Questback is currently engaging the following sub-processors to process personal data in its online service Essentials:
| Sub-processor | Address | Location | Purpose of processing | Mandatory service |
|---|---|---|---|---|
| Akamai Technologies GmbH | Parkring 29, 85748 Parching, Germany | EU | Content delivery network | Yes |
| Oracle Deutschland B.V. & Co. KG | Riesstraße 25, 80992 München, Germany | EU | Data hosting infrastructure | Yes |
| Oracle Norge AS | Vollsveien 2, 1326 Lysaker Norway | EU | Data hosting infrastructure | Yes |
| Record Consult GmbH | Richard-Byrd-Straße 35, 50829 Köln, Germany | EU | Technical consulting services | Yes |
| Link Mobility AS | Langkaia 1, 0150 Oslo, Norway | EU | SMS dispatching | Optional as requested by customer |
| DataGroup Data Center GmbH | Hanauer Landstraße 310, 60314 Frankfurt am Main, Germany | EU | Data hosting infrastructure | Yes |
| DataGroup Data Bremen GmbH | Mary-Somerville-Straße 8, 28359 Bremen, Germany | EU | Data hosting infrastructure | Yes |
| Questback AS | Bogstadveien 54, 0366 Oslo, Norway | EU | Provision of services and support services | Yes |
| Tivian XI GmbH (former Questback GmbH)* | Gustav-Heinemann-Ufer 72a, 50968 Köln, Germany | EU | Provision of services and support services | Yes |
| Tivian Ltd. (former Questback Ltd.)* | 77 Leadenhall Street, London EC3A 3DE, United Kingdom | UK | Provision of services and support services | Optional for EU customers |
| Questback OY | Keilaranta 1, 02150 Espoo, Finland | EU | Provision of services and support services | Yes |
| Questback AB | Sveavägen 59, 113 59 Stockholm | EU | Provision of services and support services | Yes |
| Questback Nederland BV | Currently: c/o Questback AS Bogstadveien 54, 0366 Oslo Norway From March 2022: Millennium Tower, Radarweg 29, 1043NX Amsterdam |
EU | Provision of services and support services | Optional for customers outside the Benelux (valid from May 2022 or earlier as agreed with customer) |
In case processing of personal data with any of the above listed sub-processor is conducted outside the EU, Questback relies on the Standard Contractual Clauses to ensure an adequate level of data protection, except for Oracle who maintains Binding Corporate Rules.
*Tivian entities have previously been part of the Questback Group where infrastructure, online services, professional services and associated support services are still to some extent shared between the companies.
