ANNEX IV: SUB-PROCESSORS

The Controller has granted the Processor general written authorisation to engage sub-

processors in accordance with Clause 3.7 of this DPA.

The controller has authorised the use of the following sub-processors:

1. Amazon Web Services, Inc. ("AWS")

Address: Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855

Luxembourg, AWS-Region: Frankfurt/ Europe

Contact person’s name, position and contact details: aws-EU-privacy@amazon.com

Description of the processing: Infrastructure and platform services, computing capacity, storage

space and database services in the AWS EU-Frankfurt Region (eu-central-1).

Processing takes place on the basis of: Order processing contract according to Art 28 DSGVO

2. Heroku / Salesforce, Inc

Address: Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA

Contact person’s name, position and contact details: Lindsey Finch, DPO,

privacy@salesforce.com. Description of the processing: Usage of Heroku private spaces

(region: Frankfurt). Infrastructure and platform services, computing capacity, storage

space and database services.

Processing is carried out on the basis of: Standard Contractual Clauses of the European

Commission

3. Paperform Pty. Ltd.

Address: 1/1 Prospect St, Leichhardt, NSW 2040, Australia

Contact person’s name, position and contact details: Maetzler Rechtsanwalts GmbH & Co KG,

Schellinggasse 3/10, 1010 Vienna, Austria

Description of the processing: Collection of additional data (relevant skills and certificates,

family status, visa status) through online forms to fulfil the purpose of our services. All data will

be saved on Localyze servers and be deleted on the Paperform server after 24h.

Processing is carried out on the basis of: Standard Contractual Clauses of the European

Commission

4. Intercom, INC.

Address: 101 15th St, San Francisco, CA 94103 USA

Contact person’s name, position and contact details: privacy@intercom.com

Description of the processing: Communication platform for direct interaction via chat with

website visitors. In the event of questions arising, Localyze can provide its users with prompt

assistance using this communication option.

Processing is carried out on the basis of: Standard Contractual Clauses of the European

Commission

5. Google Cloud EMEA Limited

Address: Google Cloud EMEA Limited,Velasco, Clanwilliam Place, Dublin 2,

Ireland Contact person’s name, position and contact details: data-protection-

office@google.com Description of the processing: Document storage (EU

region)

Processing takes place on the basis of: Order processing contract according to Art 28 DSGVO

6. StackOne Technologies Ltd.

Address:2 Communications Road, Newbury, Berkshire, England, RG19 6AB

Contact person’s name, position and contact details: Guillaume Lebedel, Co-Founder &

CTO Description of the processing: Integration layer for HRIS integrations

Processing takes place on the basis of: Order processing contract according to Art 28 DSGVO