What is a Third-Party Subprocessor:

A subprocessor is a vendor Maropost uses to process data on behalf of our customers, who are the data controllers of that data.

Maropost’s Process for Contracting with Third-Party Subprocessors

Maropost requires its subprocessors to satisfy equivalent obligations as those required from Maropost (as a Data Processor) as outlined in Maropost’s Data Processing Agreement (DPA), including but not limited to the requirements to:

• process personal data following data controller’s (i.e., Customer’s) documented instructions (as communicated in writing to the relevant subprocessor by Maropost);
• in connection with the subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, under applicable data protection laws;
• promptly inform Maropost about any security breach; and
• cooperate with Maropost to address requests from data controllers, data subjects, or data protection authorities, as applicable.

Except for as provided below, Maropost owns or controls access to the infrastructure that hosts real-time and stored personal data (should the Customer choose to store such content, e.g., recordings and transcripts). Personal data may be shifted among data centers within a region to ensure Maropost’s performance and availability. Maropost also works with the listed service subprocessors below to provide the noted functionality.

The following table describes the countries and legal entities engaged in the processing and storage of personal data by Maropost acting as a data processor on behalf of its customers, the data controllers.