# PhotoRobot Sub-Processor List The PhotoRobot Sub-Processor List identifies the third-party service providers engaged by PhotoRobot to process personal data on behalf of customers. ## PhotoRobot Sub-Processor List This document represents the PhotoRobot Sub-Processor List: **Version 1.0 — PhotoRobot Edition**, *uni-Robot Ltd., Czech Republic*. ## 1. Introduction - PhotoRobot Sub-Processor List This Sub-Processor List identifies the third-party service providers (“**Sub-Processors** ”) engaged by **uni-Robot Ltd.** (“**PhotoRobot** ”) to process personal data on behalf of customers using: - PhotoRobot Controls Cloud - PhotoRobot Cloud 2.0 - API services - related hosting and synchronization infrastructure Each Sub-Processor is bound by contractual commitments ensuring compliance with: - GDPR (EU Regulation 2016/679) - applicable EU and Czech law - PhotoRobot’s internal security and data protection requirements This document may be updated as new Sub-Processors are added or removed, in accordance with the [**PhotoRobot** **Data Processing Agreement (DPA)**](https://www.photorobot.com/legal/dpa). ## 2. Cloud Infrastructure & Hosting Providers ### 2.1. Google Cloud Platform (GCP) - **Role:** Infrastructure, hosting, compute, storage, backup, networking - **Location:** EU (primary), global (failover) - **Data Processed:** Customer Data, project files, metadata, logs - **Legal Basis:** GDPR-compliant SCC 2021, ISO 27001/17/18 - **More info:** [https://cloud.google.com/security](https://cloud.google.com/security) *Google Cloud is the primary platform hosting all PhotoRobot cloud services.* ## 3. Email & Communication Services ### 3.1. Transactional Email Provider (Current provider: *to be assigned – e.g., Mailgun / SendGrid / MailerLite*) - **Role:** Sending transactional system emails (password resets, confirmations, notifications) - **Location:** EU or US (depending on chosen vendor) - **Data Processed:** Name, email address, message metadata - **Legal Basis: SCC 2021 where applicable** **( ! ) - *Because PhotoRobot can choose the most optimal provider, the exact vendor name may be added once confirmed.*** ## 4. Analytics & Monitoring Providers ### 4.1. Google Analytics (Optional, if enabled) - **Role:** Website analytics - **Location:** EU + USA - **Data Processed:** IP (anonymized), device data, usage statistics - **Legal Basis:** User consent + SCC 2021 - **Note:** Non-essential — used only if user opts in. ## 5. Customer Support & Ticketing ### 5.1. Email Support System (Current provider: native email + optional ticketing integration) - **Role:** Handling support requests - **Location:** EU or US (typically mailbox hosted under Google Workspace or alternative) - **Data Processed:** Contact details, ticket content - **Legal Basis:** contractual necessity ## 6. Backup & Disaster Recovery ### 6.1. Google Cloud Platform (as part of hosting) *No additional backup provider is used beyond GCP infrastructure.* - **Role:** Redundant storage, snapshot backups - **Location:** EU primary regions - **Data Processed:** Customer Data, metadata ## 7. Security & Anti-Abuse Tools (If implemented now or in future — structure prepared) ### 7.1. Security Monitoring Services (Optional) - **Role:** Threat detection, anomaly detection - **Location:** EU/US depending on provider - **Data Processed:** Logs, IPs, authentication events - **Legal Basis:** legitimate interest + SCC where needed ## 8. Optional / Future Sub-Processors These may include (only if enabled): - live chat / helpdesk providers - logging and telemetry systems (Sentry, Datadog, etc.) - CDN providers (Cloudflare, Fastly) - marketing automation tools Each will be added to this list before activation, following the DPA notification period. ## 9. How We Update This List Changes to Sub-Processors follow this procedure: 1. PhotoRobot updates this public Sub-Processor List. 2. Customers are notified of material changes (if required). 3. Customers may object within the timeframe specified in the DPA (typically **15 days**). 4. In case of objection, PhotoRobot will work with the Customer to find an acceptable solution. ## 10. Contact Information For questions about Sub-Processors: **uni-Robot Ltd.** Vodičkova 710/31 110 00 Prague 1 Czech Republic Email: **legal@photorobot.com**