Sub-processors & Data categories

(version Feb 2019)

Access to this webpage is available only through i) the Customer admin side of the Showpad Service or, ii) upon invitation by a Showpad collaborator. The Content of this page is therefore SHOWPAD CONFIDENTIAL and only to be used within the organisation for which it has been made available.

This information is provided in respect of the Data Processing Agreement, which is available for self-execution or consultation here.

The Following “Sub-Processors” and “Categories of personal data” are involved in the Showpad Service:

  • Core Sub-processors

Core Sub-processors are sub-processors Showpad uses within its Service that are key to the functioning of that Service and whithout whom Showpad cannot guarantee the functionning of the Showpad Service. The Following Core-Subprocessors are involved:



Showpad EU Affiliates
HQ Address See https://www.showpad.com/company/contact-us
Service description Support for the Solution (if and when required) by Showpad collaborators
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing See address
Transfer outside of EEA/method of transfer: N/A
Categories of Personal Data Processed A1–A13, U1-U13, P1-P7
Duration of Processing for the period as required to provide the support
Optional? No. Part of the core functionality
Showpad Inc.
HQ Address See https://www.showpad.com/company/contact-us
Service description Support for the Solution (if and when required) by Showpad collaborators
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing See address
Transfer outside of EEA/method of transfer:
  • EU- US Privacy Shield (link); and
  • EU Standard Contractual clauses
Categories of Personal Data Processed A1–A13, U1-U13, P1-P7
Duration of Processing for the period as required to provide the support
Optional? No. Part of the core functionality
Microsoft Azure
HQ Address 1, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Service description Cold storage backup
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing Region Microsoft Azure Germany
Transfer outside of EEA/method of transfer: N/A
Categories of Personal Data Processed A1–A13, U1-U13, P1-P7
Duration of Processing Until removed from the Showpad backup instance in line with the applicable Showpad backup schemes following removal from the primary/secondary environment
Optional? No. Part of the core functionality
Amazon Web Services (EU)
HQ Address 410 Terry Avenue North, Seattle, WA 98109, USA
Service description Primary & Secondary data centre services – hosting services
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing Amazon EU Region (data centres in London, Paris, Frankfurt)
Transfer outside of EEA/method of transfer: N/A
Categories of Personal Data Processed A1–A13, U1-U13, P1-P7
Duration of Processing Until removed by Showpad or the Authorised Representative from the primary environment and as synchronised to the other 2 secondary environments.
Optional? No. Part of the core functionality
Sendgrid Inc.
HQ Address 1801 California Street, Suite 500, Denver, CO 80202, USA
Service description SMTP gateway service for any User & Admin related email communications generated from within the Showpad Platform (e.g. invitations to the Showpad platform, notifications of actions of the Prospect, …)

REMARK: The following SMTP gateway service may be de-activated / re-activated:

  • Sharing of linked assets with Prospects via email generated from within the Showpad Platform (webapp as well as mobile apps) through the email functionalities of the Showpad Platform.
  • Prospect related email communications generated from within the Showpad Platform through the Shared Spaces functionality (e.g. invitations to the Shared Space, notifications from the Shared Space, …).
  • be advised: This may involve the activation/deactivation of the Shared Spaces functionality
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing several US data centres
Transfer outside of EEA/method of transfer:
  • EU- US Privacy Shield certified (link); and
  • EU Standard Contractual clauses
Categories of Personal Data Processed U2, U8 (email event stats)
Duration of Processing
  • message activity/metadata (incl. as opens and clicks) for 30 days
  • bounce messages and spam reports indefinitely
  • minimal random content samples for 61 days
Optional? No. Part of the core functionality
Box Inc. / Box.com (UK) Ltd.
HQ Address
  • Box Inc: 900 Jefferson Ave Redwood City, CA 94063, USA
  • Box.com (UK) Ltd.: 14-15th Floors, White Collar Factory, 1 Old Street Yard, London, EC1Y 8AF, UK
Service description Boxview file conversion functionality turning office files (e.g. text editor files, presentation files, …) into a pdf format for enabling viewing the converted files through the Solution.
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing several data centres worldwide
Transfer outside of EEA/method of transfer:
Categories of Personal Data Processed A11, U11
Duration of Processing Time necessary to have Processed and finalise the conversion of the respective file with automatic and immediate expunging of the data
Optional? No. Part of the core functionality
DataBricks Inc.
HQ Address 160 Spear Street, 13th Floor, San Francisco, CA 94105, USA
Service description Internal visualization of general/aggregate analytics generated from the Apache Spark powered unified analytics platform locally running on the Showpad AWS platform.
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing Region Amazon Ireland
Transfer outside of EEA/method of transfer: N/A
Categories of Personal Data Processed A8, A11 (transcription / file description), U8, U11 (transcription / file description), P4
Duration of Processing For the duration of the specific view as created
Optional? No. Part of the core functionality
Remark applicable as of Winter Release March 2019
Pendo.io
HQ Address Pendo Headquarters, 150 Fayetteville St., Suite 1400, Raleigh, North Carolina 27601, USA
Service description General/aggregate usage analytics for the Solution in order to to analyze and improve the Showpad Service
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing Google Cloud US
Transfer outside of EEA/method of transfer:
  • EU- US Privacy Shield (link); and
  • EU Standard Contractual clauses
Categories of Personal Data Processed A8, U8, P4
Duration of Processing Unless manually done sooner, data will be automatically removed from Pendo starting 90 days after a subscription is cancelled
Optional? No. Part of the core functionality
Remark applicable as of Winter Release March 2019
  • Feature Dependent Sub-processors

Feature dependent Sub-processors are sub-processors that offer a certain functionality that is either not present in all versions of the Showpad Service, either are optional (and thus can be switched off). The Following feature dependent Sub-Processors are involved:



Amazon Web Services (CDN - US optionality)
HQ Address 410 Terry Avenue North, Seattle, WA 98109, USA
Service description CDN (Content Delivery Network)
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing Amazon US East Region (Ohio, Virginia)
Transfer outside of EEA/method of transfer:
  • EU-US privacy shield certified (Link); and
  • EU Standard Contractual clauses
Categories of Personal Data Processed A1–A13, U1-U13, P1-P7
Duration of Processing Until removed by Showpad or the Authorised Representative from the primary environment and as synchronised with the CDN Data Centre.
Optional? Yes. Customer may – at its specific request – choose to deactivate/re-activate this function by contacting Showpad.
Google Ireland ltd.
HQ Address Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Service description Google cloud platform speech to text API: Transcription of video files for search within video content
Applicable to what Showpad service? Showpad Content / Showpad Training and Coaching
Location of processing Europe West 3 (Frankfurt)
Transfer outside of EEA/method of transfer: N/A
Categories of Personal Data Processed A11 (video files), U11 (video files)
Duration of Processing up to 180 days from the instruction to remove the data
Optional? Yes. Customer may – at its specific request – choose to activate/deactivate this function by contacting Showpad
Cloud Elements Inc.
HQ Address 3858 Walnut Street #235, Denver, Colorado 80205
Service description Middleware provider connecting to common cloud applications (see https://cloud-elements.com/unified-apis/  )
Location of processing Amazon EC2 Ireland
Transfer outside of EEA/method of transfer: N/A
Categories of Personal Data Processed
  • Middleware to cloud storage applications: A11, U11
  • Middleware to CRM applications: A1, A2, A10, U1, U2, U10, P1, P2
  • Middleware to Marketing Automation applications: P1, P2, P8
Duration of Processing
  • Request/response body not logged and retained
  • Request/response metadata: logged and retained for 180 days (URL, httpmethod, timestamp, etc.)
  • Webhook and polled event / Formula execution data: retained for 3 days
Optional? Yes. Customer may – at its specific request – choose to activate/deactivate this function by contacting Showpad
  • Categories of Personal Data Processed

The Showpad Service processes the following personal data:



Administrator
REF. PERSONAL DATA PERSONAL DATA TYPE OF DATA STORED/PROCESSED IN SHOWPAD.BIZ
  (Direct) (Indirect)  
A1 Yes Name (First Name, Last Name)
A2 Yes

Profile info (e.g. email address, profile photo, telephone number)

A3 No Yes password
A4 No Yes Role
A5 No Yes Device information (which device, which OS, which version of the Showpad app)
A6 No Yes account creation date
A7 No Yes last content update
A8 No Yes user statistics (sessions, in app views, shares, channel subscriptions, content interactions (= n° of openings, time of opening; duration of use))
A9 maybe Yes connected calendars
A10 maybe Yes CRM data
A11 maybe maybe Customer Data
A12 maybe Yes IP addresses
A13 maybe maybe Admin Announcements to the channels
User
REF. PERSONAL DATA PERSONAL DATA TYPE OF DATA STORED/PROCESSED IN SHOWPAD.BIZ
  (Direct) (Indirect)  
U1 Yes Name (First Name, Last Name)
U2 Yes

Profile info (e.g. email address, profile photo, telephone number)

U3 No Yes password
U4 No Yes Role
U5 No Yes Device information (which device, which OS, which version of the Showpad app)
U6 No Yes account creation date
U7 No Yes last content update
U8 No Yes user statistics (email stats, sessions, in app views, shares, channel subscriptions, content interactions (= n° of openings, time of opening; duration of use; content downloaded or not, conversation analytics))
U9 maybe Yes connected calendars
U10 maybe Yes CRM data
U11 maybe maybe Customer Data
U12 maybe Yes IP addresses
U13 maybe maybe Chat content
Prospect
REF. PERSONAL DATA PERSONAL DATA TYPE OF DATA STORED/PROCESSED IN SHOWPAD.BIZ
(Direct) (Indirect)
U1 Yes Name (First Name, Last Name)
U2 Yes

Profile info (e.g. email address, profile photo, telephone number)

U3 No Yes password
U4 No Yes prospect statistics (email stats, visits, content viewed, downloads, re-shares, moment of activity; content downloaded or not; platform interactions, device type/info)
U5 maybe Yes IP addresses
U6 No Yes Geolocation
U7 maybe maybe Chat content
U8 maybe maybe Marketing Automation data