Appendix B

GleSYS Subprocessors

Version 2024.11.25

This list includes all of GleSYS subprocessors, which, depending on the service, can process personal data on behalf of GleSYS under a data processing agreement (“DPA”). GleSYS has signed Data processing agreements with all listed subprocessors.

Acronis

Company Name Acronis International GmbH
Geographical Localisation Rheinweg 9, 8200 Schaffhausen, Switzerland
Service(s) Licenses
Transfer of personal data to a third country Yes, the use of Acronis Services involves transferring and processing personal information.
Comment GleSYS only processes the email addresses used to register the licenses.

Atlassian

Company Name Atlassian. Pty Ltd
Geographical Localisation Level 6, 341 George Street, Sydney, NSW 2000, Australia
Service(s) Atlassian Statuspage
Transfer of personal data to a third country Yes, email address or phone number when actively signing up for updates.

Bacula

Company Name Bacula.org
Geographical Localisation London, England, United Kingdom
Service(s) Backup
Transfer of personal data to a third country No (local installation)
Comment Open Source Software

Broadcom

Company Name Broadcom, Inc.
Geographical Localisation 3421 Hillview Ave, Palo Alto, California, 94304 USA
Service(s) VMware, Licenses
Transfer of personal data to a third country No

Cisco

Company Name Cisco Systems, Inc.
Geographical Localisation 170 West Tasman Dr., San Jose, CA 95134 USA
Service(s) Network hardware, Licenses
Transfer of personal data to a third country No

Fortinet

Company Name Fortinet, Inc.
Geographical Localisation 909 Kifer Road, Sunnyvale, CA 94086 USA
Service(s) Network hardware, Licenses
Transfer of personal data to a third country No

Halon

Company Name Halon Security AB
Geographical Localisation Lilla Bommen 3, 411 04 Göteborg, Sweden
Service(s) Email service
Transfer of personal data to a third country No

Hewlett Packard Enterprise (HPE)

Company Name Hewlett Packard Enterprise Development LP
Geographical Localisation 1701 E Mossy Oaks Rd, Spring, TX 77389 USA
Service(s) Storage
Transfer of personal data to a third country No

Ceph

Company Name Ceph.io
Geographical Localisation Los Angeles, California, United States
Service(s) Storage
Transfer of personal data to a third country No (local installation)
Comment Open Source Software

Microsoft

Company Name Microsoft Sweden 1172 AB
Geographical Localisation Regeringsgatan 25, 111 53 Stockholm, Sweden
Service(s) Licenses, Ticketing system
Transfer of personal data to a third country No

Name SRS

Company Name Name SRS AB
Geographical Localisation Truckgatan 13, 442 40 Kungälv, Sweden
Service(s) Domains
Transfer of personal data to a third country No

NetApp

Company Name NetApp, Inc.
Geographical Localisation 3060 Olsen Drive, San Jose, CA 95128 USA
Service(s) Storage
Transfer of personal data to a third country No

Webroot by OpenText

Company Name Open Text Corporation
Geographical Localisation 385 Interlocken Crescent, Suite 800, Broomfield, CO 80021 USA
Service(s) Licenses, Software
Transfer of personal data to a third country Yes
Comment Webroot by OpenText is a cybersecurity program. You can find information about their privacy policy here: https://www.opentext.com/about/privacy

Pure Storage

Company Name Pure Storage, Inc.
Geographical Localisation 2555 Augustine Dr., Santa Clara, CA 95054 USA
Service(s) Storage
Transfer of personal data to a third country No

Supermicro

Company Name Super Micro Computer, Inc.
Geographical Localisation 980 Rock Avenue, San Jose, CA 95131, USA
Service(s) Server hardware
Transfer of personal data to a third country No

Veeam

Company Name Veeam Software, Inc.
Geographical Localisation 3000 Carillon Point Kirkland, Seattle, WA 98033 USA
Service(s) Backup
Transfer of personal data to a third country No