Snapshot 49877
Normalized text
Scripts and page chrome removed; this is what change detection compares.
List of Sub-Processors
For the provisioning of its event management platform, doo uses the following sub-processors that
have access to the personal data of the event attendees processed by doo on instruction of the
customer:
Location of
Appropriate Safeguards (Art.
Sub-Processor Subject-matter of the Processing Data
46 GDPR)
Process
Amazon Web Services EMEA
SARL Hosting of the doo Event
Germany n/a
Management Platform (IaaS)
(Luxembourg)
Eleks GmbH IT support, maintenance, care,
EU, Ukraine SCC
(Germany) software development
Zammad GmbH Helpdesk, forwarding of support
Germany n/a
(Germany) requests
Strato AG Intermediate storage of data for
manual processing and Germany n/a
(Germany) import/export to the doo platform
Celonis, Inc. Automated ETL (Extract, Transform,
Germany n/a
(USA) Load) and integration projects
Only if the additional functionality or service “Website Module” is booked and used:
Duda, Inc. For the USA: Certification in
accordance with the EU-U.S.
USA or EU
Hosting of event websites and Data Privacy Framework
(depending
(USA) landing pages (adequacy decision),
on the order)
supplemented by Standard
Contractual Clauses (SCC)
Serverprofis GmbH Hosting of event websites and
landing pages (optional alternative to Germany n/a
(Germany) Duda)
Only if the onsite services of the service provider “Fastlane GmbH” are booked and used
FastLane GmbH
Inlet/outlet scanning and badging Germany n/a
(Germany)
Only if the additional functionality or the service map for Event Location is used:
Google Ireland Limited Certification in accordance with
the EU-U.S. Data Privacy
Map (Google Maps) for Event
EU, USA Framework (adequacy decision),
(Irland) Location Map
supplemented by Standard
Contractual Clauses (SCC)
YellowMap AG Map for Event Location Map
Germany n/a
(Germany) (optional alternative to Google Maps)
Only if the additional functionality or service “E-mail Inbox” is booked and used:
Serverprofis GmbH Mailbox hosting and hosting of web
Germany n/a
(Germany) applications
Only if the additional functionality or service “E-mail Address Validation” is booked and used:
Byteplant GmbH
Validation of e-mail addresses Germany n/a
(Germany)
1
List of Sub-Processors
Only if the “Event App” service of the service provider PLAZZ AG is booked and used:
PLAZZ AG
Event App Germany n/a
(Germany)
Only if the additional functionality or the “Premium Wallet” service is booked and used:
Fobi AI Germany GmbH
Mobile wallets for event participants Germany n/a
(Germany)
Only if the additional functionality or the “Digital waiting room” service is booked and used:
Orderly Telecoms Ltd Digital waiting room for event
EU n/a
(England) registrations
Only if the additional functionality or the “Banner generator” service is booked and used:
DynaPictures GmbH Banner generator for speakers,
EU n/a
(Germany) exhibitors, participants
doo may terminate the engagement of individual sub-processors or engage additional sub-
processors. doo will inform the customer of the planned engagement of any additional sub-
processors via electronic means at least 30 days prior to their engagement. This excludes
emergency replacements as defined below. Should the customer have a legitimate reason to
object to the engagement of a sub-processor, they must notify doo in writing within 15 days
of receiving the notice, providing the legitimate reason for the objection. If the customer does
not object within this time period, the engagement of the additional sub-processor will be
considered approved by the customer.
If the customer objects, doo may resolve the objection as follows: (1) doo will refrain from
engaging the additional sub-processor for the processing of the customer’s personal data, or
(2) doo will take steps to address the legitimate reason for the customer’s objection, or (3)
doo may temporarily or permanently suspend the provision of the aspect of the service
affected by the sub-processor and refund any pre-paid fees associated with that aspect of
the service. If none of these options are feasible and the objection is not resolved within 15
days after receiving the objection, either party may terminate the agreement with appropriate
notice. Emergency replacements of a sub-processor may become necessary if the
immediate engagement of an additional sub-processor is outside of doo’s control, for
example, if a sub-processor unexpectedly ceases operations or breaches significant
contractual obligations to doo, making it impossible for doo to provide the services owed to
the customer. In such a case, doo will immediately inform the customer of the additional sub-
processor, and the objection process, as defined above, will commence upon the customer’s
notification.
As of: October 17, 2024
2