Subprocessors

Our subprocessors

Zobi, operated by Zobi OÜ (an Estonian private limited company, osaühing), uses the third parties listed below to process personal data on behalf of merchants when providing the service. This list forms part of our data processing addendum. For more on how we handle personal data, see our privacy policy.

Changes to this list

We may add, remove, or replace subprocessors at any time as the service evolves. When we do, we update this page. For material changes that affect the processing of a controller’s personal data, we give notice as described in our data processing addendum. Your continued use of the service after we post an update constitutes acceptance of the updated list.

A controller may object to a new subprocessor on reasonable, documented data-protection grounds, following the process in the data processing addendum. If we cannot reasonably resolve the objection, the controller’s sole and exclusive remedy is to terminate the affected part of the service, as set out in the data processing addendum.

To be notified of updates, email privacy@heyzobi.com to request notice.

Liability and international transfers

We remain responsible for our subprocessors only to the extent required by Article 28(4) of the EU General Data Protection Regulation (GDPR), and not further. Where a subprocessor fails to meet its data-protection obligations, our liability is limited as set out in the data processing addendum and the terms of service.

Where personal data is transferred to a subprocessor outside the European Economic Area, those transfers rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism, together with any supplementary measures required. Nothing on this page excludes or limits liability that cannot be excluded or limited under the laws of the Republic of Estonia or under mandatory provisions of European Union law, including the GDPR.

Contact

Questions about our subprocessors? Email us at privacy@heyzobi.com.