Appendix 2

Data Processors

Introduction

This document lists the data processors and sub-processors, Worklife Barometer is using to deliver the Howdy solution.

For each (sub) data processor the following information is listed:

  • Name
  • The purpose of the processing and processing activities
  • Exchanged data
  • Physical location
  • Transfer Policy on transfers outside the EU/EEA
  • Security

Data processors/sub-processors

The following Data processors/sub-processors are used to deliver the Howdy solution:

Microsoft

Microsoft Azure

The purpose of the processing and processing activities:

Microsoft Azure delivers PaaS (The platform, meaning; database, web server, etc.)

Exchanged data: 

All data used and registered in connection to the Howdy solution is stored in Microsoft Azure hosting environment

Physical location:

Microsoft’s data centres in Europe (Holland and Ireland)

Transfer policy:

N/A. Data is processed inside the EU.

Security:

Read more about security, audit of Microsoft and see audit reports:

https://www.microsoft.com/en-us/trustcenter/compliance/soc

https://aka.ms/mssocreports

Microsoft Ireland Operations Limited is Microsoft’s data protection representative in the EU and can be contacted on the following address:

Microsoft Ireland Operations, Ltd.
Attn: Data Protection
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
D18 P521

The Rocket Science Group, LLC

MailChimp & Mandrill

The purpose of the processing and processing activities:

Email service Howdy is using for email communication (invitations, reminders, resend password, and other similar services)

Exchanged data: 

Email address, First name, Surname, Company, Partner, Type of Transaction, Message content, Pdf-file (Well-being reports)

Physical location:

1526 DeKalb Ave NE, Atlanta, GA 30307, USA

Security:

Read more about security here: https://mailchimp.com/about/security

Twilio

Twilio

The purpose of the processing and processing activities:

The company Twilio delivers a telecom service (Text message, voice etc.), which Howdy uses for telecommunication (invitations, reminders, resend passwords, and other similar services.

Exchanged data: 

Mobile phone number, Type of Transaction, Message content

Physical location:

375 Beale Street, Suite 300 | San Francisco, CA 94105

Security:

Read more about security here: https://www.twilio.com/security

Widgix

SurveyGizmo

The purpose of the processing and processing activities:

The company Widgix LLC delivers an online survey tool, which WLB uses for sending out user surveys.

Please note that SurveyGizmo is not an integrated tool in the Howdy solution and is only used in agreement with the client.

Exchanged data: 

First name, Email address and storage of answers

Physical location:

4888 Pearl East Cir. Suite 100, Boulder, CO 80301 USA

Security:

ZenDesk

ZenDesk

The purpose of the processing and processing activities:

The company ZenDesk delivers an online support tool, which WLB uses to support the usual end-user support.

Please note that ZenDesk is not an integrated tool in the Howdy solution.

Exchanged data: 

Information the end-user is sending per email as well as WLB’s case handling and further email exchange.

Physical location:

1019 Market St, San Francisco, CA 94103

Security:

RayGuy

RayGun

The purpose of the processing and processing activities:

Logging of error messages etc.

Exchanged data: 

IP address, unique ID (for identification)

Physical location:

USA

Transfer policy:

The European Commission’s standard contract

Security:

Read more about security here: https://raygun.com/security

Amazon Web Services

Amazon Web Services

The purpose of the processing and processing activities:

Amazon Web Services delivers PaaS (The platform, meaning; database, web server, etc.)

Exchanged data: 

All data used and registered in connection to the Howdy solution can be stored in Amazon Web Services hosting environment.

Physical location:

Amazon’s data centres in Europe (Currently Germany, Ireland, England and France.) Read more here: https://aws.amazon.com/about-aws/global-infrastructure

Transfer policy:

N/A. Data is processed inside the EU.

Security:

Read more about security here: https://aws.amazon.com/security