List of Subcontractors
Annex 2 Data Processing Agreement (DPA)
Claranet and its affiliates engage third party service providers listed in the table below to perform limited activities in connection with Claranet services, where integration of features and services is desired or required by the customer (see Annex 1 to the DPA, Chapter 2.3. No. 3).
The table shows which activity each company performs and indicates whether a subcontratcor is only relevant for a specific service or region, or is used for all Claranet services. See the table below for more information on each activity. In addition, the table contains information on the restricted processing of customer data that the respective entity is authorised to do.
This Annex is to be understood in the always current version in conjunction with the Order Data Processing Agreement.
List of commissioned subcontractors | Deutsche Version ansehen |
| Subcontractor | Address | Nature of processing (service) | Data processing and storage locations | Guarantee according to Section 46 GDPR |
|---|---|---|---|---|
| Amazon Webservices EMEA SARL | 38 Avenue John F Kennedy, L-1855 Luxembourg | Managed Cloud Hosting: Amazon Web Services (AWS) Web Application Firewall (Webfence Premium) | Depending on the configuration of the customer. By default, within the EU. Support cases may also be conducted from the US. | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
Claranet Addon GmbH (if Claranet GmbH is the processor of the main contract) | Wolfgang-Brumme-Allee 25, 71034 Böblingen, Germany | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. Managed SAP Services Professional Services (SAP) Managed Workplace Services | Employees of Claranet Addon who work within the processes and policies of Claranet. The storage location of the data is determined according to customer requirements (hyperscaler, on-premise, Claranet data centre). The location of the processing is determined according to the customer's requirements. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet Benelux B.V. | Flight Forum 840, 5657 DV Eindhoven, Netherlands | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. | Employees of Claranet Benelux who work within the processes and policies of Claranet. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
Claranet GmbH (if Claranet Addon GmbH is the processor of the main contract) | Hanauer Landstraße 196, 60314 Frankfurt am Main, Deutschland | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. | Employees of Claranet who work within the processes and policies of Claranet Addon. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet Holding GmbH | Hanauer Landstraße 196, 60314 Frankfurt am Main, Germany | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. | Employees of Claranet Holding who work within the processes and policies of Claranet. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet India Private Limited | Regus Mid Town Business Centre Pvt Ltd, Level 11, Tower B, Peninsula Business Park Lower Parel, Mumbai, Maharashtra, 400013, India | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. | Employees of Claranet India who work within the processes and policies of Claranet. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet Limited | 6th Floor, 110 High Holborn, London, WC1V 6JS, Great Britain | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. Web Acceleration & DoS Protection (WADP), Web Application Firewall (Webfence Basic, Advanced) Cyber Security: Managed Detection and Response (MDR) Cyber Security: Endpoint Detection and Response (EDR) Cyber Security: Continuous Security Testing | Employees of Claranet UK who work within the processes and policies of Claranet. The location of the WADP node is determined by customer preference (group):
The of WADP nodes are operated by Claranet Limited, in the UK, on Google Cloud Platform (GCP - operated by Google Ireland Ltd.) and OVH (OVH US LLC and OVH SAS Group). The Provision of “Webfence Basic” and “Advanced” is based on the “WADP product”. By default, the data of a German WADP customer remains in group A. Upon request deviations from the default settings can be made. Provision of MDR with AlienVault and EDR with SentinelOne services by Claranet Ltd in the UK. The Continuous Security Testing service is provided by Claranet Ltd. in the UK. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet Portugal S.A. | Beato Innovation District, Rua da Manutencao 71 – Building A, 1900-500 Lisbon, Portugal | Managed Workplace | Depending on agreement with the customer. Within the EU as standard. | Data processing agreement (DPA) |
| Claranet SAS | 18-20, rue du Faubourg du Temple, 75011, Paris, France | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. Web Application Firewall (Webfence Premium) | Employees of Claranet UK who work within the processes and policies of Claranet. Deployment of the Webfence Premium service by Claranet SAS in France. The service is based on AWS infrastructure. The location of the AWS infrastructure is region EU-west-3: Paris. (Amazon Webservices EMEA SARL). In addition, Webfence Premium integrates AWS services CloudFront (AWS Content Delivery Network (Nodes)), AWS Shield (DDoS protection), and Amazon Route 53 (DNS web service). By default, the service is set so that the data of a German Webfence Premium customer does not leave Group A (WADP) (see above). This can be deviated from at the customer's request. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet SAU | Montserrat Roig, 38, 08908, Hospitalet de Llobregat, Barcelona, Spain | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. | Employees of Claranet Spain who work within the processes and policies of Claranet. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet S.R.L | Corso Europa 13, 20122 Milano (MI), Italy | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. | Employees of Claranet Italy who work within the processes and policies of Claranet. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| Claranet Switzerland GmbH | Flughofstrasse 55, 8152 Glattbrugg, Switzerland | Use of employees for the services listed in Annex 1 to the DPA, Chapter 2.3. no. 3. Professional Services (Development) Professional Services (SAP) | Employees of Claranet Switzerland who work within the processes and policies of Claranet. The location of the processing is determined according to the customer's requirements. The location of the processing is determined according to the customer's requirements. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| DUO Security LLC | 123 North Ashley Street, Suite #200, Ann Arbor, MI 48104, United States | Multi-factor-authentication (MFA) | All functions of Duo's zero-trust platform are provided for customers from Europe in the data centres in Ireland, Germany and the UK. In support cases also USA. | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| Google Ireland Limited | Gordon House, Barrow Street, Dublin 4, Ireland | Managed Cloud Hosting: Google Cloud Plattform (GCP) Web Acceleration & DoS Protection (WADP) | Depending on the configuration of the customer. By default within the EU (public cloud) and the UK (WADP). Support cases may also be conducted from the US. | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| intersoft consulting services AG | Beim Strohhause 17, 20097 Hamburg, Germany | Cyber Security: Digital Forensics and Incident Response (DFIR) | Depending on agreement with the customer. Within the EU as standard. | Data processing agreement (DPA) |
Kentik Technologies, Inc. (if Claranet GmbH is the processor of the main contract) | 548 Market St PMB 78595 San Francisco, CA 94104-5401, United States | DDoS Protection | Germany | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| KnowBe4, Inc. | 33 N. Garden Ave., Suite 1200 Clearwater, FL 33755, United States | Cyber Security: Security Awareness (KnowBe4) | KMSAT & PhishER (Option 5): Procution Database: Amazon AWS Data Center Frankfurt, Germany (eu-central-1) Disaster Recovery Database: Amazon AWS Data Center in Europe located in Dublin, Ireland (eu-west-1) | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| LevelBlue (formerly AlienVault from AT&T Cybersecurity) | 1100 Park Place, Suite 300 San Mateo, CA 94403, California | Cyber Security: Managed Detection and Response (MDR) | European Economic Area (EEA), United States | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| Microsoft Ireland Operations Ltd. | One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland | Managed Cloud Hosting: Microsoft Azure Professional Services / Consulting Workplace Enterprise Support (ESC) | Depending on the configuration of the customer. By default within the EU. Support cases may also be conducted from the US. | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| NotSoSecure Global Services Limited | 6th Floor, 110 High Holborn, London, WC1V 6JS, Great Britain | Cyber Security: Penetration Testing | Provision of the service by NotSoSecure in UK. | Intra Group Data Sharing Agreement (IGDSA) based on the EU standard contractual clauses. |
| OVH SAS-Gruppe | 2, Rue Kellermann, 59100 Roubaix, France | Web Acceleration & DoS Protection (WADP) Web Application Firewall (Webfence Basic, Advanced) | OVH Data Center in Canada (CA), Sydney (SYD) and Singapore (SGP) OVH Data Center Germany, Limburg (Lim3) OVH Center United States (US) East, United States (US) West | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| OVH US LLC | 11480 Commerce Park Drive, Suite 500, Reston, Virginia 20191, United States | Web Acceleration & DoS Protection (WADP) Web Application Firewall (Webfence Basic, Advanced) | OVH Data Center United States (US) East, United States (US) West | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| SentinelOne | 444 Castro Street, Suite Mountain View, CA 94041, United States | Cyber Security: Endpoint Detection and Response (EDR) | Israel, United Kingdom, Japan, Singapore, Australia, USA, Czech Republic, Germany, Netherlands, France, Denmark. In support cases USA. | Data Processing Agreement (DPA) based on the EU standard contractual clauses. |
| Shred-it GmbH | Klausnerring 3, 85551 Kirchheim, Germany | Data carrier destruction | Germany | Data Processing Agreemen (DPA)) |
| TeamViewer Germany GmbH | Bahnhofsplatz 2 73033 Göppingen, Germany | Professional Services / Consulting Workplace Enterprise Support (ESC) | TeamViewer's master server infrastructure is located in Germany and Austria. Processing also at the customer's location (client). | Data processing agreement (DPA) |