This document lists the data processors and sub-processors, Worklife Barometer is using to deliver the Howdy solution.
For each (sub) data processor the following information is listed:
The following Data processors/sub-processors are used to deliver the Howdy solution:
The purpose of the processing and processing activities:
Microsoft Azure delivers PaaS (The platform, meaning; database, web server, etc.)
Exchanged data:
All data used and registered in connection to the Howdy solution is stored in Microsoft Azure hosting environment
Physical location:
Microsoft’s data centres in Europe (Holland and Ireland)
Transfer policy:
N/A. Data is processed inside the EU.
Security:
Read more about security, audit of Microsoft and see audit reports:
https://www.microsoft.com/en-us/trustcenter/compliance/soc
Microsoft Ireland Operations Limited is Microsoft’s data protection representative in the EU and can be contacted on the following address:
Microsoft Ireland Operations, Ltd.
Attn: Data Protection
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
D18 P521
The purpose of the processing and processing activities:
Email service Howdy is using for email communication (invitations, reminders, resend password, and other similar services)
Exchanged data:
Email address, First name, Surname, Company, Partner, Type of Transaction, Message content, Pdf-file (Well-being reports)
Physical location:
1526 DeKalb Ave NE, Atlanta, GA 30307, USA
Transfer policy:
EU-U.S. PRIVACY SHIELD FRAMEWORK
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
Security:
Read more about security here: https://mailchimp.com/about/security
The purpose of the processing and processing activities:
The company Twilio delivers a telecom service (Text message, voice etc.), which Howdy uses for telecommunication (invitations, reminders, resend passwords, and other similar services.
Exchanged data:
Mobile phone number, Type of Transaction, Message content
Physical location:
375 Beale Street, Suite 300 | San Francisco, CA 94105
Transfer policy:
EU-U.S. Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000TNLbAAO&status=Active
Security:
Read more about security here: https://www.twilio.com/security
The purpose of the processing and processing activities:
The company Widgix LLC delivers an online survey tool, which WLB uses for sending out user surveys.
Please note that SurveyGizmo is not an integrated tool in the Howdy solution and is only used in agreement with the client.
Exchanged data:
First name, Email address and storage of answers
Physical location:
4888 Pearl East Cir. Suite 100, Boulder, CO 80301 USA
Transfer policy:
EU-U.S. Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000L0kSAAS&status=Active
Security:
Read more about security here: https://help.surveygizmo.com/help/surveygizmo-security-faq
The purpose of the processing and processing activities:
The company ZenDesk delivers an online support tool, which WLB uses to support the usual end-user support.
Please note that ZenDesk is not an integrated tool in the Howdy solution.
Exchanged data:
Information the end-user is sending per email as well as WLB’s case handling and further email exchange.
Physical location:
1019 Market St, San Francisco, CA 94103
Transfer policy:
EU-U.S. Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active
Security:
Read more about security here: https://www.zendesk.com/product/zendesk-security
The purpose of the processing and processing activities:
Logging of error messages etc.
Exchanged data:
IP address, unique ID (for identification)
Physical location:
USA
Transfer policy:
The European Commission’s standard contract
Security:
Read more about security here: https://raygun.com/security
The purpose of the processing and processing activities:
Amazon Web Services delivers PaaS (The platform, meaning; database, web server, etc.)
Exchanged data:
All data used and registered in connection to the Howdy solution can be stored in Amazon Web Services hosting environment.
Physical location:
Amazon’s data centres in Europe (Currently Germany, Ireland, England and France.) Read more here: https://aws.amazon.com/about-aws/global-infrastructure
Transfer policy:
N/A. Data is processed inside the EU.
Security:
Read more about security here: https://aws.amazon.com/security