Subprocessors
To operate the HRko service, we use the following sub-processors. They are contractually bound to comply with the GDPR and the appropriate technical and organisational measures. We notify clients of any changes to this list by e-mail at least 30 days in advance.
| Sub-processor | Purpose | Location | Contractual basis |
|---|---|---|---|
| Oracle Cloud Infrastructure (Oracle Czech, s.r.o.) |
Application hosting, computing power, storage, backups | eu-frankfurt-1 (Germany, EU) | DPA Oracle Cloud Services Agreement |
| Google Analytics 4 (Google Ireland Limited) |
Measurement of traffic on the hrko.eu website — only with the visitor's consent. Does not apply to data in the application. | Ireland (EU), transfers to the USA under SCCs | Google Ads Data Processing Terms |
| Firebase Cloud Messaging (Google Ireland Limited) |
Delivery of push notifications to the Android mobile application (device token, notification text). Sensitive alerts contain only generic text. | Ireland (EU), transfers to the USA under SCCs and the EU-US Data Privacy Framework | Google Firebase Data Processing and Security Terms |
| Let's Encrypt (ISRG, USA) |
Issuance of TLS certificates (does not process any data) | Global CA | Subscriber Agreement |
Rules for changes
- We add a new sub-processor only after assessing its GDPR compliance and security level
- Clients receive an e-mail notification at least 30 days in advance
- If a client does not agree with a new sub-processor, the client has the right to terminate the contract without penalty
Change notifications
If you wish to be notified by e-mail of every change to the list of sub-processors, subscribe by writing to privacy@hrko.eu with the subject "Subprocesor notifications".