Sub-processors
Welcome to our Sub-processors page. At Gobi Stories, we leverage a carefully selected network of partners to enhance our solutions. Here, you can find detailed information about each sub-processor, including their specific roles and contributions to our services. We prioritize transparency and data protection in all our partnerships.
1. Introduction
In order to make our Services work for the purposes intended, it can be necessary to share some of your data with our third-party providers. This page lists the Sub-processors we currently use, and the services they offer to us. Prior to engaging any Sub-processor, we conduct a thorough assessment, encompassing detailed analysis of security and legal aspects, in accordance with art. 28 GDPR and Chapter V GDPR. A Sub-processor is only engaged if they meet our criteria for security and our criteria for lawful processing, subject to art. 28 GDPR and Chapter V GDPR..
“End Users” refer to individuals who utilize products and services offered by Gobi's customers.
Our "Customers" encompass both individuals and businesses who have registered for a Gobi account.
‍
2. List of Sub-processors in connection with Customers’ and End Users’ use and interaction with Gobi’s Distribution Tool
The below overview is a compilation of Sub-processors that we collaborate with for handling Customer and End User data when our Customers and End Users use and interact with Gobi’s Distribution Tool. The below overview also shows what Personal Data that will be Processed by Sub-Processors in connection with Customers’ and End Users’ use and interaction with Gobi’s Distribution Tool.
‍
| Third party service providers | Information and data that are being processed | Why we use it (Purpose) | Where data is stored |
|---|---|---|---|
| Cloudinary | Connection information | Video distribution | EU + US* ** |
| Google Cloud | Connection information and analytic data | Storage and processing of data | EU |
*Gobi and all Sub-Processors listed above have signed DPA and EU standard contractual clauses, approved by the EU Commission to ensure that any transfer of Personal Data (both inside and outside the EU/EEA) meets the requirements and undertakings which follow from the General Data Protection Regulation.
** Transfer of Non-HR Personal Data to Cloudinary (in the US), is based on the Adequacy Decision on 10 July 2023, as Cloudinary is included in the Data Privacy Framework List, effective from 10/10/2023
3. List of Sub-processors in connection with Customers use and interaction with Gobi’s Production Tool
The below overview is a compilation of Sub-processors we partner with for managing Customer data when our Customers use and interact with Gobi’s Production Tool. The below overview also shows what Personal Data that will be Processed by Gobi’s Sub-Processors in connection with Customers’ use and interaction with Gobi’s Production Tool.
| Third party service providers | Information and data that are being processed | Why we use it (Purpose) | Where data is stored |
|---|---|---|---|
| Chatlio LLC | Connection information, information shared in chat | Chat Support | US** |
| Cloudinary | Video and images, Connection information | Video processing and distribution | EU + US* ** |
| Customer.io | Contact information | Send out relevant information with newsletter or email | EU |
| Google Cloud | Information you upload such as images, videos, user information, company information, story information, information about general use | Cloud provider for storage and processing of data | EU |
| Hotjar | Connection information and analytical data | Users feedback, statistics and behavior analytics | EU |
| HubSpot | Contact information | Send out relevant information and customer relationship management | EU |
| Segment | Contact information. connection information and analytical data | Users feedback, statistics and behavior analytics | US** |
| Sentry.io | Errors and crash logs | Crash, debugg and error reporting and behavior analytics | US** |
| Tripletex AS | Information about contact person, company and billing | Technical solution for invoicing | EU |
*Gobi and all Sub-Processors listed above have signed DPA and EU standard contractual clauses, approved by the EU Commission to ensure that any transfer of Personal Data (both inside and outside the EU/EEA) meets the requirements and undertakings which follow from the General Data Protection Regulation.
** Transfer of Non-HR Personal Data to the US, is based on the Adequacy Decision on 10 July 2023, as the companies is included in the Data Privacy Framework List
4. Updating Sub-processors
Our operational requirements may evolve periodically. This could involve phasing out a Sub-processor to streamline and reduce our reliance on them. Likewise, we might incorporate a new Sub-processor if we determine it will improve our capacity to provide our Services. This page will be regularly updated to account for any additions or removals from our roster of Sub-processors.
‍
‍
Last update: 21.03.2024