Sub processors overview

When Oda processes your personal data, we may share information with other companies. These companies are either

  • Data processors; companies we have an agreement with, restricting them to exclusively process data on our behalf, or
  • Third party data controllers; partners we share data with, who also process data for their own purposes. These companies are responsible for compliance with privacy laws, including ensuring our customer’s individual rights

Note on transfers outside the EU/EEA

We mainly process personal data in Norway and within the EU/EEA. In some cases, we work with partners located outside the EU/EEA (sometimes referred to as “third countries”), and in these situations we take extra precautions to ensure that your data is processed to our standards through measures like:

  • Using the European Commission's standard agreement that ensures the transfer of data to third countries (Standard Contractual Clauses); and
  • Transferring data to countries pre-approved by the European Commission.

Our precautions include organizational, contractual and technical measures incorporating risk assessments, access management, archiving routines, data handling routines, and more. If you would like to know more about the precautions we take with regard to transfers of personal data outside the EU/EEA, please contact us at privacy@oda.com.

Sub-processors processing data on behalf of Oda

Third Party Sub-Processor

Purpose/Activity

Data Storage

Adyen

Payment provider used to provide transactional payment services

Inside EU/EEA

Appsflyer

Tracking of activity in app for analytics and marketing activities

Inside EU/EEA

Stripe

Payment provider used to provide transactional payment services

Inside EU/EEA

Arvato

Payment provider used to provide transactional payment services

Inside EU/EEA

HelpScout

Used for providing customer service via email and chat to customers

Outside EU/EEA

Loyalty

Used for providing customer service for business customers

Inside EU/EEA

Puzzel

Used for providing customer service via phone to customers

Inside EU/EEA

Google Cloud

Hosting on Google data centers within the EU

Inside EU/EEA

rSync

Encrypted data backups

Inside EU/EEA

Datadog

Monitoring service for cloud-scale applications

Inside/Outside EU/EEA

Sendgrid

User for sending email newsletters

Inside/Outside EU/EEA

Iterable

Used for sending email newsletters and push notifications in the app and performance of them.

Inside/Outside EU/EEA

Looker

Used for development and analysis

Inside/Outside EU/EEA

Amplitude

Used for development and analysis

Outside EU/EEA

Fivetran

Used for development and analysis

Inside EU/EEA

Snowplow

Used for development and analysis

Inside EU/EEA

SnowcatCloud

Used for development and analysis

Inside EU/EEA

Snowflake

Data warehouse solution which serves as the repository of data.

Inside EU/EEA

Kevel

Data warehouse solution which serves as our sponsored ads motor.

Inside EU/EEA

Meta: Facebook Custom Audiences

Relevant offers and ads on Meta (Facebook)

Inside/Outside EU/EEA

Google: Google Analytics

Used for development and analysis

Inside/Outside EU/EEA

Google: Firebase

Used for development and analysis on apps

Inside/Outside EU/EEA

Third party data controllers/partners

Third Party Partner

Purpose/Activity

Data Storage

Vipps

Payment provider used to provide transactional payment services in Norway

Inside EU/EEA

Trustpilot

When customers enter reviews of Oda’s services, these are given directly to Trustpilot (and not accessed or used by Oda)

Inside/Outside EU/EEA

Meta Marketing Services (previously Facebook)

Used for relevant offers and ads on Meta (Facebook) and performance of ads

Inside/Outside EU/EEA

Google Ads, Google Marketing Platform

Used for signup-conversion, relevant offers and ads on Google and their marketing partners

Inside/Outside EU/EEA

Snapchat for Business

Used to provide relevant offers and ads on Snapchat and their marketing partners

Inside/Outside EU/EEA

A more detailed overview over cookies, pixels, Software development Kits (SDKs) in our apps and websites may be found in our cookie policy (to access click “Manage cookies” in our website footer, and read the “Details” section).

ODA Group affiliate sub-processors

This list identifies the sub-processors that are authorized to process personal data for each of the relevant Oda companies.

Name of entity

Entity country

Entity type

Applicable Service(s)

Oda Norway AS

Norway

Oda Affiliate

All

Oda Finland Oy

Finland

Oda Affiliate

All

Oda Germany Gmbh

Germany

Oda Affiliate

All

Oda Norway Distribusjon AS

Norway

Oda Affiliate

All

Oda Group Holding AS

Norway

Oda Affiliate

All

Netfresh AS

Norway

Oda Affiliate

All

Korn Bakeri AS

Norway

Oda Affiliate

All