Spring til indhold
ShopAssistShopAssist forside

Underdatabehandlere

De virksomheder, COEC bruger til at drive ShopAssist, hvad de behandler, og hvor. Vi varsler hver ny underdatabehandler 30 dage i forvejen.

Indsigelser

Ejere, administratorer og sikkerhedskontakter i organisationer får en e-mail 30 dage før, en ny underdatabehandler tilføjes, eller en eksisterende ændres. Du kan gøre indsigelse i den periode ved at skrive til privacy@coec.dk. For underdatabehandlere til administreret AI kan du skifte til din egen AI-nøgle; ellers kan du opsige den berørte tjeneste.

Din egen AI-udbyder, dit helpdesk og dine webhook-endpoints er ikke vores underdatabehandlere: De modtager data på din instruks under din aftale med dem.

Listen nedenfor er på engelsk, som er den bindende version.

Nuværende underdatabehandlere

Nuværende underdatabehandlere
UnderdatabehandlerTjenestePersonoplysningerBehandlingsstedOverførselsgrundlagGælder forSiden
Hetzner Online GmbH (Germany)Compute, dedicated database server, object storage, backup repository 1 (separate project), uptime monitoring VMAll service data
  • Falkenstein, Germany (service and backups)
  • Helsinki, Finland (uptime monitoring only, no personal data)
EEAAll plans
Scaleway SAS (France)Transactional email: transcripts, one-time codes, back-in-stock alerts, double opt-in, action confirmations, merchant notificationsRecipient address, email content
  • Paris, France
EEAAll plans
Scaleway SAS (France), Object Storage fr-parEncrypted backup repository 2Encrypted database backups
  • Paris, France
EEAAll plans
Functional Software, Inc. d/b/a Sentry (USA)Error monitoring in the EU data region (Frankfurt)Scrubbed error context: pseudonymous ids and request paths. No request bodies, no IP addresses
  • Frankfurt, Germany
  • Some account metadata in the United States
SCCs (Module 3) and the EU–US Data Privacy Framework where certifiedAll plans
Microsoft Ireland Operations Ltd (Azure OpenAI, EU Data Zone deployments only)Managed AI, primary providerConversation content and tool results sent for generation
  • EU member states
EEA entity (Microsoft DPA including SCCs for any remote access)Managed AI
Mistral AI SAS (France)Managed AI, fallback providerConversation content and tool results sent for generation
  • EU
EEAManaged AI
Google Cloud EMEA Ltd (Vertex AI, EU regional or eu multi-region endpoints only; caching and grounding disabled)Managed AI, second fallback providerConversation content and tool results sent for generation
  • EU
EEA entity (Google Cloud DPA including SCCs)Managed AI

Ændringslog

Ingen ændringer siden lanceringen.