Our third-party sub-processors
|
Name of processor
|
Reason
|
Country
|
Legal grounds for transfer
|
Data processing terms
|
Categories of personal data that may be processed
|
Which service
|
|---|---|---|---|---|---|---|
|
Scaleway
|
Hosting for servers, database and backups.
|
France
|
Not applicable (EEA)
|
User account information (E-mail, username, name), IP addresses, access logs, information which the Account Holder collects using the system.
|
The app
|
|
|
Scaleway
|
Server hosting
|
France
|
Not applicable (EEA)
|
IP addresses, access logs
|
The landing page
|
|
|
DigitalOcean, LLC
|
Server hosting
|
United States
|
EU-U.S. Data Privacy Framework; SCCs as fallback
|
IP addresses, access logs
|
The landing page
|
|
|
Scaleway
|
Stores user uploaded images
|
France
|
Not applicable (EEA)
|
User-uploaded images and associated metadata
|
The App
|
|
|
Cloudflare, Inc.
|
Content Delivery Network and DDoS protection for The Website, DNS for The App, bot protection
|
United States
|
EU-U.S. Data Privacy Framework; SCCs as fallback
|
IP addresses of users, contact requests sent through The Website
|
The Landing Page
The App
|
|
|
Google Cloud EMEA Limited
|
Email provider and video chat provider for Diggle/Specifique employees.
|
Ireland (with international processing)
|
EEA; DPF/SCCs for restricted onward transfers
|
Employee names and email addresses; email content and attachments; meeting participant information and audio/video content; customer information included in communications.
|
N/A
|
|
|
Scaleway
|
Sending transactional emails
|
France
|
Not applicable (EEA)
|
Email, name, username
|
The App
|
|
|
Stripe Payments Europe, Limited
|
Subscription payment
|
Ireland (with international processing)
|
EEA; DPF/SCCs for restricted onward transfers
|
Payment information, email, name, username
|
The App
|
|
|
Slack Technologies Limited
|
Internal communication
|
Ireland (with US/international processing)
|
EEA; DPF/SCCs for restricted onward transfers
|
Contacts Interaction Information
|
N/A
|
|
|
Facebook
|
SSO
|
United States
|
Standard Contractual Clauses
|
Email, name, username
|
The App
|
|
|
Scaleway
|
Generative AI hosting and processing
|
France
|
Not applicable (EEA)
|
AI prompts, Diggle content, participant responses and generated output
|
The App
|
|
|
Sendinblue SAS (Brevo)
|
Marketing and contact management
|
France
|
Not applicable (EEA)
|
Email, name, account status, plan and activity
|
The App / Landing Page
|
|
|
Google Cloud EMEA Limited
|
Dynamic interface translation
|
Ireland (with international processing)
|
EEA; DPF/SCCs for restricted onward transfers
|
Text submitted for translation and associated request metadata
|
The App
|
|
|
CookieYes Limited
|
Cookie consent management
|
United Kingdom
|
EU adequacy decision
|
IP address, geolocation based on IP, cookie/consent information and request metadata
|
Landing Page
|