These are the providers to which Advisorn GmbH entrusts personal data to operate EasyLPD. For the data that customers enter into the platform they are subprocessors, authorised by the general terms (annex A, point A.7); for other data (website visits, accounts, invoices, bookings) they process on behalf of Advisorn.
| Provider | Task | Data | Location |
|---|---|---|---|
| Exoscale (Akenes SA) | Database and file storage | All data of the platform | Switzerland |
| Aiven Oy | Technical management of the database on behalf of Exoscale | Technical access to the database | European Union; the data stay in Switzerland |
| Vercel Inc. | Running the application and the website | Requests in transit, including IP address and content sent | Germany; company based in the United States |
| Stripe | Payments, subscriptions, VAT | Billing and payment data | European Union and United States |
| Brevo SAS | Sending service e-mails | E-mail address and content of the e-mail | European Union (France) |
| Aletheia Tech Ltd, BA Stamp | Proofs of existence | Hash and file name | United Kingdom |
| Aletheia Tech Ltd, BA Scribe | Signature by people without an account | Name, e-mail address, IP address and browser of the signer, title and hash of the document | United Kingdom; database in the European Union, also run in the United States |
| Cal.com, Inc. | Booking of introductory calls | Name, e-mail address, date chosen and notes of the booking | United States |
| Google, Microsoft | Sign-in with their account, if chosen by the user | Name and e-mail address | Depending on the provider |
| Apple, Google, Mozilla, Microsoft | Delivery of push notifications, if enabled | Encrypted message | Depending on the provider |
For signing, BA Scribe in turn uses providers for the database, for running the service and for sending the verification code by e-mail.
Where the data stay. The database, uploaded files and encrypted backups are stored in Switzerland (Zurich and Geneva). The application code runs in Frankfurt.
Transfers abroad. According to the Federal Council and the European Commission, the European Union and the United Kingdom provide adequate data protection. Data are transferred to the United States only to companies certified under the Data Privacy Framework or on the basis of the standard contractual clauses.
Changes. A new subprocessor is announced on this page at least 30 days before it receives customer data. The customer may object on grounds related to data protection, as provided for in the general terms.
Further information on the processing of data is in the privacy notice.