Sub processors overview
When Oda/Mathem processes your personal data, we may share information with other companies. These companies are either
- Data processors; companies we have an agreement with, restricting them to exclusively process data on our behalf, or
- Third party data controllers; partners we share data with, who also process data for their own purposes. These companies are responsible for compliance with privacy laws, including ensuring our customer’s individual rights
Note on transfers outside the EU/EEA
We mainly process personal data in Norway and within the EU/EEA. In some cases, we work with partners located outside the EU/EEA (sometimes referred to as “third countries”), and in these situations we take extra precautions to ensure that your data is processed to our standards through measures like:
- Using the European Commission's standard agreement that ensures the transfer of data to third countries (Standard Contractual Clauses); and
- Transferring data to countries pre-approved by the European Commission.
Our precautions include organizational, contractual and technical measures incorporating risk assessments, access management, archiving routines, data handling routines, and more. If you would like to know more about the precautions we take with regard to transfers of personal data outside the EU/EEA, please contact us at privacy@oda.com.
Sub-processors processing data on behalf of Oda
Third Party Sub-Processor | Purpose/Activity | Data Storage |
|---|---|---|
Amedia | Customer list matching for remarketing | Inside EU/EEA |
Adyen | Payment provider used to provide transactional payment services | Inside EU/EEA |
Appsflyer | Tracking of activity in app for analytics and marketing activities | Inside EU/EEA |
Stripe | Payment provider used to provide transactional payment services | Inside EU/EEA |
Riverty | Payment provider used to provide transactional payment services | Inside EU/EEA |
Dixa | Used for providing customer service via email and chat to customers | Inside EU/EEA |
Loyalty | Used for providing customer service for business customers | Inside EU/EEA |
Puzzel | Used for providing customer service via phone to customers | Inside EU/EEA |
Google Cloud | Hosting on Google data centers within the EU | Inside EU/EEA |
rSync.net | Encrypted data backups | Inside/Outside EU/EEA |
Sendgrid | Used for sending transactional emails | Inside/Outside EU/EEA |
Iterable | Used for sending email newsletters and push notifications in the app and track the performance of them. | Inside/Outside EU/EEA |
Looker | Used for development and analysis | Inside/Outside EU/EEA |
Amplitude | Used for development and analysis | Outside EU/EEA |
Schibsted | Customer list matching for remarketing | Inside EU/EEA |
Fivetran | Used for development and analysis | Inside EU/EEA |
Snowplow | Used for development and analysis | Inside EU/EEA |
SnowcatCloud | Used for development and analysis | Inside EU/EEA |
Snowflake | Data warehouse solution which serves as the repository of data. | Inside EU/EEA |
Kevel | Data warehouse solution which serves as our sponsored ads motor. | Inside EU/EEA |
Meta: Facebook Custom Audiences | Relevant offers and ads on Meta (Facebook) | Inside/Outside EU/EEA |
Google: Google Analytics | Used for development and analysis | Inside/Outside EU/EEA |
Google: Firebase | Used for development and analysis on apps | Inside/Outside EU/EEA |
Sentry.io | Application Monitoring and Error Tracking | Inside/Outside EU/EEA |
Amazon Web Services | Hosting (cloud storage) on AWS data centers | Inside EU/EEA |
SurveyMonkey | User surveys | Inside/Outside EU/EEA |
Astro | Logistics and order processing | Inside/Outside EU/EEA |
Salesforce | CRM, Customer Service | Inside/Outside EU/EEA |
MailChimp | Used for sending customer emails and newsletters | Inside/Outside EU/EEA |
New Relic | Website analytics | Inside/Outside EU/EEA |
Third party data controllers/partners
Third Party Partner | Purpose/Activity | Data Storage |
|---|---|---|
Vipps | Payment provider used to provide transactional payment services in Norway | Inside EU/EEA |
Trustpilot | When customers enter reviews of Oda’s services, these are given directly to Trustpilot (and not accessed or used by Oda) | Inside/Outside EU/EEA |
Meta Marketing Services (previously Facebook) | Used for relevant offers and ads on Meta (Facebook) and performance of ads | Inside/Outside EU/EEA |
Google Ads, Google Marketing Platform | Used for signup-conversion, relevant offers and ads on Google and their marketing partners | Inside/Outside EU/EEA |
Snapchat for Business | Used to provide relevant offers and ads on Snapchat and their marketing partners | Inside/Outside EU/EEA |
Used to provide relevant offers and ads on Pinterest | Inside/Outside EU/EEA |
A more detailed overview over cookies, pixels, Software development Kits (SDKs) in our apps and websites may be found in our cookie policy (to access click “Manage cookies” in our website footer, and read the “Details” section).
ODA Group affiliate sub-processors
This list identifies the sub-processors that are authorized to process personal data for each of the relevant Oda companies.
Name of entity | Entity country | Entity type | Applicable Service(s) |
|---|---|---|---|
Oda Norway AS | Norway | Oda Affiliate | All |
Oda Group Holding AS | Norway | Oda Affiliate | All |
Netfresh AS | Norway | Oda Affiliate | Norway |
Korn Bakeri AS | Norway | Oda Affiliate | Norway |
Oda Group Services AS | Norway | Oda Affiliate | All |
Mathem i Sverige AB | Norway | Oda Affiliate | All |