Sub Processors List

Last updated: March 20, 2025

# Sub-Processor Name Country of Processing Address / Registered Office/Contact Data Subject Categories of Personal Data Processed Purpose Safeguards for Third Country Transfers (if applicable)
1 Amazon Web Services Ireland 419 Terry Avenue North, Seattle, WA,98109-5210 – contact Controller’s end users, Users of Pandectes CMP (merchants)

Controller’s end users
IP address (not complete but only the last two parts), Geolocation based on IP, User Agent, Consent ID, Consent date & time, Consent Type,
Consent Preference

Users of Pandectes CMP (merchants)
Store details

Cloud Service provider and Data Storage Not required as Ireland is a part of the EEA
2 Cloudflare Inc. USA 101 Townsend St., San Fransico, California, 94107, USA – contact Users of Pandectes CMP (merchants) Users of Pandectes CMP (merchants)
IP address
DNS services, Captcha Service, CDN provider SCC, EU-US data privacy framework (certification)
3 Crisp IM SAS France 2 Boulevard de Launay 44100 Nantes France –
contact
Users of Pandectes CMP (merchants) Users of Pandectes CMP (merchants) (name, email); chat transcript content; device/technical metadata (e.g., IP, user agent) as needed for service. Customer support chat (live chat widget, inbox) Not required as France is a part of the EEA
4 Heroku (Salesforce, Inc.) USA Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA – contact Users of Pandectes CMP (merchants) Application runtime data only. No persistent storage of customer personal data. Application hosting & runtime infrastructure Not required as it uses Europe region
5 Peaberry Software, Inc. (customer.io) USA 9450 SW Gemini Dr., Suite 43920, Beaverton, Oregon 97008-7105, USA – contact Users of Pandectes CMP (merchants) Users of Pandectes CMP (merchants) contact details; message metadata; event and engagement data; Not required as it uses the Europe region SCC, EU-US data privacy framework