List of Sub processors

Sub processors for processing personal data

Barium AB uses various sub processors to help Barium deliver service to our Customers. No personal data (or other customer data) is donated or sold to any third party.

Some of these sub processors, transfer and process personal data outside the EU/EES area. Barium uses only subcontractors that can demonstrate compliance with Privacy Shield or standard data protection clauses adopted by the European Commission.

Privacy Shield

Privacy Shield is an agreement between the EU and the US regarding the protection of personal data which was met in 2016. The decision implies the transfer of personal data to such recipients in the United States that are affiliated with Privacy Shield. Recipients covered by Privacy Shield are considered to meet an adequate level of protection for data handling. (see GDPR Article 45). It is possible to check subcontractors' compliance with Privacy Shield via this link: https://www.privacyshield.gov/list.

Sub processors for maintaining customer relationships

Company and reg. no	Geographic location	Data	Mechanism for supervision upon transfer of data to countries outside EU/EEA.
Aha!	Menlo Park, California USA	Barium uses the service Aha! to store ideas and plan product development. Existing customers of Barium AB can be invited to the service. When registering an account, personal data is used to identify users in the service	EU-U.S. Privacy Shield Framework
SalesForce	San Francisco, California USA	Barium uses the service to manage customer contacts that are of interest to Barium AB	EU-U.S. Privacy Shield Framework
HubSpot	Cambridge, Massachusetts USA	Barium uses HubSpot as a tool for collecting contact information for individuals that Barium considers relevant to contact for the purpose of marketing our products. Collected data is stored in SalesForce.	EU-U.S. Privacy Shield Framework

Sub processors contracted to help Barium AB deliver Barium Live to our customers

Company and reg. no	Geographic location	Data	Mechanism for supervision upon transfer of data to countries outside EU/EEA.
DGC IB 556625-7340	DGC IB Sveavägen 145, floor 5 113 64 Stockholm	Hosting of operational environment for agreed services in which Controller can choose to process personal data.	No supervision mechanism necessary since all data stored in Sweden.
MailGun	Mailgun Technologies, Inc. 535 Mission St. San Francisco, CA 94105	Queue management (temporary storage) of outgoing email from the service. Note that it is Controller which personally chooses which data is to be sent from the service.	EU-U.S. Privacy Shield Framework
MailChimp	The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA	Processor uses MailChimp in order to inform certain types of users regarding changes in the service. The type of processing involves temporary storage and forwarding of email addresses to Controller’s administrators and test users in agreed service	EU-U.S. Privacy Shield Framework
Freshwork	Freshworks, Inc. 1250 Bayhill Drive, Suite 315 San Bruno, California 94066	Freshwork provides cloud services (Freshdesk) which Controller uses to store and manage received support matters. Note that it is Controller which personally chooses which data is attached to posted support matters.	EU-U.S. Privacy Shield Framework
Atlassian	Atlassian PTY Ltd Atlassian Inc. (San Francisco, Harrison Street Location) 1098 Harrison Street San Francisco, California 94103	Atlassian provides cloud service (Jira Software) which Processor uses to store and manage technical support matters. Note that it is Controller which personally chooses which data is attached to posted support matters	EU-U.S. Privacy Shield Framework