Partners

optilyz Partners

optilyz GmbH (“optilyz”) uses certain subprocessors (including third parties, as listed below) to assist it in providing the optilyz service as described in the Terms & Conditions (“T&Cs”). Defined terms used herein shall have the same meaning as defined in the T&Cs.

What is a Subprocessor

A subprocessor is a third party data processor engaged by optilyz, who has or potentially will have access to or process Service Data (which may contain Personal Data). optilyz engages different types of subprocessors to perform various functions as explained in the tables below.

Due Diligence

optilyz undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed subprocessors that will or may have access to or process Service Data.

Process to Engage New Subprocessors

For all Customers who have executed optilyz’s standard DPA, optilyz will provide notice via this policy of updates to the list of subprocessors that are utilized or which optilyz proposes to utilize to deliver its services. optilz undertakes to keep this list updated regularly to enable its Customers to stay informed of the scope of subprocessing associated with the optilyz services.

Pursuant to the DPA, a Customer can object in writing to the processing of its Personal Data by a new subprocessor within thirty (30) days after updating of this policy and shall describe its legitimate reasons to object. If Customer does not object during such time period the new subprocessor(s) shall be deemed accepted.

If a Customer objects to the use of a subprocessor pursuant to the process provided under the DPA, optilyz shall have the right to cure the objection through one of the following options (to be selected at optilyz’s sole discretion):

1. optilyz will cease to use the subprocessor with regard to Personal Data;

2. optilyz will take the corrective steps requested by Customer in its objection (which remove Customers’s objection) and proceed to use the subprocessor to process Personal Data; or

3. optilyz may cease to provide or Customer may agree not to use (temporarily or permanently) the particular aspect of an optilyz Service that would involve use of the subprocessor to process Personal Data.

Termination rights, as applicable and agreed, are set forth exclusively in the DPA.

The following is an up-to-date list (as of the date of this policy) of the names and locations of optilyz subprocessors and content delivery networks (including third parties):

Infrastructure Subprocessors – Service Data Storage

optilyz owns or controls access to the infrastructure that optilyz uses to host Service Data submitted to the Services, other than as set forth below. Currently, the optilyz production systems for the Services are located in co-location facilities in Europe. The Customer’s Service Data subsequently remains in that region unless agreed between Customer and optilyz, but may be shifted among data centers within a region to ensure performance and availability of the Services. The following table describes the countries and legal entities engaged in the storage of Service Data by optilyz.

Entity Name Entity Type Entity Country
Amazon Web Services EMEA Sàrl Cloud Service Provider Luxembourg
MongoDB, Inc. Database Provider USA

Infrastructure Subprocessors – Service Data Storage

optilyz owns or controls access to the infrastructure that optilyz uses to host Service Data submitted to the Services, other than as set forth below. Currently, the optilyz production systems for the Services are located in co-location facilities in Europe. The Customer’s Service Data subsequently remains in that region unless agreed between Customer and optilyz, but may be shifted among data centers within a region to ensure performance and availability of the Services. The following table describes the countries and legal entities engaged in the storage of Service Data by optilyz.

Entity Name Entity Type Entity Country
Asendia Germany GmbH Postal Service Provider Germany
BWH GmbH Printer and Lettershop Germany
Central Mailing Services Ltd.  Lettershop United Kingdom
direct services Gütersloh GmbH Printer and Lettershop Germany
DPAG E-Post Solutions GmbH Postal Service Provider Germany
Deutsche Post Direkt GmbH Address Service Provider Germany
Jetmail BV Printer and Lettershop The Netherlands
OMS Online Mailing Service GmbH Lettershop Germany
Ottweiler Druckerei und Verlag GmbH Printer and Lettershop Germany
UNITED PRODUCTS GmbH Printer and Lettershop Germany

Content Delivery Networks

As explained above, optilyz’s services may use content delivery networks (“CDNs”) to provide the services, for security purposes, and to optimize content delivery. CDNs do not have access to Service Data but are commonly used systems of distributed services that deliver content based on the geographic location of the individual accessing the content and the origin of the content provider. Website content served to website visitors and domain name information may be stored with a CDN to expedite transmission, and information transmitted across a CDN may be accessed by that CDN to enable its functions. The following describes use of CDNs by optilyz’s Services.

CDN Provider Services Using CDN CDN Location Description of CDN Services
Amazon Web Services, Inc. All optilyz Services Global Public website content served to website visitors may be stored with Amazon Web Services, Inc., and transmitted by Amazon Web Services, Inc., to website visitors, to expedite transmission.