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Google, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Intercom, Inc. | Provosion of the support live chat and support knowledge base | 55 2nd Street, Suite 400 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Mixpanel, Inc. | Logging and usage analytics | Pier 1, Bay 2, The Embarcadero San Francisco, CA 94111, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Planhat A/B | Customer relationship management system and e-mail campaigning | Malmskillnadsgatan 13, 111 57 Stockholm, Sweden | No | - | |
| RepairFix GmbH | Damage Management Integration | Hafenweg 1648155 Münster, Germany | No | - | Optional. Only applicable when using the Damage Management functionality. |
| SmartBear Software Inc. | Application error monitoring through Bugsnag | 450 Artisan Way Ste 400 Somerville, MA 02145, USA | Yes | Smartbear Software Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Twilio Inc. | product analytics and tool integration (via Segment) | 101 Spear St FL 5 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Usercentrics GmbH | Consent mangement provider | Sendlinger Straße 7 80331 München Deutschland | No | - |
Affiliated companies
| Affiliates | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Avrios Germany GmbH | Customer Support, Product Development | Warschauer Str. 57, 10243 Berlin, Germany | No | Fully owned subsidiary | |
| Avrios Poland sp. z o.o | Customer Support, Product Development | Fabryczna 6, PL-53-609 Wrocław, Poland | No | Fully owned subsidiary | |
| Vimcar GmbH | Provision of Vimcar Fleet Logbook and Fleet Geo SaaS-Products, Customer Support | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company | |
| Shiftmove GmbH | Customer Support, Contracting Entity | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company |