To provide the Service, ZoppaBox uses the sub-processors listed below. They process personal data only to the extent necessary for their task. This overview belongs to Article 8 of the Data Processing Agreement and Article 10 of the Terms and Conditions.
| Service provider | Purpose | Processing location |
|---|---|---|
| Google Firebase / Google Cloud Google Cloud EMEA Ltd. (Ireland) |
PurposeDatabase, file storage and hosting of the application | Processing locationEU (europe-west) |
| Firebase Authentication Google Cloud EMEA Ltd. (Ireland) |
PurposeLogin, account management and sending system emails, such as verification and password reset | Processing locationWorldwide, including the US |
| Vercel Vercel Inc. (US) |
PurposeHosting of the website and relaying push notifications | Processing locationWorldwide, including the US |
| Expo 650 Industries, Inc. (US) |
PurposeSending push notifications to the app | Processing locationUS |
| Apple Push Notification service and Firebase Cloud Messaging Apple Inc. and Google LLC (US) |
PurposeDelivering push notifications to iOS and Android devices | Processing locationWorldwide, including the US |
| Stripe Stripe Payments Europe Ltd. (Ireland) |
PurposeProcessing payments for tickets and donations | Processing locationEU, with possible transfer to the US |
| Sentry Functional Software, Inc. (US) |
PurposeError monitoring and diagnosing technical problems | Processing locationUS |
Where personal data are processed outside the European Economic Area, ZoppaBox ensures a valid transfer mechanism in accordance with the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Other service providers for the website
For statistics on the use of the zoppabox.com website, ZoppaBox uses Google Analytics (Google Ireland Ltd.). This does not concern data that ZoppaBox processes on behalf of Associations. More information can be found in the Privacy Statement.
Changes
ZoppaBox keeps this overview up to date. ZoppaBox informs Associations in advance of material additions or replacements of sub-processors, so that they can object on reasonable privacy grounds.
Back to the homepage