To provide our Rainbow service, we work with sub processors on behalf of the requirements given by Art. 28 GDPR. We only engage subcontractors if they have proven that they meet all the requirements of the GDPR.
Sub Processors list:
| Name | Purpose | Data Shared with Subprocessor | Location | International Transfer Mechanism | Additional Safeguards |
|---|---|---|---|---|---|
| OVH | Hosting | Hosting means here data center services: hardware, connectivity: no access to data | France | - | - |
| IBM France | Failover for hosting | Hosting means here data center services: hardware, connectivity: no access to data | France | - | - |
| X-act | L1 and L2 support | Description of support ticket as provided by the submitter, and attached logs (logs are anomymized and never contain any content stored or shared by the end-user in the context of her use of Rainbow) | Spain | - | Logs are anonymized |
| CSS, now "MOVATE" corp. | L1 and L2 support | Description of support ticket as provided by the submitter, and attached logs (logs are anomymized and never contain any content stored or shared by the end-user in the context of her use of Rainbow) | Usa, India | SCCs | Logs are anonymized |
| SalesForce.com EMEA limited | SaaS-mode support ticketing tool | Storage of support tickets (description as provided by end-customer and anonymized logs), and storage of business partners information | United Kingdom | DPA | Logs are anonymized |
| LoopUp ltd. | Voice conferencing | CDR for billing of traffic related to PSTN conferences. CDR contain the caller number as provided by the PSTN network, and the called conference service DDI. No further personal data is contained in those CDRs. | United Kingdom | SCCs | Logs are anonymized |
| Amigo Software | L3 support for specific client applications | Description of support ticket as provided by the submitter, and attached logs (logs are anomymized and never contain any content stored or shared by the end-user in the context of her use of Rainbow) | United Kingdom, Canada, Pakistan | SCCs | Logs are anonymized |
| ASAL technologies | L3 support for specific client applications | Description of support ticket as provided by the submitter, and attached logs (logs are anomymized and never contain any content stored or shared by the end-user in the context of her use of Rainbow) | Palestine territories | SCCs | Logs are anonymized |
| Zuora | SaaS-mode billing tool | CDR for billing the Rainbow service towards Rainbow partners. CDR contain volume of subscriptions without any end-user personal data. Zuora manipulates partners billing information. | Usa | SCCs | - |