Subprocessors

Maintain the subprocessor register of the platform (annex 2 of the DPA).

Open "Subprocessors". This is the register of companies that process personal data on behalf of the platform (Art. 28 GDPR). Tenants see the active entries in BizCortex, and the public privacy policy lists them.

Self hosted services (LiveKit) and authorities (BZSt, ELSTER) are not subprocessors. Tenants must be informed about changes in advance.

Subprocessors
Screenshot of this screen

Who can use this

  • Platform operators

Steps

  1. 1. Add

    Click "Add entry" and fill in the form.

  2. 2. Edit

    Click the edit action of an entry.

  3. 3. Deactivate or delete

    Prefer switching "Active" off for former providers to keep the history. Delete removes the entry from the register.

Fields and options

Key

Lowercase letters, digits, the hyphen and the underscore.

Company, Purpose, Data categories

Who, why and which data. Separate several categories with commas.

Place of processing, Country

Where the data is processed, with a two letter ISO country code such as DE.

Safeguards

EU/EEA, Adequacy decision, Data Privacy Framework or Standard contractual clauses.

DPA reference, DPA dated, Notes

The contract with the subprocessor.

Order, Active

Position in the list (a whole number) and whether the entry is shown.

Related