Sub-Processors
Summitware BV uses carefully selected third-party service providers (“sub-processors”) to deliver our services (Registration Town, Slideshow City and the Summitware Events app). Each sub-processor is bound by contract to protect personal data under GDPR.
Questions or objections? Email privacy@summitware.be.
Current Sub-Processors
| Sub-processor | Purpose | Location of processing | International transfers & safeguards | Notes |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting & infrastructure | EU (e.g., Frankfurt) | None (processing in EU/EEA) | Primary hosting for Registration Town & Slideshow City. |
| MongoDB Atlas | Database hosting | EU (e.g., Frankfurt) | None (processing in EU/EEA) | Operational databases for app data. |
| Stripe | Payment processing (billing data only) | EEA primary; limited transfers possible | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Summitware does not store card numbers; Stripe handles card data. Summitware stores the client’s encrypted Stripe secret key on their behalf to enable payment processing through the client’s Stripe account. |
| SendGrid (Twilio Inc.) | Transactional email delivery | EU/US (service-dependent) | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Only used if email features are enabled for your project. |
| Meta (Meta Pixel) (optional) | Analytics/tracking | EU/US | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Off by default; only active if the Controller opts in. |
| Google Analytics (optional) | Analytics/tracking | EU/US | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Off by default; only active if the Controller opts in. |
| OpenAI Ireland Ltd (OpenAI OpCo, LLC) / Anthropic PBC | AI model inference (stateless configuration, no training on inputs) | US; may involve EU data centers where applicable | Transfers outside EEA safeguarded by EU Standard Contractual Clauses (SCCs) | Used when Summitware services leverage AI Assistant features (e.g., content generation or content analysis). |
| Google LLC | Calendar integration (OAuth); push notification delivery (Firebase Cloud Messaging) | US; EU data centers available | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Used when speakers connect their Google account to sync session assignments to Google Calendar via OAuth. OAuth tokens are deleted on disconnect. Firebase Cloud Messaging delivers push notifications to the Summitware Events Android app (push token, Firebase installation identifier, notification content). |
| Apple Inc. | Push notification delivery (Apple Push Notification service) | US | Transfers outside EEA under the Apple Developer Program License Agreement | Delivers push notifications to the Summitware Events iOS app (push token, notification content). |
| Microsoft Corporation | Calendar integration (OAuth) | US; EU data centers available | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Used when speakers connect their Microsoft account to sync session assignments to Outlook Calendar via Microsoft Graph API. OAuth tokens are deleted on disconnect. |
| Intuit Inc. (QuickBooks Online) | Invoice sync integration (OAuth) | US; EU data centers available | Transfers outside EEA safeguarded by the EU–US Data Privacy Framework | Used when clients connect their QuickBooks Online account to sync invoices. OAuth tokens are stored encrypted and deleted on disconnect or account termination. |
Tip: If you disable optional services (email delivery, Meta Pixel, Google Analytics, OpenAI), those sub-processors won’t apply to your project.
Change Notice & Objections
We’ll give data controllers at least 30 days’ advance notice of any intended addition or replacement of a sub-processor. We notify inside the product and/or by email to admin contacts. If you have a reasonable data-protection objection, contact us within the notice period. If no objection is received, the change is deemed approved.
Details are governed by our Data Processing Addendum (DPA).
Contact
Summitware BV Sint-Pietersnieuwstraat 158/201, 9000 Gent, Belgium Email: privacy@summitware.be
Related documents: Data Processing Addendum (DPA) · Privacy Policy