The Customer agrees that CLX may engage CLX Affiliate or third parties to process personal data in order to assist CLX to deliver the Services on behalf of the Customer (“Sub-processors”). CLX has or will enter into written agreement with each Sub-processor containing data protection obligations not less protective than those in this DPA to the extent applicable to the nature of the Services provided by such Sub-processor. If the Sub-processor processes the Services outside the EU/EEA, CLX shall ensure that the transfer is made pursuant to European Commission approved standard contractual clauses for the transfer of Personal Data which the Customer authorizes CLX to enter into on its behalf, or that other appropriate legal data transfer mechanisms are used.

The current Sub-processors are outlined in the table below and the Customer agrees and approves that CLX has engaged such Sub-processors to process personal data as set out in the list. The Customer may subscribe to notifications at the bottom of this page, and if the Customer subscribes, CLX shall provide notification of a new Sub-processor(s) before authorising any new Sub-processor(s) to process personal data in connection with the provision of the applicable Service.

CLX shall notify the Customer in advance of any intended changes concerning the addition or replacement of any Sub-processor during which period the Customer may raise objections to the Sub-processor’s appointment. Any objections must be raised promptly (and in any event no later than fourteen (14) days following CLX’s notification of the intended changes). Should CLX choose to retain the objected to Sub-processor, CLX will notify the customer at least fourteen (14) days before authorising the Sub-processor to process personal data and then the Customer may immediately discontinue using the relevant portion of the Services and may terminate the relevant portion of the Services. CLX will refund the Customer any prepaid fees covering the remainder of the term of such relevant portion of the Service following the effective date of termination and there will be no penalty on either party and for the avoidance of doubt, where any Sub-processor fails to fulfil its obligations under any sub-processing agreement or under applicable law CLX will remain fully liable to the Customer for the fulfilment of its obligations under the Data Protection Addendum.

Sub Processors

  • Sub Processor Trading NameSub-Processor Legal Entity, registration no. and addressGeographical Location of Data Processed or AccessedDescription and Purpose of Data Processing Types of Data ProcessedCategories of Data SubjectsTerms of data processing agreement
    Amazon Web Services (AWS)Amazon Web Services Inc.USA and EU
    • Provision of hardware, storage and network equipment for the provision of CLX Communications services
    • Analysing and statistical activities
    • Customer Information (AccountID, Contacts, Pricing, Balances, Usage Data, Credentials)
    • Communications transactions, logs and meta-data
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    SalesforceSalesforce.com Inc.USA
    • Provision of CRM and Marketing Platform to CLX
    • Technical Support including fault correction in accordance with Service Level Agreements (SLA)
    • Marketing activities on behalf of Data Controller (when expressly agreed with Data Controller)
    • Data cleansing, correction of corrupted data
    • Customer and Prospect Information (Contacts, Contracts, Pricing)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • For the duration of the Agreement between the Customer and CLX
    MicrosoftMicrosoft inc.Worldwide
    • Provision of Enterprise Network Access Control, Email, Storage to facilitate internal and external communications
    • Customer Information (AccountID, Contacts, Pricing, Balances, Usage Data)
    • Communications transactions, logs and meta-data
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    CLX Communications USACLX Communications Inc.USA
    • Services for the provision of Technical Support services
    • Customer Information (AccountID, Contacts, Pricing, Balances, Usage Data, Credentials)
    • Communications transactions, logs and meta-data
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    Atea Sverige ABAtea Sverige ABSweden
    • CLX SE Messaging Services ROW
    • CLX SE Information Services ROW
    • CLX SE Messaging Services US
    • CLX SE Messaging Services AU
    • CLX SE Information Services US
    • IMSI
    • Location Data
    • MSISDN
    • Message Content
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    CLX DK NetGroup A/SCLX DK NetGroup A/SDenmark
    • CLX DK_Messaging Gateway
    • CLX DK_Event Voting
    • CLX DK_Interactive Messaging Platform
    • CLX DK_CPH Flight subscription Service
    • MSISDN, Message content
    • Phone number
    • Photos
    • Transactions history
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    Cyxtera TechnologiesCyxtera TechnologiesUSA
    • CLX SE Messaging Services US
    • CLX SE Information Services US
    • IMSI
    • Location data
    • MSISDN
    • Message content
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    Google IncGoogle IncUSASinch Voice and Video Services
    • Display name
    • IP address
    • User name
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    IP-Only ABIP-Only ABSweden
    • CLX SE Messaging Services ROW
    • CLX SE Information Services ROW
    • CLX SE Messaging Services AU
    • IMSI
    • Location data
    • MSISDN
    • Message content
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    PubNub Inc.PubNub Inc.EU Central, EU West, Asia Pacific, US West, US EastSinch Voice and Video Services
    • Display name
    • IP address
    • User name
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    Savvis UK Ltd (CenturyLink)Savvis UK Ltd (CenturyLink)UK
    • CLX SE Messaging Services ROW
    • CLX SE Information Services ROW
    • CLX SE Messaging Services AU
    • IMSI
    • Location data
    • MSISDN
    • Message content
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    Symsoft ABSymsoft ABSweden
    • CLX SE Messaging Services ROW
    • CLX SE Information Services ROW
    • CLX SE Enterprise Messenger
    • CLX SE Messaging Services US
    • CLX SE Messaging Services AU
    • CLX SE Information Services US
    • IMSI
    • Location data
    • MSISDN
    • Message content
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • CLX´s own data processing agreement as defined in the Personal Data Protection provisions of the Agreement
    Symsoft AB MEASymsoft AB MEAUAE
    • Symsoft Support
    • Symsoft Managed Services
    • Message content
    • MSISDN
    • Phone number
    • Transactions history
    • IMSI
    • Location data
    • IP address
    • User name
    • Access rights (username/password)
    • Email address
    • Name
    • IMEI-numbers
    • Personal identification number
    • Employee ID
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    ZendeskZendeskUSA and EUSinch Voice and Video ServicesPhone Number
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives
    • Customer´s customers (communications information)
    • Customer´s employees (including Customer´s consultants) and Customer´s representatives