Overview of subprocessors used in accordance with Art. 28 (2) GDPR and transfer of personal data to a third country

To the main contract: GetMyInvoices

Status: 13. June 2023

fino processes personal data on behalf of its customers (Contracted data processing). This includes all activities that fino performs in accordance with the service descriptions and the respective contractual agreements with the customer and that constitute contracted data processing.

Pursuant to the “Data Processing Agreement”, the customer grants fino the general authorization to make use of further subprocessors within the meaning of Art. 28 GDPR. Furthermore, fino is entitled to transfer the personal data – in compliance with the mandatory applicable regulations – to service providers in a third country.

The currently used additional subprocessors as well as the information to which service providers in which third country the data is transferred for which purposes can be found in the following overview.