Your guide on how to nudge consumers toward more sustainable choices. Get it here!
Voyado Elevate

Transfer impact assessment guidance

We use sub-processor to deliver our service Voyado Elevate. Such use may entail transfer of personal data. This guidance document describes the relevant transfers and what legislation might apply.

Please subscribe here if you want to receive notifications whenever we update our legal documents.

Voyado Elevate sub-processor information

Applicable sub-processors

Voyado uses the sub-processors below when providing Voyado Elevate.

Third country data transfer

Voyado’s main processing of personal data takes place within the EU. For some sub-processors processing of personal data outside of the EU/EEA may however occur. Please see information on applicable transfer and transfer tools below.

EU/UK/Swiss transfer to the US

For transfer to the US, Voyado’s sub-processors for Elevate relies on the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) if you are an EU customer. For UK customers, the UK Extension applies and for Swiss customers, the Swiss-U. S Data Privacy Framework.

The EU-U.S. DPF, the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) were respectively developed in furtherance of transatlantic commerce by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms for personal data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law.

The effective date of the EU-U.S. DPF Principles, including the Supplemental Principles and Annex I of the Principles is July 10, 2023, which is the date of entry into force of the European Commission’s adequacy decision for the EU-U.S. DPF. The adequacy decision enables the transfer of EU personal data to participating organizations consistent with EU law.

Voyado Elevate sub-processors

The sub-processors below apply for all customers using Voyado Elevate.

Sub-processor and use Data Center location Transfertool Possible third country data flow Sub-processors and links
Amazon Web Services EMEA SARL (“AWS EMEA”) Ireland EU-U.S. DPF No direct data flow. Data centers are located within the EU but AWS (parent company) is located within the US. AWS sub-processors: Amazon Web Services (AWS) Sub-processors

AWS technical and organizational security measures: Cloud Security – Amazon Web Services (AWS)

Zendesk, Inc. (used for customer support) EU EU-U.S. DPF The US. Data centers are located within the EU but Zendesk, Inc. is located in the US. Sub-processors: Sub-processor policy

Technical and organizational security measures: Zendesk Trust Center and Enterprise Security Measures

 

Version 2.2 December 5, 2023.
This document may be subject to updates from time to time. 

 

Receive updates on sub-processor information

If you want to receive updates when we make changes or updates regarding our sub-processors you need to subscribe using the link below.