List of Subprocessors

Subprocessors pursuant to Data Processing Agreement

The Processor currently works with the following subcontractors and the Controller hereby agrees to their appointment.If data processing takes place outside the European Economic Area (EEA) or if access is made from outside the EEAw, the following overview must also list the measures and guarantees that ensure an appropriate level of data protection during processing in accordance with Art. 44 GDPR ff. (e.g. EU Standard Contractual Clauses, Binding Corporate Rules or other arrangements by the European Commission).

1. Amazon Web Services

Company: Amazon Web Services EMEA SARL ("AWS")

Address: 38 Avenue John F. Kennedy, L-1855 Luxembourg

Data processing activities: Data center used for hosting the Cozero application

Data location: Frankfurt zone

Please visits AWS’s website for more detailed information on data processing at the following:

Data processing in third-country only by subcontractor. Guarantees: EU-US Data Privacy Framework

‍

2. New Relic

Company: New Relic Inc. ("New Relic")

Address: 188 Spear Street, Suite 1200, San Francisco, CA 94105, USA

Data processing activities: Tracking of technical logs and errors from the application

Please visits New Relic’s website for more detailed information on data processing at the following:

Guarantees: Standard contractual clauses (processor-to-processor)

‍

3. SendGrid

Company: SendGrid, Inc. ("SendGrid"), part of Twilio, Inc.

Address:  101 Spear Street, Ste 500, San Francisco, CA 94105, USA

Data processing activities: User notification management and email delivery services for functionalities such as automated sign-up process, user communications or intercompany emission reporting

Guarantees: Standard contractual clauses (processor-to-processor)

‍

4. Intercom

Company: Intercom, Inc. ("Intercom")

Address: 55 2nd Street, 4th Floor San Francisco, CA 94105 USA

Data processing activities: Product marketing & notifications, support ticketing

Please visits Intercom’s website for more detailed information on data processing at the following:

Guarantees: Standard contractual clauses (processor-to-processor)

‍

5. Mixpanel

Company: Mixpanel, Inc. ("Mixpanel")

Address: San Francisco, One Front Street, Floor 28, CA 94111, USA

Data processing activities: Product event analytics to optimize the product experience; Cozero uses Mixpanel's European data residency program, which allows the personal data collected to be fully processed and stored in Mixpanel's data center in the Netherlands.

Please visit Mixpanel's website for more detailed information on data processing at the following:

Guarantees: Standard contractual clauses (processor-to-processor)

‍

6. MongoDB Limited

Company: MongoDB Limited

Address: MongoDB, Inc., 1633 Broadway, 38th floor, 10019 New York

Data processing activities: Storing technical logs and events created by the application to analyze errors and processing times

Please visit MongoDB Limited's website for more detailed information on data processing at the following:

Guarantees: Standard contractual clauses (processor-to-processor)

‍

‍