Unterauftragsverarbeiter

Would you like this document in your own language? Contact us at hello@lekko.tech.

Lekko (NelMil AS) uses a limited number of sub-processors to deliver the service. This page lists each sub-processor, the service they provide, where data is processed, the transfer mechanism and the party's role. The list forms part of our data processing agreement and is referenced in the privacy policy.

Vercel Inc.

• Role: Data processor
• Service: Hosting of the application (serverless) and storage of uploaded images (Vercel Blob).
• Data categories: Account data, equipment, inspections, deviations, uploaded images, system logs and technical metadata (including IP address).
• Location: Frankfurt, Germany (FRA1)
• Transfer: May be accessed from the United States in connection with operation and support, with appropriate safeguards.
• Mechanism: EU standard contractual clauses (SCCs) and the EU-US Data Privacy Framework where applicable.
• Documentation: vercel.com/legal/dpa

Neon Inc.

• Role: Data processor
• Service: Database: storage of accounts, users, equipment, inspections and deviations.
• Data categories: Account data, user data, inspection and deviation data, system logs.
• Location: Frankfurt, Germany (AWS eu-central-1)
• Transfer: May be accessed from the United States in connection with operation and support, with appropriate safeguards.
• Mechanism: EU standard contractual clauses (SCCs).
• Documentation: neon.tech/dpa

Resend, Inc.

• Role: Data processor
• Service: Delivery of system-generated email: login links and notifications.
• Data categories: The recipient's email address and the content of system-generated emails.
• Location: Dublin, Ireland (AWS eu-west-1)
• Transfer: Resend, Inc. is a US company, so data may in principle be accessed from the United States in connection with operation and support, with appropriate safeguards.
• Mechanism: EU standard contractual clauses (SCCs) and the EU-US Data Privacy Framework where applicable.
• Documentation: resend.com/legal/dpa

Gandi SAS

• Role: Data processor
• Service: Domain and email hosting for manual business email (including hello@lekko.tech).
• Data categories: Email addresses and the content of correspondence with customers and contacts.
• Location: Saint-Denis, France (Equinix PA3) and Bissen, Luxembourg (LuxConnect DC2)
• Transfer: Processed within the EU.
• Mechanism: Not applicable (within the EU/EEA).
• Documentation: gandi.net

Stripe Payments Europe, Ltd. and other companies in the Stripe group

• Role: Independent data controller. For customers outside Norway, Stripe also acts as merchant of record and is the seller for the payment transaction (Stripe Managed Payments). For customers in Norway, NelMil AS is the seller and Stripe acts as payment provider only.
• Service: Payment, checkout, subscription management, invoicing and receipts, and determining, collecting and reporting value added tax or sales tax for customers outside Norway.
• Data categories: Billing information, payment details, transaction data, information used to determine the applicable tax location, and limited account data.
• Location: The EU, primarily Ireland and Germany
• Transfer: Stripe may transfer personal data outside the EEA in accordance with its own obligations as a data controller.
• Mechanism: As determined by Stripe in its role as an independent data controller.
• Documentation: stripe.com/privacy

How sub-processors are selected

Sub-processors are engaged where this is necessary to deliver Lekko. Each one is assessed for security, data protection obligations and ability to meet the requirements for international transfers before being put into use.

Notice of changes

We notify customers in advance before a sub-processor is added or replaced, so that customers can object on reasonable data protection grounds before the change takes effect. If no reasonable alternative is available, the customer may terminate the affected service in accordance with the data processing agreement. In security-critical or operationally critical situations, a replacement may take place immediately, with notice given as soon as possible afterwards.

Contact

NelMil AS Terrasseveien 31 E, 1363 Høvik, Norway hello@lekko.tech