Subprocessors
This is a translation; the Polish version prevails.
LURIP uses the entities listed below when processing data that Customers enter into Loftsplit, in accordance with section 6 of the data processing agreement. LURIP informs the Owners of Organisations by e-mail at least 30 days in advance of a planned change to the list. Where a subprocessor has to be replaced urgently (section 6(2) of the data processing agreement), the notice may be shorter, but it always comes before the change, and there are 30 days to object.
During the pilot, the Application servers, the database and the backups run on LURIP’s own hardware in Poland, so there is no server provider here. Traffic between the browser and the Application passes through the Cloudflare network. Moving the Application to the Scaleway cloud (Paris) will change this list and will be announced in the way described above.
| Entity | Service | Data | Place of processing |
|---|---|---|---|
| Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA | carrying traffic between the browser and the Application server (Cloudflare Tunnel) and protection against attacks | data sent in Application requests and responses (in transit, without storing their content), IP address and technical request data | global network; transfer to the USA based on the European Commission’s decision on the EU–US Data Privacy Framework, additionally standard contractual clauses |
| SEOHOST sp. z o.o., ul. Obornicka 330, 60-689 Poznań, Poland | outgoing mail server for e-mails from the Application; technical support mailboxes in the loftsplit.com domain | recipient address, subject and content of the message, e.g. settlements for a tenant; data that the Customer sends to LURIP in messages, including in reports from the panel with attached files and screenshots | Poland |
The list does not include services that have no access to Organisation data: the loftsplit.com website, DNS and Turnstile verification on the sign-up and password reset forms (Cloudflare), and the sale of and payments for the subscription (Paddle, without tenant data). They are described in the privacy policy.