Sub-Processors

as of 15th of January 2024

oculavis currently supports the following sub-processors with the appropriate technical and organizational security measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws. Further information relating to sub-processor security measures can be found via the external links below.

1. Name of the sub-processer

Microsoft Deutschland GmbH, Germany

1.1 Address of the sub-processer

Microsoft Deutschland GmbH
Walter-Gropius-Straße 5
80807 München
Germany

1.2 Task of the sub-processer
Which personal data of the client does the sub-processer process/have access to and for what reasons?

1.2.1 Server hosting of the software platform oculavis SHARE

Hosting takes place exclusively in the European legal area. The server location is typically Amsterdam (configuration: Microsoft Azure / Europe Region West, Netherlands, Amsterdam). A separate oculavis SHARE server is used for each customer on a dedicated Azure Virtual Machine (VM) instance.

1.2.2 Optional feature of oculavis SHARE: Microsoft Azure Notification Hub is used exclusively for sending push notifications on smartphones (Android, iOS).

We use different push notifications, for example for incoming calls, chat messages or newly created cases. User IDs are used as identifiers, which cannot be linked to personal data by Microsoft Azure (username, etc.). Thus, personalized tracking of employee actions is not possible. For sending push notifications to smartphones, Google uses the Google Firebase service and Apple uses the Apple Push Notification service (APNs).

The data privacy policy for Microsoft Azure, which contains the EU standard contractual clauses on data protection, can be requested at privacy@oculavis.de.

1.3 Data Protection Officer
Name and contact details

Microsoft Ireland Operations Limited
Attn: Data Protection Officer
One Microsoft Place, South County Business Park
Leopardstown, Dublin 18
Ireland
Telephone: +353 (0) 1 295 3826

1.4 Place, where the sub-processor processes the data

Europe Region West, Netherlands, Amsterdam

1.5 Does the sub-processor use any other "third-party sub-processors"?

See Microsoft Online Service Terms (January 2020):
https://www.microsoft.com/licensing/docs/view/licensing-use-rights?rtc=1

2. Name of the sub-processer

Amazon Web Services Germany GmbH

2.1 Address of the sub-processer

Amazon Web Services GmbH
Krausenstr. 38
10117 Berlin
Germany

2.2 Task of the sub-processer
Which personal data of the client does the sub-processer process/have access to and for what reasons?

2.2.1 Hosting of STUN/TURN servers to support communication

Only forwarding of encrypted and integrity-protected video streams. The STUN/TURN servers are operated by oculavis GmbH on AWS cloud instances worldwide. There is no logging or storage of activities, in particular, no recording of user activities (e.g. which IP has made a video call with which other IP). Access to the STUN/TURN servers is generally only permitted by oculavis administrators for maintenance activities and all access is logged by name.

The data protection guidelines for AWS which contain the EU standard contractual clauses on the subject of data protection, can be requested via privacy@oculavis.de.

2.3 Data Protection Officer
Name and contact details

See https://aws.amazon.com/ de/compliance/gdprcenter/ – No specific contact person is given.

2.4 Place, where the sub-processor processes the data

Worldwide

2.5 Does the sub-processor use any other "third-party sub-processors"?

See AWS GDPR Data Processing:: https://aws.amazon.com/de/compliance/gdpr-center/

3. Name of the sub-processer

Deutsche Telekom AG in cooperation with T-Systems International GmbH

3.1 Address of the sub-processer

Deutsche Telekom AG
Friedrich-EbertAllee 140
53113 Bonn
Germany

T-Systems International GmbH
Hahnstraße 43d
60528 Frankfurt am Main
Germany

3.2 Task of the sub-processer
Which personal data of the client does the sub-processer process/have access to and for what reasons?

3.2.1 Server hosting of the software platform oculavis SHARE

Hosting takes place exclusively in the German legal area. The server location is typically Biere (redundant location is Magdeburg), Germany. A separate oculavis SHARE server is used for each customer on a dedicated OTC Virtual Machine (VM) instance.

The data protection guidelines for T-Systems OTC can be requested via privacy@oculavis.de.

3.3 Data Protection Officer
Name and contact details

Dr. Claus D. Ulmer
Friedrich-Ebert-Allee 140
53113 Bonn
Germany
datenschutz@telekom.de and gdpr@telekom.de

3.4 Place, where the sub-processor processes the data

Germany

3.5 Does the sub-processor use any other "third-party sub-processors"?

All Telekom sub-processors can be requested via gdpr@telekom.de.

Sub-Processors

Sub-Processors

1. Name of the sub-processer

1.1 Address of the sub-processer

1.2 Task of the sub-processer Which personal data of the client does the sub-processer process/have access to and for what reasons?

1.2.1 Server hosting of the software platform oculavis SHARE

1.2.2 Optional feature of oculavis SHARE: Microsoft Azure Notification Hub is used exclusively for sending push notifications on smartphones (Android, iOS).

1.3 Data Protection Officer Name and contact details

1.4 Place, where the sub-processor processes the data

1.5 Does the sub-processor use any other "third-party sub-processors"?

2. Name of the sub-processer

2.1 Address of the sub-processer

2.2 Task of the sub-processer Which personal data of the client does the sub-processer process/have access to and for what reasons?

2.2.1 Hosting of STUN/TURN servers to support communication

2.3 Data Protection Officer Name and contact details

2.4 Place, where the sub-processor processes the data

2.5 Does the sub-processor use any other "third-party sub-processors"?

3. Name of the sub-processer

3.1 Address of the sub-processer

3.2 Task of the sub-processer Which personal data of the client does the sub-processer process/have access to and for what reasons?

3.2.1 Server hosting of the software platform oculavis SHARE

3.3 Data Protection Officer Name and contact details

3.4 Place, where the sub-processor processes the data

3.5 Does the sub-processor use any other "third-party sub-processors"?

1.2 Task of the sub-processer
Which personal data of the client does the sub-processer process/have access to and for what reasons?

1.3 Data Protection Officer
Name and contact details

2.2 Task of the sub-processer
Which personal data of the client does the sub-processer process/have access to and for what reasons?

2.3 Data Protection Officer
Name and contact details

3.2 Task of the sub-processer
Which personal data of the client does the sub-processer process/have access to and for what reasons?

3.3 Data Protection Officer
Name and contact details