Flipbook | Paperturn

Legal Portal

Sub-Processors at Paperturn

To support the delivery of our Services, Paperturn ApS (“Paperturn”, “we”, “our”) may engage and use certain third-party data processors (“Sub-Processors”) to provide our Service to our customers. 

 

This page provides important information about the identity, location, and role of each Sub-processor. Terms used on this page but not defined have the meaning outlined in the Customer Terms and Conditions of Service (the "Agreement") and our Privacy Policy.


We currently use the below list of Sub-Processors to provide infrastructure services, customer support, service administration services, and email notifications. Prior to engaging any third-party Sub-processor, Paperturn performs due diligence to evaluate their privacy, security, and confidentiality practices, and executes an agreement implementing its applicable obligations.



Sub-Processors

Amazon Web Services, Inc

  • Type of Service: Hosting and Infrastructure

  • Purpose: ​​Used for hosting services, file storage and backup services

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum (DPA) in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes 

  • Link to Legal / Privacy Portal(s): AWS Legal Portal

 

Google LLC / Google Ireland Limited

  • Type of Service: Analytics and tag management services

  • Purpose: Website and flipbook usage analytics through Google Analytics 4 (GA4), and management and deployment of analytics and other configured tags through Google Tag Manager (GTM).

  • Hosting / Processing Region: European Union / Global

  • EU & UK Data Transfer Mechanism: Adequacy decisions and/or Standard Contractual Clauses (SCCs), as applicable

  • Is there a Data Processing Addendum in place?: Yes

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes

  • Link to Legal / Privacy Portal(s): Google Policies Overview

 

Amazon Web Services, Inc

  • Type of Service: Content Delivery Network

  • Purpose: Used for optimising flipbook content delivery

  • Hosting Region: Global

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes 

  • Link to Legal / Privacy Portal(s): AWS Legal Portal

 

Mailchimp, Inc.

  • Type of Service: Email service provider

  • Purpose: Used to send marketing-related emails

  • Hosting Region: USA

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed? Yes 

  • Link to Legal / Privacy Portal(s): Mailchimp & the GDPR

 

Mailersend, Inc. 

  • Type of Service: Email service provider 
  • Purpose: Email notification services 
  • Hosting Region: European Union 
  • EU & UK Data Transfer Mechanism: UK Adequacy Decision
  • Is there a Data Processing Addendum in place?: Yes
  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by a European Commission adequacy decision.
  • Link to Legal / Privacy Portal(s): Mailersend Legal Portal

 

PayPal (Europe) S.à r.l. et Cie, S.C.A. (Braintree)

  • Type of Service: Payment gateway

  • Purpose: Used to process Paperturn's client subscriptions

  • Hosting Region: USA

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes 

  • Link to Legal / Privacy Portal(s): Braintree Legal Portal


Paypal

  • Type of Service: Payment Gateway

  • Purpose: Used to process Paperturn's client subscriptions

  • Hosting Region: USA

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes 

  • Link to Legal / Privacy Portal(s): PayPal Technology and Security Certification Reports Portal


HubSpot, Inc.

  • Type of Service: CRM system

  • Purpose: Used to facilitate our internal sales and support processes (including online chat and customer relationship management)

  • Hosting Region: USA

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes

  • Link to Legal / Privacy Portal(s): Hubspot Legal Portal


Dropbox, Inc. (DropboxSign)

  • Type of Service: E-signature tool

  • Purpose: Used for contract signing, internally and externally

  • Hosting Region: USA

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in Place?: Yes

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes 

  • Link to Legal / Privacy Portal(s): Dropbox Legal Center


Slack, Inc.

  • Type of Service: Communication Software

  • Purpose: Used for internal employee communication

  • Hosting Region: USA

  • EU & UK Data Transfer Mechanism: SCC

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes 

  • Link to Legal / Privacy Portal(s): Slack Trust & Privacy Center

 

Visma E-conomic A/S

  • Type of Service: Accounting and financial reporting

  • Purpose: Used for invoicing and financial reporting

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: N/A 

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by an European Commission adequacy decision.

  • Link to Legal / Privacy Portal(s): Visma Trust Center


Google LLC (Google Workspace)

  • Type of Service: Cloud computing and business administration

  • Purpose: Business administration tool used for file storage, internal and external email correspondence and customer meetings

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: UK Adequacy Decision

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Yes

  • Link to Legal / Privacy Portal(s): Google Cloud Terms

 

Telavox AB

  • Type of Service: Telecommunications provider

  • Purpose: To manage support and contact requests received via phone

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: N/A

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by an European Commission adequacy decision.

  • Link to Legal / Privacy Portal(s): Telavox Privacy Portal


Maetzler Rechtsanwalts GmbH & Co KG (Prighter.com)

  • Type of Service: Data Subject Access Request (DSAR) Software 

  • Purpose: To manage and facilitate data subject requests pertaining to the GDPR and other privacy regulations as well as Paperturn's UK GDPR representative

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: N/A

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by an European Commission adequacy decision.

  • Link to Legal / Privacy Portal(s): Prighter Privacy Policy

 

Amplitude 

  • Type of Service: Analytics

  • Purpose: Marketing / Platform improvement

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: N/A

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by a European Commission adequacy decision.

  • Link to Legal / Privacy Portal(s):  Amplitude’s Legal Portal

 

ClickUp

  • Type of Service: Work collaboration 

  • Purpose: Project Management

  • Hosting Region: European Union

  • EU & UK Data Transfer Mechanism: N/A

  • Is there a Data Processing Addendum in place?: Yes 

  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by a European Commission adequacy decision.

  • Link to Legal / Privacy Portal(s): ClickUp's Legal Portal

 

ChargeBee

  • Type of Service: Subscription Billing and Management SaaS

  • Purpose: Subscription management, recurring billing, invoicing, and customer payment management

  • Hosting Region: European Union – AWS, Frankfurt, Germany Chargebee

  • EU & UK Data Transfer Mechanism: Standard Contractual Clauses (SCCs) Chargebee

  • Is there a Data Processing Addendum in place?: Yes

  • Has a Transfer Impact Assessment (TIA) been performed?: Not applicable - A TIA is only required when transferring personal data to a third country outside the EEA not covered by a European Commission adequacy decision.

  • Link to Legal / Privacy Portal(s): ChargeBee's Legal Documents

 

 

 

Updates

As our business grows and evolves, the Subprocessors we engage may also change. We will endeavor to provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under the Agreement.

 

Last updated: 01.10.2026


Create your flipbook now - no strings attached START MY FREE TRIAL
 
cancel