We use sub-processor to deliver our service Voyado Elevate. Such use may entail transfer of personal data. This guidance document describes the relevant transfers and what legislation might apply.
Please subscribe here if you want to receive notifications whenever we update our legal documents.
Voyado uses the sub-processors below when providing Voyado Elevate.
Voyado’s main processing of personal data takes place within the EU. For some sub-processors processing of personal data outside of the EU/EEA may however occur. Please see information on applicable transfer and transfer tools below.
For transfer to the US, Voyado’s sub-processors for Elevate relies on the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) if you are an EU customer. For UK customers, the UK Extension applies and for Swiss customers, the Swiss-U. S Data Privacy Framework.
The EU-U.S. DPF, the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) were respectively developed in furtherance of transatlantic commerce by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms for personal data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law.
The effective date of the EU-U.S. DPF Principles, including the Supplemental Principles and Annex I of the Principles is July 10, 2023, which is the date of entry into force of the European Commission’s adequacy decision for the EU-U.S. DPF. The adequacy decision enables the transfer of EU personal data to participating organizations consistent with EU law.
The sub-processors below apply for all customers using Voyado Elevate.
| Sub-processor and use | Data Center location | Transfertool | Possible third country data flow | Sub-processors and links |
| Amazon Web Services EMEA SARL (“AWS EMEA”) | Ireland | EU-U.S. DPF | No direct data flow. Data centers are located within the EU but AWS (parent company) is located within the US. | AWS sub-processors: Amazon Web Services (AWS) Sub-processors
AWS technical and organizational security measures: Cloud Security – Amazon Web Services (AWS) |
| Salesforce SFDC Ireland Ltd | EU and the US | EU-U.S. DPF | The US | Sub-processors: salesforce-infrastructure-and-subprocessors.pdf
Technical and organizational security measures: data-processing-addendum.pdf (salesforce.com) |
Version 2.1 September 2023.
This document may be subject to updates from time to time.
If you want to receive updates when we make changes or updates regarding our sub-processors you need to subscribe using the link below.
We love all things customer and product data, and would love to chat about your brand’s individual challenges, and how our solutions can help.
