The following subprocessors are currently employed by EMDESK on behalf of the Customer in accordance with Art. 28 GDPR.

Subprocessors process personal data in encrypted form and to a limited, clearly defined extent. Before a new subprocessor processes personal data, we will inform you via email at least 14 days in advance with the right to object.

Application Data Hosting (Germany only)

Hetzner Online GmbH Industriestr. 25, 91710 Gunzenhausen, Germany

Function: Hetzner Online GmbH provides the cloud and dedicated server infrastructure on which the application is hosted. Hetzner Online GmbH is an ISO 27001 certified, GDPR-compliant server and cloud provider, hosted in data centers in Germany. Personal data is processed within the European Union.

Transfer mechanism: Within EU, no third-country transfer.

For more information, please visit Hetzner Online GmbH's data privacy statement.

Email Delivery

Mailjet SAS 13-13 bis, rue de l'Aubrac, 75012 Paris, France

Function: Mailjet is an ISO 27001 certified, GDPR-compliant email service provider used to send emails from the application. Mailjet is hosted in data centers in Frankfurt (Germany) and Saint-Ghislain (Belgium). Personal data is transmitted only to a limited, clearly defined extent (email address, name).

Transfer mechanism: Within EU, no third-country transfer.

For more information, please visit Mailjet SAS data privacy.

Customer Support

Help Scout Inc. 131 Tremont Street, 3rd Floor, Boston, MA 02111-1338, USA

Function: Help Scout provides the support ticketing infrastructure for the application. When you submit a support inquiry, your personal data is processed. Personal data is transmitted only to a limited, clearly defined extent (email address, first and last name).

Transfer mechanism: EU Standard Contractual Clauses (SCC).

Note: Can be replaced by a German-hosted alternative on request.

For more information, please visit Help Scout Inc. data privacy.

Video Conferencing

8x8, Inc. 675 Creekside Way, Campbell, CA 95008, USA

Function: 8x8 provides Jitsi as a Service (JaaS), a video solution. When you start a video meeting, personal data is processed. EMDESK's use is limited to the server in Frankfurt, Germany. Personal data is transmitted only to a limited, clearly defined extent (video, name).

Transfer mechanism: EU Standard Contractual Clauses (SCC).

Note: Can be replaced by a dedicated German-hosted video system on request.

For more information, please visit 8x8 Privacy Policy.

Error Analysis

Functional Software, Inc. (Sentry) 132 Hawthorne Street, San Francisco, CA 94107, USA

Function: Sentry provides services used for analyzing errors in the browser. Personal data processed is limited to technical error data only.

Transfer mechanism: EU Standard Contractual Clauses (SCC).

Note: Can be deactivated on request.

For more information, please visit Sentry Privacy Policy.

Billing and Payment (account holder data only, not project user data)

Zoho Corporation GmbH Trinkausstr. 7, 40213 Düsseldorf, Germany

Function: Zoho Subscriptions is used as a subscription management solution for license management and billing. Servers are located in Amsterdam (NL) and Dublin (IE). When you register a free, trial or paid account with EMDESK, your personal data is processed. Personal data is transmitted only to a limited, clearly defined extent (account holder name, billing address, email address).

Transfer mechanism: Within EU, no third-country transfer.

For more information, please visit Zoho data privacy.

Stripe Payments Europe, Limited The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland

Function: Stripe provides services executing credit card payments. If you choose credit card as a payment option, your personal data will be processed. Personal data is transmitted only to a limited, clearly defined extent (account holder email address, name, credit card details).

Transfer mechanism: Within EU, no third-country transfer.

For more information, please visit Stripe data privacy.

GoCardless Ltd. Sutton Yard, 65 Goswell Road, London, EC1V 7EN, United Kingdom

Function: GoCardless provides services executing payments made by direct debit. If you choose direct debit as a payment option, your personal data will be processed. Personal data is transmitted only to a limited, clearly defined extent (account holder email address, name, direct debit details).

Note: GoCardless acts as an independent data controller, not as a data processor. As an end customer, you therefore have a direct legal relationship with GoCardless regarding the use of your personal data.

For more information, please visit GoCardless Privacy Centre.