R-050-004 Controllers, processors and subprocessors
- Comes from: template
T-050-004 Controllers, processors and subprocessors
Purpose
In accordance with article 30.2 of Regulation (EU) 2016/679, of April 27, 2016 (GDPR), we must create and keep updated a registry of the treatment activities carried out under our responsibility. To that effect, we conduct a formal, documented, comprehensive and accurate record of processing activities based on a data mapping exercise that is reviewed regularly.
Processors
Data processors are third-party companies that handle personal data according to the instructions provided by us, the data controller. They perform this processing on our behalf, under our direct authority.
The processors of the data that we process as controllers are:
| Company name | ID | Processing activity | Description |
|---|---|---|---|
| Audens Legal, S.L.P. | B85808954 | All (they are our DPO) | DPO |
| Amazon Web Services EMEA SARL | B186284 | PA-005 PR API, PA-011, PA-006 PR Web app, PA-011 CO Fine tuning | Cloud provider |
| Coben Business Group, SL | B02875094 | PA-002 CO Employees, PA-008 CO Sales | Financial advisors |
| LAWESOME LEGAL SERVICES | B95716486 | PA-002 CO Employees, PA-008 CO Sales | General law inquiries, usually about contracts |
| Everyday Software, SL | B66854530 | PA-002 CO Employees, PA-003 CO Internships, PA-004 CO Workhours | Suppliers of platform to manage human resources |
| HubSpot, Inc | - | PA-008 CO Sales | Suppliers of CRM |
| LinkedIn Ireland Unlimited Company | IE9740425P | PA-010 CO Inbound marketing | Suppliers of platform to interact with customers |
| Holded Technologies SL | B66543778 | PA-008 CO Sales | Suppliers of platform for financial management |
| Slack | - | PA-002 CO Employees | Suppliers of internal messaging platform for employees |
| Google Spain, S.L.U. | B63272603 | PA-002 CO Employees, PA-008 CO Sales | Suppliers of platform for documenta management |
Controllers
Data controllers are entities on whose behalf we process personal data. They define the means and purposes of data processing, and we act as data processors under their instruction.
The controllers whose data we process as processors are:
| Company name | ID | Processing activity |
|---|---|---|
| Instituto de Investigación Sanitaria Biocruces Bizkaia | B186284 | PA-006 PR Web app |
| Clínica Dermatológica Dra Garay | 14924711B | PA-006 PR Web app |
| Área Dermatológica Iderma SL | B65713836 | PA-006 PR Web app |
| Elche Crevillente Salud, SAU | A97858633 | PA-006 PR Web app |
| Torrejón Salud, SA | A85740595 | PA-006 PR Web app |
| Hospital Universitario Puerta de Hierro | Q2877005E | PA-006 PR Web app |
| Visiba Group AB | 556967-9813 | PA-005 PR API |
| DKV Servicios SA | A99007205 | PA-005 PR API |
| H. U. San Roque | A35064658 | PA-006 PR Web app |
| Pierre Fabre SA | 662.006.170 12 | PA-005 PR API |
| Terapias Médicas Domiciliarias SLU | B45395993 | PA-006 PR Web app |
| Cigna Life Insurance Company of Europe | W0021205J | PA-005 PR API |
| Bella Aurora Labs Sa. | A58303462 | PA-006 PR Web app |
| Lilly SAU | A28058386 | PA-006 PR Web app |
| Boehringer Ingelheim España SA | A08006470 | PA-005 PR API |
| Sanitas S.A de Seguros | A28037042 | PA-005 PR API |