Legal
Sub-processors and DPA
Last updated at September 07, 2022 - 2:30 PM
Inspera has Data Processing Agreements, compliant with GDPR as well as other national data protection and privacy regulations, for Inspera Assessment service.
A Data Processing Agreement (DPA) between the Data Controller (customer organisation) and the Data Processor (Inspera) regulates how personal data is defined and processed, also covering all data processing by Third Parties.
All hosting, storage and processing of personal data on Inspera Assessment adheres to the General Data Protection Regulation (EU 2016/679) (“GDPR”).
Data Processing Agreements also regulate sharing of personal data. With the exception of sub-processors outlined in the Data Processing Agreement, we don’t disclose personal data to third parties.
| Sub-processor | Purpose | Personal data | Processing location | GDPR Transfer tool |
|---|---|---|---|---|
| Inspera AB Kungsbro Strand 15b, 112 23, Stockholm Sweden |
Subsidiary of Inspera AS acting on its behalf to provide service delivery and customer support. |
All personal data as described in Annex I. | EEA (Sweden) | n/a |
| Inspera ApS Inge Lehmanns gade 10, 7. 8000 Aarhus C. Denmark |
Subsidiary of Inspera AS acting on its behalf to provide service delivery and customer support. |
All personal data as described in Annex I. | EEA (Denmark) | n/a |
| Inspera UK Ltd. 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT England |
Subsidiary of Inspera AS acting on its behalf to provide service delivery and customer support. |
All personal data as described in Annex I. | UK | Adequacy Decision |
| Inspera Australia PTY Ltd. Level 11 1 Margaret Street, Sidney, NSW 2000 Australia |
Subsidiary of Inspera AS acting on its behalf to provide service delivery and customer support. |
All personal data as described in Annex I. | Australia | Standard Contractual Clauses (SCCs) |
| Inspera USA, Inc. 1209 Orange Street, City of Wilmington, County of New Castle, 19801, State of Delaware USA |
Subsidiary of Inspera AS acting on its behalf to provide service delivery and customer support. |
All personal data as described in Annex I. | USA | Standard Contractual Clauses (SCCs) |
| Platforma Akademia SH.P.K Rruga Rexhep Mala, Nr. 28A Prishtine Republic of Kosovo |
Subsidiary of Inspera AS acting on its behalf to provide service delivery and customer support. |
All personal data as described in Annex I. | EEA (Germany, for storage) Kosovo |
Standard Contractual Clauses (SCCs) |
| SA Tech Software India Private Limited Off. No. D-6030, 6th Floor, Sr. No. 207, Solitaire Bus Hub, Viman Nagar, Pune 411014 India |
Provision of development services (software build and testing in non- productive environments) and support on potential live incidents. | All personal data as described in Annex I. | India | Standard Contractual Clauses (SCCs) |
| Tomi Ren EOOD 33 Shesti Septemvri Street, 6th floor, Sofia 1000 Bulgaria |
Provision of development services in terms of building and piloting a professional 2nd line Support Service. |
All personal data as described in Annex I. | Bulgaria | n/a |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxembourg Contact Web Form |
Hosting of infrastructure (IaaS) and services (SaaS) that Inspera Assessment is based on and provided through. |
All personal data stored in the Inspera Assessment solution. | EEA (Luxembourg, Ireland, and Germany) and USA |
Standard Contractual Clauses (SCCs) and EU-US Data Privacy Framework |
| TrackJS, Inc. 215 Pine Street West Stillwater, MN 55082 USA hello@trackjs.com |
SaaS solution used to troubleshoot client-side errors of the test-player. |
Inspera IP address as proxy of the IP address of the candidate’s client device. |
USA | Standard Contractual Clauses (SCCs) |
| OverOps Inc. 5950 Hazeltine National Dr. Suite 620, FL 32822 USA hello@overops.com |
SaaS solution used to monitor and troubleshoot the Inspera Assessment platform and solution. |
Test-takers client IP address stored in backend logfiles of Inspera’s platform. | USA | Standard Contractual Clauses (SCCs) |
| Zendesk Inc. 989 Market St San Francisco, CA 94103 USA Contact email |
SaaS solution used for service desk and customer support. Support tickets may include personal data about test takers relevant for a support case. |
Any personal data provided by the Controller in service tickets. |
USA | EU-US Data Privacy Framework |
| Atlassian PTY Ltd. Level 6, 341 George Street, Sydney, NSW 2000 Australia Contact information |
SaaS office productivity suite used for internal and external communications and collaboration. |
Any personal data provided by the Controller for provision of products and services and allow project collaboration. |
Australia and USA |
Standard Contractual Clauses (SCCs) and EU-US Data Privacy Framework |
| Google Cloud EMEA Limited 70 Sir John Rogerson’s Quay, Dublin 2 Ireland Contact page |
SaaS office productivity suite used for internal and external communications and collaboration. |
Any personal data provided by the Controller via email or in document format. |
EEA (Ireland) and USA |
EU-US Data Privacy Framework |
| Microsoft Corporation 300 Deschutes Way SW STE 208 MC-CSC1, 98501, Tumwater, US-WA USA Contact page |
SaaS office productivity suite used for internal and external communications and collaboration. |
Any personal data provided by the Controller via email or in document format. |
EEA (Ireland) and USA |
EU-US Data Privacy Framework |