Trust Center

Sub-processors engaged by Connective

Contact Connective DPO Office

Sub-processor listing

As indicated in our Data Processing Agreement (“DPA”), Connective engages certain Sub-processors to assist in the performance of the (license) agreement between Connective and its Clients[1] . The terms and definitions used in this document (“Sub-processor Listing”) shall have the same meaning as defined in Connective’s License Terms and Conditions (“License Terms and Conditions”).

[1] By default such license agreement between Connective and the Client is named “License Terms and Conditions”.

What is a Sub-processor?

A Sub-processor is a third-party data processor engaged by Connective who has or potentially will have access to or process Personal Data in respect of the performance of the License Terms and Conditions.

Connective engages different types of Sub-processors to perform various functions as explained below. Such services provided by our Sub-processors are essential for making available all functionalities in our Products.

Contractual Safeguards

Connective executes with each Sub-processor a data processing agreement and requires its Sub-processors to satisfy equivalent obligations as those required from Connective (as a Data Processor towards its Clients) as set forth in Connective’s DPA, including but not limited to:

Digital Transaction Management

Process Personal Data only in accordance with documented instructions (as communicated in writing to the relevant Sub-processor);

Digital Transaction Management

In connection with their sub-processing activities, Sub-processors may only engage personnel which is reliable and subject to a contractually binding obligation to observe confidentiality, data privacy and security, to the extent applicable and pursuant to the applicable data protection laws;

Digital Transaction Management

Provide regular training in security and data protection to personnel to whom they grant access to Personal Data;

Digital Transaction Management

Implement and maintain appropriate technical and organizational measures;

Digital Transaction Management

Promptly inform Connective about any actual or potential security breach; and

Digital Transaction Management

Cooperate with Connective in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.

digitale handtekeningen voor Microsoft Dynamics

Process for Engaging New Sub-processors

Clients who executed Connective’s standard DPA will be notified by Connective via the procedures included in this policy in case the Sub-processor Listing is being updated.

Connective undertakes to keep this Sub-processors Listing updated regularly to enable its Clients to stay informed of the scope of sub-processing activities associated with the Connective Products.

In the event a new material Sub-processor is onboarded by Connective in respect of the Products the Client is using, the Client will be notified within reasonable timing before such new Sub-processor will have access to the Client’s Personal Data. A notification will be send to the Client’s contact person indicated in the DPA, and the present Sub-processing Listing will be updated (and made available for online access).

Each Client shall have the right to object to the engagement of a new Sub-processor by Connective on reasonable grounds and by giving Connective’s DPO Office written notice of such objection. In this case Connective and the Client shall discuss in good faith to find a solution acceptable for both parties.

Infrastructure Sub-processors – Data Storage and Hosting

Currently, the Connective production systems used for hosting data in respect of the Connective Products are located in co-location facilities in Europe, and in the infrastructure of the Sub-processor listed below.

Entity Name
Entity Type
Entity Country
Subcontractors Connective  Microsoft Azure

Subcontractors Connective  Microsoft Azure

Cloud Service Provider

Cloud Service Provider

The Netherlands

Ireland

Product Specific Sub-processors

Connective works with certain third parties to provide specific functionalities within the Connective Products. These third parties are the Sub-processors indicated below[2] . In order to provide the relevant functionality these Sub-processors might access Personal Data. The processing activities performed by such Sub-processors is limited to the Products in scope as set out below.

[2] This Sub-processor Listing includes all material Sub-processors which Connective engages for the functioning of its Products. Non-material Sub-processors (e.g. freelance support staff or IT developers) are not listed.

Entity Name
Purpose
Product(s)
Entity Country
Certifications
Subcontractors Connective  CM Telecom

SMS Gateway
Sending SMS messages

eSignatures

The Netherlands

ISO 27001, ISO 9001

Subcontractors Connective  iDIN

Identification via the Dutch iDIN Scheme

eSignatures
Identity Services

The Netherlands

Subcontractors Connective  itsme®

Identification, authentication and e-signing

eSignatures
Identity Services

Belgium

ISO 27001, QTSP

Subcontractors Connective  Tripolis

Email gateway
Mass mailing service provider

eSignatures
Identity Services
Smart Documents

The Netherlands

ISO 27001, ISO 9001

Contact our DPO Office

In case you have any further questions, our DPO Office is available for you.