Annex 2 - List of data processors

Last updated: 2023-03-26

for SaaS First, provided by GBD Software as a Service Private Limited Company

 

Marketing and analytics providers

OpenAI - data transfer to the US is essential

Google Analytics - data transfer to the US is likely

Linkedin - data transfer to the US is likely

Hotjar

Server Hosting

Rackforest Zrt.

Amazon Web Services (Amazon Web Services EMEA SARL) - data transfer to the US is essential

Misshosting (Miss Group Holding AB)

Fasthosts Internet Limited

Software Development

Fehér Ákos Attila EV. - Self employed

PETYA-COM Kft.

Internal Communication

Atlassian

Slack

Administration

Clockify

Klipfolio

Bergmann

Payment Providers

Stripe

 

These companies only process personal information pursuant to our instructions and in compliance both with our Privacy Policy and other applicable confidentiality and security measures and regulations.

 

Specifically, we do not permit these companies to use any personal information we share with them for their own marketing purposes or for any other purpose than in connection with the services they provide to us.

 

Certain processors used by the Data Data Controller are established in or transfer and process data to the United States of America (US). The Data Controller draws attention to the following risks in connection with data transfers to the US. We indicate these processors clearly, with underlining and in bold letters in this list.

 

Equivalent protection: the US does not have a comprehensive data protection framework equivalent to that existing in the European Union (including in particular the Charter of Fundamental Rights and the GDPR) at the time of entry into force of this Notice (2022-03-27), in accordance with the so-called Schrems II decision of the Court of Justice of the European Union of 16 July 2020. This may result in data subjects' privacy rights not being adequately protected. 

 

National security and law enforcement: Some authorities in the US have extensive surveillance powers that can be used to access personal data without adequate legal safeguards. 

 

Data security: a data processor in the US may not have the same level of security measures as a data Data Controller in Hungary, which increases the risk of a data integrity breach.

 

Therefore, the Data Controller conducts a transfer impact assessment and applies Standard Contractual Clause and/or Data Processing Agreements wherever possible in order to safeguard the data of its Data Subjects and Customers.

 

The Data Controller is using the service of these Processors as it is essential for its business operation.

 

Whenever it is possible, the Data Controller aims to use Processors based inside the territory of the European Union.

 

We use the following service providers to process your personal data on our behalf.

 

Marketing and analytics providers

OpenAI - data transfer to the US is essential

company name: OpenAI LP

address: 3180 18th St, San Francisco, CA 94110, USA

activity provided: providing tools and platform for conversational chatbot

 

Summary of the activity:

OpenAI's platform provides a set of tools for creating conversational chatbots that can interact with users in a natural and engaging way. Using OpenAI's language models and natural language processing capabilities, businesses can create chatbots that can understand and respond to user input in a way that feels like talking to a human.

To use OpenAI's platform for a chatbot, our business utilizes their GPT-3 API to train and fine-tune a chatbot model. The chatbot can then be integrated into our Users’ website or application, allowing Customers to interact with the bot in real-time.

OpenAI's chatbot platform can be customized to suit the specific needs of the business, from designing the conversational flow and personality of the bot, to integrating with backend systems and databases to provide more personalized and contextual responses.

 

Google Analytics - data transfer to the US is likely

data transfer to the US is likely

company name:Google Ireland Limited

address:Gordon House, 4 Barrow Street, Dublin 4, D04 E5W5, Ireland

company registration number: 368047

processing provided: Creating a custom audience for re-marketing to previous visitors and 

Monitoring website visitors' actions

 

Linkedin - data transfer to the US is likely

company name: LinkedIn Ireland Unlimited Company

address:Gardner House, Wilton Plaza, Dublin 2, Ireland

company registration number: 477441

processing provided:Creating a custom audience for re-marketing to previous visitors

 

Hotjar

company name: Hotjar Ltd. 

address: Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141 Malta

company registration number: C65490

processing provided: Monitoring website visitors' actions to identify website bugs and to improve user experience. 

 

Server Hosting

Rackforest Zrt.

address: 1132 Budapest, Victor Hugo utca 11. 5. em. B05001.

company registration number: 01 10 142004

processing provided: server hosting

servers are located in Hungary

 

Amazon Web Services (Amazon Web Services EMEA SARL) - data transfer to the US is essential

address: 38 Avenue John F. Kennedy, Luxembourg 1855, Luxembourg

company registration number: B 186284

processing provided: server hosting

servers are located in Germany

 

Misshosting (Miss Group Holding AB)

address: Sveavägen 33 111 34 Stockholm

company registration number: 556909-70382

processing provided: server hosting

servers are located in Sweden

 

Fasthosts Internet Limited 

address: Discovery House 154 Southgate Street Gloucester GL1 2EX

company registration number: 03656438

processing provided: server hosting

servers are located in Great Britain



Software Development

Companies that provide information technology and help to operate and improve our Service:

Fehér Ákos Attila EV. - Self employed

registration number: 1997060371

processing provided: software development

 

PETYA-COM Kft.

address: 1144 Budapest, Füredi park 9. 3. em. 12.

company registration number:01 09 980483

processing provided: completing penetration tests

 

Internal Communication

Atlassian 

company name: Atlassian Corporation Plc

address: Level 6, 341 George Street, Sydney, NSW 2000, Australia

company registration number: IE598729 

processing provided: We use the software called Jira to track bugs and feature requests of customers. In the to-do ticket, we may share customers’ personal data with our team.

 

Slack 

company name: Slack Technologies Limited

address: Salesforce Tower 60 R801, North Dock Dublin Ireland

company registration number: 55837912

processing provided: We may share customers’ personal data with our team when communicating about open cases. 



Administration

Clockify

company name: COING Inc.

address: Bulevar Oslobodjenja 76/1, 21000 Novi Sad, Serbia.

processing provided: Logs the working hours of team members.

 

Klipfolio

company name: Klipfolio Inc.

address: 150 Elgin Street, Suite 1500 Ottawa ON K2P 1L4 Canada

processing provided:  Providing reports based on our databases. 

 

Bergmann

company name: BERGMANN KönyvelÅ‘ Iroda Kft.

address: 1138 Budapest, Váci út 186., Hungary

company registration number: 01-09-736645

processing provided: Accounting



Payment Provider

The purpose of the data processing is to facilitate and process payment transactions for goods and services between the data Data Controller (our company) and its customers, as well as to detect and prevent fraudulent transactions, ensuring the security and integrity of payment data.

 

Stripe

company name: Stripe Payments Europe Ltd.

address: , 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

company registration number: IE 513174

processing provided: Payment processing service