Snapshot 11639
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Version February 2025
WITHINGS SUBPROCESSORS
In order to provide its Products and Services, Withings uses subprocessors who may process
personal data relating to the users. Withings has signed processing agreements with all of the
subcontractors listed below and makes sure they implement organizational and technical
measures that comply with the provisions of GDPR.
HOSTING
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
Hosting
No international transfer (data
BSO France Hosting of WITHINGS
hosted within the EEA)
infrastructures
Hosting and managed
No international transfer (data services
WITHINGS France
hosted within the EEA)
Security page
BACKUPS
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
Backup
GCS (Google European No international transfer Backups are encrypted before
Cloud Storage) Economic Area (data hosted within the EEA) being sent to GCS in order to
strengthen the confidentiality
of personal data.
CUSTOMER SUPPORT
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
CRM
No international transfer
European Provides a more efficient
Zendesk (data hosted in the European
Economic Area customer relationship
Economic Area)
management
1
Version February 2025
WITHINGS SUBPROCESSORS
Customer Support
No international transfer
CPM Spain Helps manage customer
(data hosted within the EEA)
relationship
Customer Support
TELUS
Philippines Standard Contractual Clauses Helps manage customer
International
relationship
Customer Support
Playvox USA Standard Contractual Clauses Quality assessment of
Customer Support agents
COMMUNICATION
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
European No international transfer Sending emails
Mailgun
Economic Area (data hosted within the EEA) Allows to send emails to users
Sending emails (backup
European No international transfer
Mailchimp solution)
Economic Area (data hosted within the EEA)
Allows to send emails to users
Sending SMS
Twilio USA Data Privacy Framework
Sending SMS to use 2FA
MARKETING
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
Google Ads World Standard Contractual Clauses
Meta USA Data Privacy Framework Marketing communications
Allows us to present you
European No international transfer online ads adapted to your
Criteo
Economic Area (data hosted within the EEA) profile
2
Version February 2025
WITHINGS SUBPROCESSORS
TikTok USA Standard Contractual Clauses
Youtube World Standard Contractual Clauses
LOGISTICS
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
No international transfer Logistics
Dimotrans France (data hosted within the Allows delivery of products in
EEA) Europe
Logistics
Logistech USA Data Privacy Framework Allows delivery of products in
the USA
No international transfer After-sales services
Revers.io The Netherlands (data hosted within the Facilitate management of
EEA) product returns
No international transfer Logistics
Shipup Belgium (data hosted within the Improve customer experience
EEA) during transport
No international transfer
Product returns
ShopRunBack France (data hosted within the
Facilitate product returns
EEA)
PAYMENT
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
Ireland
(users in Europe)
No international transfer Payment on WITHINGS
Klarna (data hosted within the EEA website
USA
for European users) Payment management
(users in Northern
America)
3
Version February 2025
WITHINGS SUBPROCESSORS
Payment on WITHINGS
BrainTree USA Binding Corporate Rules website
Payment management
Payment on WITHINGS
Signifyd USA Data Privacy Framework website
Fight against fraud
OTHERS
Mechanism allowing Service provided and
Subcontractor Storage place
international data transfer Performed task
[US Only] Medical advice
No international transfer
HeartBeat Health USA Validation of the first ECG
(only for American users)
recorded with the Scan Watch
AI platform
[UScan Users only] No international transfer Offer a better understanding
Europe (data processed within the of the insights of the UScan.
Google - Vertex AI
EEA) Enable to chat with a
conversational agent
4