We inform administrators who entrust us with personal data (or who process data at their request and who further entrust us with such processing) about the fact that we further entrust the data to subprocessors. We indicate these entities in the annex to the PPDO agreement
We have signed appropriate PPDO agreements with all entities listed below.
All entities were checked for formal aspects, as well as for technical and organizational security, thus examining the compliance of data processing by these entities with the requirements of the GDPR. We perform periodic checks in the form of, for example, detailed verification surveys. The entire process is carried out under the supervision of our DPO, who checks the completed verification questionnaires. This gives us the basis to continue cooperation as long as the completed surveys receive a positive recommendation from the IOD.
Currently, our further processors are:
Name of the company/institution: Asseco Cloud Sp. z o. o.
Address: ul. Królowej Korony Polskiej 21, 70-486 Szczecin
Has a further entrustment agreement been concluded? YES
Does a further entrustment agreement allow the Processor to entrust data to the extent indicated in this Agreement? YES
Purpose of processing (subject of cooperation): Asseco provides servers on which the Webankieta platform is installed - Asseco provides hosting services.
Name of the company/institution: Hostersi sp. z o.o.
Address: ul. Jankowicka 7; 44-200 Rybnik
Has a further entrustment agreement been concluded? YES
Does a further entrustment agreement allow the Processor to entrust data to the extent indicated in this Agreement? YES
Purpose of processing (subject of cooperation): Hostersi provide administrative care services. The company installs and monitors operating systems, necessary software and databases. He has access to the database and the Personal Data collected there - and thus processes them.
Name of the company/institution: TestArmy CyberForces Sp. z o.o.
Address: ul. Petuniowa 9/5, 53-238 Wrocław
Has a further entrustment agreement been concluded? YES
Does a further entrustment agreement allow the Processor to entrust data to the extent indicated in this Agreement? YES
Purpose of processing (subject of cooperation): TestArmy performs penetration tests of the Webankieta platform once a month in order to find security vulnerabilities. If a security hole is found, TestArmy is theoretically able to gain access to data collected on servers and thus process it.
Name of the company/institution: Cloudflare, Inc.
Address: 101 Townsend St., San Francisco, CA 94107
Has a further entrustment agreement been concluded? YES
Will personal data be transferred to a third country that meets appropriate guarantees pursuant to Art. 45 or 46 GDPR? YES
Purpose of processing (subject of cooperation): The cooperation is aimed at improving network traffic security, better protection of transmitted data against threats and ensuring the availability and stability of the portal regardless of traffic spikes or attacks (e.g. DDoS). Cloudflare services through a global content delivery network (CDN) can help improve performance in the form of reduced page load times, which will translate into a better user experience.