Steerpath Smart Office Subprocessors

Updated 2024-10-12

Overview and purpose

Steerpath processes end user data in order to provide the Steerpath Smart Office application and website. The application allows for instance the end users to share with their colleagues their weekplans and to easily reserve meeting spaces. Additionally the data is used for creating reports of space and mobile application usage for the Controller, to improve the service, and to identify and resolve any problems the end users may be facing. 

This documents the subprocessors steerpath uses, and what each subprocessor processes.

Steerpath does not process (nor transfer to its subprocessors) any sensitive end-user information.

List of Subprocessors

Amazon Web Services, Inc.

  • Usage: All Steerpath server hosting and data storage. Steerpath Smart Office is a cloud service hosted in AWS. 

  • Business Entity Location: USA

  • Data residency: EU Ireland

  • Transfer safeguards: Standard Contract Clauses (SCC)

  • Personal data  processed

    • First name

    • Last name

    • Steerpath Analytics Id

    • E-mail address

    • Language and other preferences

    • Weekplans

    • Own team members

    • If shared by user, the exact user location, stored on server in memory up to 15 minutes

Mixpanel, Inc. 

  • Usage: App usage analytics, problem tracing

  • Business Entity location: USA

  • Data residency: EU

  • Transfer safeguards: Standard Contract Clauses (SCC)

  • Personal data  processed

    • Steerpath Analytics Id

    • Application usage, non-identifiable

Zoho Corporation

  • Usage: Support ticket and help desk, if end-user is in direct contact with Steerpath for support.

  • Business Entity location: USA

  • Data residency: EU (Amsterdam, Netherlands & Dublin, Ireland)

  • Transfer safeguards: Standard Contract Clauses (SCC)

  • Personal data  processed

    • E-mail address

    • User device hardware details

    • Other details as provided by the customer in their communication

Google Inc.

  • Usage: E-mail communication with end users in support and GDPR related matters

  • Business Entity Location: USA

  • Data residency: EU

  • Transfer safeguards: Standard Contract Clauses (SCC)

  • Personal data:

    • E-mail

    • Name

    • Other details as provided by the customer in their communication

Slack Technologies

  • Usage: Steerpath internal communication, eg. in support cases

  • Business Entity location: USA

  • Data residency: EU (Frankfurt, Germany & Paris, France)

  • Transfer safeguards: Standard Contract Clauses (SCC)

  • Personal data

    • Name

    • E-mail address

    • Description of issue end-user faces

Webscale Oy

  • Usage: AWS consulting

  • Business Entity location: Finland

  • Data residency: N/A but work carried out within EU

  • Transfer safeguards: Steerpath DPA

  • Personal data: See personal data list for Amazon Web Services

Other Processors and Subprocessors

Steerpath may integrate to other systems where the Controller will have a pre-existing business relationship with the Processor or Subprocessor, and Steerpath merely integrates with this pre-existing Subprocressor. 

A typical example is when the Steerpath application connects to the Controller’s selected calendar provider to retrieve and store calendar meetings. 

Google LLC

  • Usage: If the Controller uses Google Single Sign On and or Google Calendar, then these are used from the mobile application or browser.

  • Business Entity location: USA

  • Personal data  processed

    • Login information

      • E-mail

      • First name

      • Last name

      • Company domain

    • Calendar

      • Any calendar details retrieved or sent from the Google calendar backend. The communication is from the end user device to the service, data is not passed through Steerpath backend services.

Microsoft Corporation (Azure)

  • Usage: If the Controller uses Microsoft Single Sign and/or and Calendar, then these are used  from the mobile application or browser.

  • Business Entity location: USA

  • Personal data  processed

    • Login information

      • E-mail

      • First name

      • Last name

      • Company domain

    • Calendar

      • Any calendar details retrieved or sent from the calendar backend. The communication is from the end user device to the service, data is not passed through Steerpath backend services.

Bitwards Oy

  • Usage: If the Controller so desires, Bitwards SDK is used for opening locks for physical access control

  • Business Entity location: Finland

  • Personal data processed:

Mercantus Oy

  • Usage: If the Controller uses Timeworks for meeting room reservations, then the reservations are sent to Timeworks

  • Business Entity location: Finland

  • Personal data processed:

    • Any reservation details retrieved or sent from the calendar backend. The communication is from the end user device to the service, booking data is not passed through Steerpath backend services.