Contractors.es

Subencargados

Aviso importante

La parte contratante es Contractors.es Sp. z o.o., una empresa con domicilio social en Polonia. La versión vinculante de estas condiciones contractuales es la versión en inglés. Las eventuais traducciones se facilitan únicamente a efectos informativos, salvo que otra cosa establezca la legislación aplicable.

Ofrecemos atención al cliente en inglés y polaco. En España no tenemos oficina propia.

This list constitutes Annex 3 to the Data Processing Agreement. It contains all sub-processors to whom we entrust the processing of Personal Data.

We update this list on every change. We notify the Customer of a new sub-processor at least 30 days before entrusting processing to it. The Customer may raise a written objection within 30 days, stating the grounds relating to the GDPR. If the objection cannot be upheld, the sub-processor is excluded from the scope to which the objection relates, and the Customer acquires the right to terminate the agreement without penalty.

EUROPEAN VARIANT

Storage and processing in the European Union. In this variant, Personal Data is transferred outside the European Economic Area to the extent set out in the “Transfer outside the EEA” column. Beyond the storage of files, this covers access by sub-processors outside the European Economic Area to the stored files and onward transfer of those files to their sub-processors, and, for Support Chat data, processing by tawk.to in the United States.

Sub-processor Contact details Service Data processed Location Transfer outside the EEA
Hetzner Online GmbH Hetzner Online GmbH, Germany Application hosting, data sharing, backups All Personal Data entered into the service Falkenstein, Germany Does not occur
Akamai Technologies (Linode) Linode, LLC, an entity of the Akamai Technologies group Storage facility for files Personal Data contained in files stored in the system Storage of files: eu-central-1 region. Access to the files by the sub-processor and its sub-processors: outside the European Economic Area (United States) Occurs — access to the stored files from the territory of the United States and onward transfer of files to the sub-processor’s sub-processors. Basis: Article 45(1) GDPR — the sub-processor’s certification under the EU-US Data Privacy Framework (Akamai Technologies, Inc.; the certification covers Linode, LLC) — together with the European Commission’s standard contractual clauses, Decision (EU) 2021/914, supplemented with a data protection impact assessment
Mistral AI Mistral AI, 15 rue des Halles, 75001 Paris, France, SIREN 952 418 325, privacy@mistral.ai AI features of the application — implementing the features of the Service which use artificial intelligence models Personal Data entered into the AI features, including the content of documents and files entered by the Customer and the Customer’s commercial data, including price list and materials list items European Union Does not occur in respect of the processing itself. Occurs to the extent the sub-processor uses sub-processors from outside the European Economic Area — the sub-processor applies the European Commission’s standard contractual clauses in accordance with Decision (EU) 2021/914 in that respect
tawk.to, Inc. tawk.to, Inc., 187 East Warm Springs Rd, SB298, Las Vegas, Nevada 89119, USA; compliance@tawk.to Support Chat widget — providing assistance with the Contractors.es application Chat transcripts, data provided by the user in the chat form, IP address, device and browser data, online identifiers, location data. Conversation content is processed using the sub-processor’s AI features (automatic translation, automatic first line of support) United States Occurs — limited to the Support Chat data processed by this sub-processor. European Commission standard contractual clauses, Decision (EU) 2021/914, Module Two and Module Three; the sub-processor is a certified participant of the EU-US Data Privacy Framework, together with its UK and Swiss extensions

AMERICAN VARIANT

Storage and processing in the United States.

Sub-processor Contact details Service Data processed Location Transfer outside the EEA
Hetzner Online GmbH Hetzner Online GmbH, Germany Application hosting, data sharing, backups All Personal Data entered into the service Ashburn, United States European Commission standard contractual clauses, Decision (EU) 2021/914, together with a data protection impact assessment
Akamai Technologies (Linode) Linode, LLC, an entity of the Akamai Technologies group Storage facility for files Personal Data contained in files stored in the system us-east-1 region European Commission standard contractual clauses, Decision (EU) 2021/914, together with a data protection impact assessment; the sub-processor is a certified participant of the EU-US Data Privacy Framework, together with its UK and Swiss extensions
Mistral AI Mistral AI, 15 rue des Halles, 75001 Paris, France, SIREN 952 418 325, privacy@mistral.ai AI features of the application — implementing the features of the Service which use artificial intelligence models As above European Union Does not occur. Data stored in the USA in this variant is processed in the European Union; the transfer outside the EEA in respect of this service arises solely from hosting, backups and access to data in the United States
tawk.to, Inc. tawk.to, Inc., 187 East Warm Springs Rd, SB298, Las Vegas, Nevada 89119, USA; compliance@tawk.to Support Chat widget — providing assistance with the Contractors.es application As above United States Occurs. Processing takes place in the United States on the basis of the European Commission’s standard contractual clauses, Decision (EU) 2021/914, and of the EU-US Data Privacy Framework

RULES ON PROCESSING BY SUB-PROCESSORS

  1. With each sub-processor we conclude a contract imposing data protection obligations at a level no lower than that arising from the Data Processing Agreement, in particular the obligation of confidentiality, ensuring an appropriate level of security, and the erasure of data after the completion of processing.
  2. We remain liable to the Data Controller for the sub-processor’s compliance with data protection obligations.
  3. Personal Data and processing results are not used for model training by the sub-processors or for their own marketing purposes. We have disabled the use of data for model training in the settings of our account with the AI sub-processor and we maintain that disablement. The first line of support in the application is built on the application’s instructions and documentation — conversation content does not serve to train it, and we require the sub-processor tawk.to contractually not to use it for training its own models either.
  4. The AI features of the application are provided in the European Union in both variants. The AI features of the Support Chat (conversation translation and an automatic first line of support) are provided in the United States.
  5. Special category data referred to in Article 9 GDPR and data on criminal convictions referred to in Article 10 GDPR are not passed to AI features.
  6. We review this list periodically and in any event after a material change in the scope of the service.
  7. The Support Chat widget, including the code that initialises it, is not loaded until the user deliberately clicks the chat icon. Until then tawk.to receives no data and no identifiers, and stores no cookies or local storage.
  8. Storing cookies and local storage of tawk.to is subject to the consent form built into tawk.to. They are stored only after the user accepts the consent; refusing consent makes the chat unavailable.
  9. We have chat data deleted at tawk.to on our instruction, taking into account the retention period specified by that sub-processor; tawk.to’s backups are deleted within a retention cycle of no longer than 90 days.
  10. The Support Chat is a free-text channel and is not subject to automatic content screening. Special category data and data on criminal convictions should not be disclosed in it.
  11. The sub-processor tawk.to uses its own sub-processors. Their list is published by tawk.to at https://www.tawk.to/data-protection/sub-processors/.
  12. Sub-processors may transfer Personal Data outside the European Economic Area for the operational purposes of the Service, including technical support and administrative access to systems. Such transfers are covered by the bases set out in the “Transfer outside the EEA” column and are supported by a data protection impact assessment. We review those bases periodically and in any event after a material change in the scope of the Service, the sub-processor or its sub-processors.

This list is effective as of 2026-10-31.