Data processor

In relation to the Xeropan Application, Xeropan International Ltd. as data controller uses the following data processors:

• Amazon Web Services EMEA SARL, Amazon.com, Inc.
  Address: Amazon Web Services EMEA SARL: 38 Avenue John F. Kennedy, L-1855, Luxembourg, Amazon.com, Inc.: Customer Service PO Box 81226 Seattle, WA 98108-1226, USA
  Email: aws-EU-privacy@amazon.com
  Activity: Hosting service
  Safeguards regarding data transfers to third countries: Service provider falling under the EU–U.S. Data Privacy Framework (https://www.dataprivacyframework.gov/list). In other cases, Standard Contractual Clauses are applicable: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf

• Apple Distribution International Ltd.
  Address: Hollyhill Industrial Estate, Hollyhill, Cork, T23 YK84, Republic of Ireland
  Email: dpo@apple.com
  Activity: App Store and IAP platform provider for selling iOS subscriptions and processing payments
  Safeguards for transfer to third countries: In case of third-country transfer, SCC and EU–US Data Privacy Framework apply.

• AssemblyAI, Inc.
  Address: 320 Judah Street, San Francisco, CA 94122, United States
  Email: legal@assemblyai.com
  Activity: Speech recognition AI provider for lessons aimed at developing speaking skills, which performs transcription and analysis of user audio recordings. The provider does not use processed data for model training or model development.
  Safeguards for transfer to third countries: EU data residency is ensured; in other cases, Standard Contractual Clauses (EU SCC, 2021) adopted by the European Commission apply.

• Branch Metrics, Inc.
  Address: 2443 Ash Street Palo Alto CA 94306
  Email: privacy@branch.io
  Activity: Creation of deep links that help find learning materials appropriate to the platform used by the data subject.
  Information regarding transfer to third countries: Service provider falling under the EU–U.S. Data Privacy Framework. Standard data protection clauses referred to in the data processing agreement apply https://legal.branch.io/#saas-dpa-pdf

• Braintree (a division of PayPal, Inc.)
  Address: contracting entity of the PayPal group – for EU merchants typically PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg
  Email: dpo@paypal.com
  Activity: Online payment processing and fraud prevention service for processing web payments
  Safeguards for transfer to third countries: Independent data controller. In case of third-country transfer, SCC and EU–US Data Privacy Framework apply.

• CodeYard Ltd.
  Address: 4025 Debrecen, Simonffy Street 4–6. Floor 0 Door 41
  Email: info@codeyard.eu
  Activity: software development and support

• Digital Data Solutions B.V.
  Address: Plantage Middenlaan 42A, 1018DH Amsterdam, Netherlands
  Email: support@cookiefirst.com, legal@cookiefirst.com
  Activity: The CookieFirst solution allows users to make decisions regarding cookies used by Xeropan, to give consent or refuse it.

• Functional Software, Inc. (business name used in operation: Sentry)
  Address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA
  Activity: Logging and error monitoring tool providing monitoring and tracking of application crashes and errors
  Email: legal@sentry.io
  Safeguards for transfer to third countries: Service provider falling under the EU–U.S. Data Privacy Framework (https://www.dataprivacyframework.gov/list). In other cases, Standard Contractual Clauses apply: https://sentry.io/legal/dpa/

• Google LLC
  Address: 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  Activity: Web analytics (Google Analytics) and advertising effectiveness measurement / remarketing (Google Ads)
  Safeguards for transfer to third countries: Service provider falling under the EU–U.S. Data Privacy Framework. In other cases, Standard Contractual Clauses apply.

• Hetzner Online GmbH
  Address: Industriestr. 25 91710 Gunzenhausen, Germany
  Email: info@hetzner.com
  Activity: Hosting service

• Mailgun Technologies, Inc.
  Address: 535 Mission St. San Francisco, CA 94105
  Email: privacy@mailgun.com
  Activity: Newsletter sending, analysis of user activity related to newsletters
  Information regarding transfer to third countries: Standard contractual clauses referred to in the data processing agreement apply: https://www.mailgun.com/legal/dpa/

• Meta Platforms, Inc.
  Address: 1601 Willow Road Menlo Park, CA 94025, USA
  Activity: Advertising effectiveness measurement and remarketing / audience building (Meta Pixel / Conversions API)
  Safeguards for transfer to third countries: EU–U.S. Data Privacy Framework

• OpenAI Ireland Ltd.
  Address: 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Republic of Ireland
  Email: privacy@openai.com
  Activity: artificial intelligence service provider, providing AI-based functions of Xeropan
  Safeguards for transfer to third countries: Standard contractual clauses referred to in the data processing agreement: https://openai.com/policies/data-processing-addendum/

• Singular Labs, Inc.
  Address: 181 South Park Street, Unit 2, San Francisco, CA 94107, United States
  Email: privacy@singular.net
  Activity: Marketing attribution and analytics provider for measuring and analysing mobile application campaigns
  Safeguards for transfer to third countries: Standard contractual clauses (2021/914, Module 2) apply.

• VENGIT Ltd.
  Address: 1143 Budapest, Gizella Road 42–44
  Email: admins@vengit.com
  Activity: Server operation, information technology consulting

• Ybug s.r.o.
  Address: Nove sady 988/2, Stare Brno, 602 00 Brno, Czech Republic
  Email: help@ybug.io
  Activity: supports reporting of possible errors and enables their visualization

The Data Controller does not grant access to personal data to any other individuals or recipients, nor does it disclose personal data to them.