Splio Group (shall mean the company Splio SAS registered in Paris, France, under number 434533071 with its head office at 27 Boulevard des Italiens 75002, Paris, France and any company in which it, fully or partially, owns the majority of the capital or voting rights) uses Sub-processors to assist in the provision of its services. This page provides information about the identity, location and role of each of Splio’s Sub-processors.
Last update: September 2021
What is a Sub-processor?
A Sub-processor is the natural person or legal entity that processes or may process personal data on behalf of the Data controller.
What is a Data controller?
A Data controller is the natural person or legal entity that, alone or jointly with others, determines the purposes and means of the processing of the personal data.
What is Splio?
Splio is a Sub-processor, processing the data collected by its Clients who are Data controllers.
Splio is a Data Controller for the data collected by Splio for the purposes of its own activities.
Information about Splio’s Sub-processors
For all Clients who have executed the standard personal data Processing Agreement (“DPA”) or the standard SaaS Services Agreement of Splio (the “Contract”), Splio provides a written prior notice, via its CRM tool, of any updates to the list of Sub-processors that are utilized by Splio to deliver the services.
Pursuant to the DPA or Contract, a Client may object in writing to the processing of its personal data by a new Sub-processor of Splio within thirty (30) working days following the update information and such objection shall describe Client’s reason(s) for objection. If Client does not object during such time period the new Sub-processor(s) shall be deemed accepted.
If a Client objects to the use of a new Splio’s Sub-processor, the Parties shall meet within eight (8) working days from the date of the refusal in order to evaluate an alternative solution; if the Client maintains his refusal, and only in this case, each Party may terminate ipso jure (without any formalities) the DPA and the Contract with a three (3) months period notice sent by registered letter with acknowledgment of receipt. Splio will provide our Clients with notice of any new Sub-processors, along with posting such updates here.
Security and Confidentiality measures
In the event where Splio contracts with Sub-processors, Splio undertakes to impose on its Sub-processors all necessary obligations to ensure that the confidentiality, security, availability and integrity of the personal data are respected, and that the data cannot be transferred or lent to a third party, or used for purposes other than those set out in the Contract or DPA, and guarantees that the above mentioned Sub-processors will respect their obligations.
The following is an up-to-date list of the names and locations of Splio’s Sub-processors: here.
Get started with Splio today.
Get a demo of our platform and see how brands use it to connect online and offline loyalty to increase sales and profit.