Sub-Processors

The Customer agrees that Sinch may engage Sinch Affiliate or third parties to process personal data in order to assist Sinch to deliver the Services on behalf of the Customer (“Sub-processors”). Sinch has or will enter into written agreement with each Sub-processor containing data protection obligations not less protective than those in this DPA to the extent applicable to the nature of the Services provided by such Sub-processor. If the Sub-processor processes the Services outside the EU/EEA, Sinch shall ensure that the transfer is made pursuant to European Commission approved standard contractual clauses for the transfer of Personal Data which the Customer authorizes Sinch to enter into on its behalf, or that other appropriate legal data transfer mechanisms are used.

The current Sub-processors are outlined in the table below and the Customer agrees and approves that Sinch has engaged such Sub-processors to process personal data as set out in the list. The Customer may subscribe to notifications at the bottom of this page, and if the Customer subscribes, Sinch shall provide notification of a new Sub-processor(s) before authorising any new Sub-processor(s) to process personal data in connection with the provision of the applicable Service.

Sinch shall notify the Customer in advance of any intended changes concerning the addition or replacement of any Sub-processor during which period the Customer may raise objections to the Sub-processor’s appointment. Any objections must be raised promptly (and in any event no later than fourteen (14) days following Sinch’s notification of the intended changes). Should Sinch choose to retain the objected to Sub-processor, Sinch will notify the customer at least fourteen (14) days before authorising the Sub-processor to process personal data and then the Customer may immediately discontinue using the relevant portion of the Services and may terminate the relevant portion of the Services. Sinch will refund the Customer any prepaid fees covering the remainder of the term of such relevant portion of the Service following the effective date of termination and there will be no penalty on either party and for the avoidance of doubt, where any Sub-processor fails to fulfil its obligations under any sub-processing agreement or under applicable law Sinch will remain fully liable to the Customer for the fulfilment of its obligations under the Data Protection Addendum.

Sub Processor Trading Name Sub-Processor Legal Entity, registration no. and address Geographical Location of Data Processed or Accessed Description and Purpose of Data Processing Types of Data Processed Categories of Data Subjects Terms of data processing agreement
Amazon Web Services (AWS) Amazon Web Services Inc. USA and EU     
  • Provision of hardware, storage and network equipment for the provision of Sinch services
  • Analysing and statistical activities
  • Customer Information (AccountID, Contacts, Pricing, Balances, Usage Data, Credentials)
  • Communications transactions, logs and meta-data
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
     
Salesforce Salesforce.com Inc. USA
  • Provision of CRM and Marketing Platform to Sinch
  • Technical Support including fault correction in accordance with Service Level Agreements (SLA)
  • Marketing activities on behalf of Data Controller (when expressly agreed with Data Controller)
  • Data cleansing, correction of corrupted data
  • Customer and Prospect Information (Contacts, Contracts, Pricing)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • For the duration of the Agreement between the Customer and Sinch
Microsoft Microsoft inc. Worldwide
  • Provision of Enterprise Network Access Control, Email, Storage to facilitate internal and external communications
  • Customer Information (AccountID, Contacts, Pricing, Balances, Usage Data)
  • Communications transactions, logs and meta-data
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
     
CLX Communications USA CLX Communications Inc. USA
  • Services for the provision of Technical Support services
  • Customer Information (AccountID, Contacts, Pricing, Balances, Usage Data, Credentials)
  • Communications transactions, logs and meta-data
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
     
Atea Sverige AB Atea Sverige AB Sweden
  • CLX SE Messaging Services ROW
  • CLX SE Information Services ROW
  • CLX SE Messaging Services US
  • CLX SE Messaging Services AU
  • CLX SE Information Services US
  • IMSI
  • Location Data
  • MSISDN
  • Message Content
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
CLX DK NetGroup A/S CLX DK NetGroup A/S Denmark
  • CLX DK_Messaging Gateway
  • CLX DK_Event Voting
  • CLX DK_Interactive Messaging Platform
  • CLX DK_CPH Flight subscription Service
  • MSISDN,
  • Message content
  • Phone number
  • Photos
  • Transactions history
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
Cyxtera Technologies Cyxtera Technologies USA
  • CLX SE Messaging Services US
  • CLX SE Information Services US
  • IMSI
  • Location data
  • MSISDN
  • Message content
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
Google Inc Google Inc USA Sinch Voice and Video Services
  • Display name
  • IP address
  • User name
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
IP-Only AB IP-Only AB Sweden
  • CLX SE Messaging Services ROW
  • CLX SE Information Services ROW
  • CLX SE Messaging Services AU
  • IMSI
  • Location data
  • MSISDN
  • Message content
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
PubNub Inc. PubNub Inc. EU Central, EU West, Asia Pacific, US West, US East Sinch Voice and Video Services
  • Display name
  • IP address
  • User name
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
Savvis UK Ltd (CenturyLink) Savvis UK Ltd (CenturyLink) UK
  • CLX SE Messaging Services ROW
  • CLX SE Information Services ROW
  • CLX SE Messaging Services AU
  • IMSI
  • Location data
  • MSISDN
  • Message content
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
Sinch Operator Software AB Sinch Operator Software AB Sweden
  • CLX SE Messaging Services ROW
  • CLX SE Information Services ROW
  • CLX SE Enterprise Messenger
  • CLX SE Messaging Services US
  • CLX SE Messaging Services AU
  • CLX SE Information Services US
  • IMSI
  • Location data
  • MSISDN
  • Message content
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Sinch´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
Symsoft AB MEA Symsoft AB MEA UAE
  • Sinch Operator Software Support
  • Sinch Operator Software Managed Services
  • Message content
  • MSISDN
  • Phone number
  • Transactions history
  • IMSI
  • Location data
  • IP address
  • User name
  • Access rights (username/password)
  • Email address
  • Name
  • IMEI-numbers
  • Personal identification number
  • Employee ID
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
Zendesk Zendesk USA and EU Sinch Voice and Video Services Phone Number
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives
  • Customer´s customers (communications information)
  • Customer´s employees (including Customer´s consultants) and Customer´s representatives